last executing test programs: 44.208877725s ago: executing program 1 (id=324): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@deltaction={0x24, 0x31, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4051}, 0x894) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000003"], 0x78}}, 0x0) 43.95322258s ago: executing program 1 (id=334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'ife\x00'}, {0x20, 'ife\x00'}], 0xa, "0880190d63a7551dbd1fd600e3843315cebeeb7a354154d3f475e199b20db613dc4bb204b7bbc27aee5bac990ec0f48848502bf00d9f724d6e9f4d103f19ef13a66d80252c22d495676f2bd883c6913fb954e635cd5c4ff9767e21d365567749d0bc59034b343af0c1549c0c73653ed30f6d9cdbfb8eca2e4f7c6e1b80a6ffccfeff7bef724eb10debc4c086d644fe72e6d85e1a5729b37b69ff54d0e218cb2cbc0ca9f8d92807d55927407ee144d61177b2b5b8c78bb25966de3206b22da9fa6dafe2587b288b8558d894ad655021e0240ab771ac98dac3547b9f073b890ec8023c197f21683b19afec05e4a186fb584d7844c3ca009ed1765ef38bfdb5d6ab7f9e045d6f6bb914220955f38f55ac672d90d48e0c03cf5d93a3e4aaf3ba186c87b7641ef729fec7f0e37059b9f519ca69da503763105604baa49dc34c5b649dc0d13157eea96f354d122cecb9ab3d81c35807ede6b41214bca52c7500cdc8dc19ee22bb616fd8ece86ef208feb461a18feb8051766d57dc174349372bb54096293da794249902dc49908f9e5b824e945dcc14bd75f236d2f1225636fb6cf66d278c82dade45d0ab66c6327bbec452079b4a5cc2d506ec399bd2a2862df7193638ca31163cea70b84ec8ecdfe9642336b1894d5ea75751694db8443181a6218a226146f1839db61feae7a632a0747b4bb590d0392cf5abc409ad7111347e435445f88f38164560f59d0d5d42d159beda45ef56d0e3f3fa5c0c7f3f1bf7e859639a97a100512196fda5895e4d72e7e7ef89f7664f963c910f632b3f5fda37ac08b04751a552e4b2024e09ef8330433811932d2fde7023d228206c267177b7504601dc666b943bd2d03392a50ff934e3979b056858fcb542cd62ca08a416b4c83dec42ef370d39e84637c4dd58f71f3e88e6552eb43397e6717c97a1cfb84a95f502ddf141e049879e411cfbdafd8dacafc10ec14f372d3e4629879a97d2350e23c4f54da7f610f6ae8d37df15ec6cca28a4d4a52da40719c035bde46d85e93022352d79c0ac58643d2d0e3e1a7580180863807b9e1a36191f1e3eb7894a6ca038575e89aa6134cb04ec4a2b53550b8fbb07fab157c3c89fc7d4cf13106f7a542b892848d1f86f785334a12da46c19c97e6e52094d992be5ea78449199d681afe92ca37787b7d15540fb690fe1e6d68ffa80f50a1ba5f1b528614295ec3806efb8b0978b9f492a38f5327660b5c7231e7ed6d56b726e64996573183d99ca11a06b4fff236081fa7d32b0d323c1992f7f32183c795248633ea3ead5872ab35bbdfe5918ac1d5ea3cc3383a8835a7bf6cb584e0acbd8f5f35d44446e92fba7c669c69de4c922bf0f1a26b41b8f994c33d69e0e4446c4154eed0ef2d76e0acb2c02f4654b69cac6a7e36350c55c3fefd47d8eee4aeaeeb3e32a5560844439876bed4094e55b59e3eae17fe650ba764e9d743b82b4215eb04e6d66d78ed1594b6e41c7853810ee423481ed90c0affd7493b006b4d786ef294ad8c60b79d2ae4b8da3ebdfb5438ceb4f4bcfd21f76320d51cc657afcdca47d62955fed6c7a445f292ad4f3102d216006e65235bf846646f6e034a707686e92448644747191589e2186b91677d6bc9404613eefd165b081b2012a62b54eb99c1209e15eef32fdf94638307969e1cc37fa668cacd958b86deb6d512c89f61d4030cceca0a91afb12cb3ccd35b4756013c8c391d7e97e8c2f8b5d04cb063cc6d802dc7df0bdc0a54e1571c3e0fd7c53fefd9424d2cf2f662a09b4e94994009d61ac1860faf195148a84c9806ce08cca383a816c725b5e42c6341baf4f5635928722300b0781e88cab5cc03930d05c176fa7fcfb9eb6a4bdc51597e69c2b65b5f65cf4b7ab742e35e6a5b5e6332e9833488e8806d44994472f6395066c5b545ec2046f690e8aa8c19fae8a24c403a73ed8486681aa18c0d04feee431cea468f0eaffcebb2249cff3e09a216a5cefd960de0b97bbe6a116fd71679ff50b1fc56fe879efda82806b3b31309c2dceda3d058af253054a6ed018d38940b925848487bded23c7ce41c691be5ca41ee9b72840477925fe62005fe11e304a12a2a027e3c4ad2d36a91483489dd0f6ac04ee66bdc056348d51147e5ad5ce4889ff5a50c4b73ca07efa5afae2c2e8070d01f6b15e402de09c097e4c100a55dd178a37b882bd967ec5db055706082ffab9931979f4a2a249e527971b35bf82face7d779471665cb6eed20dc16fe9c70afd3106f52c5cd9bf447c07b41d096433a4311e1c4b1673e3e88b19821cb31da42aecc8b53748a48456bac801f75e13ea0cd9e562578d45ae3e107b710b3f91b66a6adf92aa246bed5f7cd147438691a1d642e3df02abb6d1a335b850618b15537faa4fabb0bf3348c2f9f9b2798dfe96162aaa7eba6820524172c5b23042fd5d33c952a5e58ea440598752a80c889f914b265126bb84cdbe9a70f459fd02a5e9608a795dbbe826eb1c080ec404fa9ffb596252a703d0ca37937d831178a00efec1f3e12688be1ec84d58521267ce2f3a3496f813f18f0c1a814523795edc472313ccff97cc4a812755af599186916534c5c0d0df52f67e203aa2e73d694b3145dbccf9ca936ffa8188be0173ec789db0549132a357d9743aba36111c3ea2d3e49f85bde8548697e05643e95b4851ceccf481215b3c5a79af8bd7a354ac531f4d1bdd35fcd1ff89404cf4b4383721d7785395cf948806192398d3aa062de83c78d404da16279033bda6ecc9007fc5211cc0dbfead6db52e9d564da2ba512718225a1ad1e95602cea2fc5a3296021e262f2cd832438fe55c6062a3564689a7aa0aee3bffb204c61c89a43b86f2ca64a29af57f50e84534d8016d9d734af53596ccc933a05832f623d082014e9ce401e1c723457769e475e2e5978f1fe4d1c4724e23ebbf385a6bb50b7d82a504988f2659c5b3f4e35c7978b7d16a33a12e57881238b3278da0a82b0c714e2142123793ba45351dbe82cf10797be3b8e435d480abb24a4290e385ba1143388322269480eb6fd73e3fa6ea055dbb5b9af064784b87600dfa16fddfa35fd622f2d9142f4eeecb9272a7632eb6781259b62422fe2bd4a9598bfcf062c65d9f9f88c710921ce1aaf221252c9a741b48c06fe6b39c6a4b08889036f5123984581f4e9919651124fc3f7c29769cb10db378cb3dd594d591990c6bdc68fbd2bbdc34ea9acd1b48814cd11a025eba98bfbe5d8ce87ddfb82145442a00a8787d9bfa664fecd8f3cbadf774b15ac05349644248b47edee25f159176eb5df789b53b6dea382c6c7056be7475117abc28294f7b71dba2073d7986e43f10b0cb836595c0e02e379cce52e1758b5b2a5d6be0be89f55f99e3213654ae265ca57da0985ed2cef620b3650fb442aa5e341ff09f3b5766b2e1fe6eb793b86f6e0b8a27125b0d14ed2182c9ad114730ed4c0d7cffdd01be5f5c24457429bbc55d05165daf3f3614cda29cc0af8066dcfce2d5659d8094b1bbc669e476bb6767db76abc47bcb5f321cb83781695fcc2ae4cd906fc1c45cfb73fbed39b22c02313c4e2900dcfd0167b1025ead0c282669a0f3e3811e6a8f863b18820a931d8527e7429392783fab875d0cad9ffc79fc44f198b5d616d4e89d21a114f01625c7c85d085d8ff546be74deb69d05118bedc3b97a4254e918dfc330c1d4177a44fa74281541d8b1cd8b0264a607a9d86e05342756e4a484d232332a246d339a1b1515e48e21813b63c0d791449ac4e8599a2690401b5f862fedf1b2c7e525b333a002e2b99fd4fc1cbdfc6b4a7124c77c47ac52cb8502dfe3c540b61b780adce5c56ebd8df53888702c23007294b700b95fd983dfd427d72b22eef802771d6c61cba86ce0688f76e0b917d3e25aeacfe692a5a78161b0223627fa2280308309c96dc740e1ac34ce98e74ed4872a3b277dbf74d89f7cdf78ef57b88bd3018a81b682b1659156a9dfbe0a174d4caa9eec3d0fa74c14dd08aec0ff1a6e11a818eb04018d7ae7aaef5b6ef337363a072515126444f2d4a40e9ca8be8ab2b44b7296ab9858a021761410c64cc95dfedc1c98c715147787d0da976f2b17eae186bfcb1eb33035d0cf623f7f398220031838e1928fc770a5e16be67eab74557026f9d979d0858388cad09bf319251d1f373be428a9b17c9fe1c924778e989e7288eaabacbc575c1e4eea979fc3f47853eacbec517120991bf9d6f711658bbce393ca0caee0bb7e00806c85a9f9180fab6786d2af0b2add8cd107cbcd466bf9d250117d875501b131a9740b2f4a141ca44ade9450fa5a144d5dac12d05746aaf9cd9f65e3421c79effc2c1eae04245a2893b00be8927f943bf6f32a736fc6deb730215a53a5eb1ef8d858d40df21bd2a6931277b82fe65a0b566cb3b76a67332474b9521744a0921bd4810c9e106f8d1161579bbd14384c83a3947fa04c88e2e008703a1eeefc570a19481943f7882398808238c862a4c9eaa6e536281c5b2334f42f5ea85aedcfce34d7b1a5f38a2bf2763885c73d8900c5dcb4e87ab64ae7f136b27fde9cd1c7be779396af7af23ea51b6159b1e0e4ad41c2d3bdcad3ee19e58785e6026755afbb9d3439b8e9f7d057a87b24a7d471fc9a60069c739bace0f4d11bba73b1eee37d61ce2488cab1b66af6188ec433a7cd36348957d16f013094af26c459bfb7e80986e61c3ef458b93eb1cd59c5bcc6fc4d16d457409dfd27d2460012d791ff60fccb6dd4e38a43a838a2ff07edf94c6c7fa9fa8efb08149c03299cdce47f6fc7074025059a063eef5e5f9b37118c1d3f0ffa4c7164579c438f9ce30e1d6f7acaa32d825389b89ad48c7ff4ae4ac53b103413c709195e669accb06b873a55dd8b73d901532a6053962b5a0a42c3ec4cc173ddd1806f30a53f76650de41d1fddab76daed7a35441448c30ecf7a95f3135998980f02c2c765d4c465e67f0ce115b47ca30153f74cf4f2311e681776c9d8fb902683b2e52d3e67f75182f5f42d57f9c66afbfab699b9cc172fb64363242e8dc4468545b22168243e55a2c44a1c90c51c20cb291bc5e8541a609c78357a58d3e1df7ef882cab03c4c09be7c3a803bc67cba9c7e5059aca98e5919af1d016e8b3104963b1a4f8315f9491f865ceeaa7e16f3b52ad91024b9e6e1beecd63e93bd25b352f65de1b138bcfec57e7a2d050c3c3b18fb7588b1c5d73fa7cba09d03b5c19758f5c250965204aed9485335e333e98de7d5fb35310c2ddf2723b620b0e9e2e08db9bd9193770ae4ac2287647f6896f5ea7090dfbeb6a0ce00caf8566c604e0b598ec6be27f5513449ed68924b1e72e0b153fa4aebfd55479eafe2b1aa005a62da2a6f527029e7617c10726499a62f67d729a56f5831de2fd749327e2d1dd67a5376b10080ab03caaf95e035ecec0557dd35c0a5600e3f9faf53a52ecad188efde95fd0adecedb9f469ee08b291370161936e1799a08e4c82d6551ab7cd52782571019fc39a17aaa138c600ce4ebecff281e05cc05ee0c11d7e4ba04bbe0b29f4b869ada40b9680da617ac8d279c440cd091eab59af0e98a578a3b402953231192599972af840bd7517e5c9ffd00802e6b3b8006f8cef404b6c741a0a263dde41be3dd10d13436c9bb0ca325e8b72908e628bffc81f2d7a61cbdaea4a48e62e3664ec72d234d5284dc1e3972200f8ed15ee3466192b37446e293b3a4a37f323ae9cbb160e4b7aec0ced904bf3d1eda5cb6058ac3e89b83f1a340fdbe260c8301e747594bafcf96eb13f46910"}, 0x1015) 43.863565115s ago: executing program 1 (id=337): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c) 43.863150375s ago: executing program 1 (id=338): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) r0 = syz_io_uring_setup(0x1a0, &(0x7f0000000380)={0x0, 0x60d0, 0x1, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0) 43.737033203s ago: executing program 1 (id=341): setresuid(0xee01, 0xee01, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x4040011) 43.486344947s ago: executing program 1 (id=347): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 43.464541269s ago: executing program 32 (id=347): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 32.039218819s ago: executing program 2 (id=582): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xf, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000380)=""/91, &(0x7f0000000280)=0x5b) 31.941342165s ago: executing program 2 (id=586): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x34) lseek(r0, 0xfffffffffffffffc, 0x2) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x42000020) getdents(r0, 0x0, 0x54) 31.784009485s ago: executing program 2 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 31.616092174s ago: executing program 2 (id=594): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 31.480845042s ago: executing program 2 (id=595): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r0, 0x0, 0xa20, 0x3) creat(&(0x7f0000000000)='./file1\x00', 0x14c) 31.273472164s ago: executing program 2 (id=597): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) execve(0x0, 0x0, 0x0) 31.248415156s ago: executing program 33 (id=597): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) execve(0x0, 0x0, 0x0) 23.497136531s ago: executing program 5 (id=716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 23.454650333s ago: executing program 5 (id=718): ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x20, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x7ff}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@user_xattr}, {@nolazytime}, {@quota}]}, 0x3, 0x43d, &(0x7f0000002200)="$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") r0 = open(&(0x7f0000000000)='./file2\x00', 0x147842, 0x1ef) preadv2(r0, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) shutdown(0xffffffffffffffff, 0x0) 23.217673107s ago: executing program 5 (id=725): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0}]) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d52f90b9b6e0987f70e06d038e7ff7fc6e5539b3248298b089b0708346d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006) 22.914658575s ago: executing program 5 (id=727): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 22.774796303s ago: executing program 5 (id=729): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000001040)={0x5fd, 0x9, 0xfffffffc, 0x80000000, 0xe, "f9521c4c568997cca34cb287c77e3ea550efde"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x57, 0x6, 0xfffe, {0x5, 0x1}, {0x7f, 0x2}, @const={0xffff, {0x0, 0x81}}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 22.448216833s ago: executing program 5 (id=740): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000000000000) 22.447940352s ago: executing program 34 (id=740): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000000000000) 19.095557269s ago: executing program 3 (id=794): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0xac) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 18.956985447s ago: executing program 3 (id=799): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) dup3(r0, r1, 0x0) 18.901422921s ago: executing program 3 (id=800): r0 = syz_io_uring_setup(0x304, &(0x7f0000000300)={0x0, 0x8006d85, 0x400, 0x2, 0x200118}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r3, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000006c0)={0xffffffffffeffff7, r0, 0x26, {0x27fffffffffffff, 0x4}, 0x7}, 0x1) 18.867400033s ago: executing program 3 (id=802): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, 0x28e3291, 0x0) 18.850740804s ago: executing program 3 (id=803): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 18.627317607s ago: executing program 3 (id=810): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 18.595743798s ago: executing program 35 (id=810): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 8.794975594s ago: executing program 8 (id=1040): ftruncate(0xffffffffffffffff, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000000000050000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x8, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x292, @time={0x65757100, 0xffffff}, 0x3, {0x1, 0xfc}, 0x0, 0x0, 0x5}) 8.745284427s ago: executing program 8 (id=1041): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x10) unshare(0x2c020400) sync_file_range(r0, 0x889, 0x8, 0x2) 8.672306701s ago: executing program 8 (id=1043): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 8.543249309s ago: executing program 8 (id=1045): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 8.452108384s ago: executing program 8 (id=1047): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r1, r1, 0x0, 0x800000009) 8.169250661s ago: executing program 8 (id=1055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4040) 8.16905321s ago: executing program 36 (id=1055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4040) 2.156479543s ago: executing program 9 (id=1157): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x52, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@srh={0x0, 0x0, 0xc9}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.846613342s ago: executing program 9 (id=1164): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 1.213193369s ago: executing program 6 (id=1189): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x4) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.170836081s ago: executing program 4 (id=1192): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0xfffffffc) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe5d8) 1.074548037s ago: executing program 6 (id=1195): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x19) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x7f) 1.074076447s ago: executing program 4 (id=1196): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x7f, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x26}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x44, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x10000, 0x0, 0x2}, {}, {}, {}, {0x0, 0x9}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1.009497231s ago: executing program 0 (id=1197): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x40000104}, 0x4000841) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 1.008844741s ago: executing program 6 (id=1199): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x80000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 1.008483081s ago: executing program 4 (id=1200): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x6, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088a84803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.001079621s ago: executing program 9 (id=1201): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f00000003c0), 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80602, 0x148) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x0) fallocate(r1, 0x20, 0x4000, 0x8000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 891.533907ms ago: executing program 0 (id=1203): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) dup3(r0, r1, 0x0) 891.029228ms ago: executing program 4 (id=1204): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r3 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0xfffffd49, 0x20044080, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 825.927132ms ago: executing program 0 (id=1205): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1000000, r3}, 0x10) 768.656615ms ago: executing program 9 (id=1207): socket(0x5, 0x5, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x6, 0x0, 0xfffff034}, {0x48, 0xfd}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x3, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x10) 765.837755ms ago: executing program 4 (id=1208): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x4042, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4139, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x8c7751b1d4986a52}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_format(r0, &(0x7f0000000000)='0\x00', 0x2) 741.676407ms ago: executing program 0 (id=1209): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 722.601718ms ago: executing program 7 (id=1210): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="600000001000ff"], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000340)=0x1000, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40002020, 0x0) 609.137955ms ago: executing program 0 (id=1211): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x145802, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) write$UHID_INPUT(r1, &(0x7f0000001540)={0x8, {"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", 0x1000}}, 0x1006) write$cgroup_devices(r0, &(0x7f0000000880)={'b', ' *:* ', 'w\x00'}, 0x8) write$char_usb(r0, &(0x7f0000000080)="2e9249", 0x3) 608.782094ms ago: executing program 9 (id=1212): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004140)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x102, 0x0) 608.480594ms ago: executing program 9 (id=1213): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x8, 0x9, 0x6, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 598.407405ms ago: executing program 7 (id=1214): socket$netlink(0x10, 0x3, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 572.294866ms ago: executing program 4 (id=1215): syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x25, &(0x7f0000000540)=@string={0x25, 0x3, "7036aae76ff4739f39be35830a3e80a091594647f0b23f18fd91ece93955bbe7ec49e6"}}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 521.14543ms ago: executing program 6 (id=1216): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="9800000010001ffffcffffff8000400000000000", @ANYRES32=0x0, @ANYBLOB="00030000003f000008000a00", @ANYRES32, @ANYBLOB="700012800b00010062726964676500"], 0x98}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 518.74044ms ago: executing program 7 (id=1217): setfsgid(0xee00) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(r0, &(0x7f0000000180)='smaps_rollup\x00') 449.496474ms ago: executing program 7 (id=1218): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) 221.110257ms ago: executing program 7 (id=1219): r0 = epoll_create(0x8) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x4003fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) epoll_pwait(r0, &(0x7f00000002c0)=[{}], 0x1, 0x1, 0x0, 0x0) 220.464027ms ago: executing program 0 (id=1220): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000007c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x3, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa84"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 156.472981ms ago: executing program 7 (id=1221): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0xbf5, 0x2000402) fallocate(r0, 0x1, 0x8a5, 0x1001f0) 58.313307ms ago: executing program 6 (id=1222): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) 0s ago: executing program 6 (id=1223): write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x90, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): : 'syz.2.196': attribute type 29 has an invalid length. [ 35.269651][ T4002] netlink: 148 bytes leftover after parsing attributes in process `syz.2.196'. [ 35.278685][ T4002] netlink: 'syz.2.196': attribute type 1 has an invalid length. [ 35.383684][ T4015] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 35.485162][ T4022] loop3: detected capacity change from 0 to 164 [ 35.503707][ T4022] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 35.641717][ T4031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 35.792281][ T4040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.213'. [ 35.806467][ T4036] loop0: detected capacity change from 0 to 8192 [ 35.896853][ T3405] kernel write not supported for file bpf-prog (pid: 3405 comm: kworker/1:4) [ 36.597240][ T4094] loop3: detected capacity change from 0 to 2048 [ 36.661863][ T3300] Alternate GPT is invalid, using primary GPT. [ 36.668277][ T3300] loop3: p2 p3 p7 [ 36.698129][ T4094] Alternate GPT is invalid, using primary GPT. [ 36.704635][ T4094] loop3: p2 p3 p7 [ 36.815474][ T4100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.241'. [ 36.845828][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 36.850960][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 36.861135][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 36.918577][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 36.929013][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 36.931361][ T3613] udevd[3613]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 36.993892][ T4113] loop2: detected capacity change from 0 to 128 [ 37.069033][ T4113] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.133245][ T4113] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.157324][ T4118] netlink: 'syz.0.246': attribute type 10 has an invalid length. [ 37.172935][ T4118] netlink: 84 bytes leftover after parsing attributes in process `syz.0.246'. [ 37.181889][ T4118] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 37.216680][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 37.216741][ T29] audit: type=1400 audit(1770072297.744:311): avc: denied { create } for pid=4112 comm="syz.2.245" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.270862][ T4113] EXT4-fs error (device loop2): ext4_check_dx_root:2201: inode #2: comm syz.2.245: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 37.338986][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.373763][ T29] audit: type=1326 audit(1770072297.894:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e58dcaeb9 code=0x7ffc0000 [ 37.397150][ T29] audit: type=1326 audit(1770072297.894:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e58dcaeb9 code=0x7ffc0000 [ 37.421619][ T29] audit: type=1326 audit(1770072297.894:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e58dcaeb9 code=0x7ffc0000 [ 37.445773][ T29] audit: type=1326 audit(1770072297.894:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e58dcaeb9 code=0x7ffc0000 [ 37.446220][ T4131] loop1: detected capacity change from 0 to 512 [ 37.469156][ T29] audit: type=1326 audit(1770072297.894:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9e58dcaeb9 code=0x7ffc0000 [ 37.498533][ T29] audit: type=1326 audit(1770072297.894:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e58dcaeb9 code=0x7ffc0000 [ 37.521913][ T29] audit: type=1326 audit(1770072297.894:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e58dcaeb9 code=0x7ffc0000 [ 37.545190][ T29] audit: type=1326 audit(1770072297.894:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e58dcaeb9 code=0x7ffc0000 [ 37.568410][ T29] audit: type=1326 audit(1770072297.894:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e58dcaeb9 code=0x7ffc0000 [ 37.626437][ T4131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.639144][ T4131] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.655116][ T4131] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 3: comm syz.1.252: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 37.674884][ T4143] Illegal XDP return value 4294967274 on prog (id 50) dev syz_tun, expect packet loss! [ 37.690532][ T4131] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.252: path /52/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 37.720175][ T4131] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.252: path /52/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 37.741480][ T4131] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.252: path /52/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 37.785935][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.842904][ T4154] loop2: detected capacity change from 0 to 512 [ 37.850173][ T4154] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.890492][ T4154] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.259: bad orphan inode 13 [ 37.919843][ T4154] ext4_test_bit(bit=12, block=18) = 1 [ 37.925274][ T4154] is_bad_inode(inode)=0 [ 37.929457][ T4154] NEXT_ORPHAN(inode)=0 [ 37.933519][ T4154] max_ino=32 [ 37.936712][ T4154] i_nlink=1 [ 37.950487][ T4154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 38.017123][ T4165] loop1: detected capacity change from 0 to 8192 [ 38.082684][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 38.107156][ T4174] loop0: detected capacity change from 0 to 1024 [ 38.159938][ T4174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.212664][ T4174] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.232133][ T4174] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.267: bg 0: block 112: padding at end of block bitmap is not set [ 38.340176][ T3398] kernel write not supported for file bpf-prog (pid: 3398 comm: kworker/1:3) [ 38.349766][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.413192][ T4199] loop4: detected capacity change from 0 to 512 [ 38.420793][ T4199] EXT4-fs: Ignoring removed bh option [ 38.449786][ T4199] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 38.473537][ T4199] EXT4-fs (loop4): 1 truncate cleaned up [ 38.486639][ T4199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.514034][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.571765][ T4215] loop4: detected capacity change from 0 to 512 [ 38.590062][ T4215] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.669628][ T31] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xb [ 38.679082][ T4231] netlink: 'syz.4.289': attribute type 12 has an invalid length. [ 38.686863][ T4231] netlink: 'syz.4.289': attribute type 29 has an invalid length. [ 38.694669][ T4231] netlink: 148 bytes leftover after parsing attributes in process `syz.4.289'. [ 38.705369][ T4231] netlink: 'syz.4.289': attribute type 1 has an invalid length. [ 38.786615][ T4242] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 38.819732][ T4244] loop4: detected capacity change from 0 to 164 [ 38.838808][ T4244] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 39.041250][ T4263] loop0: detected capacity change from 0 to 512 [ 39.047848][ T4263] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.140207][ T4268] SELinux: failed to load policy [ 39.347626][ T4286] loop0: detected capacity change from 0 to 2048 [ 39.369072][ T4277] netlink: 'syz.4.309': attribute type 10 has an invalid length. [ 39.377113][ T4277] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 39.396237][ T4286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.428067][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.621370][ T4309] loop0: detected capacity change from 0 to 128 [ 39.655897][ T4309] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.673958][ T4309] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.722993][ T4309] EXT4-fs error (device loop0): ext4_check_dx_root:2201: inode #2: comm syz.0.331: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 39.750832][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.814642][ T4325] netlink: 'syz.3.327': attribute type 25 has an invalid length. [ 39.822509][ T4325] netlink: 'syz.3.327': attribute type 7 has an invalid length. [ 39.830253][ T4325] __nla_validate_parse: 3 callbacks suppressed [ 39.830265][ T4325] netlink: 156 bytes leftover after parsing attributes in process `syz.3.327'. [ 39.962849][ T3398] kernel write not supported for file bpf-prog (pid: 3398 comm: kworker/1:3) [ 39.999526][ T4323] netlink: 84 bytes leftover after parsing attributes in process `syz.1.324'. [ 40.008426][ T4323] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 40.092956][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 40.165302][ T4350] loop1: detected capacity change from 0 to 1024 [ 40.181823][ T4350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.280075][ T4360] loop3: detected capacity change from 0 to 512 [ 40.302250][ T10] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.302705][ T4360] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.342: iget: bad i_size value: 38620345925642 [ 40.330862][ T4360] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.342: couldn't read orphan inode 15 (err -117) [ 40.350543][ T4360] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.368114][ T4360] Direct I/O collision with buffered writes! File: /file1 Comm: syz.3.342 [ 40.387071][ T1661] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 40.400345][ T31] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xb [ 40.409819][ T1661] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 40.422038][ T1661] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.422038][ T1661] [ 40.431730][ T1661] EXT4-fs (loop3): Total free blocks count 0 [ 40.437721][ T1661] EXT4-fs (loop3): Free/Dirty block details [ 40.443681][ T1661] EXT4-fs (loop3): free_blocks=0 [ 40.448627][ T1661] EXT4-fs (loop3): dirty_blocks=5 [ 40.453700][ T1661] EXT4-fs (loop3): Block reservation details [ 40.459760][ T1661] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 40.484455][ T1661] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 40.699575][ T4377] validate_nla: 2 callbacks suppressed [ 40.699591][ T4377] netlink: 'syz.3.345': attribute type 10 has an invalid length. [ 40.712861][ T4377] netlink: 84 bytes leftover after parsing attributes in process `syz.3.345'. [ 40.721909][ T4377] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 40.788180][ T4395] loop2: detected capacity change from 0 to 512 [ 40.806073][ T4395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.819633][ T4395] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.834286][ T4395] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 3: comm syz.2.351: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 40.920457][ T4395] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.351: path /69/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 40.944349][ T4395] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.351: path /69/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 40.965208][ T4395] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.351: path /69/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 41.003664][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.046922][ T4413] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.359: inode has both inline data and extents flags [ 41.097416][ T4413] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.359: couldn't read orphan inode 15 (err -117) [ 41.112376][ T4413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.119970][ T4382] chnl_net:caif_netlink_parms(): no params data found [ 41.190297][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.197377][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.204850][ T4382] bridge_slave_0: entered allmulticast mode [ 41.211618][ T4382] bridge_slave_0: entered promiscuous mode [ 41.221366][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.228446][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.246307][ T4382] bridge_slave_1: entered allmulticast mode [ 41.253087][ T4382] bridge_slave_1: entered promiscuous mode [ 41.280966][ T4382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.297015][ T4382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.309940][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.321794][ T4382] team0: Port device team_slave_0 added [ 41.328707][ T4382] team0: Port device team_slave_1 added [ 41.541170][ T4382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.548150][ T4382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.574064][ T4382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.614256][ T4382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.621356][ T4382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.647384][ T4382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.669586][ T4436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.751171][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.960176][ T4382] hsr_slave_0: entered promiscuous mode [ 41.971611][ T4382] hsr_slave_1: entered promiscuous mode [ 41.988063][ T2966] kernel write not supported for file bpf-prog (pid: 2966 comm: kworker/1:2) [ 41.990052][ T4382] debugfs: 'hsr0' already exists in 'hsr' [ 42.002663][ T4382] Cannot create hsr debugfs directory [ 42.331065][ T3318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 42.342013][ T3318] CPU: 1 UID: 0 PID: 3318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.342039][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.342122][ T3318] Call Trace: [ 42.342129][ T3318] [ 42.342137][ T3318] __dump_stack+0x1d/0x30 [ 42.342159][ T3318] dump_stack_lvl+0x95/0xd0 [ 42.342183][ T3318] dump_stack+0x15/0x1b [ 42.342280][ T3318] dump_header+0x80/0x240 [ 42.342303][ T3318] oom_kill_process+0x295/0x350 [ 42.342331][ T3318] out_of_memory+0x97d/0xb80 [ 42.342358][ T3318] try_charge_memcg+0x62e/0xa10 [ 42.342404][ T3318] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 42.342493][ T3318] __read_swap_cache_async+0x17b/0x2d0 [ 42.342527][ T3318] swap_cluster_readahead+0x262/0x3c0 [ 42.342567][ T3318] swapin_readahead+0xde/0x840 [ 42.342671][ T3318] ? next_uptodate_folio+0x84c/0x8c0 [ 42.342703][ T3318] ? percpu_counter_add_batch+0xb6/0x130 [ 42.342736][ T3318] ? __rcu_read_unlock+0x4e/0x70 [ 42.342767][ T3318] ? swap_cache_get_folio+0x26f/0x280 [ 42.342883][ T3318] do_swap_page+0x59b/0x2a50 [ 42.342920][ T3318] ? __rcu_read_lock+0x36/0x50 [ 42.342945][ T3318] ? __pfx_default_wake_function+0x10/0x10 [ 42.342974][ T3318] handle_mm_fault+0xb40/0x3030 [ 42.343068][ T3318] ? vma_start_read+0x1c7/0x2c0 [ 42.343095][ T3318] do_user_addr_fault+0x62f/0x1050 [ 42.343119][ T3318] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 42.343151][ T3318] ? irqentry_exit+0x3c/0x510 [ 42.343254][ T3318] exc_page_fault+0x62/0xa0 [ 42.343280][ T3318] asm_exc_page_fault+0x26/0x30 [ 42.343303][ T3318] RIP: 0033:0x7f9e58c98fb7 [ 42.343319][ T3318] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 c8 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c6 ed 00 48 01 d1 39 7c 24 [ 42.343361][ T3318] RSP: 002b:00007ffd68ed2520 EFLAGS: 00010202 [ 42.343383][ T3318] RAX: 0000001b33724000 RBX: 00000000000000a2 RCX: 000000000000a410 [ 42.343398][ T3318] RDX: 00000000037d4f24 RSI: 00007ffd68ed25b0 RDI: 0000000000000005 [ 42.343413][ T3318] RBP: 00007ffd68ed255c R08: 000000000d4fb438 R09: 7fffffffffffffff [ 42.343434][ T3318] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 42.343446][ T3318] R13: 00000000000927c0 R14: 000000000000a38a R15: 00007ffd68ed25b0 [ 42.343489][ T3318] [ 42.343532][ T3318] memory: usage 307200kB, limit 307200kB, failcnt 3804 [ 42.574623][ T3318] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 42.582607][ T3318] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 42.589918][ T3318] Memory cgroup stats for /syz2: [ 42.590278][ T3318] cache 0 [ 42.598132][ T3318] rss 0 [ 42.601020][ T3318] shmem 0 [ 42.603953][ T3318] mapped_file 0 [ 42.607387][ T3318] dirty 0 [ 42.610335][ T3318] writeback 0 [ 42.613638][ T3318] workingset_refault_anon 89 [ 42.618335][ T3318] workingset_refault_file 1046 [ 42.623282][ T3318] swap 192512 [ 42.626665][ T3318] swapcached 4096 [ 42.630365][ T3318] pgpgin 11895 [ 42.633847][ T3318] pgpgout 11894 [ 42.637310][ T3318] pgfault 14963 [ 42.640889][ T3318] pgmajfault 78 [ 42.644407][ T3318] inactive_anon 0 [ 42.648040][ T3318] active_anon 4096 [ 42.651799][ T3318] inactive_file 0 [ 42.655419][ T3318] active_file 0 [ 42.658873][ T3318] unevictable 0 [ 42.662431][ T3318] hierarchical_memory_limit 314572800 [ 42.667873][ T3318] hierarchical_memsw_limit 9223372036854771712 [ 42.674075][ T3318] total_cache 0 [ 42.677526][ T3318] total_rss 0 [ 42.680944][ T3318] total_shmem 0 [ 42.684604][ T3318] total_mapped_file 0 [ 42.688610][ T3318] total_dirty 0 [ 42.692152][ T3318] total_writeback 0 [ 42.696732][ T3318] total_workingset_refault_anon 89 [ 42.701941][ T3318] total_workingset_refault_file 1046 [ 42.707267][ T3318] total_swap 192512 [ 42.711291][ T3318] total_swapcached 4096 [ 42.715436][ T3318] total_pgpgin 11895 [ 42.719331][ T3318] total_pgpgout 11894 [ 42.723718][ T3318] total_pgfault 14963 [ 42.727832][ T3318] total_pgmajfault 78 [ 42.731905][ T3318] total_inactive_anon 0 [ 42.736053][ T3318] total_active_anon 4096 [ 42.740310][ T3318] total_inactive_file 0 [ 42.744450][ T3318] total_active_file 0 [ 42.748431][ T3318] total_unevictable 0 [ 42.752504][ T3318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.362,pid=4429,uid=0 [ 42.767132][ T3318] Memory cgroup out of memory: Killed process 4429 (syz.2.362) total-vm:96180kB, anon-rss:1156kB, file-rss:22172kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 42.963480][ T4472] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.016432][ T4472] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.083610][ T4382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.100333][ T4382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.128679][ T4382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.149599][ T4382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.265199][ T4382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.287020][ T4382] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.307462][ T1661] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.314577][ T1661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.338883][ T1661] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.346042][ T1661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.369570][ T4382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.380075][ T4382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.459462][ T4382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.587398][ T4382] veth0_vlan: entered promiscuous mode [ 43.597084][ T4382] veth1_vlan: entered promiscuous mode [ 43.612582][ T4519] set_capacity_and_notify: 3 callbacks suppressed [ 43.612621][ T4519] loop4: detected capacity change from 0 to 512 [ 43.617104][ T4382] veth0_macvtap: entered promiscuous mode [ 43.641674][ T4521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.391'. [ 43.644189][ T4382] veth1_macvtap: entered promiscuous mode [ 43.660449][ T4519] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.390: iget: bad i_size value: 38620345925642 [ 43.671619][ T4382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.682177][ T4519] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.390: couldn't read orphan inode 15 (err -117) [ 43.687870][ T4382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.703804][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.714017][ T4521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.391'. [ 43.725188][ T4519] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.738737][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.741977][ T4519] Direct I/O collision with buffered writes! File: /file1 Comm: syz.4.390 [ 43.765859][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 43.765892][ T29] audit: type=1400 audit(1770072304.294:393): avc: denied { mounton } for pid=4382 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 43.779869][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.831006][ T3448] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:7: bg 0: block 5: invalid block bitmap [ 43.856867][ T3448] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 43.869291][ T3448] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.869291][ T3448] [ 43.879103][ T3448] EXT4-fs (loop4): Total free blocks count 0 [ 43.885190][ T3448] EXT4-fs (loop4): Free/Dirty block details [ 43.891197][ T3448] EXT4-fs (loop4): free_blocks=0 [ 43.896285][ T3448] EXT4-fs (loop4): dirty_blocks=5 [ 43.901346][ T3448] EXT4-fs (loop4): Block reservation details [ 43.907347][ T3448] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 43.920523][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.942003][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 43.983587][ T4545] loop0: detected capacity change from 0 to 512 [ 44.003497][ T4549] loop5: detected capacity change from 0 to 1024 [ 44.013329][ T4549] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.019573][ T29] audit: type=1400 audit(1770072304.544:394): avc: denied { bind } for pid=4544 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.025562][ T4549] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.071129][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 44.080038][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.404'. [ 44.130486][ T4559] loop2: detected capacity change from 0 to 512 [ 44.136683][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 44.145603][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.404'. [ 44.161812][ T29] audit: type=1400 audit(1770072304.594:395): avc: denied { setopt } for pid=4544 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.199908][ T4549] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 44.224127][ T4559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.237392][ T4549] EXT4-fs (loop5): orphan cleanup on readonly fs [ 44.260791][ T29] audit: type=1400 audit(1770072304.714:396): avc: denied { kexec_image_load } for pid=4555 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 44.283267][ T4549] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.403: Freeing blocks not in datazone - block = 0, count = 4096 [ 44.289597][ T4559] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.312004][ T4549] EXT4-fs (loop5): Remounting filesystem read-only [ 44.318683][ T4549] EXT4-fs (loop5): 1 orphan inode deleted [ 44.325008][ T4549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.365610][ T29] audit: type=1400 audit(1770072304.894:397): avc: denied { read } for pid=4548 comm="syz.5.403" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 44.388648][ T29] audit: type=1400 audit(1770072304.894:398): avc: denied { open } for pid=4548 comm="syz.5.403" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 44.412142][ T29] audit: type=1400 audit(1770072304.894:399): avc: denied { ioctl } for pid=4548 comm="syz.5.403" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 44.450970][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.498260][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.517006][ T29] audit: type=1400 audit(1770072304.964:400): avc: denied { ioctl } for pid=4557 comm="syz.2.406" path="/75/bus/cpuset.effective_mems" dev="loop2" ino=19 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.589578][ T29] audit: type=1400 audit(1770072305.054:401): avc: denied { append } for pid=4570 comm="syz.4.412" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 44.612653][ T29] audit: type=1400 audit(1770072305.054:402): avc: denied { open } for pid=4570 comm="syz.4.412" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.223582][ T4564] netlink: 'syz.3.407': attribute type 13 has an invalid length. [ 45.265163][ T4564] gretap0: refused to change device tx_queue_len [ 45.279284][ T4564] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 45.472800][ T4600] sd 0:0:1:0: device reset [ 45.670297][ T4609] loop0: detected capacity change from 0 to 128 [ 45.939538][ T4625] netlink: 'syz.3.436': attribute type 8 has an invalid length. [ 45.947546][ T4625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 46.051137][ T4625] bond0: entered promiscuous mode [ 46.056219][ T4625] bond_slave_0: entered promiscuous mode [ 46.061994][ T4625] bond_slave_1: entered promiscuous mode [ 46.072185][ T4625] gretap0: entered promiscuous mode [ 46.078367][ T4625] ip6gretap0: entered promiscuous mode [ 46.085880][ T4625] hsr1: entered promiscuous mode [ 46.327779][ T4650] loop5: detected capacity change from 0 to 1024 [ 46.366982][ T4650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.400563][ T4650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.494605][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.520036][ T4661] loop4: detected capacity change from 0 to 512 [ 46.548558][ T4661] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 46.569357][ T4661] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 46.577474][ T4661] System zones: 1-12 [ 46.581904][ T4661] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.588742][ T4661] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.449: bg 0: block 361: padding at end of block bitmap is not set [ 46.603675][ T4661] EXT4-fs (loop4): Remounting filesystem read-only [ 46.610481][ T4661] EXT4-fs (loop4): 1 truncate cleaned up [ 46.617764][ T4661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 47.128748][ T4721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 47.159118][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 47.389508][ T4734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'. [ 47.430609][ T4739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 48.107712][ T4781] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 48.170222][ T4783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.490'. [ 48.200178][ T4783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.490'. [ 48.406969][ T4793] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 48.412886][ T4793] syzkaller1: Linktype set failed because interface is up [ 48.430862][ T10] kernel read not supported for file /vcs (pid: 10 comm: kworker/0:1) [ 48.533420][ T3448] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.587734][ T4815] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 48.766500][ T4825] netlink: 64 bytes leftover after parsing attributes in process `syz.4.506'. [ 49.406823][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 49.406846][ T29] audit: type=1400 audit(1770072309.934:426): avc: denied { mounton } for pid=4832 comm="syz.4.510" path="/proc/252/task" dev="proc" ino=8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 49.436894][ T4834] loop4: detected capacity change from 0 to 32768 [ 49.510471][ T3300] loop4: p1 p3 < > [ 49.518337][ T4834] loop4: p1 p3 < > [ 49.551701][ T4850] loop4: detected capacity change from 0 to 512 [ 49.590490][ T4850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.610070][ T4850] ext4 filesystem being mounted at /114/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.627599][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 49.628700][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 49.670062][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 49.676008][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 49.684867][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.763015][ T29] audit: type=1400 audit(1770072310.284:427): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.787205][ T29] audit: type=1400 audit(1770072310.284:428): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.811228][ T29] audit: type=1400 audit(1770072310.284:429): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.851504][ T29] audit: type=1400 audit(1770072310.374:430): avc: denied { open } for pid=4856 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.870671][ T29] audit: type=1400 audit(1770072310.374:431): avc: denied { prog_load } for pid=4857 comm="syz.4.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.889633][ T29] audit: type=1400 audit(1770072310.374:432): avc: denied { perfmon } for pid=4856 comm="syz.2.519" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.910386][ T29] audit: type=1400 audit(1770072310.374:434): avc: denied { bpf } for pid=4857 comm="syz.4.518" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.930795][ T29] audit: type=1400 audit(1770072310.374:433): avc: denied { kernel } for pid=4856 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.950031][ T29] audit: type=1400 audit(1770072310.374:435): avc: denied { perfmon } for pid=4856 comm="syz.2.519" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.242672][ T4880] loop3: detected capacity change from 0 to 1024 [ 50.254340][ T4880] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 50.275538][ T4880] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.527: lblock 2 mapped to illegal pblock 2 (length 1) [ 50.289884][ T4880] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.527: lblock 0 mapped to illegal pblock 48 (length 1) [ 50.304741][ T4880] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.527: Failed to acquire dquot type 0 [ 50.316944][ T4880] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 50.327028][ T4880] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.527: mark_inode_dirty error [ 50.338630][ T4880] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 50.349002][ T4880] EXT4-fs (loop3): 1 orphan inode deleted [ 50.355183][ T4880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.367349][ T12] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.381634][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 50.382339][ T4880] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm syz.3.527: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.407428][ T4880] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.527: Failed to acquire dquot type 0 [ 50.436477][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.445800][ T3448] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.460845][ T3448] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 50.476080][ T3312] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 50.493136][ T3312] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 50.503738][ T3312] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 50.540450][ T4813] Bluetooth: hci0: command 0x1003 tx timeout [ 50.546557][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.660328][ T4908] SELinux: Context ñ is not valid (left unmapped). [ 50.696167][ T4903] mmap: syz.3.535 (4903) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.738292][ T4914] netlink: 80 bytes leftover after parsing attributes in process `syz.5.541'. [ 50.760509][ T4914] netlink: 80 bytes leftover after parsing attributes in process `syz.5.541'. [ 51.054583][ T4934] loop5: detected capacity change from 0 to 512 [ 51.090974][ T4934] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 51.189069][ T4934] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.551: bg 0: block 255: padding at end of block bitmap is not set [ 51.270101][ T4934] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 51.295637][ T4934] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.551: invalid indirect mapped block 1 (level 1) [ 51.338361][ T4934] EXT4-fs (loop5): 1 truncate cleaned up [ 51.358696][ T4934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.379624][ T4934] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 51.422624][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.432864][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 51.627666][ T4974] loop4: detected capacity change from 0 to 1024 [ 51.635688][ T4974] EXT4-fs: Ignoring removed orlov option [ 51.648216][ T4974] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 51.681431][ T4974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.715599][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.870838][ T4988] loop3: detected capacity change from 0 to 8192 [ 51.941102][ T4988] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 51.948772][ T4988] FAT-fs (loop3): Filesystem has been set read-only [ 51.967622][ T5004] loop2: detected capacity change from 0 to 1024 [ 52.029962][ T5004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.054808][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.079792][ T5014] loop2: detected capacity change from 0 to 512 [ 52.088609][ T5014] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.586: bg 0: block 393: padding at end of block bitmap is not set [ 52.103221][ T5014] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 52.114269][ T5014] EXT4-fs (loop2): 2 truncates cleaned up [ 52.121874][ T5014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.156746][ T5019] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5019 comm=syz.4.588 [ 52.175111][ T5014] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.2.586: path /115/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 52.203135][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 52.213027][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.312646][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.335778][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.406155][ T5034] loop2: detected capacity change from 0 to 4096 [ 52.418382][ T5034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.475042][ T3318] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 52.488366][ T3318] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 52.691321][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.708106][ T3448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.794070][ T3448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.871676][ T5048] loop5: detected capacity change from 0 to 164 [ 52.880985][ T3448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.894188][ T5048] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 52.960386][ T3448] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.012884][ T5057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 53.160891][ T3448] bridge_slave_1: left allmulticast mode [ 53.166578][ T3448] bridge_slave_1: left promiscuous mode [ 53.172230][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.233883][ T3448] bridge_slave_0: left allmulticast mode [ 53.239727][ T3448] bridge_slave_0: left promiscuous mode [ 53.245663][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.261801][ T5074] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 53.289468][ T5074] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 53.297576][ T5074] FAT-fs (loop3): Filesystem has been set read-only [ 53.326633][ T5074] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 53.391842][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.401534][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.411000][ T3448] bond0 (unregistering): Released all slaves [ 53.434859][ T5040] chnl_net:caif_netlink_parms(): no params data found [ 53.459204][ T3448] hsr_slave_0: left promiscuous mode [ 53.464961][ T3448] hsr_slave_1: left promiscuous mode [ 53.471212][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.478614][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.486247][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.493671][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.504796][ T3448] veth1_macvtap: left promiscuous mode [ 53.510410][ T3448] veth0_macvtap: left promiscuous mode [ 53.561565][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 53.571726][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 53.617931][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.625071][ T5040] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.632482][ T5040] bridge_slave_0: entered allmulticast mode [ 53.638916][ T5040] bridge_slave_0: entered promiscuous mode [ 53.645837][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.652895][ T5040] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.660853][ T5040] bridge_slave_1: entered allmulticast mode [ 53.667338][ T5040] bridge_slave_1: entered promiscuous mode [ 53.685109][ T5040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.695613][ T5040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.714747][ T5040] team0: Port device team_slave_0 added [ 53.722404][ T5040] team0: Port device team_slave_1 added [ 53.738228][ T5040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.745278][ T5040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.771183][ T5040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.782447][ T5040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.789381][ T5040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.815390][ T5040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.845794][ T5040] hsr_slave_0: entered promiscuous mode [ 53.851764][ T5040] hsr_slave_1: entered promiscuous mode [ 53.857582][ T5040] debugfs: 'hsr0' already exists in 'hsr' [ 53.863390][ T5040] Cannot create hsr debugfs directory [ 53.938946][ T5040] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 53.952818][ T5040] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 53.961686][ T5040] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 53.970673][ T5040] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 54.030474][ T5040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.046934][ T5040] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.058162][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.065323][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.074702][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.081804][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.153814][ T5040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.242869][ T5040] veth0_vlan: entered promiscuous mode [ 54.250816][ T5040] veth1_vlan: entered promiscuous mode [ 54.266180][ T5040] veth0_macvtap: entered promiscuous mode [ 54.273524][ T5040] veth1_macvtap: entered promiscuous mode [ 54.284879][ T5040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.295976][ T5040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.306607][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.315693][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.324413][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.333536][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.502359][ T5175] set_capacity_and_notify: 1 callbacks suppressed [ 54.502376][ T5175] loop3: detected capacity change from 0 to 2048 [ 54.544703][ T5175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.559820][ T5175] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.585262][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 54.585279][ T29] audit: type=1400 audit(1770072315.114:573): avc: denied { read } for pid=5174 comm="syz.3.609" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.620329][ T5175] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.609: bg 0: block 345: padding at end of block bitmap is not set [ 54.702857][ T5175] EXT4-fs (loop3): Remounting filesystem read-only [ 54.760029][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.130049][ T29] audit: type=1400 audit(1770072315.654:574): avc: denied { create } for pid=5182 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.149310][ T29] audit: type=1400 audit(1770072315.654:575): avc: denied { ioctl } for pid=5182 comm="syz.3.610" path="socket:[10855]" dev="sockfs" ino=10855 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.176675][ T3310] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 55.187764][ T3310] CPU: 1 UID: 0 PID: 3310 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.187836][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.187850][ T3310] Call Trace: [ 55.187857][ T3310] [ 55.187865][ T3310] __dump_stack+0x1d/0x30 [ 55.187893][ T3310] dump_stack_lvl+0x95/0xd0 [ 55.187918][ T3310] dump_stack+0x15/0x1b [ 55.187972][ T3310] dump_header+0x80/0x240 [ 55.187996][ T3310] oom_kill_process+0x295/0x350 [ 55.188025][ T3310] out_of_memory+0x97d/0xb80 [ 55.188055][ T3310] try_charge_memcg+0x62e/0xa10 [ 55.188201][ T3310] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 55.188297][ T3310] __read_swap_cache_async+0x17b/0x2d0 [ 55.188334][ T3310] swap_cluster_readahead+0x262/0x3c0 [ 55.188372][ T3310] swapin_readahead+0xde/0x840 [ 55.188484][ T3310] ? next_uptodate_folio+0x84c/0x8c0 [ 55.188517][ T3310] ? percpu_counter_add_batch+0xb6/0x130 [ 55.188616][ T3310] ? __rcu_read_unlock+0x4e/0x70 [ 55.188705][ T3310] ? swap_cache_get_folio+0x26f/0x280 [ 55.188739][ T3310] do_swap_page+0x59b/0x2a50 [ 55.188777][ T3310] ? __rcu_read_lock+0x36/0x50 [ 55.188820][ T3310] ? __pfx_default_wake_function+0x10/0x10 [ 55.188855][ T3310] handle_mm_fault+0xb40/0x3030 [ 55.188945][ T3310] ? vma_start_read+0x1c7/0x2c0 [ 55.188980][ T3310] do_user_addr_fault+0x62f/0x1050 [ 55.189085][ T3310] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 55.189146][ T3310] ? irqentry_exit+0x3c/0x510 [ 55.189173][ T3310] exc_page_fault+0x62/0xa0 [ 55.189199][ T3310] asm_exc_page_fault+0x26/0x30 [ 55.189220][ T3310] RIP: 0033:0x7f34e6cc8fb7 [ 55.189316][ T3310] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 c8 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c6 ed 00 48 01 d1 39 7c 24 [ 55.189355][ T3310] RSP: 002b:00007ffdf1d53f60 EFLAGS: 00010206 [ 55.189372][ T3310] RAX: 0000001b33524000 RBX: 0000000000000106 RCX: 000000000000d6d8 [ 55.189398][ T3310] RDX: 0000000000a4657e RSI: 00007ffdf1d53ff0 RDI: 0000000000000005 [ 55.189454][ T3310] RBP: 00007ffdf1d53f9c R08: 0000000002731f6d R09: 7fffffffffffffff [ 55.189467][ T3310] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 55.189515][ T3310] R13: 00000000000927c0 R14: 000000000000d60c R15: 00007ffdf1d53ff0 [ 55.189536][ T3310] [ 55.413858][ T3310] memory: usage 307200kB, limit 307200kB, failcnt 466 [ 55.420696][ T3310] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 55.428582][ T3310] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 55.435925][ T3310] Memory cgroup stats for /syz0: [ 55.460295][ T3310] cache 0 [ 55.468203][ T3310] rss 0 [ 55.471047][ T3310] shmem 0 [ 55.473978][ T3310] mapped_file 0 [ 55.477430][ T3310] dirty 0 [ 55.480534][ T3310] writeback 4096 [ 55.484064][ T3310] workingset_refault_anon 95 [ 55.488650][ T3310] workingset_refault_file 638 [ 55.493436][ T3310] swap 184320 [ 55.496713][ T3310] swapcached 24576 [ 55.500526][ T3310] pgpgin 24660 [ 55.503968][ T3310] pgpgout 24654 [ 55.507416][ T3310] pgfault 35336 [ 55.510988][ T3310] pgmajfault 59 [ 55.514440][ T3310] inactive_anon 4096 [ 55.518500][ T3310] active_anon 20480 [ 55.522427][ T3310] inactive_file 0 [ 55.526053][ T3310] active_file 0 [ 55.529692][ T3310] unevictable 0 [ 55.533166][ T3310] hierarchical_memory_limit 314572800 [ 55.533769][ T5189] gretap1: entered allmulticast mode [ 55.538524][ T3310] hierarchical_memsw_limit 9223372036854771712 [ 55.538536][ T3310] total_cache 0 [ 55.538544][ T3310] total_rss 0 [ 55.538551][ T3310] total_shmem 0 [ 55.560197][ T3310] total_mapped_file 0 [ 55.564168][ T3310] total_dirty 0 [ 55.567616][ T3310] total_writeback 4096 [ 55.571709][ T3310] total_workingset_refault_anon 95 [ 55.576818][ T3310] total_workingset_refault_file 638 [ 55.582196][ T3310] total_swap 184320 [ 55.585993][ T3310] total_swapcached 24576 [ 55.590253][ T3310] total_pgpgin 24660 [ 55.594130][ T3310] total_pgpgout 24654 [ 55.598094][ T3310] total_pgfault 35336 [ 55.602101][ T3310] total_pgmajfault 59 [ 55.606128][ T3310] total_inactive_anon 4096 [ 55.610578][ T3310] total_active_anon 20480 [ 55.614895][ T3310] total_inactive_file 0 [ 55.619242][ T3310] total_active_file 0 [ 55.623346][ T3310] total_unevictable 0 [ 55.627321][ T3310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.617,pid=5161,uid=0 [ 55.641981][ T3310] Memory cgroup out of memory: Killed process 5161 (syz.0.617) total-vm:96312kB, anon-rss:1204kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 55.729810][ T5162] syz.0.617 (5162) used greatest stack depth: 7096 bytes left [ 55.741502][ T29] audit: type=1400 audit(1770072316.274:576): avc: denied { block_suspend } for pid=5201 comm="syz.4.615" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.816257][ T5205] No such timeout policy "syz1" [ 56.029488][ T29] audit: type=1400 audit(1770072316.554:577): avc: denied { setopt } for pid=5211 comm="syz.0.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.048794][ T29] audit: type=1400 audit(1770072316.554:578): avc: denied { read } for pid=5211 comm="syz.0.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.172988][ T29] audit: type=1400 audit(1770072316.704:579): avc: denied { bind } for pid=5220 comm="syz.5.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.251389][ T29] audit: type=1400 audit(1770072316.774:580): avc: denied { create } for pid=5219 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 56.271889][ T29] audit: type=1400 audit(1770072316.774:581): avc: denied { ioctl } for pid=5219 comm="syz.0.625" path="socket:[11281]" dev="sockfs" ino=11281 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 56.347643][ T5228] loop0: detected capacity change from 0 to 512 [ 56.379380][ T5228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.413346][ T5228] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.508807][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.684306][ T5244] loop0: detected capacity change from 0 to 512 [ 56.692128][ T29] audit: type=1400 audit(1770072317.214:582): avc: denied { connect } for pid=5245 comm="syz.3.639" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.695376][ T5248] loop5: detected capacity change from 0 to 512 [ 56.732603][ T5248] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 56.767832][ T5248] EXT4-fs (loop5): 1 truncate cleaned up [ 56.777833][ T5244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.806666][ T5248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.877553][ T5244] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.923408][ T5248] SELinux: policydb table sizes (-1,0) do not match mine (8,7) [ 56.933874][ T5248] SELinux: failed to load policy [ 56.971783][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.028002][ T5244] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.637: corrupted xattr block 33: overlapping e_value [ 57.051724][ T5244] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 57.092284][ T5244] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.637: corrupted xattr block 33: overlapping e_value [ 57.098163][ T5279] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.637: corrupted xattr block 33: overlapping e_value [ 57.115564][ T5244] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 57.151167][ T5279] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 57.347861][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.990580][ T5297] loop4: detected capacity change from 0 to 32768 [ 58.052739][ T3300] loop4: p1 p3 < > [ 58.066977][ T5297] loop4: p1 p3 < > [ 58.290588][ T3613] udevd[3613]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 58.309299][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 58.369983][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 58.372891][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 58.474410][ T5328] loop5: detected capacity change from 0 to 1024 [ 58.484939][ T5328] EXT4-fs: inline encryption not supported [ 58.492056][ T5328] EXT4-fs: Ignoring removed nobh option [ 58.497765][ T5328] EXT4-fs: Ignoring removed bh option [ 58.533924][ T5328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.612952][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.758691][ T5344] netlink: 96 bytes leftover after parsing attributes in process `syz.4.679'. [ 58.825045][ T5344] bridge1: entered promiscuous mode [ 58.831064][ T5344] bridge1: entered allmulticast mode [ 59.121571][ T5374] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.129442][ T5374] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.137216][ T5374] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.145034][ T5374] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.152834][ T5374] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.160676][ T5374] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.168471][ T5374] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.176322][ T5374] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.184200][ T5374] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.191985][ T5374] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 59.227084][ T5377] loop0: detected capacity change from 0 to 1024 [ 59.234086][ T5377] EXT4-fs: Ignoring removed bh option [ 59.239858][ T5377] EXT4-fs: Ignoring removed nobh option [ 59.267311][ T5377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.298948][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.388157][ T5391] loop4: detected capacity change from 0 to 1024 [ 59.421565][ T5391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.745390][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.814444][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.821658][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 59.821672][ T29] audit: type=1400 audit(1770072320.344:601): avc: denied { ioctl } for pid=5401 comm="syz.4.702" path="socket:[11590]" dev="sockfs" ino=11590 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.559214][ T5442] loop5: detected capacity change from 0 to 512 [ 60.593509][ T29] audit: type=1400 audit(1770072321.124:602): avc: denied { listen } for pid=5446 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.613917][ T5442] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 60.632152][ T5442] EXT4-fs (loop5): 1 truncate cleaned up [ 60.645026][ T5442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.659097][ T29] audit: type=1400 audit(1770072321.164:603): avc: denied { read } for pid=5449 comm="syz.0.722" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.701564][ T5454] loop0: detected capacity change from 0 to 512 [ 60.723208][ T5454] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 60.744511][ T5454] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 60.759522][ T5454] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #11: comm syz.0.723: corrupted inode contents [ 60.771499][ T5454] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #11: comm syz.0.723: mark_inode_dirty error [ 60.783256][ T5454] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.723: invalid indirect mapped block 1 (level 1) [ 60.784354][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.809856][ T5454] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #11: comm syz.0.723: corrupted inode contents [ 60.824461][ T5454] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 60.837350][ T5454] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #11: comm syz.0.723: corrupted inode contents [ 60.860224][ T5454] EXT4-fs error (device loop0): ext4_truncate:4635: inode #11: comm syz.0.723: mark_inode_dirty error [ 60.871545][ T5454] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 60.881520][ T5454] EXT4-fs (loop0): 1 truncate cleaned up [ 61.028730][ T5463] loop6: detected capacity change from 0 to 1024 [ 61.036367][ T5463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.150958][ T29] audit: type=1400 audit(1770072321.684:604): avc: denied { mounton } for pid=5466 comm="syz.5.727" path="/83/file0" dev="cgroup" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 61.175123][ T29] audit: type=1400 audit(1770072321.704:605): avc: denied { watch } for pid=5468 comm="syz.6.728" path="/22/file1" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.226128][ T29] audit: type=1400 audit(1770072321.714:606): avc: denied { unmount } for pid=4382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.246120][ T29] audit: type=1400 audit(1770072321.754:607): avc: denied { unmount } for pid=4382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.328061][ T3405] kernel read not supported for file /rfkill (pid: 3405 comm: kworker/1:4) [ 61.397407][ T29] audit: type=1400 audit(1770072321.924:608): avc: denied { ioctl } for pid=5484 comm="syz.3.737" path="socket:[11707]" dev="sockfs" ino=11707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.423099][ T29] audit: type=1400 audit(1770072321.964:609): avc: denied { bind } for pid=5484 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.460661][ T5487] netlink: 'syz.6.738': attribute type 46 has an invalid length. [ 61.463377][ T29] audit: type=1400 audit(1770072321.994:610): avc: denied { wake_alarm } for pid=5488 comm="syz.3.739" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.468455][ T5487] netlink: 'syz.6.738': attribute type 19 has an invalid length. [ 61.468472][ T5487] netlink: 4 bytes leftover after parsing attributes in process `syz.6.738'. [ 61.515535][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.553119][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.621931][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.689559][ T5508] loop6: detected capacity change from 0 to 512 [ 61.708629][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.730863][ T5508] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.819535][ T4813] Bluetooth: hci0: command 0x1003 tx timeout [ 61.825591][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.863418][ T12] bridge_slave_1: left allmulticast mode [ 61.869093][ T12] bridge_slave_1: left promiscuous mode [ 61.874920][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.883069][ T12] bridge_slave_0: left allmulticast mode [ 61.888788][ T12] bridge_slave_0: left promiscuous mode [ 61.894654][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.981734][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.991711][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.001141][ T12] bond0 (unregistering): Released all slaves [ 62.044637][ T5500] chnl_net:caif_netlink_parms(): no params data found [ 62.056565][ T12] hsr_slave_0: left promiscuous mode [ 62.065207][ T12] hsr_slave_1: left promiscuous mode [ 62.071061][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.078447][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.086416][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.093900][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.105139][ T12] veth1_macvtap: left promiscuous mode [ 62.110724][ T12] veth0_macvtap: left promiscuous mode [ 62.116262][ T12] veth1_vlan: left promiscuous mode [ 62.121574][ T12] veth0_vlan: left promiscuous mode [ 62.186945][ T12] team0 (unregistering): Port device team_slave_1 removed [ 62.197140][ T12] team0 (unregistering): Port device team_slave_0 removed [ 62.255626][ T5500] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.262750][ T5500] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.269964][ T5500] bridge_slave_0: entered allmulticast mode [ 62.276451][ T5500] bridge_slave_0: entered promiscuous mode [ 62.283265][ T5500] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.290560][ T5500] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.297843][ T5500] bridge_slave_1: entered allmulticast mode [ 62.304295][ T5500] bridge_slave_1: entered promiscuous mode [ 62.322090][ T5500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.332923][ T5500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.352419][ T5500] team0: Port device team_slave_0 added [ 62.359114][ T5500] team0: Port device team_slave_1 added [ 62.376405][ T5500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.383589][ T5500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.409528][ T5500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.422876][ T5500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.429875][ T5500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.455876][ T5500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.483622][ T5500] hsr_slave_0: entered promiscuous mode [ 62.489593][ T5500] hsr_slave_1: entered promiscuous mode [ 62.495420][ T5500] debugfs: 'hsr0' already exists in 'hsr' [ 62.501150][ T5500] Cannot create hsr debugfs directory [ 62.581429][ T5500] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 62.591252][ T5500] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 62.600597][ T5500] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 62.609994][ T5500] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 62.665917][ T5500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.678727][ T5500] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.688831][ T1661] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.695903][ T1661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.708707][ T1661] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.715772][ T1661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.784910][ T5500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.875975][ T5500] veth0_vlan: entered promiscuous mode [ 62.883917][ T5500] veth1_vlan: entered promiscuous mode [ 62.899574][ T5500] veth0_macvtap: entered promiscuous mode [ 62.906990][ T5500] veth1_macvtap: entered promiscuous mode [ 62.918045][ T5500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.929732][ T5500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.941326][ T1661] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.950574][ T1661] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.961844][ T1661] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.971674][ T1661] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.022710][ T5620] loop3: detected capacity change from 0 to 1024 [ 63.070748][ T5620] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 63.078864][ T5620] System zones: 0-1, 3-36 [ 63.130130][ T5620] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.761: bad orphan inode 134217728 [ 63.250561][ T5631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.751'. [ 63.593826][ T5636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.753'. [ 63.607751][ T5621] loop4: detected capacity change from 0 to 1024 [ 63.621593][ T5636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.850005][ T5654] netlink: 'syz.3.765': attribute type 4 has an invalid length. [ 63.857417][ T5660] loop0: detected capacity change from 0 to 512 [ 63.876611][ T5660] EXT4-fs: Ignoring removed nobh option [ 63.898756][ T5660] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.954868][ T5666] loop3: detected capacity change from 0 to 512 [ 63.976450][ T5666] EXT4-fs: Ignoring removed bh option [ 63.986698][ T5666] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 64.009579][ T5666] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 64.032043][ T5669] loop4: detected capacity change from 0 to 128 [ 64.037808][ T5666] EXT4-fs (loop3): failed to open journal device unknown-block(8,224) -6 [ 64.076426][ T5669] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.161531][ T5681] loop3: detected capacity change from 0 to 256 [ 64.412930][ T5695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.782'. [ 64.462446][ T5697] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.489498][ T5697] EXT4-fs (loop0): 1 truncate cleaned up [ 64.748626][ T5716] veth0: entered promiscuous mode [ 64.756009][ T5715] ext4 filesystem being mounted at /147/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.776268][ T5714] veth0: left promiscuous mode [ 64.977703][ T5746] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.990383][ T5746] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.017046][ T3448] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.105793][ T5755] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.195529][ T5765] netlink: 'syz.6.805': attribute type 1 has an invalid length. [ 65.383600][ T3448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.452314][ T3448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.478244][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 65.478257][ T29] audit: type=1400 audit(1770072326.004:642): avc: denied { create } for pid=5792 comm="syz.6.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.527196][ T29] audit: type=1400 audit(1770072326.044:643): avc: denied { mount } for pid=5797 comm="syz.7.814" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 65.552339][ T3448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.606577][ T3448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.619931][ T29] audit: type=1400 audit(1770072326.154:644): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.755188][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 65.765105][ T3448] bridge_slave_1: left allmulticast mode [ 65.770809][ T3448] bridge_slave_1: left promiscuous mode [ 65.776500][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.784925][ T3448] bridge_slave_0: left allmulticast mode [ 65.790677][ T3448] bridge_slave_0: left promiscuous mode [ 65.796360][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.834448][ T3448] ip6gretap0 (unregistering): left promiscuous mode [ 65.850598][ T3448] gretap0 (unregistering): left promiscuous mode [ 65.950890][ T3448] bond0 (unregistering): left promiscuous mode [ 65.957074][ T3448] bond_slave_0: left promiscuous mode [ 65.962606][ T3448] bond_slave_1: left promiscuous mode [ 65.970287][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.980277][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.990195][ T3448] bond0 (unregistering): Released all slaves [ 66.039591][ T3448] hsr_slave_0: left promiscuous mode [ 66.053689][ T3448] hsr_slave_1: left promiscuous mode [ 66.060428][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.067840][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.075617][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.083136][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.095011][ T3448] veth1_macvtap: left promiscuous mode [ 66.100677][ T3448] veth0_macvtap: left promiscuous mode [ 66.106269][ T3448] veth1_vlan: left promiscuous mode [ 66.119655][ T3448] veth0_vlan: left promiscuous mode [ 66.198004][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 66.207752][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 66.238290][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.245420][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.252774][ T5795] bridge_slave_0: entered allmulticast mode [ 66.259072][ T5795] bridge_slave_0: entered promiscuous mode [ 66.271109][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.278222][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.286008][ T5795] bridge_slave_1: entered allmulticast mode [ 66.292965][ T5795] bridge_slave_1: entered promiscuous mode [ 66.310947][ T5864] set_capacity_and_notify: 4 callbacks suppressed [ 66.310964][ T5864] loop6: detected capacity change from 0 to 512 [ 66.332014][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.342091][ T5864] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.354230][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.366519][ T5864] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: block 32: comm syz.6.823: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 66.394327][ T5864] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz.6.823: directory missing '.' [ 66.406997][ T5795] team0: Port device team_slave_0 added [ 66.420519][ T5795] team0: Port device team_slave_1 added [ 66.455968][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.463158][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.489149][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.540597][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.547575][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.573564][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.621547][ T5795] hsr_slave_0: entered promiscuous mode [ 66.627833][ T5795] hsr_slave_1: entered promiscuous mode [ 66.650953][ T5901] netlink: 168 bytes leftover after parsing attributes in process `syz.4.828'. [ 66.676791][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 66.682614][ T5795] Cannot create hsr debugfs directory [ 66.711565][ T29] audit: type=1400 audit(1770072327.234:645): avc: denied { create } for pid=5906 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.775387][ T5916] sctp: [Deprecated]: syz.6.833 (pid 5916) Use of struct sctp_assoc_value in delayed_ack socket option. [ 66.775387][ T5916] Use struct sctp_sack_info instead [ 66.794576][ T29] audit: type=1400 audit(1770072327.274:646): avc: denied { write } for pid=5906 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.813768][ T29] audit: type=1400 audit(1770072327.274:647): avc: denied { sqpoll } for pid=5904 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.832813][ T29] audit: type=1400 audit(1770072327.304:648): avc: denied { read write } for pid=5912 comm="syz.4.832" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.856717][ T29] audit: type=1400 audit(1770072327.304:649): avc: denied { open } for pid=5912 comm="syz.4.832" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.958371][ T5931] netlink: 16 bytes leftover after parsing attributes in process `syz.6.836'. [ 66.958880][ T5930] loop4: detected capacity change from 0 to 512 [ 66.984140][ T5795] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 66.991286][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.836'. [ 66.991369][ T29] audit: type=1400 audit(1770072327.424:650): avc: denied { mount } for pid=5923 comm="syz.7.830" name="/" dev="hugetlbfs" ino=13540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 67.030549][ T5795] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 67.038159][ T5930] EXT4-fs: inline encryption not supported [ 67.056045][ T5935] netem: incorrect gi model size [ 67.061101][ T5935] netem: change failed [ 67.074796][ T5795] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 67.088515][ T5930] EXT4-fs (loop4): 1 orphan inode deleted [ 67.095523][ T5795] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 67.102359][ T53] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 67.102939][ T5930] EXT4-fs mount: 22 callbacks suppressed [ 67.102952][ T5930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.112195][ T53] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 67.118475][ T5930] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.296989][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.315134][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.329123][ T5978] loop6: detected capacity change from 0 to 1024 [ 67.343474][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.372555][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.379719][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.398463][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.405569][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.414709][ T5978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 67.447532][ T5978] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.476638][ T5795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.487069][ T5795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.530270][ T5040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 67.616475][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.853282][ T5795] veth0_vlan: entered promiscuous mode [ 67.871302][ T5795] veth1_vlan: entered promiscuous mode [ 67.892655][ T5795] veth0_macvtap: entered promiscuous mode [ 67.903957][ T5795] veth1_macvtap: entered promiscuous mode [ 67.915855][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.928823][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.939872][ T5940] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.948653][ T5940] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.959309][ T5940] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.971626][ T5940] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.018709][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.8.811'. [ 68.375090][ T6065] loop0: detected capacity change from 0 to 128 [ 68.414138][ T6067] loop7: detected capacity change from 0 to 256 [ 68.563990][ T6078] loop6: detected capacity change from 0 to 128 [ 68.816939][ T6103] loop7: detected capacity change from 0 to 128 [ 68.825669][ T6103] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 68.845983][ T6103] FAT-fs (loop7): error, clusters badly computed (0 != 1) [ 68.853303][ T6103] FAT-fs (loop7): Filesystem has been set read-only [ 68.860216][ T6103] FAT-fs (loop7): error, clusters badly computed (1 != 2) [ 68.867420][ T6103] FAT-fs (loop7): error, clusters badly computed (2 != 3) [ 68.874597][ T6103] FAT-fs (loop7): error, clusters badly computed (3 != 4) [ 68.900591][ T5500] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 69.128724][ T6133] loop0: detected capacity change from 0 to 512 [ 69.139990][ T6133] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.884: inode has both inline data and extents flags [ 69.158050][ T6133] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.884: couldn't read orphan inode 15 (err -117) [ 69.170692][ T6133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.298075][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.386812][ T6146] loop4: detected capacity change from 0 to 1024 [ 69.430413][ T6146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.462780][ T6146] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.888: inode #1919248754: comm syz.4.888: iget: illegal inode # [ 69.509332][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 69.549542][ T6146] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.4.888: cleanup dec ref error -30 [ 69.585569][ T6146] EXT4-fs warning (device loop4): ext4_xattr_block_set:2200: inode #19: comm syz.4.888: dec ref error=-30 [ 69.666342][ T6160] loop8: detected capacity change from 0 to 1024 [ 69.683529][ T6160] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.723079][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.766333][ T5795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.819132][ T6178] EXT4-fs: inline encryption not supported [ 69.825153][ T6178] EXT4-fs: Ignoring removed i_version option [ 69.850979][ T6178] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.881165][ T6178] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 69.896691][ T6183] FAT-fs (loop7): Directory bread(block 414) failed [ 69.910372][ T6183] FAT-fs (loop7): Directory bread(block 415) failed [ 69.920364][ T6183] FAT-fs (loop7): Directory bread(block 416) failed [ 69.925541][ T5795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.945919][ T6183] FAT-fs (loop7): Directory bread(block 417) failed [ 69.965133][ T6183] FAT-fs (loop7): Directory bread(block 418) failed [ 69.972136][ T6183] FAT-fs (loop7): Directory bread(block 419) failed [ 69.978938][ T6183] FAT-fs (loop7): Directory bread(block 420) failed [ 69.986627][ T6183] FAT-fs (loop7): Directory bread(block 421) failed [ 70.003663][ T6183] netlink: 16 bytes leftover after parsing attributes in process `syz.7.900'. [ 70.119740][ T6193] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.210324][ T6193] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 70.228460][ T6193] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.904: bg 0: block 248: padding at end of block bitmap is not set [ 70.244507][ T6193] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.904: Failed to acquire dquot type 1 [ 70.259382][ T6193] EXT4-fs (loop7): 1 truncate cleaned up [ 70.265735][ T6193] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 70.318707][ T5500] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 70.385450][ T6219] netlink: 'syz.4.915': attribute type 6 has an invalid length. [ 70.393158][ T6219] netlink: 56 bytes leftover after parsing attributes in process `syz.4.915'. [ 70.427791][ T6215] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.564211][ T6229] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.576323][ T6229] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.577325][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 70.577338][ T29] audit: type=1400 audit(1770072587.116:989): avc: denied { append } for pid=6232 comm="syz.7.920" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.587391][ T6229] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 70.624172][ T6229] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.630651][ T6229] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.919: Freeing blocks not in datazone - block = 0, count = 4096 [ 70.646928][ T6229] EXT4-fs (loop4): Remounting filesystem read-only [ 70.654625][ T6229] EXT4-fs (loop4): 1 orphan inode deleted [ 70.661456][ T6229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.716955][ T29] audit: type=1400 audit(1770072587.246:990): avc: denied { read } for pid=6228 comm="syz.4.919" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.740069][ T29] audit: type=1400 audit(1770072587.246:991): avc: denied { open } for pid=6228 comm="syz.4.919" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.794540][ T29] audit: type=1400 audit(1770072587.316:992): avc: denied { ioctl } for pid=6228 comm="syz.4.919" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.854650][ T29] audit: type=1400 audit(1770072587.386:993): avc: denied { create } for pid=6243 comm="syz.6.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 70.876060][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.960809][ T6248] sd 0:0:1:0: device reset [ 70.962786][ T29] audit: type=1400 audit(1770072587.496:994): avc: denied { ioctl } for pid=6247 comm="syz.7.926" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.058119][ T6257] tipc: Started in network mode [ 71.063167][ T6257] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 71.090964][ T6257] tipc: Enabled bearer , priority 10 [ 71.100338][ T6259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.191288][ T6270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.217646][ T6259] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #16: comm syz.6.931: missing EA_INODE flag [ 71.232515][ T6259] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.931: error while reading EA inode 16 err=-117 [ 71.239816][ T6270] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 71.269177][ T6259] EXT4-fs error (device loop6): ext4_xattr_block_set:2220: inode #15: comm syz.6.931: bad block 113 [ 71.305080][ T5040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.337158][ T29] audit: type=1400 audit(1770072587.866:995): avc: denied { setopt } for pid=6254 comm="syz.8.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.367270][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.472347][ T6288] set_capacity_and_notify: 8 callbacks suppressed [ 71.472365][ T6288] loop4: detected capacity change from 0 to 1024 [ 71.536302][ T6304] loop7: detected capacity change from 0 to 512 [ 71.547820][ T6288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.575707][ T6304] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 71.588002][ T6304] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 71.601667][ T6304] System zones: 1-12 [ 71.602677][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 71.605656][ T6304] EXT4-fs (loop7): orphan cleanup on readonly fs [ 71.624420][ T6304] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.948: bg 0: block 361: padding at end of block bitmap is not set [ 71.643532][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.8.950'. [ 71.643743][ T6304] EXT4-fs (loop7): Remounting filesystem read-only [ 71.659152][ T6304] EXT4-fs (loop7): 1 truncate cleaned up [ 71.665686][ T6304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 71.704557][ T6313] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 71.736956][ T29] audit: type=1400 audit(1770072588.266:996): avc: denied { append } for pid=6303 comm="syz.7.948" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.799052][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.801027][ T6320] loop0: detected capacity change from 0 to 512 [ 71.821800][ T6320] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.955: iget: bad i_size value: 38620345925642 [ 71.845678][ T6320] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.955: couldn't read orphan inode 15 (err -117) [ 71.870134][ T6320] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.884893][ T29] audit: type=1400 audit(1770072588.416:997): avc: denied { create } for pid=6319 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.905192][ T29] audit: type=1400 audit(1770072588.436:998): avc: denied { map } for pid=6319 comm="syz.0.955" path="/177/file1/cpu.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.939744][ T5957] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:25: bg 0: block 5: invalid block bitmap [ 71.952944][ T5957] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.965244][ T5957] EXT4-fs (loop0): This should not happen!! Data will be lost [ 71.965244][ T5957] [ 71.974966][ T5957] EXT4-fs (loop0): Total free blocks count 0 [ 71.980979][ T5957] EXT4-fs (loop0): Free/Dirty block details [ 71.986874][ T5957] EXT4-fs (loop0): free_blocks=0 [ 71.991854][ T5957] EXT4-fs (loop0): dirty_blocks=1 [ 71.996864][ T5957] EXT4-fs (loop0): Block reservation details [ 72.002887][ T5957] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 72.012426][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 72.089518][ T10] tipc: Node number set to 4269801494 [ 72.335475][ T5500] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 72.374085][ T6340] netlink: 24 bytes leftover after parsing attributes in process `syz.7.962'. [ 72.391837][ T6340] netlink: 40 bytes leftover after parsing attributes in process `syz.7.962'. [ 72.429340][ T6342] loop8: detected capacity change from 0 to 512 [ 72.461981][ T6342] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 72.480934][ T6342] EXT4-fs (loop8): 1 truncate cleaned up [ 72.487189][ T6342] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.839985][ T5795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.968392][ T6359] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 73.048398][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.8.970'. [ 73.355856][ T3391] kernel read not supported for file /vcs (pid: 3391 comm: kworker/0:3) [ 73.413718][ T6411] loop0: detected capacity change from 0 to 512 [ 73.525592][ T6411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.540999][ T6411] ext4 filesystem being mounted at /186/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.687348][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.968999][ T6466] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1000'. [ 73.979778][ T6466] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1000'. [ 74.081037][ T6475] loop0: detected capacity change from 0 to 1024 [ 74.089720][ T6475] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 74.121236][ T6475] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1005: lblock 2 mapped to illegal pblock 2 (length 1) [ 74.149671][ T6475] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.1005: lblock 0 mapped to illegal pblock 48 (length 1) [ 74.168534][ T6475] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1005: Failed to acquire dquot type 0 [ 74.180344][ T6475] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 74.190062][ T6475] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1005: mark_inode_dirty error [ 74.206747][ T6475] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 74.217374][ T6475] EXT4-fs (loop0): 1 orphan inode deleted [ 74.229768][ T12] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 74.244468][ T6475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.278246][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 74.328220][ T6475] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm syz.0.1005: lblock 1 mapped to illegal pblock 1 (length 1) [ 74.376256][ T6475] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1005: Failed to acquire dquot type 0 [ 74.391497][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1015'. [ 74.445989][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.455150][ T5940] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 74.514148][ T5940] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 0 [ 74.542855][ T3310] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 74.575611][ T3310] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 74.613318][ T3310] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 74.657502][ T6535] loop8: detected capacity change from 0 to 8192 [ 74.698154][ T6535] FAT-fs (loop8): error, clusters badly computed (2 != 1) [ 74.705429][ T6535] FAT-fs (loop8): Filesystem has been set read-only [ 74.786801][ T6560] loop8: detected capacity change from 0 to 1024 [ 74.797497][ T3398] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.826253][ T3398] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.844037][ T6560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.902263][ T5795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.084917][ T6577] loop0: detected capacity change from 0 to 1024 [ 75.093240][ T6577] EXT4-fs: Ignoring removed orlov option [ 75.100310][ T6577] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 75.132863][ T6577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.176500][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.252700][ T6588] loop8: detected capacity change from 0 to 128 [ 75.261966][ T6588] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 75.275770][ T6588] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8) [ 75.284040][ T6588] FAT-fs (loop8): Filesystem has been set read-only [ 75.290843][ T6588] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522) [ 75.331923][ T6590] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1042: inode has both inline data and extents flags [ 75.348939][ T6592] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6592 comm=syz.8.1043 [ 75.355179][ T6590] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1042: couldn't read orphan inode 15 (err -117) [ 75.373936][ T6590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.504936][ T6598] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.542258][ T5795] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 75.554755][ T5795] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 75.590973][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.613772][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 75.613787][ T29] audit: type=1400 audit(1770072592.146:1105): avc: denied { name_connect } for pid=6602 comm="syz.6.1048" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 75.754419][ T5795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.767277][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.880195][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.896814][ T29] audit: type=1400 audit(1770072592.426:1106): avc: denied { mounton } for pid=6621 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 75.927447][ T29] audit: type=1400 audit(1770072592.446:1107): avc: denied { block_suspend } for pid=6623 comm="syz.0.1057" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.948876][ T29] audit: type=1400 audit(1770072592.456:1108): avc: denied { sys_module } for pid=6621 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.983697][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.032753][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.111546][ T29] audit: type=1400 audit(1770072592.636:1109): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 76.172099][ T12] bridge_slave_1: left allmulticast mode [ 76.177787][ T12] bridge_slave_1: left promiscuous mode [ 76.183527][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.214966][ T12] bridge_slave_0: left allmulticast mode [ 76.220830][ T12] bridge_slave_0: left promiscuous mode [ 76.226499][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.405743][ T29] audit: type=1400 audit(1770072592.936:1110): avc: denied { create } for pid=6653 comm="syz.4.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.435077][ T29] audit: type=1400 audit(1770072592.936:1111): avc: denied { setopt } for pid=6653 comm="syz.4.1061" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.455407][ T29] audit: type=1400 audit(1770072592.936:1112): avc: denied { connect } for pid=6653 comm="syz.4.1061" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.476267][ T29] audit: type=1400 audit(1770072592.936:1113): avc: denied { write } for pid=6653 comm="syz.4.1061" laddr=fe80::a8aa:aaff:feaa:aaaa lport=6 faddr=fc01::a fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.515650][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.532303][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.550865][ T12] bond0 (unregistering): Released all slaves [ 76.590728][ T6659] set_capacity_and_notify: 2 callbacks suppressed [ 76.590744][ T6659] loop4: detected capacity change from 0 to 512 [ 76.656210][ T29] audit: type=1400 audit(1770072593.186:1114): avc: denied { map } for pid=6668 comm="syz.0.1067" path="socket:[15819]" dev="sockfs" ino=15819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.692388][ T6659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.706832][ T12] hsr_slave_0: left promiscuous mode [ 76.712951][ T6659] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.723623][ T12] hsr_slave_1: left promiscuous mode [ 76.737305][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.744818][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.754662][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.762244][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.774698][ T6676] loop0: detected capacity change from 0 to 512 [ 76.779594][ T12] veth1_macvtap: left promiscuous mode [ 76.786506][ T12] veth0_macvtap: left promiscuous mode [ 76.792378][ T12] veth1_vlan: left promiscuous mode [ 76.797664][ T12] veth0_vlan: left promiscuous mode [ 76.804538][ T6676] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1069: bg 0: block 393: padding at end of block bitmap is not set [ 76.819384][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.853710][ T6676] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 76.863156][ T6676] EXT4-fs (loop0): 2 truncates cleaned up [ 76.872859][ T6676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.902372][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.957748][ T12] team0 (unregistering): Port device team_slave_1 removed [ 76.968394][ T12] team0 (unregistering): Port device team_slave_0 removed [ 77.007419][ T6621] chnl_net:caif_netlink_parms(): no params data found [ 77.016059][ T6687] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 77.106766][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.113868][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.127019][ T6621] bridge_slave_0: entered allmulticast mode [ 77.147358][ T6621] bridge_slave_0: entered promiscuous mode [ 77.155127][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.162271][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.169822][ T6621] bridge_slave_1: entered allmulticast mode [ 77.176540][ T6621] bridge_slave_1: entered promiscuous mode [ 77.194915][ T6621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.207265][ T6621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.256071][ T6718] loop4: detected capacity change from 0 to 1024 [ 77.256789][ T6621] team0: Port device team_slave_0 added [ 77.269236][ T6621] team0: Port device team_slave_1 added [ 77.305012][ T6718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.306491][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.324154][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.350091][ T6621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.362775][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.379192][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.386183][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.412110][ T6621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.459125][ T6621] hsr_slave_0: entered promiscuous mode [ 77.465592][ T6621] hsr_slave_1: entered promiscuous mode [ 77.471807][ T6621] debugfs: 'hsr0' already exists in 'hsr' [ 77.477682][ T6621] Cannot create hsr debugfs directory [ 77.660605][ T6621] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 77.728815][ T6621] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 77.763156][ T6621] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 77.773510][ T6761] loop4: detected capacity change from 0 to 1024 [ 77.820349][ T6761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.835256][ T6621] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 77.897226][ T6761] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1094'. [ 77.963250][ T6621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.990121][ T6621] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.045905][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.077184][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.084288][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.116877][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.123972][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.163629][ T6812] loop4: detected capacity change from 0 to 1024 [ 78.225245][ T6812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.257837][ T6812] EXT4-fs (loop4): shut down requested (0) [ 78.296400][ T6621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.369839][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.435315][ T6855] vhci_hcd vhci_hcd.3: default hub control req: 010b v0000 i0000 l0 [ 78.535368][ T6621] veth0_vlan: entered promiscuous mode [ 78.547458][ T6621] veth1_vlan: entered promiscuous mode [ 78.564331][ T6621] veth0_macvtap: entered promiscuous mode [ 78.572159][ T6621] veth1_macvtap: entered promiscuous mode [ 78.584160][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.596603][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.609651][ T5942] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.625762][ T5942] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.638662][ T5942] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.660889][ T5942] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.371619][ T6845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.429987][ T6932] syzkaller1: entered promiscuous mode [ 81.430677][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 81.430691][ T29] audit: type=1400 audit(1770072597.966:1193): avc: denied { ioctl } for pid=6931 comm="syz.6.1150" path="socket:[17495]" dev="sockfs" ino=17495 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.435553][ T6932] syzkaller1: entered allmulticast mode [ 81.590017][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1147'. [ 81.614473][ T6958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.656307][ T29] audit: type=1400 audit(1770072598.186:1194): avc: denied { bind } for pid=6965 comm="syz.9.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.719225][ T6967] loop4: detected capacity change from 0 to 512 [ 81.726406][ T6967] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.769002][ T29] audit: type=1400 audit(1770072598.296:1195): avc: denied { bind } for pid=6976 comm="syz.9.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.788454][ T29] audit: type=1400 audit(1770072598.296:1196): avc: denied { name_bind } for pid=6976 comm="syz.9.1155" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 81.809444][ T29] audit: type=1400 audit(1770072598.296:1197): avc: denied { node_bind } for pid=6976 comm="syz.9.1155" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 81.832298][ T29] audit: type=1400 audit(1770072598.296:1198): avc: denied { mounton } for pid=6974 comm="syz.7.1154" path="/proc/177/task" dev="proc" ino=17563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 81.878955][ T6967] EXT4-fs (loop4): 1 truncate cleaned up [ 81.886950][ T6967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.930188][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'. [ 81.937858][ T6996] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1158'. [ 81.969482][ T29] audit: type=1400 audit(1770072598.496:1199): avc: denied { create } for pid=6963 comm="syz.4.1151" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 82.011685][ T29] audit: type=1400 audit(1770072598.496:1200): avc: denied { rename } for pid=6963 comm="syz.4.1151" name="file3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.033999][ T29] audit: type=1400 audit(1770072598.496:1201): avc: denied { unlink } for pid=6963 comm="syz.4.1151" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.097413][ T29] audit: type=1400 audit(1770072598.626:1202): avc: denied { setopt } for pid=7007 comm="syz.7.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.119852][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.200492][ T7020] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1163'. [ 82.279048][ T7020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.305619][ T7020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.317025][ T7020] bond0 (unregistering): Released all slaves [ 82.405493][ T7045] loop6: detected capacity change from 0 to 128 [ 82.507870][ T7055] loop0: detected capacity change from 0 to 256 [ 82.518931][ T7055] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 82.582757][ T31] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 82.606603][ T7069] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1182'. [ 82.660170][ T7073] debugfs: 'ttyS3' already exists in 'caif_serial' [ 82.678115][ T7077] loop4: detected capacity change from 0 to 1024 [ 82.688253][ T7076] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1186'. [ 82.699254][ T7077] EXT4-fs: Ignoring removed nobh option [ 82.705097][ T7077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.759280][ T7077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.780645][ T7085] loop0: detected capacity change from 0 to 1024 [ 82.807659][ T7089] capability: warning: `syz.7.1191' uses 32-bit capabilities (legacy support in use) [ 82.822981][ T7085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.836736][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.854803][ T7085] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 82.878679][ T7085] EXT4-fs (loop0): Remounting filesystem read-only [ 82.887369][ T7085] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 82.935544][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.976506][ T7104] loop7: detected capacity change from 0 to 256 [ 83.011666][ T7109] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 83.019515][ T7109] netlink: 'syz.0.1197': attribute type 4 has an invalid length. [ 83.027235][ T7109] netlink: 15586 bytes leftover after parsing attributes in process `syz.0.1197'. [ 83.058742][ T7112] loop9: detected capacity change from 0 to 1024 [ 83.088634][ T7112] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.212031][ T6621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.272775][ T7105] dvmrp1: entered allmulticast mode [ 83.280268][ T7105] dvmrp1: left allmulticast mode [ 83.301619][ T7133] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1210'. [ 83.332083][ T7127] loop4: detected capacity change from 0 to 8192 [ 83.378414][ T7138] loop0: detected capacity change from 0 to 1024 [ 83.420522][ T7138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.448842][ T7142] loop9: detected capacity change from 0 to 1024 [ 83.484598][ T7147] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1216'. [ 83.509754][ T7138] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.523687][ T7142] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 83.547599][ T7138] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.1211: lblock 0 mapped to illegal pblock 0 (length 4) [ 83.569223][ T7142] System zones: 0-1, 3-36 [ 83.576091][ T7138] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 83.588526][ T7138] EXT4-fs (loop0): This should not happen!! Data will be lost [ 83.588526][ T7138] [ 83.593813][ T7147] bridge1: entered promiscuous mode [ 83.599651][ T7138] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.1211: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.605216][ T7147] bridge1: entered allmulticast mode [ 83.617292][ T7138] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.1211: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.617479][ T7138] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.1211: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.627560][ T7142] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.1213: bad orphan inode 134217728 [ 83.639218][ T7138] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.1211: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.650710][ T7142] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.680985][ T7138] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.1211: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 83.756864][ T31] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:1: lblock 4 mapped to illegal pblock 4 (length 1) [ 83.771546][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 83.783976][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 83.783976][ T31] [ 83.795308][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 83.915519][ T7162] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.025524][ T7162] ================================================================== [ 84.033628][ T7162] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 84.040746][ T7162] [ 84.043063][ T7162] write to 0xffff88813b826170 of 2 bytes by task 7166 on cpu 1: [ 84.050678][ T7162] fat16_ent_put+0x28/0x60 [ 84.055093][ T7162] fat_alloc_clusters+0x57b/0xc50 [ 84.060125][ T7162] fat_add_cluster+0x46/0xe0 [ 84.064713][ T7162] fat_fallocate+0x11e/0x1c0 [ 84.069305][ T7162] vfs_fallocate+0x3b6/0x450 [ 84.073892][ T7162] __x64_sys_fallocate+0x7a/0xd0 [ 84.078830][ T7162] x64_sys_call+0x1cd4/0x3000 [ 84.083517][ T7162] do_syscall_64+0xc0/0x2a0 [ 84.088030][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.093920][ T7162] [ 84.096243][ T7162] read to 0xffff88813b826000 of 512 bytes by task 7162 on cpu 0: [ 84.103953][ T7162] fat_mirror_bhs+0x1df/0x320 [ 84.108626][ T7162] fat_ent_write+0xd0/0xe0 [ 84.113049][ T7162] fat_chain_add+0x16c/0x490 [ 84.117629][ T7162] fat_get_block+0x46c/0x5e0 [ 84.122210][ T7162] __block_write_begin_int+0x400/0xf90 [ 84.127662][ T7162] cont_write_begin+0x5fe/0x970 [ 84.132507][ T7162] fat_write_begin+0x4f/0xe0 [ 84.137089][ T7162] cont_write_begin+0x1b0/0x970 [ 84.141932][ T7162] fat_write_begin+0x4f/0xe0 [ 84.146515][ T7162] generic_cont_expand_simple+0xb0/0x150 [ 84.152141][ T7162] fat_cont_expand+0x3e/0x170 [ 84.156809][ T7162] fat_fallocate+0x177/0x1c0 [ 84.161390][ T7162] vfs_fallocate+0x3b6/0x450 [ 84.165972][ T7162] __x64_sys_fallocate+0x7a/0xd0 [ 84.170903][ T7162] x64_sys_call+0x1cd4/0x3000 [ 84.175574][ T7162] do_syscall_64+0xc0/0x2a0 [ 84.180073][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.185963][ T7162] [ 84.188273][ T7162] Reported by Kernel Concurrency Sanitizer on: [ 84.194408][ T7162] CPU: 0 UID: 0 PID: 7162 Comm: syz.7.1221 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.204117][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.214164][ T7162] ================================================================== [ 84.348569][ T6621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.