last executing test programs: 9.89279518s ago: executing program 1 (id=7775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb08e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='dlm_unlock_start\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = gettid() perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x228}, r1, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0xffffffffffffffb4, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x8010743f, &(0x7f0000000180)) 8.085575221s ago: executing program 1 (id=7783): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000000)='./bus\x00', 0xd931d3864d39ddd8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 7.911225048s ago: executing program 2 (id=7785): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r4) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") preadv(0xffffffffffffffff, &(0x7f0000001280)=[{0x0}], 0x1, 0x4, 0x0) 7.141843495s ago: executing program 3 (id=7789): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@setlink={0x3c, 0x13, 0x401, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40701, 0x48480}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bridge\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x810) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x6c, 0x10, 0x403, 0x70b525, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8a1}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x42c8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x27ebfecd}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 5.679148911s ago: executing program 4 (id=7792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r5, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.624132857s ago: executing program 1 (id=7794): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x2, 0x400c0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 5.267572482s ago: executing program 0 (id=7796): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x2, 0x0, @mcast1}}}, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080020ff0f0041648af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) r5 = open(0x0, 0x14927e, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2d2, &(0x7f0000000680)="$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") r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) bind$packet(r5, &(0x7f0000000180)={0x11, 0x5, r6, 0x1, 0x1, 0x6, @broadcast}, 0x14) write$9p(r7, &(0x7f0000001400)="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", 0x200) 5.127410947s ago: executing program 0 (id=7797): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x19, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd, 0xb}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) 4.99414793s ago: executing program 2 (id=7798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x208101, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x10, 0xa, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x4, 0x0, 0x5, 0x2, 0x6, 0x1, 0x4], 0x0, [0x8b, 0x101, 0xfffe, 0x2002, 0x1, 0x4, 0x2, 0xd04, 0xff05, 0x2, 0x20b, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) 3.99110529s ago: executing program 0 (id=7799): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@setlink={0x3c, 0x13, 0x401, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40701, 0x48480}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bridge\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x810) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x6c, 0x10, 0x403, 0x70b525, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8a1}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x42c8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x27ebfecd}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 3.970111732s ago: executing program 4 (id=7800): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x2, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) 3.873324812s ago: executing program 3 (id=7801): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x19, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd, 0xb}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') 3.801828749s ago: executing program 1 (id=7802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="00000012a7"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x15}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x66002) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x40) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x58, r5, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1ec}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8080) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/104, 0x68, 0x200) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pread64(r2, &(0x7f0000000580)=""/217, 0xd9, 0x8000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmsg$rds(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x6}, &(0x7f0000000200)=0x7fffffff, 0x0, 0x10000, 0x7, 0x8, 0xcebc, 0x11, 0x9}}], 0x58, 0x40845}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x80, 0x4) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x6, 0x8012, 0xffffffffffffffff, 0x0) 3.79837053s ago: executing program 2 (id=7803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r5, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.407799189s ago: executing program 4 (id=7804): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 2.526501847s ago: executing program 4 (id=7805): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003c40)=@newchain={0x25d4, 0x64, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x5, 0x10}, {0xf, 0x2}}, [@f_rsvp={{0x9}, {0x25a4, 0x2, [@TCA_RSVP_ACT={0x25a0, 0x6, [@m_connmark={0x128, 0xe, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x0, 0x76, 0x5}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1ff, 0x3, 0x0, 0x6}, 0x1cb1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc60, 0x7, 0x4, 0x7, 0x8}, 0x9}}]}, {0xa1, 0x6, "bd75706d89ac21e4efa146f8edc9dc74a264135d8be0a15b03b916d2ec926ace8d391e40b7cbcd8dad534b781c86c08e7b433e52df8726554d80eb351982d458c73cba45ee3db878a247a4af2a2c24d58b2ffd71df896a448e6932afbda738695bf1847dbce541f4e1e6139f943f0f59c533035d59afdce7da341e5d230d69c795176f5fa48eb2ad62376a00000f8837d2c097ab28add93479d268f0da"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xeec, 0x3, 0x0, 0x0, {{0xa}, {0xe90, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x24, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x2, 0x7, 0x7, 0x9, 0x1}, 0xf1, 0x2, [{0xfff, 0x4, 0xfffffff8, 0x2782f00, 0x2, 0x6090}, {0x699, 0x4, 0xd79, 0xfffffffe, 0x2, 0x2}, {0x1, 0x3, 0x5, 0x200, 0x0, 0xfffffffa}]}, [{0x2, 0xfffffffb, 0x752b, 0x9, 0x5, 0x2}, {0x6507b03b, 0x1, 0x7, 0xfffffffe, 0x6, 0x5}, {0x4, 0x1, 0x3, 0x8a, 0x6, 0x2}, {0x7, 0x1200000, 0x88d, 0x2, 0x4, 0x2}, {0xffff5cff, 0x4, 0x0, 0x1, 0x40, 0x8001}, {0x6, 0x9, 0x3, 0x0, 0x8, 0xf}, {0x5, 0x9, 0x2, 0x2, 0x3, 0x3}, {0x3, 0x7fffffff, 0x39cbefbf, 0x3, 0x3, 0x8}, {0x6, 0x0, 0xf, 0x1, 0x9, 0x1000}, {0x80000000, 0xffff, 0x4, 0x4, 0x80}, {0x3ff, 0x4, 0x3a14, 0x56d5, 0x2, 0x2}, {0x2, 0x2, 0x8, 0x7, 0xffffff81}, {0x3, 0xc9d, 0x3, 0x13ee, 0x4, 0x6}, {0x7fffffff, 0x1, 0x8, 0x4e80000, 0xf950, 0x9873}, {0x3772, 0x1182, 0x7, 0x6ae9, 0x79, 0xfb28}, {0x8, 0x6962, 0x0, 0x6, 0x4, 0x157}, {0x12968238, 0x0, 0xffffffff, 0x101, 0x0, 0x6}, {0x8, 0x9, 0xa68c, 0x2, 0x1, 0x80000000}, {0x1, 0x80000001, 0x8, 0x1000, 0x7, 0xa}, {0x6, 0x7, 0x9, 0x7fff, 0x6ffb, 0x7}, {0x2, 0x7bb, 0x10, 0xb6c, 0x9, 0x9}, {0x6, 0x5, 0x80000000, 0x5, 0x40}, {0xfffff2e7, 0x7, 0x3, 0x7, 0xa2, 0xfffffff9}, {0x7, 0x2, 0xd, 0x5, 0x6, 0x7fffffff}, {0xb30, 0xfffffff8, 0xc767, 0x2, 0x3, 0x805a0}, {0xffff3594, 0x7, 0x8, 0x2, 0xfffff1f2, 0x4}, {0x4, 0x1, 0x3, 0x1ff, 0x3, 0x3ff}, {0xa0d0, 0xffffff30, 0x0, 0x1, 0x5, 0x5}, {0x0, 0x8, 0x3d, 0x4, 0xfffffffd, 0xde0}, {0x6, 0x8, 0xfffffffc, 0x4, 0x9, 0x10000}, {0x0, 0x80000000, 0x85, 0x9, 0x30ba, 0xfc}, {0x6, 0xffffffff, 0xf, 0x7, 0x7f, 0x1efb}, {0xfffffbff, 0x0, 0x3, 0xe8f6, 0x4, 0x98d}, {0x8, 0x7d0, 0x8, 0xff, 0x7, 0x1}, {0x5, 0x3, 0x7ff, 0x0, 0x2, 0x613}, {0x0, 0xfff, 0x4c3c, 0x5, 0x2, 0x2}, {0x8, 0x2, 0x0, 0xfffffffd, 0xdb1c, 0x3ff}, {0x5, 0xfffffffd, 0x8001, 0x81, 0x9, 0x1}, {0x3, 0x4175, 0x0, 0x2, 0x9, 0x5}, {0x1, 0x3, 0x4, 0x9, 0x100, 0x2}, {0x7, 0x10, 0x0, 0x9, 0xdc}, {0xfffffffb, 0x8, 0xff, 0x6, 0x3, 0x8}, {0x5, 0xff, 0x401, 0x6, 0x7, 0x3}, {0x18, 0x1, 0x4, 0xfff, 0xa, 0x2}, {0x6, 0x9, 0x10000, 0x3f, 0xab9, 0xfffffff5}, {0x7fffffff, 0x2, 0x94c, 0x9dee, 0xffff1483, 0x8}, {0x6fce8c73, 0x81, 0x7, 0x3ff, 0x0, 0x1}, {0x7fff, 0xad, 0x4, 0x0, 0x4, 0x7ff}, {0x1, 0xe364, 0x100, 0x9, 0x3, 0x2}, {0x5, 0x4, 0x80000000, 0x6, 0xb, 0x8}, {0xb95c, 0x80000001, 0x9, 0x6, 0xc, 0xb}, {0x3, 0x3, 0xc1, 0x0, 0x7f7, 0xfffff530}, {0x1, 0x0, 0x40, 0x2, 0x5}, {0x0, 0x3, 0x7, 0x82b, 0x0, 0x5}, {0xfff, 0x98, 0x6a4c, 0x101, 0x9, 0x40}, {0xffff, 0x7, 0x38, 0xb, 0x8, 0x8000}, {0x1, 0x0, 0x0, 0x6, 0x5, 0xf8}, {0x1, 0x6, 0xeef, 0x0, 0x101, 0x2}, {0x8, 0x7, 0x6f, 0x7, 0x6, 0x3}, {0x3f, 0x5, 0x3, 0x8, 0x9, 0x1}, {0x80000001, 0xfffffff9, 0x5, 0x800, 0x543, 0x1}, {0x22a, 0x204, 0x3, 0x0, 0x4, 0x7}, {0xad, 0x7, 0xfffffffa, 0x7b9, 0x164, 0x9}, {0x4, 0x7, 0x9, 0x7, 0x5, 0xc66}, {0x9, 0x3, 0x5, 0x3, 0x54, 0x6}, {0xf, 0x5, 0x9, 0x9, 0xe, 0x7}, {0x2a0d, 0x5, 0x4, 0x7, 0x9, 0x4}, {0x17, 0x200, 0xffff8001, 0x6, 0x62a, 0x4}, {0xc, 0x24000, 0x7f, 0x6b, 0x4, 0xd}, {0x7329e723, 0x4, 0x2, 0x1, 0x2, 0x1}, {0x10000, 0x80, 0x5821, 0x0, 0x5, 0x4}, {0x6, 0x3, 0x2, 0x7, 0x3, 0xcb14}, {0x7, 0x25b, 0x2, 0x6, 0x4, 0x9}, {0x8, 0x7, 0x4, 0xfffffffe, 0x7, 0x9}, {0x7, 0x7, 0x0, 0x648, 0x5, 0x100}, {0x1, 0x0, 0x59a0, 0x1, 0x7, 0x401}, {0x10000, 0x7ff, 0xfffffcca, 0xff, 0x8, 0x3}, {0x1, 0x4, 0x5, 0x7, 0x5}, {0x4, 0x2, 0x6, 0xd, 0x7, 0xb152}, {0x47, 0x9, 0x5, 0xfffffff9, 0x7fffffff, 0xa00000}, {0x4, 0x26c, 0x9, 0x8bab, 0xbc5d}, {0x1, 0x7, 0x5, 0x7, 0x8000, 0x9}, {0x5f, 0x8, 0x5, 0x200, 0x8, 0x10001}, {0x8, 0x2, 0x80000000, 0x6, 0x101, 0x8}, {0x7fffffff, 0xfff, 0x10, 0xfffffff3, 0x8, 0x4}, {0x800, 0xffff, 0x5, 0x7, 0x344, 0x2b25}, {0x8, 0x7, 0x6, 0x1, 0x3, 0x8e02}, {0x1, 0x9e6, 0x8, 0x400, 0x6, 0x3}, {0x8, 0x0, 0x1, 0x7, 0x1, 0x3}, {0x9, 0x2, 0x2, 0x8, 0x3, 0x4}, {0x6, 0xfffffec4, 0x200, 0x8, 0x8, 0x9}, {0x1, 0x8, 0x500, 0x400, 0xc52b, 0x4}, {0x9, 0x1, 0x100, 0xb6a, 0x9, 0x32b5}, {0x8, 0x1, 0x4, 0x0, 0xd73, 0x870}, {0xe08c, 0x7ff, 0x2, 0x6, 0x40, 0x9}, {0xffff, 0x4428, 0x3, 0x6, 0x8, 0x9}, {0x1000, 0x10001, 0x5, 0x4, 0x3, 0xb}, {0xfffff0aa, 0x9, 0xfffffffa, 0x5, 0x2, 0x4}, {0xd, 0xfffffff0, 0x4, 0x0, 0x8, 0x101}, {0xd, 0x2, 0x686, 0xfffffffa, 0x4, 0x4}, {0x7fff, 0x6, 0x200, 0x6, 0x4, 0x8}, {0x96, 0x6, 0x7, 0x7, 0x226, 0x8}, {0x6, 0x3, 0x5, 0x6, 0x7, 0xfff}, {0x3, 0xffffffff, 0x2, 0x568, 0x4, 0xffffffeb}, {0x2, 0x200, 0x2, 0x7, 0x6, 0x6}, {0x4, 0x566, 0x10001, 0xb, 0x4, 0x5594fdf3}, {0x423303a3, 0x9, 0x6, 0x3, 0x6, 0x3}, {0x100, 0x3, 0x0, 0x9, 0x8, 0x25}, {0x8, 0xd47, 0x0, 0x0, 0x6, 0x8f6d}, {0xff, 0x0, 0x0, 0x1, 0x7, 0xe}, {0xce1, 0x9, 0x0, 0x4, 0xffffffff, 0x200}, {0x4, 0xe, 0x3, 0x5e0, 0x8, 0x1}, {0x0, 0x1, 0x1, 0x1, 0x9, 0x8}, {0x4f75, 0x8, 0x3c, 0xb, 0x4, 0x5}, {0x3, 0xd64, 0x1, 0x6, 0x8, 0x6}, {0x3, 0x401, 0x6, 0x4, 0x80, 0x640a525a}, {0x5, 0x0, 0x8, 0xfffffffe, 0xe, 0x6cd4}, {0x9, 0x0, 0x8, 0xa9ba, 0x100, 0x5}, {0x15, 0xfffffeff, 0x2, 0x5, 0x5fc0, 0xfffffff1}, {0x39d, 0x9, 0x1, 0x0, 0xfc, 0x7}, {0x6, 0xe69, 0xe, 0xffffff81, 0xbe7e, 0x401}, {0xfffffffa, 0x4, 0x0, 0x0, 0x6, 0xfffff001}, {0xcf2d, 0x8, 0x9176, 0x0, 0x4f, 0x1}, {0x0, 0x9, 0x5, 0xfff, 0x9030}, {0x4, 0x4, 0x800, 0x41e, 0x8000}, {0x6, 0xfffffffa, 0x0, 0x9a, 0x6, 0x8}, {0x3, 0xb, 0xf079, 0x7fffffff, 0x200, 0x7}, {0x65f, 0x100, 0x8, 0x1, 0x400, 0x2}], [{0x3}, {0x1, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x5, 0x649fb4c58d4cf3cc}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x1}, {0x2, 0xd2cd4f2f2bcaea07}, {0x5}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x8dafc58315d2bbb3}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x4, 0x9889dd74d1bcf2ee}, {0x1, 0x1}, {}, {0x3}, {0x4}, {}, {0x3}, {0x3}, {0x1}], 0x1}}]}, {0x33, 0x6, "b72cad9dfd0ee1daefe8c93e0602743215b52d27bc7c99338bd43bdc4f75eae44c2a4235fe44b7bcdf688acabe1021"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0xb4, 0x3, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x4, 0x0, 0x110d, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x65, 0x6, "56e43759954cbeea87a923de98e2286fbcc56acf6b12b311659ef7ea84341210e79a3e6a663ab7df7ca60c9677283b702a416de45c8f60e3ca26f96557c73a5f780d5b0c43c3d28eaae7beb4e54eac8161c2b15bb938edcb62ef46a9e63fe06bed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_police={0x14d4, 0x0, 0x0, 0x0, {{0xb}, {0x14a8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x0, 0x5, 0x9, 0x5, 0x8, 0x7ff, 0x3, 0x40, 0x296d, 0x7fffffff, 0x1, 0x6, 0x5, 0x2, 0x6, 0x0, 0x6, 0x2, 0x7, 0x1a, 0x5, 0x8, 0xbc, 0x1, 0x10d, 0x2000000, 0x5, 0x4, 0xe83, 0x4, 0x6, 0x28000, 0x57c, 0xa, 0x1, 0x0, 0xad, 0x4, 0x6, 0xfffff000, 0x9, 0x5, 0x6, 0x0, 0x2, 0x4, 0x0, 0x101, 0x0, 0x4, 0x9, 0xec, 0x8, 0x35a, 0x6, 0x5, 0x5, 0x9, 0x7, 0x12fb, 0xfffffffd, 0x5, 0x9, 0x200, 0x7, 0x4, 0x7, 0xf, 0xff, 0x0, 0x6, 0x80, 0x40, 0x9, 0x71da, 0x7, 0x80000000, 0xfff, 0x2, 0xf2e, 0x10000, 0x9, 0x5, 0x1, 0x1, 0x5, 0x8, 0xb99, 0xf, 0x8, 0x2702, 0xa2, 0x101, 0x10000, 0x5, 0xe, 0x391, 0x8, 0xa0, 0x7, 0xdc4, 0x9, 0x2, 0x9, 0x4, 0xd16, 0x4, 0xab, 0xa, 0xffff4eaf, 0xffffffff, 0x8, 0x9, 0x900000, 0x3, 0x7, 0x9, 0xa, 0x7f, 0x1a3, 0x7, 0x401, 0x8, 0x6, 0x9, 0x82, 0x0, 0x5, 0x3, 0x100, 0x8, 0x7a, 0x5, 0xf, 0x10000, 0x3, 0x40000000, 0x10, 0x2, 0x8, 0x7f, 0x2, 0x6d5, 0x2, 0x7, 0xfffffffa, 0x7fff, 0x4, 0x5, 0x3, 0x5, 0xe000, 0x4, 0x4, 0x7, 0x3, 0x6, 0x9, 0x923e, 0x200, 0xfffffffc, 0x200, 0x2a4, 0x5, 0x7, 0xef3, 0x8, 0x48f, 0xd4, 0x1, 0x3ff, 0x9, 0x323c, 0x8, 0x5, 0xff, 0xa, 0xfffffff9, 0x4, 0x2, 0x2, 0x4, 0x1, 0x7fffffff, 0xd40, 0x0, 0xff, 0x5, 0x3, 0x200, 0x9, 0x2, 0x7ff, 0x3ef, 0x3, 0x5, 0xfffffffd, 0x8, 0x0, 0x20ac, 0x0, 0x0, 0x1, 0xc, 0x7, 0x1, 0x7, 0x5, 0xec4, 0x5, 0x5b, 0x6, 0x5, 0x6b58, 0x8001, 0x718, 0xffffff01, 0xfff, 0x1, 0x7fffffff, 0x1c, 0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x5, 0x3c, 0x26000000, 0x5, 0x1, 0xfd, 0x7fff, 0x9, 0x80, 0xffffff06, 0x7, 0x80000000, 0x8, 0x4, 0x9, 0x4, 0xba, 0xff, 0x3, 0x9, 0xfffffffb, 0x6, 0x401, 0x3, 0x8, 0x463c, 0x917]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7ff, 0x1, 0x2, 0x3, 0x1, 0x7fffffff, 0x4, 0x7, 0x2d, 0x7, 0x0, 0x400, 0x10000, 0x401, 0x149, 0x6, 0xc, 0xffffffff, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x6a, 0x5, 0x2, 0x4, 0x3, 0x7, 0x8000, 0x3, 0x1, 0xfd5, 0x6, 0xfffffbff, 0x23d6, 0xff, 0x101, 0x80d, 0x3, 0x9, 0x3, 0x1f, 0x2, 0x7, 0x400, 0x1, 0xbe, 0x1, 0x2, 0xc6, 0x2, 0x6, 0x2020, 0x9, 0x5f0, 0x5, 0x81, 0x100, 0xf4, 0x4, 0xffffffff, 0x9, 0x4, 0x2f, 0x1, 0xfff, 0x8, 0x81, 0x3, 0x8001, 0x2, 0x8, 0x7, 0x8, 0x80, 0x166, 0x10001, 0x2, 0x8, 0x6, 0x0, 0x400, 0x10001, 0x6, 0x1a, 0x64a8ce5d, 0x100, 0x4, 0xc000, 0x5, 0x6, 0xe, 0x5, 0xc0, 0x0, 0x3ff, 0xcd, 0x2, 0x6b6, 0xb27, 0x99, 0x5, 0xfffffc01, 0x6, 0x6, 0x3, 0x0, 0x2, 0x7, 0x4, 0x80000001, 0x9, 0x233, 0x6, 0x6e8, 0x8, 0xa1, 0x0, 0xffffff56, 0x9, 0x8, 0x0, 0x39000000, 0x7, 0x1, 0x9, 0x9, 0x6, 0x0, 0x2, 0xbe, 0x653, 0x7e3d, 0x7fffffff, 0x5, 0x8000, 0x7, 0x100, 0x5, 0x5, 0x8, 0x7fffffff, 0x1, 0x2, 0x9, 0x5, 0x0, 0x4, 0x3, 0xf5, 0xace, 0x800, 0xc, 0x80000000, 0x5, 0x2, 0x5, 0x800, 0x9, 0x7, 0x6, 0x0, 0x1, 0x4, 0x6, 0x1, 0x1, 0x3, 0x10001, 0xf, 0xfffffff2, 0xfff, 0x1ff, 0x4, 0x6, 0x6f2, 0x8, 0x6, 0x1, 0x4, 0x81, 0xffffffff, 0xfffffff8, 0xffff, 0x1, 0x4, 0xe3c2, 0x200, 0x4, 0x80000000, 0x4343, 0x0, 0x1763, 0xff6, 0x8, 0x8, 0x70d8, 0x2706, 0xb65f5cac, 0x0, 0x7, 0x92b, 0x1, 0x48, 0x3, 0x0, 0x8, 0xd1, 0x7, 0x1e2, 0x1, 0xe, 0x7, 0x9, 0x9, 0x8f, 0x1, 0x8, 0x4, 0x9f, 0x12000000, 0x7, 0x7, 0x7, 0x9, 0x0, 0xfd, 0x80000000, 0x21fc, 0x8, 0x3, 0x80000000, 0x6, 0x200, 0x9, 0x60, 0x3, 0xb9, 0x6, 0x6, 0x8, 0x4ccab518, 0x8, 0x4df5, 0xffffffff, 0xc000, 0x1000, 0x7f, 0xb77, 0xa3, 0x7, 0x8, 0x681, 0x7f]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0x10, 0x4, 0x10, 0x7, 0x6d06, 0xfb, 0x0, 0x9, 0x4, 0x2, 0x3403, 0x1, 0x8, 0x6, 0xb, 0x6, 0x0, 0x4, 0x7, 0x7, 0x7, 0x2, 0x8, 0x3, 0xfff, 0x4, 0x8, 0x0, 0xe09, 0x80, 0x2, 0x1c, 0xa10f, 0x2, 0x7, 0x4, 0x1, 0x401, 0x6, 0x2, 0x0, 0x1, 0x10, 0x8, 0x0, 0x10000, 0x80000000, 0x3, 0x4, 0x200, 0x7fff, 0x8, 0x8e0, 0x4, 0xfffff000, 0x786d, 0x0, 0x26c90, 0x219, 0x7, 0x2, 0x8, 0x5, 0x7a, 0x800, 0x9, 0x5, 0x5, 0xe, 0x2, 0x7, 0x305c, 0x9, 0x9, 0x6, 0xffff9a45, 0x4, 0x10000, 0x80000000, 0xffffffff, 0x8, 0x2, 0x2, 0x5, 0x5, 0x5, 0x4, 0x8, 0x5, 0x7, 0x4f48, 0x8, 0xfff, 0x2, 0x6, 0x0, 0x40, 0x2, 0x3, 0x1000, 0x1, 0x3, 0x5, 0x9, 0x2, 0x8080, 0x7, 0x0, 0x7, 0x80000000, 0x5, 0x0, 0xbe, 0x3, 0xd, 0x2, 0x0, 0x5, 0x9, 0x9, 0x8, 0x3, 0x67653bff, 0x4, 0xfffffffd, 0x3, 0x3, 0x380000, 0xe, 0x9f51, 0x3, 0x8, 0x3ff, 0x4, 0x11, 0x4, 0xd3, 0x7, 0xff, 0x1, 0x1, 0x4, 0x9, 0x8, 0x7f, 0x10, 0x1000, 0x2, 0x7, 0x1, 0x8, 0xf785, 0x30, 0x8, 0x7, 0x7, 0xe, 0x3, 0x6, 0x12, 0x8, 0x401, 0xffff8000, 0x35f, 0x0, 0x7, 0x7, 0x81, 0x5, 0x7fffffff, 0x2, 0x7, 0x1000, 0x9, 0x0, 0xfffff45b, 0x0, 0x2, 0xffffff81, 0x0, 0x10000, 0x6, 0x80000001, 0x40, 0x5, 0x9, 0x800, 0x4, 0x1000, 0xffffffff, 0x100, 0x4da9, 0x8, 0x0, 0xcf, 0xffff, 0x9, 0x6, 0x4, 0x9, 0x80000000, 0x322e71f0, 0x3, 0x78b6dc54, 0x1, 0x0, 0x447, 0x37, 0x7, 0x8, 0x829, 0xff, 0x3, 0x4, 0xd, 0x2, 0x8001, 0x7fff, 0x1, 0xcc6, 0x1, 0x9, 0x8, 0x624, 0x0, 0x100, 0x0, 0x100, 0xbbd, 0x9, 0x10000, 0x8, 0x6e, 0x800, 0x80fb, 0x7, 0x8, 0x80000001, 0x7, 0xfffffffb, 0x7db, 0xfd0b7939, 0x8, 0x401, 0x6c, 0x6, 0x200, 0xffffffff, 0x1, 0x0, 0xa, 0x3, 0x4be66d51, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x20000000, 0xddb, 0x7, 0x0, {0x6, 0x2, 0x1, 0xaf38, 0x0, 0x3}, {0xf, 0x2, 0x2, 0x8, 0xabe2, 0x7}, 0x9, 0x100, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6, 0x200, 0x1, 0x1, 0xff, 0x2, 0x9, 0x7, 0xffffff81, 0x1, 0x3ff, 0x6, 0x6, 0x6, 0x8001, 0x4, 0x100, 0x0, 0x5, 0x2, 0x8, 0xeab, 0x6, 0x1, 0x9, 0x9a0, 0x0, 0x896, 0x0, 0x8000, 0x8, 0x1944, 0xffff, 0x9fa, 0x324, 0x2, 0x1, 0x8, 0x3, 0x10001, 0xc, 0x4a1, 0x2, 0x400, 0x2, 0x0, 0x5, 0x0, 0x0, 0x8506, 0x8, 0x1, 0x2, 0x401, 0x5a7, 0x3, 0x2, 0x10e0, 0x3, 0x9, 0x2, 0x8000, 0x7ff, 0x3f51348c, 0x7, 0x10001, 0x10000, 0x7f, 0x1, 0x1000, 0x7f, 0x3, 0xfffffffb, 0x2, 0x0, 0x1, 0x7ff, 0xfff, 0x3, 0x9, 0x9, 0x1, 0x81, 0x8, 0x3, 0x4, 0x3, 0x0, 0x3, 0x2, 0x3, 0x5, 0x5, 0x2, 0xfffffb9d, 0x5, 0x4, 0x80000001, 0xe5b6, 0x1, 0x1, 0x0, 0xed70, 0x3, 0x32, 0xb, 0x10000, 0x6, 0x2, 0x7fffffff, 0x7, 0x3, 0x9, 0xac, 0x0, 0x8, 0x1000, 0x5, 0x80, 0x800, 0x5, 0xfffffbff, 0x6, 0x3, 0xd1, 0x9, 0x62c, 0x6, 0x3, 0xc2d, 0x6, 0x220, 0x2, 0xf95, 0x1, 0x0, 0x5, 0x3ff, 0xf74, 0x7c1, 0x3, 0xcc, 0xf24, 0x519, 0x6, 0xc, 0xa, 0xffff, 0x2, 0x9, 0x3, 0x0, 0xffffffff, 0x0, 0xb2, 0xffff, 0x9, 0xcd9c, 0x6, 0x1ff, 0x81, 0x8ab1, 0xe, 0x140, 0xe3b, 0x9, 0x7ff, 0xb5bc, 0x7, 0x3, 0x7, 0x253d, 0x6, 0x8, 0x6e08, 0x2, 0x8, 0x3cffc163, 0xc, 0x3, 0xbad4, 0x3, 0x101, 0x0, 0x4, 0x7, 0x8, 0x7, 0x0, 0x4144, 0x80000000, 0x2, 0x7fffffff, 0x3ff, 0x3ff, 0x80000001, 0x66a, 0x27, 0x80000000, 0x7fffffff, 0x6, 0xfffffffe, 0x7, 0x1, 0x20e8, 0x9, 0x5, 0x0, 0x7, 0x441f, 0x9, 0x3, 0x6, 0x8, 0xa, 0x5, 0x3, 0x9, 0xb, 0x0, 0x3, 0x4, 0x43a8, 0x9, 0x3, 0x0, 0x6, 0x5, 0xff, 0xf92, 0xe, 0xffffff8e, 0x5c5, 0x8, 0x6b1d, 0x6, 0xfffffff0, 0x1, 0x8c, 0x5, 0x1ff, 0x100, 0x8001, 0x1, 0x0, 0xfffffffc, 0x8, 0x6f1c88ed, 0x6, 0x3, 0x2, 0x6, 0x1, 0x6, 0xcc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7fffffff, 0x40, 0x2, 0x0, 0x7, 0x81, 0x4000000, 0x6, 0x0, 0x7, 0x6, 0x1, 0x62, 0x8, 0xfffffffb, 0x2, 0x36b7, 0x80000000, 0x5, 0x1a, 0x8, 0x9, 0x101, 0xfffff001, 0x6, 0x2, 0x6, 0x1, 0x9, 0x9, 0x1ff, 0x17, 0xc127, 0x7fff, 0x7, 0x4, 0x7fff, 0x3b3, 0x200, 0x5, 0x2d31, 0x6, 0x80, 0xfffffff7, 0x600000, 0x100, 0x4, 0x5, 0x8, 0xffffffff, 0x3, 0x0, 0x2, 0x6, 0x4, 0x80, 0x0, 0xb9, 0x1, 0xfffffff9, 0x7, 0x7f, 0x2, 0x3, 0x9, 0x9, 0x2, 0xffffffff, 0xe4be, 0x1, 0x0, 0x7fff, 0x4, 0x8445, 0x0, 0xffff, 0x1, 0x3206, 0x9, 0xd45, 0x3, 0x1, 0x80000001, 0x2, 0x2, 0x800, 0x7, 0x9, 0xb, 0x9, 0x5, 0x400, 0x200, 0x8, 0x5, 0x9, 0x0, 0xb64a, 0x4, 0x8001, 0x7, 0x8001, 0x3, 0x7, 0xff, 0x8, 0x7fff, 0x4, 0x2, 0x8, 0x0, 0x2, 0x10000, 0x1, 0xf16, 0x181de494, 0x400, 0xffffffff, 0x2, 0x7ff, 0xe68b, 0xfffffffc, 0x800, 0x7fff, 0x56c1fbd4, 0x400, 0x8001, 0x2, 0x8, 0x7, 0x2, 0x0, 0x2, 0x0, 0x8, 0x401, 0x5, 0x2, 0xffff, 0xffffffff, 0x400, 0x0, 0x795, 0x3, 0x9, 0x755, 0x6, 0x3, 0x8, 0x6, 0x8, 0x10, 0xd, 0x10, 0x8, 0x45, 0x80, 0xfff, 0xe7d, 0x6, 0xa048, 0xa09a, 0x1, 0x10, 0x101, 0x5, 0x7fffffff, 0xffffafb3, 0x7, 0x2, 0x6, 0xfffffffc, 0xfff, 0x0, 0x0, 0x2, 0x2, 0x8, 0x9, 0x2, 0x371c9f7d, 0x6, 0x1, 0xcb, 0x5, 0xfffff801, 0x2, 0x5, 0xfff, 0x3ff, 0x9569, 0x8, 0x43, 0x6, 0x0, 0x6, 0x0, 0x3, 0xd81, 0x6, 0x6, 0x17eb, 0x4, 0x6, 0x4639, 0x4, 0x8, 0x8, 0x6, 0x7fff, 0x0, 0x3, 0x74, 0x9, 0xb, 0x3, 0x0, 0x5, 0x800, 0x3, 0xfffffff8, 0xffffffff, 0x9, 0x7, 0x6, 0x0, 0xd, 0x3, 0x469, 0x7, 0x7bc9, 0x6, 0x5, 0x9, 0x301a, 0xffffff05, 0x7, 0x6, 0xfffffff9, 0xfffffff8, 0x5, 0x400, 0x101, 0x800, 0x4, 0x9, 0x4, 0x80000000, 0x3, 0xeabd, 0x428, 0x6, 0x2, 0x10001, 0x8]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x25d4}, 0x1, 0x0, 0x0, 0x810}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.829295127s ago: executing program 0 (id=7806): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x1b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) 1.827959227s ago: executing program 3 (id=7807): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f065584c", 0x0, 0x1c1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.687240411s ago: executing program 4 (id=7808): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)='O', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400c0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.638763356s ago: executing program 3 (id=7809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000009}]}}}}}}}, 0x0) 1.339182276s ago: executing program 3 (id=7810): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$eJzs3E1sVEUcAPD/e/3kSyriBwhaRSPxo4XyIQcvGk08aGKiB4yn2haCFGpoTYQQrR7waEi8G48m3k086cWoB2PiVe+GhBguoKc1s/te2S67S0s/tri/X/K2M+9NM/PfebM7O7NtAF1rOD1kEVsj4o+I2F7LLi4wXPtx49rFiX+uXZzIolJ58++sWu76tYsTZdHy97bUMpVKxEBKDjSp99I7EePT01Pnivzo3Jn3R2fPX3ju1Jnxk1Mnp86OHTt2+NDe/qNjR1YUX178THFd3/3RzJ5dr759+fWJ45ff/fmbdH5rcb0+jjuSom0wXHt2Gz2aHp5cUWUbyq/pYVvdiay3deGRdWgQS9cTEam7+qrjf3v0xKaFa9vjlU872jhgTVUqlUqz9+fCfAX4H8ui0y0AOqN8o0+ff8tjnaYeG8LVF2sfgFLcN4qjdqV3Ye2gr+Hz7Woajojj8/9+mY5YjXUIAIDb+D7Nf55tNv/L44G6cvcUeyhDEXFvROyIiPsiYmdE3B9RLftgRDy0zPobd0hunf/kV+4osCVK878Xir2txfO/cvYXQz1Fbls1/r7sxKnpqQPFc7I/+gZS/mCbOn54+ffPy/Rgw7X6+V86Uv3lXLBox5XehgW6yfG58ZXGXbr6ScTu3mbxZ1Fu42QRsSsidt9hHaee/npPq2tN4h9cHH8bbfaZlqryVcRTtf6fj0Xx3+yqrOX+5MHnj44dGR2M6akDo+Vdcatffrv0Rqv6b9//ayv1/+am9//CLvBQNhgxe/7C6ep+7ezy67j052d1Y3rR7nKKP/82Ytn3f3/2VjXdX5z7cHxu7tzBiP7stVvPj9383TJflk/x79/XfPzvqGvxwxGRbuK9EfFIsYmb+u6xiHg8Iva1if+nl554r9W11v3fZlV+FaX4J2/X/1Hf/8tP9Jz+8bvlx19K/X+4mtpfNGopr39LbeAKnz4AAAC4K+TV78Bn+chCOs9HRmrf4d8Zm/Ppmdm5Z07MfHB2svZd+aHoy8uVrmI9OCvXP4fq1kfHGvKHinXjL3o2VfMjEzPTk50OHrrclhbjP/mrp9OtA9bcKuyjAXcp4x+6VGb8Qzcz/qF7Gf/QvZqN/4870A5g/Xn/h+5l/EP3Mv6hexn/0JVa/m18vqI/+e9wovzfCRulPR1KbFrLKiLvfIBdkehd69t4oOmlti8b8+vy4gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAK/gsAAP//gF3i6g==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x19, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd, 0xb}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) 1.190206201s ago: executing program 2 (id=7811): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x20480e4) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x1, 0xfff, 0x2, 0x5, 0xfffffffe}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) 1.134708657s ago: executing program 1 (id=7812): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x2, 0x400c0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 972.189653ms ago: executing program 0 (id=7813): socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$packet(0x11, 0xa, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void, {0x8100, 0x2, 0x1}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x8, 0x58, 0x64, 0x0, 0x86, 0x2f, 0x0, @broadcast, @multicast2}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7f, 0x0, 0x1, 0x1, 0x7, 0xc}, 0x1, {0x40}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x2, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x2, {0x3, 0x3, 0x3, 0x5, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 971.363833ms ago: executing program 0 (id=7814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800bfa200000000000207020000f8ffffffb703000008000000b7040000000000f7850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a080000000000000002000000"], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = memfd_secret(0x80000) fcntl$setlease(r2, 0x400, 0x0) close(r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000000)={0xf, 0x1, 0xffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 355.045264ms ago: executing program 4 (id=7815): sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000000)='./bus\x00', 0xd931d3864d39ddd8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) fsopen(&(0x7f0000000140)='proc\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 320.810927ms ago: executing program 2 (id=7816): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x4, r1, r0, 0x0, 0x0) 169.728163ms ago: executing program 3 (id=7817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 51.117075ms ago: executing program 2 (id=7818): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 0s ago: executing program 1 (id=7819): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f000000be40)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002ac0)="a68a03abf5830288375a35a14c097d96c8ffea9ffc5ef2ab3caf424ca9befa67e7dfeedd6105060e711727", 0x2b}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x44}}], 0x1, 0x0) kernel console output (not intermixed with test programs): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.800916][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 713.800936][ T29] audit: type=1326 audit(713.783:13182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22698 comm="syz.3.6186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18adabf6c9 code=0x7ffc0000 [ 713.830535][ T29] audit: type=1326 audit(713.783:13183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22698 comm="syz.3.6186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18adabf6c9 code=0x7ffc0000 [ 713.885454][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.038439][T22732] veth0_vlan: entered allmulticast mode [ 714.213496][T22726] atomic_op ffff88811a16dd28 conn xmit_atomic 0000000000000000 [ 714.949575][ T29] audit: type=1326 audit(714.933:13184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22763 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 715.040434][ T29] audit: type=1326 audit(714.933:13185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22763 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 715.064655][ T29] audit: type=1326 audit(714.933:13186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22763 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 715.087948][ T29] audit: type=1326 audit(714.933:13187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22763 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 715.111439][ T29] audit: type=1326 audit(714.933:13188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22763 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 715.135333][ T29] audit: type=1326 audit(714.933:13189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22763 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 715.159319][ T29] audit: type=1326 audit(714.933:13190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22763 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 715.182395][ T29] audit: type=1326 audit(714.933:13191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22763 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 715.240826][T22776] loop3: detected capacity change from 0 to 4096 [ 715.249479][T22776] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 715.309026][T22776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.335099][T22778] syzkaller0: entered promiscuous mode [ 715.340676][T22778] syzkaller0: entered allmulticast mode [ 715.357446][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.955516][T22807] atomic_op ffff8881266f5128 conn xmit_atomic 0000000000000000 [ 716.365345][T22832] 9pnet_fd: Insufficient options for proto=fd [ 716.421552][T22837] loop0: detected capacity change from 0 to 4096 [ 716.712867][T22837] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 716.858536][T22837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.957789][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.972202][T22849] loop3: detected capacity change from 0 to 1024 [ 717.071302][T22849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 717.162784][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 717.312564][T22875] loop0: detected capacity change from 0 to 512 [ 717.379535][T22875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.395502][T22875] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.6254: No space for directory leaf checksum. Please run e2fsck -D. [ 717.411055][T22875] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.6254: checksumming directory block 0 [ 717.438866][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.459301][T22880] loop1: detected capacity change from 0 to 4096 [ 717.473507][T22880] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 717.504257][T22880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.622265][T14134] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.653297][T22862] atomic_op ffff888106c29d28 conn xmit_atomic 0000000000000000 [ 719.417812][T22967] macsec0: entered promiscuous mode [ 719.704590][T22980] loop4: detected capacity change from 0 to 512 [ 719.717356][T22980] EXT4-fs: Ignoring removed nobh option [ 719.731521][T22980] EXT4-fs error (device loop4): __ext4_iget:5443: inode #11: block 1: comm syz.4.6291: invalid block [ 719.743045][T22980] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6291: couldn't read orphan inode 11 (err -117) [ 719.756819][T22980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.797905][T22987] loop3: detected capacity change from 0 to 512 [ 719.809931][T22989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6294'. [ 719.820448][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.838108][T22991] loop0: detected capacity change from 0 to 164 [ 719.853279][T22995] loop4: detected capacity change from 0 to 256 [ 719.856011][T22991] Unable to read rock-ridge attributes [ 719.866706][T22987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.887817][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 719.887835][ T29] audit: type=1400 audit(719.863:13224): avc: denied { mount } for pid=22990 comm="syz.0.6297" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 719.917587][T22995] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 719.926574][T22995] FAT-fs (loop4): Filesystem has been set read-only [ 719.947609][T22991] Unable to read rock-ridge attributes [ 719.958303][T22995] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 719.967219][ T29] audit: type=1400 audit(719.943:13225): avc: denied { unmount } for pid=21894 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 719.987426][T22987] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.6295: No space for directory leaf checksum. Please run e2fsck -D. [ 720.002914][T22987] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.6295: checksumming directory block 0 [ 720.008358][T22995] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 720.027267][T22995] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 720.035623][T22995] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 720.044021][T22995] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 720.053042][T22995] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 720.066353][T22995] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 720.092135][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.136144][T23004] loop0: detected capacity change from 0 to 512 [ 720.164443][T23004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.181400][T23004] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.6302: No space for directory leaf checksum. Please run e2fsck -D. [ 720.197706][T23004] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.6302: checksumming directory block 0 [ 720.244933][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.302346][T23014] loop3: detected capacity change from 0 to 256 [ 720.504454][T23030] 9pnet_fd: Insufficient options for proto=fd [ 720.513126][T23026] syzkaller0: entered promiscuous mode [ 720.518713][T23026] syzkaller0: entered allmulticast mode [ 720.893321][T23062] loop0: detected capacity change from 0 to 512 [ 720.943878][T23062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.967190][T23062] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.6323: No space for directory leaf checksum. Please run e2fsck -D. [ 720.983017][T23062] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.6323: checksumming directory block 0 [ 721.081426][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.179524][T23091] tipc: Started in network mode [ 721.184540][T23091] tipc: Node identity e6e11b1c73aa, cluster identity 4711 [ 721.191889][T23091] tipc: Enabled bearer , priority 0 [ 721.199154][T23091] syzkaller0: entered promiscuous mode [ 721.204803][T23091] syzkaller0: entered allmulticast mode [ 721.242366][T23091] tipc: Resetting bearer [ 721.258664][T23090] tipc: Resetting bearer [ 721.266153][T23090] tipc: Disabling bearer [ 721.374064][T23115] 9pnet_fd: Insufficient options for proto=fd [ 721.380873][T23113] loop2: detected capacity change from 0 to 2048 [ 721.402364][T23113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.473342][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.556884][T23138] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23138 comm=syz.1.6353 [ 721.619260][T23146] tipc: Enabled bearer , priority 0 [ 721.628773][T23146] syzkaller0: entered promiscuous mode [ 721.634739][T23146] syzkaller0: entered allmulticast mode [ 721.642921][T23146] tipc: Resetting bearer [ 721.668575][T23144] tipc: Resetting bearer [ 721.681663][T23144] tipc: Disabling bearer [ 721.692883][T23155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6359'. [ 721.702580][T23153] loop2: detected capacity change from 0 to 7 [ 721.759866][T23159] 9pnet_fd: Insufficient options for proto=fd [ 721.797576][T23165] loop2: detected capacity change from 0 to 256 [ 721.813450][T23169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6366'. [ 721.864058][T23165] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 721.871524][T23165] FAT-fs (loop2): Filesystem has been set read-only [ 721.878949][T23165] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 722.885384][T23190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6372'. [ 722.907112][T23191] tipc: Started in network mode [ 722.912358][T23191] tipc: Node identity c2831fd284bc, cluster identity 4711 [ 722.919793][T23191] tipc: Enabled bearer , priority 0 [ 722.954377][T23191] syzkaller0: entered promiscuous mode [ 722.960386][T23191] syzkaller0: entered allmulticast mode [ 722.993463][T23191] tipc: Resetting bearer [ 723.022365][T23188] tipc: Resetting bearer [ 723.050842][T23188] tipc: Disabling bearer [ 723.364033][ T5159] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.482096][ T5159] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.580983][ T5159] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.271182][ T5159] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.337242][T23204] chnl_net:caif_netlink_parms(): no params data found [ 724.410842][ T5159] ip6gretap0: left allmulticast mode [ 724.416215][ T5159] ip6gretap0: left promiscuous mode [ 724.421605][ T5159] Ÿë: port 1(ip6gretap0) entered disabled state [ 724.552213][ T5159] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 724.601680][ T5159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.612852][ T5159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.622187][ T5159] bond0 (unregistering): Released all slaves [ 724.630829][ T5159] bond1 (unregistering): Released all slaves [ 724.674800][T23204] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.682047][T23204] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.682159][T23277] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6394'. [ 724.689742][T23204] bridge_slave_0: entered allmulticast mode [ 724.705453][T23204] bridge_slave_0: entered promiscuous mode [ 724.714237][ T5159] tipc: Left network mode [ 724.718694][T23204] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.719434][T23277] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6394'. [ 724.726041][T23204] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.742914][T23204] bridge_slave_1: entered allmulticast mode [ 724.749962][T23204] bridge_slave_1: entered promiscuous mode [ 724.761185][ T5159] hsr_slave_0: left promiscuous mode [ 724.777789][ T5159] hsr_slave_1: left promiscuous mode [ 724.792885][ T5159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.815108][ T5159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.855884][T23286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6398'. [ 724.880139][ T5159] team0 (unregistering): Port device team_slave_1 removed [ 725.017617][T23204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.065326][T23204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.244508][T23204] team0: Port device team_slave_0 added [ 725.251502][T23204] team0: Port device team_slave_1 added [ 725.268855][T23204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.275942][T23204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.302499][T23204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.376286][T23327] loop0: detected capacity change from 0 to 128 [ 726.051628][T23204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.058819][T23204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.086545][T23204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.294432][T23204] hsr_slave_0: entered promiscuous mode [ 726.321117][T23204] hsr_slave_1: entered promiscuous mode [ 726.812234][T23384] syzkaller0: entered promiscuous mode [ 726.817872][T23384] syzkaller0: entered allmulticast mode [ 727.048318][T23204] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 727.070589][T23204] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 727.082680][ T29] audit: type=1326 audit(727.063:13226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.4.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 727.106230][ T29] audit: type=1326 audit(727.063:13227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.4.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 727.130031][T23204] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 727.149798][T23204] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 727.160644][ T29] audit: type=1326 audit(727.063:13228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.4.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 727.184034][ T29] audit: type=1326 audit(727.063:13229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.4.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 727.207261][ T29] audit: type=1326 audit(727.063:13230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.4.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 727.230817][ T29] audit: type=1326 audit(727.063:13231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.4.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 727.254601][ T29] audit: type=1326 audit(727.063:13232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.4.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 727.277954][ T29] audit: type=1326 audit(727.063:13233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.4.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 727.301323][ T29] audit: type=1326 audit(727.063:13234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.4.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 727.324835][ T29] audit: type=1326 audit(727.063:13235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.4.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 727.553261][T23204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.574093][T23204] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.586903][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.594086][ T5186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.664709][T23446] loop3: detected capacity change from 0 to 128 [ 727.835545][T23449] loop4: detected capacity change from 0 to 256 [ 727.955580][T23449] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 727.964119][T23449] FAT-fs (loop4): Filesystem has been set read-only [ 728.110289][T23449] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 728.275218][T23459] atomic_op ffff888103592d28 conn xmit_atomic 0000000000000000 [ 728.404502][T23204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 728.414987][T23204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 728.502939][T23204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.582070][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.589466][ T5186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.679345][T23204] veth0_vlan: entered promiscuous mode [ 728.720215][T23204] veth1_vlan: entered promiscuous mode [ 728.772216][T23204] veth0_macvtap: entered promiscuous mode [ 728.813471][T23204] veth1_macvtap: entered promiscuous mode [ 728.852058][T23204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.890208][T23204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.922976][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.948444][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.990066][T23491] loop2: detected capacity change from 0 to 7 [ 728.998760][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.033122][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.708886][T23531] netlink: 'syz.3.6458': attribute type 39 has an invalid length. [ 730.060261][T23546] atomic_op ffff888106c2a928 conn xmit_atomic 0000000000000000 [ 730.394660][T23564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6465'. [ 730.602940][T23574] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6467'. [ 730.613727][T23574] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6467'. [ 730.931665][T23601] loop2: detected capacity change from 0 to 128 [ 730.955936][T23587] syzkaller0: entered promiscuous mode [ 730.962048][T23587] syzkaller0: entered allmulticast mode [ 731.621501][T23618] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 731.732172][T23622] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6480'. [ 731.774540][T23622] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6480'. [ 731.815791][T23626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6482'. [ 731.881496][T23627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6481'. [ 732.246264][T23656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6492'. [ 732.389832][T23670] loop4: detected capacity change from 0 to 256 [ 732.519293][T23680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6502'. [ 732.531172][T23670] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 732.538683][T23670] FAT-fs (loop4): Filesystem has been set read-only [ 732.553731][T23670] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 732.814145][T23712] loop2: detected capacity change from 0 to 7 [ 732.904864][T23718] loop2: detected capacity change from 0 to 128 [ 733.149832][T23724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6521'. [ 733.741492][T23741] loop3: detected capacity change from 0 to 256 [ 733.775829][T23741] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 733.783421][T23741] FAT-fs (loop3): Filesystem has been set read-only [ 733.823264][T23741] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 734.257659][T23779] 9pnet_fd: Insufficient options for proto=fd [ 734.304676][T23774] syzkaller0: entered promiscuous mode [ 734.310371][T23774] syzkaller0: entered allmulticast mode [ 734.391697][T23784] syzkaller0: entered promiscuous mode [ 734.397250][T23784] syzkaller0: entered allmulticast mode [ 734.629664][T23809] loop0: detected capacity change from 0 to 256 [ 734.656383][T23812] loop2: detected capacity change from 0 to 7 [ 734.664099][T23809] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 734.671846][T23809] FAT-fs (loop0): Filesystem has been set read-only [ 734.691758][T23809] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 734.863483][T23829] loop0: detected capacity change from 0 to 256 [ 735.745941][T23855] __nla_validate_parse: 5 callbacks suppressed [ 735.745965][T23855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6577'. [ 735.976458][T23857] loop4: detected capacity change from 0 to 256 [ 736.315825][T23882] loop2: detected capacity change from 0 to 7 [ 736.717964][T23903] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6597'. [ 736.910753][T23924] netlink: 'syz.4.6605': attribute type 39 has an invalid length. [ 736.944309][T23926] tipc: Started in network mode [ 736.949504][T23926] tipc: Node identity 0a2a20d64ae8, cluster identity 4711 [ 736.956762][T23926] tipc: Enabled bearer , priority 0 [ 736.964336][T23926] syzkaller0: entered promiscuous mode [ 736.970201][T23926] syzkaller0: entered allmulticast mode [ 736.980296][T23925] tipc: Resetting bearer [ 736.988705][T23925] tipc: Disabling bearer [ 737.050391][T23936] netlink: 'syz.3.6610': attribute type 39 has an invalid length. [ 737.393630][T23969] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6626'. [ 737.418862][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 737.418916][ T29] audit: type=1400 audit(737.403:13256): avc: denied { read } for pid=23971 comm="syz.0.6627" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 737.622734][T23995] loop4: detected capacity change from 0 to 256 [ 737.661738][T23999] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6639'. [ 737.671363][T23995] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 737.674889][T23997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2154 sclass=netlink_route_socket pid=23997 comm=syz.1.6640 [ 737.679001][T23995] FAT-fs (loop4): Filesystem has been set read-only [ 737.694277][T23999] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6639'. [ 737.699711][T23995] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 737.735311][T24001] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6641'. [ 738.025915][T24009] loop4: detected capacity change from 0 to 2048 [ 738.377636][T24013] loop2: detected capacity change from 0 to 512 [ 738.569860][T24009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 738.588810][T24013] EXT4-fs: inline encryption not supported [ 738.604725][T24013] EXT4-fs: Ignoring removed i_version option [ 738.819256][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 738.852263][T24013] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.6645: missing EA_INODE flag [ 738.864665][T24013] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.6645: error while reading EA inode 11 err=-117 [ 738.886644][T24013] EXT4-fs (loop2): 1 orphan inode deleted [ 738.915266][T24013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.025514][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.319584][T24037] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 739.378551][T24041] loop0: detected capacity change from 0 to 256 [ 739.438939][T24049] syzkaller1: entered promiscuous mode [ 739.444571][T24049] syzkaller1: entered allmulticast mode [ 739.449689][T24041] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 739.458369][T24041] FAT-fs (loop0): Filesystem has been set read-only [ 739.465523][T24041] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 739.543017][ T29] audit: type=1326 audit(739.523:13257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24054 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64714f6c9 code=0x7ffc0000 [ 739.576695][T24051] syzkaller1: entered promiscuous mode [ 739.582575][T24051] syzkaller1: entered allmulticast mode [ 739.602130][ T29] audit: type=1326 audit(739.523:13258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24054 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64714f6c9 code=0x7ffc0000 [ 739.625662][ T29] audit: type=1326 audit(739.573:13259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24054 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd64714f6c9 code=0x7ffc0000 [ 739.648673][ T29] audit: type=1326 audit(739.573:13260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24054 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64714f6c9 code=0x7ffc0000 [ 739.672386][ T29] audit: type=1326 audit(739.573:13261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24054 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64714f6c9 code=0x7ffc0000 [ 739.695688][ T29] audit: type=1326 audit(739.573:13262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24054 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd64714f6c9 code=0x7ffc0000 [ 739.719121][ T29] audit: type=1326 audit(739.573:13263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24054 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64714f6c9 code=0x7ffc0000 [ 739.742689][ T29] audit: type=1326 audit(739.573:13264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24054 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fd64714f6c9 code=0x7ffc0000 [ 739.766327][ T29] audit: type=1326 audit(739.573:13265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24054 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64714f6c9 code=0x7ffc0000 [ 739.853247][T24058] atomic_op ffff888103599d28 conn xmit_atomic 0000000000000000 [ 739.889004][T24062] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 740.126406][T24090] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 740.847324][T24145] loop0: detected capacity change from 0 to 256 [ 740.922041][T24146] loop1: detected capacity change from 0 to 128 [ 740.953026][T24145] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 740.961385][T24145] FAT-fs (loop0): Filesystem has been set read-only [ 741.026569][T24145] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 742.566213][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6714'. [ 742.672022][T24193] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6719'. [ 742.699906][T24195] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 742.729949][T24197] loop2: detected capacity change from 0 to 256 [ 742.796984][T24197] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 742.805140][T24197] FAT-fs (loop2): Filesystem has been set read-only [ 742.812052][T24203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6724'. [ 742.828482][T24197] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 742.915778][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6727'. [ 743.001269][T24212] atomic_op ffff88811b3c2528 conn xmit_atomic 0000000000000000 [ 743.123914][T24226] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 743.197699][T24236] loop2: detected capacity change from 0 to 256 [ 743.219451][T24241] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6740'. [ 743.242886][T24236] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 743.261812][T24241] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6740'. [ 743.300246][T24245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6742'. [ 743.322497][T13227] Process accounting resumed [ 743.330264][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 743.330281][ T29] audit: type=1400 audit(743.303:13294): avc: denied { remount } for pid=24234 comm="syz.2.6739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 743.360066][T13227] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 743.368897][T13227] FAT-fs (loop2): Filesystem has been set read-only [ 743.487278][T24262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6748'. [ 744.681911][T24294] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 745.029788][T24301] syzkaller0: entered promiscuous mode [ 745.035432][T24301] syzkaller0: entered allmulticast mode [ 745.447345][T24331] loop1: detected capacity change from 0 to 256 [ 745.472065][T24328] loop4: detected capacity change from 0 to 8192 [ 745.618658][T24331] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 745.626741][T24331] FAT-fs (loop1): Filesystem has been set read-only [ 745.688609][T24331] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 745.697456][T24331] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 745.734028][T24331] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 745.743806][T24334] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 745.752686][T24334] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 745.761577][T24334] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 745.797157][T24334] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 745.806113][T24334] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 745.816275][T24334] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 745.825476][T24334] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 746.253209][T24346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6778'. [ 746.290523][T24348] netlink: 67 bytes leftover after parsing attributes in process `syz.1.6779'. [ 746.340622][T24350] netlink: 'syz.4.6781': attribute type 6 has an invalid length. [ 746.358490][T24350] netlink: 'syz.4.6781': attribute type 6 has an invalid length. [ 746.491941][T24369] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 746.573538][T24374] loop2: detected capacity change from 0 to 2048 [ 746.581225][T24376] loop4: detected capacity change from 0 to 2048 [ 746.607051][T24374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 746.630673][T24376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 746.699657][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 746.714343][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 746.773493][T24388] loop2: detected capacity change from 0 to 256 [ 746.835658][T24388] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 746.843608][T24388] FAT-fs (loop2): Filesystem has been set read-only [ 746.880427][T24388] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 746.919145][T24398] loop3: detected capacity change from 0 to 2048 [ 746.960131][T24398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.006249][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.213732][T24413] netlink: 'syz.0.6804': attribute type 4 has an invalid length. [ 747.299886][T24417] syzkaller1: entered promiscuous mode [ 747.305884][T24417] syzkaller1: entered allmulticast mode [ 747.663777][T24435] loop4: detected capacity change from 0 to 4096 [ 747.675895][T24435] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 747.690397][T24435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.816892][T24442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6816'. [ 747.868705][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.618313][T24458] loop3: detected capacity change from 0 to 4096 [ 748.986701][T24458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.227412][T24472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6826'. [ 749.408244][T24476] syzkaller0: entered promiscuous mode [ 749.413816][T24476] syzkaller0: entered allmulticast mode [ 749.558920][T24458] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.6819: corrupted inode contents [ 749.579797][T24458] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.6819: mark_inode_dirty error [ 749.594930][T24458] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.6819: corrupted inode contents [ 749.616095][ T29] audit: type=1400 audit(749.593:13295): avc: denied { append } for pid=24481 comm="syz.2.6830" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 749.677835][T24458] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.6819: mark_inode_dirty error [ 749.693753][T24458] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.6819: corrupted inode contents [ 749.715237][T24458] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.6819: mark_inode_dirty error [ 749.731781][T24458] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.6819: corrupted inode contents [ 749.745482][T24458] EXT4-fs error (device loop3): ext4_truncate:4637: inode #15: comm syz.3.6819: mark_inode_dirty error [ 749.775361][T24458] EXT4-fs error (device loop3) in ext4_setattr:6050: Corrupt filesystem [ 749.801518][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.889182][T24501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6839'. [ 750.027416][T24508] loop2: detected capacity change from 0 to 256 [ 750.112854][T24509] loop3: detected capacity change from 0 to 128 [ 750.139726][T24508] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 751.732566][T24536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6852'. [ 751.929874][ T29] audit: type=1400 audit(751.913:13296): avc: denied { ioctl } for pid=24544 comm="syz.1.6855" path="socket:[81052]" dev="sockfs" ino=81052 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 752.017272][T24554] loop0: detected capacity change from 0 to 256 [ 752.055927][T24557] loop2: detected capacity change from 0 to 256 [ 752.139864][T24565] loop4: detected capacity change from 0 to 256 [ 752.169625][T24562] loop1: detected capacity change from 0 to 8192 [ 752.181579][T24557] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 752.189078][T24557] FAT-fs (loop2): Filesystem has been set read-only [ 752.212532][T24562] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 752.219115][T24554] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 752.221776][T24562] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 752.229285][T24554] FAT-fs (loop0): Filesystem has been set read-only [ 752.237947][T24562] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 752.250099][T24557] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 752.260571][T24554] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 752.272523][T24562] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 752.281375][T24565] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 752.281644][T24562] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 752.289926][T24565] FAT-fs (loop4): Filesystem has been set read-only [ 752.307110][T24565] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 752.308661][T24562] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 752.324927][T24562] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 752.333108][T24565] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 752.361378][T24565] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 752.535465][T24585] netlink: 75 bytes leftover after parsing attributes in process `syz.4.6873'. [ 753.033533][T24596] loop3: detected capacity change from 0 to 256 [ 753.184094][T24596] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 753.192035][T24596] FAT-fs (loop3): Filesystem has been set read-only [ 753.199718][T24596] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 753.254190][T24598] loop3: detected capacity change from 0 to 256 [ 753.304643][T24598] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 753.312385][T24598] FAT-fs (loop3): Filesystem has been set read-only [ 753.320075][T24598] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 753.353944][T24600] netlink: 'syz.2.6878': attribute type 4 has an invalid length. [ 753.361877][T24600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6878'. [ 753.391870][T24602] loop3: detected capacity change from 0 to 256 [ 753.559347][T24620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6882'. [ 753.600230][T24623] loop1: detected capacity change from 0 to 256 [ 753.629515][T24623] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 753.680233][T24626] syzkaller0: entered promiscuous mode [ 753.685896][T24626] syzkaller0: entered allmulticast mode [ 753.769130][T24631] Process accounting resumed [ 753.774285][T24631] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 753.783143][T24631] FAT-fs (loop1): Filesystem has been set read-only [ 753.813630][T13223] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 753.828179][T24634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6892'. [ 753.847292][T24634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6892'. [ 754.036331][T24655] loop1: detected capacity change from 0 to 256 [ 754.044508][T24655] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 754.061814][T24657] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 754.105939][T24661] tipc: Started in network mode [ 754.111133][T24661] tipc: Node identity 92e75496f6e3, cluster identity 4711 [ 754.118714][T24661] tipc: Enabled bearer , priority 0 [ 754.127124][T24661] syzkaller0: entered promiscuous mode [ 754.132939][T24661] syzkaller0: entered allmulticast mode [ 754.143673][T24661] tipc: Resetting bearer [ 754.151020][T24660] tipc: Resetting bearer [ 754.158493][T24660] tipc: Disabling bearer [ 754.177167][T24662] Process accounting resumed [ 754.181938][T24662] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 754.190633][T24662] FAT-fs (loop1): Filesystem has been set read-only [ 754.199035][T12936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 754.231544][T24664] tipc: Enabled bearer , priority 0 [ 754.241167][T24664] syzkaller0: entered promiscuous mode [ 754.246968][T24664] syzkaller0: entered allmulticast mode [ 754.257134][T24663] tipc: Resetting bearer [ 754.265449][T24663] tipc: Disabling bearer [ 754.494565][T24688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6918'. [ 754.563129][T24687] loop1: detected capacity change from 0 to 8192 [ 754.579221][T24687] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 754.589092][T24687] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 754.598480][T24693] loop0: detected capacity change from 0 to 1024 [ 754.598661][T24687] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 754.614244][T24687] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 754.624022][T24687] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 754.635546][T24693] EXT4-fs (loop0): stripe (10) is not aligned with cluster size (16), stripe is disabled [ 754.649862][T24687] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 754.665767][T24687] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 754.687235][T24693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.731240][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.895740][T24721] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6931'. [ 754.928899][T24716] loop2: detected capacity change from 0 to 8192 [ 755.148486][ T29] audit: type=1400 audit(755.133:13297): avc: denied { name_bind } for pid=24743 comm="syz.1.6941" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 755.422507][T24770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6953'. [ 755.431684][T24770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6953'. [ 755.497191][T24778] loop3: detected capacity change from 0 to 256 [ 755.537751][T24778] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 755.545315][T24778] FAT-fs (loop3): Filesystem has been set read-only [ 755.554087][T24778] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 755.635363][T24790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6963'. [ 755.644412][T24790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6963'. [ 755.900755][T24818] loop4: detected capacity change from 0 to 256 [ 755.930037][T24818] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 755.937537][T24818] FAT-fs (loop4): Filesystem has been set read-only [ 755.944310][T24818] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 756.421092][T24850] loop2: detected capacity change from 0 to 8192 [ 756.620130][ T29] audit: type=1326 audit(756.583:13298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.2.6989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7272cff6c9 code=0x7ffc0000 [ 756.643393][ T29] audit: type=1326 audit(756.583:13299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.2.6989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7272cff6c9 code=0x7ffc0000 [ 756.666962][ T29] audit: type=1326 audit(756.583:13300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.2.6989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7272cff6c9 code=0x7ffc0000 [ 756.690653][ T29] audit: type=1326 audit(756.583:13301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.2.6989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7272cff6c9 code=0x7ffc0000 [ 756.714120][ T29] audit: type=1326 audit(756.583:13302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.2.6989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7272cff6c9 code=0x7ffc0000 [ 756.737299][ T29] audit: type=1326 audit(756.583:13303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.2.6989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f7272cff6c9 code=0x7ffc0000 [ 756.760544][ T29] audit: type=1326 audit(756.583:13304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.2.6989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7272cff6c9 code=0x7ffc0000 [ 756.783636][ T29] audit: type=1326 audit(756.583:13305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.2.6989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7272cff6c9 code=0x7ffc0000 [ 756.806595][ T29] audit: type=1326 audit(756.583:13306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.2.6989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7272cff6c9 code=0x7ffc0000 [ 757.048373][T24871] syzkaller0: entered promiscuous mode [ 757.053967][T24871] syzkaller0: entered allmulticast mode [ 757.139968][T24877] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 757.385612][T24890] atomic_op ffff88811a155928 conn xmit_atomic 0000000000000000 [ 757.989006][T24925] loop1: detected capacity change from 0 to 1024 [ 758.006618][T24925] EXT4-fs: Ignoring removed mblk_io_submit option [ 758.042394][T24925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.099068][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.218380][T24943] syzkaller0: entered promiscuous mode [ 758.224248][T24943] syzkaller0: entered allmulticast mode [ 758.552282][T24976] loop4: detected capacity change from 0 to 128 [ 758.861363][T24996] loop2: detected capacity change from 0 to 8192 [ 758.872819][T24996] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 758.882479][T24996] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 758.891261][T24996] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 758.900390][T24996] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 758.909360][T24996] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 758.921335][T24996] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 758.930667][T24996] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 759.393270][T25032] loop4: detected capacity change from 0 to 8192 [ 759.409602][T25032] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 759.418701][T25032] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 759.427441][T25032] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 759.436888][T25032] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 759.445612][T25032] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 759.455425][T25032] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 759.464324][T25032] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 759.492409][T25035] __nla_validate_parse: 9 callbacks suppressed [ 759.492501][T25035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7061'. [ 759.911407][T25053] syzkaller0: entered promiscuous mode [ 759.917022][T25053] syzkaller0: entered allmulticast mode [ 760.095657][T25062] loop2: detected capacity change from 0 to 1024 [ 760.123567][T25062] EXT4-fs: Ignoring removed mblk_io_submit option [ 760.169616][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 760.169634][ T29] audit: type=1326 audit(760.153:13373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.4.7078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 760.249688][T25062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.356321][ T29] audit: type=1326 audit(760.153:13374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.4.7078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 760.380020][ T29] audit: type=1326 audit(760.203:13375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.4.7078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 760.404728][ T29] audit: type=1326 audit(760.203:13376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.4.7078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 760.428045][ T29] audit: type=1326 audit(760.203:13377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.4.7078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 760.451570][ T29] audit: type=1326 audit(760.203:13378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.4.7078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 760.474778][ T29] audit: type=1326 audit(760.203:13379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.4.7078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 760.498414][ T29] audit: type=1326 audit(760.203:13380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.4.7078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 760.522191][ T29] audit: type=1326 audit(760.203:13381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.4.7078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 760.546167][ T29] audit: type=1326 audit(760.203:13382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.4.7078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cde7f6c9 code=0x7ffc0000 [ 760.622690][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.786195][T25089] loop4: detected capacity change from 0 to 512 [ 760.801098][T25089] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 760.862610][T25092] loop0: detected capacity change from 0 to 512 [ 760.870143][T25089] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 760.875287][T25092] EXT4-fs: Ignoring removed mblk_io_submit option [ 760.886346][T25092] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 760.922280][T25089] EXT4-fs (loop4): orphan cleanup on readonly fs [ 760.929032][T25089] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.7086: bad orphan inode 267 [ 760.941422][T25089] EXT4-fs (loop4): Remounting filesystem read-only [ 760.951343][T25092] EXT4-fs (loop0): 1 truncate cleaned up [ 760.958055][T25089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 760.970507][T25092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.993325][T25097] syzkaller0: entered promiscuous mode [ 760.999072][T25097] syzkaller0: entered allmulticast mode [ 761.007123][T25089] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.7086: dx entry: limit 0 != root limit 125 [ 761.019072][T25089] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.7086: Corrupt directory, running e2fsck is recommended [ 761.051484][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 761.112818][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.154273][T25103] loop1: detected capacity change from 0 to 1024 [ 761.162279][T25103] EXT4-fs: Ignoring removed mblk_io_submit option [ 761.201286][T25103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.234617][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.525731][T25129] loop1: detected capacity change from 0 to 8192 [ 761.570029][T25129] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 761.579045][T25129] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 761.607817][T25129] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 761.617431][T25129] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 761.639939][T25129] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 761.677344][T25143] loop2: detected capacity change from 0 to 512 [ 761.684557][T25129] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 761.697214][T25143] EXT4-fs: Ignoring removed mblk_io_submit option [ 761.704673][T25129] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 761.738684][T25143] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 761.763668][T25143] EXT4-fs (loop2): 1 truncate cleaned up [ 761.779015][T25143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.869802][T25153] loop4: detected capacity change from 0 to 512 [ 761.877573][T25153] EXT4-fs: Ignoring removed mblk_io_submit option [ 761.938610][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.958813][T25153] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 761.991586][T25153] EXT4-fs (loop4): 1 truncate cleaned up [ 762.025917][T25157] loop2: detected capacity change from 0 to 512 [ 762.035567][T25153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.070969][T25157] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 762.102780][T25157] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 762.110949][T25157] EXT4-fs (loop2): orphan cleanup on readonly fs [ 762.116022][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.117313][T25157] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.7116: bad orphan inode 267 [ 762.154536][T25157] EXT4-fs (loop2): Remounting filesystem read-only [ 762.192201][T25157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 762.259507][T25179] loop1: detected capacity change from 0 to 512 [ 762.266340][T25179] EXT4-fs: Ignoring removed bh option [ 762.283493][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 762.309712][T25179] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 762.322111][T25177] loop4: detected capacity change from 0 to 8192 [ 762.333112][T25177] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 762.346300][T25182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7126'. [ 762.347493][T25179] EXT4-fs (loop1): 1 truncate cleaned up [ 762.370154][T25177] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 762.415317][T25179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.435803][T25177] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 762.454126][T25177] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 762.463237][T25177] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 762.465251][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.488350][T25177] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 762.528522][T25177] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 762.720158][T25212] loop3: detected capacity change from 0 to 256 [ 762.747792][T25212] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 762.755836][T25212] FAT-fs (loop3): Filesystem has been set read-only [ 762.763768][T25212] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 762.772221][T25212] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 762.780470][T25212] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 762.788723][T25212] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 762.796708][T25212] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 762.946696][T25224] syzkaller0: entered promiscuous mode [ 762.952422][T25224] syzkaller0: entered allmulticast mode [ 763.045302][T25238] loop3: detected capacity change from 0 to 512 [ 763.053907][T25238] EXT4-fs: Ignoring removed bh option [ 763.081355][T25238] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 763.105203][T25243] syzkaller0: entered promiscuous mode [ 763.111037][T25243] syzkaller0: entered allmulticast mode [ 763.123315][T25238] EXT4-fs (loop3): 1 truncate cleaned up [ 763.129829][T25238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.158965][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.295557][T25258] loop2: detected capacity change from 0 to 512 [ 763.305881][T25258] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 763.319646][T25258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 763.327997][T25258] System zones: 1-12 [ 763.332721][T25258] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.7162: corrupted in-inode xattr: e_value size too large [ 763.347156][T25258] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.7162: couldn't read orphan inode 15 (err -117) [ 763.359707][T25258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.388339][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.490902][T25272] loop4: detected capacity change from 0 to 512 [ 763.525699][T25272] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 763.545485][T25272] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.7166: bad orphan inode 131083 [ 763.556895][T25272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.584663][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.447258][T25310] loop3: detected capacity change from 0 to 256 [ 764.668521][T25310] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 764.677014][T25310] FAT-fs (loop3): Filesystem has been set read-only [ 764.838383][T25310] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 764.846416][T25310] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 764.898545][T25310] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 765.012088][T25321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7186'. [ 765.068750][T25325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7188'. [ 765.451222][T25338] loop2: detected capacity change from 0 to 512 [ 765.498661][T25338] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 765.513218][T25338] System zones: 1-12 [ 765.524024][T25338] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.7193: Directory hole found for htree index block 0 [ 765.564688][T25338] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 765.600780][T25338] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.7193: Directory hole found for htree index block 0 [ 765.648614][T25338] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 765.685473][T25338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.721597][T25338] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 765.731007][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 765.731024][ T29] audit: type=1400 audit(765.703:13484): avc: denied { remount } for pid=25337 comm="syz.2.7193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 765.780854][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.082087][T25365] syzkaller0: entered promiscuous mode [ 766.087855][T25365] syzkaller0: entered allmulticast mode [ 766.221569][T25371] loop3: detected capacity change from 0 to 8192 [ 766.254830][T25371] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 766.265380][T25371] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 766.278714][T25371] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 766.327309][T25371] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 766.349641][T25371] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 766.393839][T25371] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 766.548248][T25371] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 766.671004][T25393] loop3: detected capacity change from 0 to 512 [ 766.683584][T25393] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 766.706293][T25393] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 766.719220][T25396] tipc: Enabling of bearer rejected, failed to enable media [ 766.728351][T25393] System zones: 1-12 [ 766.733432][T25393] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.7216: corrupted in-inode xattr: e_value size too large [ 766.772062][T25393] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7216: couldn't read orphan inode 15 (err -117) [ 766.785092][T25393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.827681][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.134087][T25434] loop0: detected capacity change from 0 to 128 [ 767.267886][T25436] loop2: detected capacity change from 0 to 256 [ 767.415713][T25440] loop1: detected capacity change from 0 to 512 [ 767.466479][T25441] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 767.474780][T25441] FAT-fs (loop2): Filesystem has been set read-only [ 767.544494][T25440] EXT4-fs: Ignoring removed orlov option [ 767.614527][T25440] EXT4-fs: Mount option(s) incompatible with ext2 [ 767.746828][T25441] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 767.837781][T25447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7237'. [ 767.858366][T25441] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 767.875497][T25441] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 767.965781][T25456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7241'. [ 768.140495][T25464] loop1: detected capacity change from 0 to 1024 [ 768.197761][T25464] EXT4-fs: Ignoring removed mblk_io_submit option [ 768.259586][T25464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.287529][T25477] loop4: detected capacity change from 0 to 512 [ 768.295580][T25477] EXT4-fs: Ignoring removed bh option [ 768.301892][T25477] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 768.429848][T25477] EXT4-fs (loop4): 1 truncate cleaned up [ 768.456620][T25477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.571445][ T29] audit: type=1400 audit(768.423:13485): avc: denied { execute } for pid=25481 comm="syz.2.7252" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=85204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 768.701314][T25493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7251'. [ 768.807179][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.919926][T25497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7257'. [ 768.929419][T25497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7257'. [ 769.009776][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.038524][T25500] loop4: detected capacity change from 0 to 1024 [ 769.051772][T25500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.087863][ T29] audit: type=1400 audit(769.063:13486): avc: denied { map } for pid=25499 comm="syz.4.7256" path="/307/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 769.111050][ T29] audit: type=1400 audit(769.063:13487): avc: denied { execute } for pid=25499 comm="syz.4.7256" path="/307/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 769.150299][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.195635][T25514] loop4: detected capacity change from 0 to 512 [ 769.263722][T25514] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 769.308567][T25514] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 769.319843][T25514] System zones: 1-12 [ 769.334780][T25514] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.7262: corrupted in-inode xattr: e_value size too large [ 769.350371][T25514] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7262: couldn't read orphan inode 15 (err -117) [ 769.393672][T25514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.418056][T25523] loop1: detected capacity change from 0 to 128 [ 769.451867][T25522] loop3: detected capacity change from 0 to 512 [ 769.495005][T25522] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 769.609543][T25522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 769.704256][T25522] System zones: 1-12 [ 769.735659][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.755045][T25522] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.7266: corrupted in-inode xattr: e_value size too large [ 769.817225][T25522] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7266: couldn't read orphan inode 15 (err -117) [ 769.831662][T25522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.845252][T25525] atomic_op ffff88811f39f528 conn xmit_atomic 0000000000000000 [ 769.895169][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.741645][T25550] loop0: detected capacity change from 0 to 512 [ 770.775453][T25552] loop2: detected capacity change from 0 to 1024 [ 770.798813][T25550] EXT4-fs: Ignoring removed mblk_io_submit option [ 770.815364][T25550] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 770.826354][T25552] EXT4-fs: Ignoring removed mblk_io_submit option [ 770.872070][T25550] EXT4-fs (loop0): 1 truncate cleaned up [ 770.887053][T25552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.900911][T25550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.966722][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.046292][T25562] loop3: detected capacity change from 0 to 8192 [ 771.085265][T25562] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 771.107688][T25562] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 771.118512][T25562] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 771.137714][T25562] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 771.146797][T25562] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 771.165350][T25562] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 771.188627][T25562] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 771.212660][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.406957][T25588] loop1: detected capacity change from 0 to 512 [ 771.413660][T25588] EXT4-fs: Ignoring removed bh option [ 771.423948][T25588] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 771.436605][T25588] EXT4-fs (loop1): 1 truncate cleaned up [ 771.455323][T25588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.484828][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.551305][T25599] loop0: detected capacity change from 0 to 256 [ 771.601590][T25599] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 771.609097][T25599] FAT-fs (loop0): Filesystem has been set read-only [ 771.615864][T25599] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 771.682165][T25605] loop4: detected capacity change from 0 to 128 [ 771.983182][T25611] loop1: detected capacity change from 0 to 128 [ 772.160894][T25611] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 772.616401][T25616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7302'. [ 772.625785][T25616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7302'. [ 772.752209][T23204] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 772.971464][T25627] loop1: detected capacity change from 0 to 512 [ 773.021533][T25627] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 773.099664][T25627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 773.147952][T25627] System zones: 1-12 [ 773.163032][T25627] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.7303: corrupted in-inode xattr: e_value size too large [ 773.210768][T25637] loop3: detected capacity change from 0 to 512 [ 773.237674][T25627] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7303: couldn't read orphan inode 15 (err -117) [ 773.254274][T25637] EXT4-fs: Ignoring removed mblk_io_submit option [ 773.293491][T25637] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 773.311744][T25627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.333748][T25637] EXT4-fs (loop3): 1 truncate cleaned up [ 773.348520][T25637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.539606][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.689474][T25653] loop4: detected capacity change from 0 to 128 [ 773.703740][T25651] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7316'. [ 773.704991][T25653] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 773.752099][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.817457][T25661] loop0: detected capacity change from 0 to 512 [ 773.824571][T25662] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 773.835171][T25657] loop2: detected capacity change from 0 to 8192 [ 773.844873][T25661] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 773.845924][T21480] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 773.873323][T25661] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 773.877432][T25657] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 773.890686][T25657] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 773.899625][T25657] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 773.908937][T25661] System zones: 1-12 [ 773.913145][T25661] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.7322: corrupted in-inode xattr: e_value size too large [ 773.946748][T25668] loop4: detected capacity change from 0 to 1024 [ 773.948396][T25657] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 773.974125][T25661] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.7322: couldn't read orphan inode 15 (err -117) [ 773.975894][T25660] syzkaller0: entered promiscuous mode [ 773.991725][T25660] syzkaller0: entered allmulticast mode [ 773.996873][T25668] EXT4-fs: inline encryption not supported [ 774.007265][T25661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.018081][T25657] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 774.040549][T25657] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 774.046122][T25668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.050131][T25657] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 774.086816][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.102035][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.156122][T25679] syzkaller0: entered promiscuous mode [ 774.162180][T25679] syzkaller0: entered allmulticast mode [ 774.245427][T25690] loop2: detected capacity change from 0 to 512 [ 774.285095][T25690] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 774.328544][T25690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 774.348341][T25690] System zones: 1-12 [ 774.362287][T25690] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.7330: corrupted in-inode xattr: e_value size too large [ 774.437868][T25690] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.7330: couldn't read orphan inode 15 (err -117) [ 774.480271][T25690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.003993][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.055505][T25705] syzkaller0: entered promiscuous mode [ 775.061263][T25705] syzkaller0: entered allmulticast mode [ 775.162786][T25713] loop0: detected capacity change from 0 to 8192 [ 775.242642][T25722] loop0: detected capacity change from 0 to 512 [ 775.251417][T25722] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 775.260643][T25722] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 775.279739][T25722] System zones: 1-12 [ 775.302143][T25727] loop3: detected capacity change from 0 to 256 [ 775.353305][T25727] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 775.361333][T25727] FAT-fs (loop3): Filesystem has been set read-only [ 775.368134][T25727] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 775.376659][T25727] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 775.384861][T25727] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 775.588533][T25722] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.7345: corrupted in-inode xattr: e_value size too large [ 775.603221][T25722] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.7345: couldn't read orphan inode 15 (err -117) [ 775.616891][T25722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.734717][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.199177][T25742] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7352'. [ 776.222299][T25752] loop1: detected capacity change from 0 to 8192 [ 776.418357][T25764] loop3: detected capacity change from 0 to 512 [ 776.426806][T25764] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 776.447316][T25764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 776.455564][T25764] System zones: 1-12 [ 776.461766][T25764] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.7360: corrupted in-inode xattr: e_value size too large [ 776.476432][T25764] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7360: couldn't read orphan inode 15 (err -117) [ 776.489259][T25764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.517097][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.302996][T25777] syzkaller0: entered promiscuous mode [ 777.308776][T25777] syzkaller0: entered allmulticast mode [ 777.395510][T25786] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7368'. [ 778.073657][T25805] loop1: detected capacity change from 0 to 512 [ 778.087620][T25805] EXT4-fs: Ignoring removed bh option [ 778.108041][T25805] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 778.128357][T25805] EXT4-fs (loop1): 1 truncate cleaned up [ 778.134552][T25805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.182278][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.263606][T25814] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 778.293898][T25816] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7380'. [ 778.311570][T25817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7369'. [ 778.459807][T25821] syzkaller0: entered promiscuous mode [ 778.465608][T25821] syzkaller0: entered allmulticast mode [ 778.683768][T25829] loop4: detected capacity change from 0 to 128 [ 779.024230][T25831] syzkaller0: entered promiscuous mode [ 779.030101][T25831] syzkaller0: entered allmulticast mode [ 779.778494][T25839] loop2: detected capacity change from 0 to 512 [ 779.794759][T25839] EXT4-fs: Ignoring removed bh option [ 780.136919][T25842] loop1: detected capacity change from 0 to 512 [ 780.161804][T25842] EXT4-fs: Ignoring removed mblk_io_submit option [ 780.191833][T25842] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 780.338529][T25842] EXT4-fs (loop1): 1 truncate cleaned up [ 780.357505][T25839] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 780.361132][T25842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.401127][T25851] loop4: detected capacity change from 0 to 512 [ 780.401627][T25853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7393'. [ 780.417709][T25853] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7393'. [ 780.431797][T25839] EXT4-fs (loop2): 1 truncate cleaned up [ 780.441660][T25851] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 780.445075][T25839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.483938][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.493947][T25851] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 780.495118][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.527092][T25851] System zones: 1-12 [ 780.532055][T25851] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.7392: corrupted in-inode xattr: e_value size too large [ 780.555324][T25860] loop2: detected capacity change from 0 to 128 [ 780.566436][T25851] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7392: couldn't read orphan inode 15 (err -117) [ 780.567453][T25862] loop0: detected capacity change from 0 to 128 [ 780.589878][T25862] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 780.604469][T25851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.623819][T25860] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 780.662373][T25867] syzkaller0: entered promiscuous mode [ 780.668120][T25867] syzkaller0: entered allmulticast mode [ 780.675836][T21894] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 780.681737][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.709329][T21135] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 780.761893][T25872] syzkaller0: entered promiscuous mode [ 780.767478][T25872] syzkaller0: entered allmulticast mode [ 780.777674][T25876] loop2: detected capacity change from 0 to 1024 [ 780.784596][T25876] EXT4-fs: Ignoring removed mblk_io_submit option [ 780.801603][T25876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.842559][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.994182][T25890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7407'. [ 781.003424][T25890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7407'. [ 781.129549][T25900] loop2: detected capacity change from 0 to 128 [ 781.519795][T25907] loop0: detected capacity change from 0 to 256 [ 781.773817][T25912] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 781.782758][T25912] FAT-fs (loop0): Filesystem has been set read-only [ 781.835822][T25911] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 781.886836][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 781.920308][T25911] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 781.969801][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.001160][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.015451][T25914] syzkaller0: entered promiscuous mode [ 782.021797][T25914] syzkaller0: entered allmulticast mode [ 782.036872][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.078401][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.110447][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.120107][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.129364][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.138592][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.147684][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.156559][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.258351][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.267847][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.719703][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.751561][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.784314][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.818390][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.849470][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.858586][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.867354][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.876469][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.885185][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.894185][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.902811][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.911609][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.953135][T25907] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 782.973807][T25928] loop4: detected capacity change from 0 to 512 [ 783.008640][T25928] EXT4-fs: Ignoring removed mblk_io_submit option [ 783.074970][T25928] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 783.096120][T25936] syzkaller0: entered promiscuous mode [ 783.101884][T25936] syzkaller0: entered allmulticast mode [ 783.209158][T25928] EXT4-fs (loop4): 1 truncate cleaned up [ 783.240074][T25928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.272104][T25944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7427'. [ 783.389209][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.577627][ T29] audit: type=1400 audit(783.553:13488): avc: denied { mount } for pid=25952 comm="syz.4.7430" name="/" dev="ramfs" ino=86118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 783.733542][T25962] loop4: detected capacity change from 0 to 256 [ 783.836842][T25962] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 783.844671][T25962] FAT-fs (loop4): Filesystem has been set read-only [ 783.868703][T25962] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 784.040652][T25972] loop4: detected capacity change from 0 to 512 [ 784.092738][T25972] EXT4-fs: Ignoring removed mblk_io_submit option [ 784.132680][T25972] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 784.197024][T25972] EXT4-fs (loop4): 1 truncate cleaned up [ 784.203411][T25972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.297362][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.833515][T25999] tipc: Enabling of bearer rejected, failed to enable media [ 784.911766][T25999] syzkaller0: entered promiscuous mode [ 784.917657][T25999] syzkaller0: entered allmulticast mode [ 784.939647][T26002] loop2: detected capacity change from 0 to 256 [ 785.023043][T26002] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 785.031082][T26002] FAT-fs (loop2): Filesystem has been set read-only [ 785.042861][T26002] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 785.051100][T26002] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 785.052192][T26009] tipc: Enabling of bearer rejected, failed to enable media [ 785.073059][T26011] syzkaller0: entered promiscuous mode [ 785.078708][T26011] syzkaller0: entered allmulticast mode [ 785.089427][T26009] syzkaller0: entered promiscuous mode [ 785.092951][T26002] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 785.095423][T26009] syzkaller0: entered allmulticast mode [ 785.103397][T26002] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 785.120753][T26002] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 785.129099][T26002] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 785.137408][T26002] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 785.311400][T26025] syzkaller0: entered promiscuous mode [ 785.317161][T26025] syzkaller0: entered allmulticast mode [ 785.370425][T26036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7467'. [ 785.379383][T26036] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7467'. [ 785.424202][T26038] syzkaller0: entered promiscuous mode [ 785.429928][T26038] syzkaller0: entered allmulticast mode [ 785.561676][T26045] loop2: detected capacity change from 0 to 128 [ 785.909929][T26051] xt_TPROXY: Can be used only with -p tcp or -p udp [ 786.823581][T26061] syzkaller0: entered promiscuous mode [ 786.829335][T26061] syzkaller0: entered allmulticast mode [ 786.992871][T26069] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 787.099722][T26075] loop1: detected capacity change from 0 to 512 [ 787.131226][T26075] EXT4-fs: Ignoring removed mblk_io_submit option [ 787.149827][T26075] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 787.173488][T26075] EXT4-fs (loop1): 1 truncate cleaned up [ 787.190163][T26075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.288043][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.718493][T26116] loop0: detected capacity change from 0 to 512 [ 787.720291][T26115] loop3: detected capacity change from 0 to 256 [ 787.736259][T26116] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 787.772819][T26115] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 787.780871][T26115] FAT-fs (loop3): Filesystem has been set read-only [ 787.789397][T26115] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 787.797397][T26115] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 787.805466][T26115] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 787.814245][T26115] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 787.822738][T26115] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 787.831131][T26116] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 787.839959][T26116] System zones: 1-12 [ 787.845361][T26115] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 787.855229][T26115] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 787.865759][T26116] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.7497: corrupted in-inode xattr: e_value size too large [ 787.904575][T26116] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.7497: couldn't read orphan inode 15 (err -117) [ 787.927109][T26116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.985120][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.017881][T26129] loop3: detected capacity change from 0 to 256 [ 788.052162][T26129] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 788.060126][T26129] FAT-fs (loop3): Filesystem has been set read-only [ 788.067046][T26129] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 788.075472][T26129] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 788.088104][T26129] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 788.324806][T26148] xt_TPROXY: Can be used only with -p tcp or -p udp [ 788.651447][T26154] xt_TPROXY: Can be used only with -p tcp or -p udp [ 788.756602][T26160] tipc: Enabling of bearer rejected, failed to enable media [ 788.777582][T26160] syzkaller0: entered promiscuous mode [ 788.783244][T26160] syzkaller0: entered allmulticast mode [ 788.889131][T26165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7518'. [ 788.898341][T26165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7518'. [ 788.930767][T26169] loop4: detected capacity change from 0 to 256 [ 789.024189][T26171] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 789.032573][T26171] FAT-fs (loop4): Filesystem has been set read-only [ 789.045243][T26172] xt_TPROXY: Can be used only with -p tcp or -p udp [ 789.095060][T26175] loop2: detected capacity change from 0 to 512 [ 789.137460][T26175] EXT4-fs: Ignoring removed mblk_io_submit option [ 789.196043][T26175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 789.225963][T26171] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 789.263250][T26171] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 789.294024][T26171] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 789.324489][T26175] EXT4-fs (loop2): 1 truncate cleaned up [ 789.368045][T26175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.420997][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.491239][T26187] loop4: detected capacity change from 0 to 512 [ 789.506239][T26187] EXT4-fs: Ignoring removed mblk_io_submit option [ 789.594543][T26187] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 789.615984][T26187] EXT4-fs (loop4): 1 truncate cleaned up [ 789.625533][T26187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.901758][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.138100][T26208] loop1: detected capacity change from 0 to 256 [ 790.214694][T26208] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 790.222899][T26208] FAT-fs (loop1): Filesystem has been set read-only [ 790.230579][T26208] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 790.238985][T26208] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 790.261975][T26208] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 790.442857][T26233] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7544'. [ 791.834693][T26271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7548'. [ 792.040491][T26276] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7556'. [ 792.356312][T26288] loop2: detected capacity change from 0 to 512 [ 792.372032][T26288] EXT4-fs: Ignoring removed mblk_io_submit option [ 792.379124][T26288] EXT4-fs: inline encryption not supported [ 792.396913][T26288] EXT4-fs: test_dummy_encryption option not supported [ 792.515002][T26302] loop0: detected capacity change from 0 to 256 [ 792.545822][T26302] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 792.553814][T26302] FAT-fs (loop0): Filesystem has been set read-only [ 792.563067][T26302] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 792.571028][T26302] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 792.579226][T26302] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 793.135629][T26313] loop1: detected capacity change from 0 to 512 [ 793.143590][T26313] EXT4-fs: Ignoring removed mblk_io_submit option [ 793.153887][T26313] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 793.167738][T26313] EXT4-fs (loop1): 1 truncate cleaned up [ 793.182354][T26313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.200015][T26316] loop4: detected capacity change from 0 to 512 [ 793.207214][T26316] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 793.226494][T26316] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 793.240685][T26316] System zones: 1-12 [ 793.247021][T26316] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.7569: corrupted in-inode xattr: e_value size too large [ 793.261974][T26316] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7569: couldn't read orphan inode 15 (err -117) [ 793.266259][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.274905][T26316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.321266][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.347963][T26322] tipc: Enabling of bearer rejected, failed to enable media [ 793.378546][T26322] syzkaller0: entered promiscuous mode [ 793.384239][T26322] syzkaller0: entered allmulticast mode [ 794.455595][T26362] loop2: detected capacity change from 0 to 1024 [ 794.464949][T26362] EXT4-fs: Ignoring removed orlov option [ 794.482457][T26362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.483344][T26364] syzkaller0: entered promiscuous mode [ 794.500200][T26364] syzkaller0: entered allmulticast mode [ 794.716143][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.159865][T26384] loop4: detected capacity change from 0 to 1024 [ 795.408292][T26388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7590'. [ 795.475843][T26384] EXT4-fs: Ignoring removed orlov option [ 795.755389][T26381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7595'. [ 796.335878][T26402] xt_TPROXY: Can be used only with -p tcp or -p udp [ 797.027151][T26401] loop4: detected capacity change from 0 to 512 [ 797.037299][T26401] EXT4-fs: Ignoring removed mblk_io_submit option [ 797.044000][T26401] EXT4-fs: inline encryption not supported [ 797.050623][T26401] EXT4-fs: test_dummy_encryption option not supported [ 797.574167][T26404] loop3: detected capacity change from 0 to 512 [ 797.582617][T26404] EXT4-fs: Ignoring removed mblk_io_submit option [ 797.603927][T26404] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 797.751868][T26414] netlink: 'syz.4.7605': attribute type 13 has an invalid length. [ 797.768235][T26414] gretap0: refused to change device tx_queue_len [ 797.775134][T26414] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 797.791389][T26410] 9pnet_fd: Insufficient options for proto=fd [ 797.792405][T26404] EXT4-fs (loop3): 1 truncate cleaned up [ 797.942198][T26427] loop2: detected capacity change from 0 to 512 [ 797.952327][T26428] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7609'. [ 797.966206][T26427] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 798.031462][T26432] loop4: detected capacity change from 0 to 128 [ 798.262953][T26427] EXT4-fs (loop2): invalid journal inode [ 798.307929][T26427] EXT4-fs (loop2): can't get journal size [ 798.376517][T26427] EXT4-fs (loop2): 1 truncate cleaned up [ 799.610920][T26448] loop3: detected capacity change from 0 to 1024 [ 799.618609][T26448] EXT4-fs: Ignoring removed orlov option [ 799.856692][T21135] EXT4-fs unmount: 5 callbacks suppressed [ 799.856710][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.903681][T26448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 800.254102][T26455] tipc: Enabling of bearer rejected, failed to enable media [ 800.456517][T26455] syzkaller0: entered promiscuous mode [ 800.462194][T26455] syzkaller0: entered allmulticast mode [ 802.043729][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.201785][T26497] loop3: detected capacity change from 0 to 512 [ 802.233090][T26497] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 802.244616][T26493] syzkaller0: entered promiscuous mode [ 802.250338][T26493] syzkaller0: entered allmulticast mode [ 802.279028][T26497] EXT4-fs (loop3): invalid journal inode [ 802.285036][T26497] EXT4-fs (loop3): can't get journal size [ 802.313517][T26497] EXT4-fs (loop3): 1 truncate cleaned up [ 802.333486][T26497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.338385][T26503] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 803.435384][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.804849][T26535] loop1: detected capacity change from 0 to 512 [ 803.812580][T26535] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 803.837063][T26535] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 803.899552][T26540] xt_TPROXY: Can be used only with -p tcp or -p udp [ 803.911294][T26538] loop2: detected capacity change from 0 to 512 [ 803.923358][T26541] loop0: detected capacity change from 0 to 256 [ 803.930424][T26535] System zones: 1-12 [ 803.935723][T26538] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 803.959640][T26535] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.7648: corrupted in-inode xattr: e_value size too large [ 803.991740][T26538] EXT4-fs (loop2): invalid journal inode [ 804.004237][T26541] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 804.012276][T26541] FAT-fs (loop0): Filesystem has been set read-only [ 804.019986][T26538] EXT4-fs (loop2): can't get journal size [ 804.026429][T26535] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7648: couldn't read orphan inode 15 (err -117) [ 804.040476][T26538] EXT4-fs (loop2): 1 truncate cleaned up [ 804.047553][T26535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.061010][T26541] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 804.070071][T26538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.082732][T26541] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 804.109241][T26541] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 804.286417][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.317905][T26547] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7652'. [ 804.439113][T26553] loop3: detected capacity change from 0 to 512 [ 804.447805][T26554] loop0: detected capacity change from 0 to 512 [ 804.456988][T26554] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 804.467698][T26553] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 804.634867][T26554] EXT4-fs (loop0): invalid journal inode [ 804.643488][T26553] EXT4-fs (loop3): invalid journal inode [ 804.945165][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.966811][T26553] EXT4-fs (loop3): can't get journal size [ 804.973255][T26554] EXT4-fs (loop0): can't get journal size [ 804.991861][T26554] EXT4-fs (loop0): 1 truncate cleaned up [ 804.997841][T26553] EXT4-fs (loop3): 1 truncate cleaned up [ 805.008671][T26553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.038574][T26554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.116013][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.154667][ T29] audit: type=1326 audit(807.133:13489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26582 comm="syz.0.7663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64714f6c9 code=0x7ffc0000 [ 807.177950][ T29] audit: type=1326 audit(807.133:13490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26582 comm="syz.0.7663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64714f6c9 code=0x7ffc0000 [ 807.804884][T26609] loop0: detected capacity change from 0 to 512 [ 807.812661][T26611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2154 sclass=netlink_route_socket pid=26611 comm=syz.4.7673 [ 807.828778][T26609] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 807.847572][T26609] EXT4-fs (loop0): invalid journal inode [ 807.859957][T26609] EXT4-fs (loop0): can't get journal size [ 807.970225][T26609] EXT4-fs (loop0): 1 truncate cleaned up [ 807.976441][T26609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.990044][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.226186][T26626] xt_TPROXY: Can be used only with -p tcp or -p udp [ 810.026710][T26630] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7678'. [ 810.149243][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.186401][ T29] audit: type=1326 audit(810.143:13491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.3.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18adabf6c9 code=0x7ffc0000 [ 810.209872][ T29] audit: type=1326 audit(810.143:13492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.3.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18adabf6c9 code=0x7ffc0000 [ 810.233093][ T29] audit: type=1326 audit(810.143:13493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.3.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18adabf6c9 code=0x7ffc0000 [ 810.256674][ T29] audit: type=1326 audit(810.143:13494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.3.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18adabf6c9 code=0x7ffc0000 [ 810.280495][ T29] audit: type=1326 audit(810.143:13495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.3.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f18adabf6c9 code=0x7ffc0000 [ 810.304186][ T29] audit: type=1326 audit(810.143:13496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.3.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18adabf6c9 code=0x7ffc0000 [ 810.328044][ T29] audit: type=1326 audit(810.143:13497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.3.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f18adabf6c9 code=0x7ffc0000 [ 810.351550][ T29] audit: type=1326 audit(810.143:13498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.3.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18adabf6c9 code=0x7ffc0000 [ 810.412312][T26620] hub 8-0:1.0: USB hub found [ 810.417174][T26620] hub 8-0:1.0: 8 ports detected [ 810.749524][T26650] netlink: 'syz.0.7680': attribute type 27 has an invalid length. [ 811.363319][T26650] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.370641][T26650] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.606691][T26659] xt_TPROXY: Can be used only with -p tcp or -p udp [ 812.062138][T26650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.075340][T26650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.093672][T26650] veth0_vlan: left allmulticast mode [ 812.140613][T26665] loop0: detected capacity change from 0 to 512 [ 812.149729][T26665] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 812.164587][T26665] EXT4-fs (loop0): invalid journal inode [ 812.170667][T26665] EXT4-fs (loop0): can't get journal size [ 812.177387][T26665] EXT4-fs (loop0): 1 truncate cleaned up [ 812.184218][T26665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.201036][ T5159] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.210367][ T5159] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.219783][ T5159] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.232170][ T5159] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.346854][T26674] loop2: detected capacity change from 0 to 512 [ 812.354767][T26674] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 812.382293][T26674] EXT4-fs (loop2): invalid journal inode [ 812.388470][T26674] EXT4-fs (loop2): can't get journal size [ 812.407373][T26674] EXT4-fs (loop2): 1 truncate cleaned up [ 812.444506][T26678] loop4: detected capacity change from 0 to 1024 [ 812.452020][T26678] EXT4-fs: Ignoring removed orlov option [ 812.479044][T26674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.537703][T26678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.282177][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.560450][T26694] loop0: detected capacity change from 0 to 512 [ 813.964349][T26695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 814.027594][T26694] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 814.045777][T26694] EXT4-fs (loop0): invalid journal inode [ 814.058359][T26694] EXT4-fs (loop0): can't get journal size [ 814.081794][T26694] EXT4-fs (loop0): 1 truncate cleaned up [ 814.106903][T26694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.356072][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.905954][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.314111][T26708] loop0: detected capacity change from 0 to 1024 [ 816.383056][T26708] EXT4-fs: Ignoring removed orlov option [ 816.498882][T26708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.518579][T26698] atomic_op ffff88810fe37d28 conn xmit_atomic 0000000000000000 [ 816.661668][T26719] xt_TPROXY: Can be used only with -p tcp or -p udp [ 817.411308][T26725] loop3: detected capacity change from 0 to 512 [ 817.420797][T26725] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 817.455275][T26725] EXT4-fs (loop3): invalid journal inode [ 817.464591][T26725] EXT4-fs (loop3): can't get journal size [ 817.473453][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.490200][T26725] EXT4-fs (loop3): 1 truncate cleaned up [ 817.507961][T26725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 817.641767][T26731] loop1: detected capacity change from 0 to 512 [ 817.668899][T26731] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 817.688299][T26731] EXT4-fs (loop1): invalid journal inode [ 817.699734][T26731] EXT4-fs (loop1): can't get journal size [ 817.885028][T26731] EXT4-fs (loop1): 1 truncate cleaned up [ 817.963481][T26731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 817.996476][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.686713][T26746] syzkaller0: entered promiscuous mode [ 818.692480][T26746] syzkaller0: entered allmulticast mode [ 818.747360][T26750] loop4: detected capacity change from 0 to 1024 [ 818.749249][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.755849][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.770392][T26750] EXT4-fs: Ignoring removed orlov option [ 818.789735][T26750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.871191][T26757] netlink: 'syz.3.7717': attribute type 27 has an invalid length. [ 819.522126][T26757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.549606][T26757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.566173][T26757] veth0_vlan: left allmulticast mode [ 819.576842][T26757] macsec0: left promiscuous mode [ 819.605203][ T5180] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.622703][ T5180] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.645258][ T5180] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.698282][ T5180] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.774163][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.809766][T26788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7722'. [ 819.864524][T26796] loop4: detected capacity change from 0 to 512 [ 819.872645][T26796] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 819.992797][T26802] loop1: detected capacity change from 0 to 1024 [ 820.000569][T26802] EXT4-fs: Ignoring removed orlov option [ 820.113138][T26802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.224718][T26796] EXT4-fs (loop4): invalid journal inode [ 820.286602][T26796] EXT4-fs (loop4): can't get journal size [ 820.472584][T26796] EXT4-fs (loop4): 1 truncate cleaned up [ 820.571650][T26796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.421803][T26819] loop2: detected capacity change from 0 to 512 [ 821.657033][T26819] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 821.671465][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.688898][T26819] EXT4-fs (loop2): invalid journal inode [ 821.694684][T26819] EXT4-fs (loop2): can't get journal size [ 822.304219][T26819] EXT4-fs (loop2): 1 truncate cleaned up [ 822.317114][T26826] xt_hashlimit: max too large, truncated to 1048576 [ 822.326781][T26819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.704204][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.409102][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.187663][T26860] atomic_op ffff88810fe34d28 conn xmit_atomic 0000000000000000 [ 825.805772][T26880] loop0: detected capacity change from 0 to 256 [ 825.949710][T26894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7749'. [ 827.362365][T26912] atomic_op ffff8881135e9128 conn xmit_atomic 0000000000000000 [ 827.404444][T26914] loop3: detected capacity change from 0 to 512 [ 827.432612][T26914] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 827.480211][T26914] EXT4-fs (loop3): invalid journal inode [ 827.496829][T26914] EXT4-fs (loop3): can't get journal size [ 827.505285][T26914] EXT4-fs (loop3): 1 truncate cleaned up [ 827.511574][T26914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.975179][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.177990][T26945] loop3: detected capacity change from 0 to 1024 [ 829.185727][T26945] EXT4-fs: Ignoring removed orlov option [ 829.248796][T26945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 830.024284][T26950] loop1: detected capacity change from 0 to 512 [ 830.172316][T26956] tipc: Enabled bearer , priority 0 [ 830.209406][T26956] tipc: Resetting bearer [ 830.239433][T26955] tipc: Disabling bearer [ 830.586390][T26950] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 830.606610][T26950] EXT4-fs (loop1): invalid journal inode [ 830.635038][T26950] EXT4-fs (loop1): can't get journal size [ 830.655810][T26950] EXT4-fs (loop1): 1 truncate cleaned up [ 830.668634][T26950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 830.739729][T26961] loop2: detected capacity change from 0 to 512 [ 830.888236][T26961] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 830.896768][T26961] EXT4-fs (loop2): invalid journal inode [ 830.902495][T26961] EXT4-fs (loop2): can't get journal size [ 831.422092][T26961] EXT4-fs (loop2): 1 truncate cleaned up [ 831.432515][T26961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.475218][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.485220][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.843010][T26979] loop0: detected capacity change from 0 to 512 [ 832.371092][T26979] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 832.389837][T26979] EXT4-fs (loop0): invalid journal inode [ 832.401792][T26979] EXT4-fs (loop0): can't get journal size [ 832.418514][T26979] EXT4-fs (loop0): 1 truncate cleaned up [ 832.426920][T26979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 832.564185][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.267227][T26995] loop1: detected capacity change from 0 to 1024 [ 833.291038][T26995] EXT4-fs: Ignoring removed orlov option [ 833.339830][T26995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.433565][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.451975][T27000] loop4: detected capacity change from 0 to 512 [ 833.476526][T27000] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 833.485447][T27000] EXT4-fs (loop4): invalid journal inode [ 833.491689][T27000] EXT4-fs (loop4): can't get journal size [ 833.505813][T27000] EXT4-fs (loop4): 1 truncate cleaned up [ 833.631291][T27010] hub 8-0:1.0: USB hub found [ 833.636160][T27010] hub 8-0:1.0: 8 ports detected [ 833.664318][T27010] loop2: detected capacity change from 0 to 1024 [ 833.673549][T27010] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 833.683381][T27010] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 833.693101][T27010] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 833.704364][T27010] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: inode #5: comm syz.2.7785: unexpected bad inode w/o EXT4_IGET_BAD [ 833.718035][T27010] EXT4-fs (loop2): no journal found [ 833.723362][T27010] EXT4-fs (loop2): can't get journal size [ 833.739719][T27010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 833.779084][T27007] syzkaller0: entered promiscuous mode [ 833.784761][T27007] syzkaller0: entered allmulticast mode [ 833.815815][T27000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 835.636978][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.692993][T23204] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.145440][T27041] loop0: detected capacity change from 0 to 256 [ 836.214437][T27043] loop0: detected capacity change from 0 to 512 [ 836.238371][T27043] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 836.264473][T27043] EXT4-fs (loop0): invalid journal inode [ 836.284747][T27043] EXT4-fs (loop0): can't get journal size [ 836.322597][T21135] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.352174][T27043] EXT4-fs (loop0): 1 truncate cleaned up [ 836.373552][T27043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 837.293865][T27050] syzkaller0: entered promiscuous mode [ 837.299535][T27050] syzkaller0: entered allmulticast mode [ 837.353682][T21894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.404643][T27060] syzkaller0: entered promiscuous mode [ 837.410615][T27060] syzkaller0: entered allmulticast mode [ 837.450115][T27064] loop3: detected capacity change from 0 to 512 [ 837.459527][T27064] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 837.483344][T27064] EXT4-fs (loop3): invalid journal inode [ 837.502786][T27064] EXT4-fs (loop3): can't get journal size [ 837.519719][T27064] EXT4-fs (loop3): 1 truncate cleaned up [ 837.530267][T27064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.501942][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.940960][T27092] atomic_op ffff88812529e928 conn xmit_atomic 0000000000000000 [ 840.008805][T27097] loop3: detected capacity change from 0 to 512 [ 840.035469][T27097] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 840.074672][T27097] EXT4-fs (loop3): invalid journal inode [ 840.094733][T27097] EXT4-fs (loop3): can't get journal size [ 840.120078][T27097] EXT4-fs (loop3): 1 truncate cleaned up [ 840.152150][T27100] loop2: detected capacity change from 0 to 512 [ 840.162387][T27097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 840.183681][T27100] EXT4-fs: Ignoring removed mblk_io_submit option [ 840.190347][T27100] EXT4-fs: inline encryption not supported [ 840.201766][T27100] EXT4-fs: test_dummy_encryption option not supported [ 840.351797][T27110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2154 sclass=netlink_route_socket pid=27110 comm=syz.0.7814 [ 841.250980][T27120] loop4: detected capacity change from 0 to 1024 [ 841.280364][T27120] EXT4-fs: Ignoring removed orlov option [ 841.322249][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.343677][T27120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.594086][T27129] ================================================================== [ 841.602396][T27129] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 841.611829][T27129] [ 841.614168][T27129] write to 0xffff8881006235c0 of 4 bytes by task 27120 on cpu 0: [ 841.621986][T27129] writeback_single_inode+0x150/0x3f0 [ 841.627395][T27129] sync_inode_metadata+0x5b/0x90 [ 841.632367][T27129] generic_buffers_fsync_noflush+0xd9/0x120 [ 841.638549][T27129] ext4_sync_file+0x1ab/0x690 [ 841.643249][T27129] vfs_fsync_range+0x10d/0x130 [ 841.648048][T27129] ext4_buffered_write_iter+0x34f/0x3c0 [ 841.653736][T27129] ext4_file_write_iter+0x387/0xf60 [ 841.658948][T27129] iter_file_splice_write+0x666/0xa60 [ 841.664520][T27129] direct_splice_actor+0x156/0x2a0 [ 841.669831][T27129] splice_direct_to_actor+0x312/0x680 [ 841.675245][T27129] do_splice_direct+0xda/0x150 [ 841.680300][T27129] do_sendfile+0x380/0x650 [ 841.684756][T27129] __x64_sys_sendfile64+0x105/0x150 [ 841.690078][T27129] x64_sys_call+0x2bb4/0x3000 [ 841.695146][T27129] do_syscall_64+0xd2/0x200 [ 841.700142][T27129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.706412][T27129] [ 841.708836][T27129] read to 0xffff8881006235c0 of 4 bytes by task 27129 on cpu 1: [ 841.716598][T27129] generic_buffers_fsync_noflush+0x80/0x120 [ 841.722531][T27129] ext4_sync_file+0x1ab/0x690 [ 841.727267][T27129] vfs_fsync_range+0x10d/0x130 [ 841.732074][T27129] ext4_buffered_write_iter+0x34f/0x3c0 [ 841.737697][T27129] ext4_file_write_iter+0x387/0xf60 [ 841.742938][T27129] iter_file_splice_write+0x666/0xa60 [ 841.748334][T27129] direct_splice_actor+0x156/0x2a0 [ 841.753497][T27129] splice_direct_to_actor+0x312/0x680 [ 841.759069][T27129] do_splice_direct+0xda/0x150 [ 841.763944][T27129] do_sendfile+0x380/0x650 [ 841.768735][T27129] __x64_sys_sendfile64+0x105/0x150 [ 841.774061][T27129] x64_sys_call+0x2bb4/0x3000 [ 841.778769][T27129] do_syscall_64+0xd2/0x200 [ 841.783292][T27129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.789208][T27129] [ 841.791557][T27129] value changed: 0x00000070 -> 0x00000002 [ 841.797417][T27129] [ 841.799763][T27129] Reported by Kernel Concurrency Sanitizer on: [ 841.806025][T27129] CPU: 1 UID: 0 PID: 27129 Comm: syz.4.7815 Not tainted syzkaller #0 PREEMPT(voluntary) [ 841.815876][T27129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 841.826231][T27129] ================================================================== [ 842.836185][T21480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.