last executing test programs: 14.347760754s ago: executing program 4 (id=2964): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r0, 0x0, 0x0) fchdir(r6) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 13.428872154s ago: executing program 4 (id=2968): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x0) 13.174891396s ago: executing program 4 (id=2970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48) 13.052955781s ago: executing program 4 (id=2971): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00'}, 0x18) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc131b8e11e775ef7ff118fe916e4017771c3d08f678e6", 0x2c) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 12.043301365s ago: executing program 4 (id=2977): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x348cf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 9.366052322s ago: executing program 4 (id=2986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0xb, r5, 0x0, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_int(r6, 0x1, 0x5, 0x0, &(0x7f00000000c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 3.971145707s ago: executing program 1 (id=3008): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x348cf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) syz_io_uring_setup(0xeb, &(0x7f0000000480)={0x0, 0x7dbf, 0x8, 0x0, 0x1f0}, 0x0, &(0x7f0000000540)) fcntl$addseals(r1, 0x409, 0xb) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.098103145s ago: executing program 0 (id=3011): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") 2.991136339s ago: executing program 2 (id=3013): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0x90, 0x0, &(0x7f0000000440)="340b76235e542388314c94ffb092fe45f73f8c986973c4976cfb5e6d1d8c82244df1f513a1c1fbfa9a9f0b95aeb353c71ce43ab84de2d842a33e91ce88d884ec2a248e85b886f115b686136aaf601bbff88abe474a8494073ad74fa9adc48bb0577ba007c034067d35226a6049c20b62fef3bad5f9e53c8ea5682c0073eec76929c6d3362325fe1144dcc97ff2c5aa59"}, 0x50) 2.730206731s ago: executing program 0 (id=3014): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001500)=0x14) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r6, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 2.692601513s ago: executing program 2 (id=3016): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x348cf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) syz_io_uring_setup(0xeb, &(0x7f0000000480)={0x0, 0x7dbf, 0x8, 0x0, 0x1f0}, 0x0, &(0x7f0000000540)) fcntl$addseals(r1, 0x409, 0xb) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.692339583s ago: executing program 3 (id=3017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x9, 0x5, 0xa, 0x6, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1004, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.52891297s ago: executing program 0 (id=3018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0xb, r5, 0x0, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_int(r6, 0x1, 0x5, 0x0, &(0x7f00000000c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 1.765806363s ago: executing program 2 (id=3019): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) 1.60674813s ago: executing program 3 (id=3020): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) 1.474600906s ago: executing program 0 (id=3021): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) 1.333644682s ago: executing program 3 (id=3022): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsmount(r0, 0x1, 0x2) 1.197774018s ago: executing program 1 (id=3023): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) 1.130742031s ago: executing program 3 (id=3024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) getrlimit(0x4, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x2) fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) 854.273653ms ago: executing program 2 (id=3025): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000d"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 523.183038ms ago: executing program 0 (id=3026): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) sync_file_range(r4, 0x4, 0x8, 0x7) 391.186133ms ago: executing program 2 (id=3027): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) io_uring_setup(0x217b, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, 0xfffffffe}) 289.428628ms ago: executing program 1 (id=3028): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001500)=0x14) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r6, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 258.591239ms ago: executing program 1 (id=3029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x9, 0x5, 0xa, 0x6, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1004, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 227.98732ms ago: executing program 3 (id=3030): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003700)=ANY=[@ANYBLOB="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"/2542], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) getuid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) 220.979711ms ago: executing program 2 (id=3031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) sync_file_range(r4, 0x4, 0x8, 0x7) 142.090184ms ago: executing program 1 (id=3032): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070000000900000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001500)=0x14) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r6, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 94.484696ms ago: executing program 0 (id=3033): getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) inotify_init() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 68.820317ms ago: executing program 1 (id=3034): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00'}, 0x18) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc131b8e11e775ef7ff118fe916e4017771c3d08f678e6", 0x2c) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 3 (id=3035): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 74842][T10271] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2251: bg 0: block 248: padding at end of block bitmap is not set [ 346.795782][T10271] __quota_error: 2 callbacks suppressed [ 346.801375][T10271] Quota error (device loop0): write_blk: dquota write failed [ 346.808865][T10271] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 346.818879][T10271] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2251: Failed to acquire dquot type 1 [ 346.836222][T10271] EXT4-fs (loop0): 1 truncate cleaned up [ 346.879853][T10271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 347.323635][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.937765][T10285] loop2: detected capacity change from 0 to 512 [ 347.956015][T10276] loop3: detected capacity change from 0 to 2048 [ 347.985914][T10285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.022973][T10276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.074441][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.109337][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.551517][T10296] loop1: detected capacity change from 0 to 512 [ 348.573345][T10296] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.591190][T10296] EXT4-fs (loop1): orphan cleanup on readonly fs [ 348.598593][T10296] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2258: bg 0: block 248: padding at end of block bitmap is not set [ 348.613330][T10296] Quota error (device loop1): write_blk: dquota write failed [ 348.620705][T10296] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 348.630632][T10296] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2258: Failed to acquire dquot type 1 [ 348.643225][T10296] EXT4-fs (loop1): 1 truncate cleaned up [ 348.654707][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.682268][T10296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 349.306061][ T29] audit: type=1326 audit(1763591562.109:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798fb3f749 code=0x7ffc0000 [ 349.329642][ T29] audit: type=1326 audit(1763591562.109:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798fb3f749 code=0x7ffc0000 [ 349.353156][ T29] audit: type=1326 audit(1763591562.109:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798fb3f749 code=0x7ffc0000 [ 349.376899][ T29] audit: type=1326 audit(1763591562.109:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798fb3f749 code=0x7ffc0000 [ 349.400412][ T29] audit: type=1326 audit(1763591562.109:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798fb3f749 code=0x7ffc0000 [ 349.423918][ T29] audit: type=1326 audit(1763591562.109:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798fb3f749 code=0x7ffc0000 [ 351.041806][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.168273][T10339] loop4: detected capacity change from 0 to 512 [ 351.200547][T10339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 351.219643][T10339] EXT4-fs (loop4): orphan cleanup on readonly fs [ 351.227404][T10339] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2272: bg 0: block 248: padding at end of block bitmap is not set [ 351.242996][T10339] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2272: Failed to acquire dquot type 1 [ 351.259675][T10339] EXT4-fs (loop4): 1 truncate cleaned up [ 351.274739][T10339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 353.176094][T10361] loop3: detected capacity change from 0 to 512 [ 353.191373][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.235052][T10361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.272136][T10361] EXT4-fs (loop3): orphan cleanup on readonly fs [ 353.279343][T10361] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2280: bg 0: block 248: padding at end of block bitmap is not set [ 353.294486][T10361] __quota_error: 26 callbacks suppressed [ 353.294543][T10361] Quota error (device loop3): write_blk: dquota write failed [ 353.307726][T10361] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 353.317757][T10361] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2280: Failed to acquire dquot type 1 [ 353.331643][T10361] EXT4-fs (loop3): 1 truncate cleaned up [ 353.339245][T10361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 353.372495][T10363] netlink: 'syz.0.2282': attribute type 12 has an invalid length. [ 353.688018][T10372] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 353.784081][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2285'. [ 354.455219][ T29] audit: type=1326 audit(1763591567.159:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.0.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798fb3f749 code=0x7ffc0000 [ 354.478855][ T29] audit: type=1326 audit(1763591567.159:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.0.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798fb3f749 code=0x7ffc0000 [ 354.502465][ T29] audit: type=1326 audit(1763591567.159:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.0.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798fb3f749 code=0x7ffc0000 [ 354.526044][ T29] audit: type=1326 audit(1763591567.159:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.0.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798fb3f749 code=0x7ffc0000 [ 354.549577][ T29] audit: type=1326 audit(1763591567.169:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.0.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798fb3f749 code=0x7ffc0000 [ 354.573066][ T29] audit: type=1326 audit(1763591567.169:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.0.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798fb3f749 code=0x7ffc0000 [ 354.596556][ T29] audit: type=1326 audit(1763591567.169:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.0.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798fb3f749 code=0x7ffc0000 [ 354.620113][ T29] audit: type=1326 audit(1763591567.169:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.0.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798fb3f749 code=0x7ffc0000 [ 354.992070][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.208777][T10390] loop3: detected capacity change from 0 to 2048 [ 355.233351][T10390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.245789][T10394] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 355.301947][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.424823][T10414] netlink: 'syz.3.2295': attribute type 12 has an invalid length. [ 355.579753][T10424] tipc: Enabled bearer , priority 0 [ 355.588666][T10424] syzkaller0: entered promiscuous mode [ 355.594312][T10424] syzkaller0: entered allmulticast mode [ 355.608498][T10424] tipc: Resetting bearer [ 355.657873][T10423] tipc: Resetting bearer [ 355.719663][T10423] tipc: Disabling bearer [ 357.003771][T10448] netlink: 'syz.2.2308': attribute type 12 has an invalid length. [ 358.586925][T10472] loop2: detected capacity change from 0 to 256 [ 358.610125][T10472] FAT-fs (loop2): bogus number of FAT sectors [ 358.616265][T10472] FAT-fs (loop2): Can't find a valid FAT filesystem [ 358.626774][T10461] loop0: detected capacity change from 0 to 1024 [ 358.660463][T10461] EXT4-fs: test_dummy_encryption option not supported [ 359.041145][T10483] 9pnet_fd: Insufficient options for proto=fd [ 359.065806][T10478] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 359.196353][T10494] netlink: 'syz.0.2321': attribute type 13 has an invalid length. [ 359.287180][T10494] gretap0: refused to change device tx_queue_len [ 359.294623][T10494] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 359.615877][T10501] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 360.041141][T10513] loop0: detected capacity change from 0 to 1024 [ 360.060498][T10513] __quota_error: 82 callbacks suppressed [ 360.060511][T10513] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 360.075303][T10513] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 360.084786][T10513] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2330: Failed to acquire dquot type 0 [ 360.096923][T10513] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 360.111577][T10513] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2330: corrupted inode contents [ 360.126693][T10513] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #13: comm syz.0.2330: mark_inode_dirty error [ 360.140505][T10513] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2330: corrupted inode contents [ 360.190810][T10513] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.2330: mark_inode_dirty error [ 360.202336][T10513] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2330: corrupted inode contents [ 360.214585][T10513] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 360.223392][T10513] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2330: corrupted inode contents [ 360.235762][T10513] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.2330: mark_inode_dirty error [ 360.247544][T10513] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 360.257231][T10513] EXT4-fs (loop0): 1 truncate cleaned up [ 360.264122][T10513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.434552][T10522] 9pnet_fd: Insufficient options for proto=fd [ 360.608311][T10523] loop3: detected capacity change from 0 to 1024 [ 360.745817][T10523] EXT4-fs: test_dummy_encryption option not supported [ 361.079720][T10529] loop4: detected capacity change from 0 to 2048 [ 361.115545][T10529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.128459][T10539] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 361.137625][T10539] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 361.147034][T10539] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2330: Failed to acquire dquot type 0 [ 361.333323][T10542] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 361.588582][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.789590][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.184745][T10591] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2354'. [ 364.193881][T10591] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2354'. [ 364.343935][ T29] audit: type=1400 audit(1763591577.419:1940): avc: denied { getopt } for pid=10585 comm="syz.4.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 364.453796][T10594] loop1: detected capacity change from 0 to 1024 [ 364.514277][T10594] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 364.523384][T10594] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 364.532802][T10594] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2356: Failed to acquire dquot type 0 [ 364.552979][T10594] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 364.569829][T10594] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2356: corrupted inode contents [ 364.583011][T10594] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.2356: mark_inode_dirty error [ 364.599079][T10599] netlink: 'syz.0.2357': attribute type 12 has an invalid length. [ 364.607321][T10594] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2356: corrupted inode contents [ 364.619415][T10594] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.2356: mark_inode_dirty error [ 364.637707][T10594] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2356: corrupted inode contents [ 364.650407][T10594] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 364.660005][T10594] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2356: corrupted inode contents [ 364.673034][T10594] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.2356: mark_inode_dirty error [ 364.851568][T10594] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 364.882210][T10594] EXT4-fs (loop1): 1 truncate cleaned up [ 364.888850][T10594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.771660][T10623] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 366.780754][T10623] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 366.790290][T10623] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2356: Failed to acquire dquot type 0 [ 367.595394][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.618814][T10639] netlink: 'syz.3.2370': attribute type 12 has an invalid length. [ 369.642610][T10670] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2377'. [ 369.651784][T10670] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2377'. [ 369.761268][T10672] loop2: detected capacity change from 0 to 1024 [ 370.096864][T10672] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 370.106088][T10672] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 370.115548][T10672] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2382: Failed to acquire dquot type 0 [ 370.134399][T10672] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 370.178310][T10686] loop0: detected capacity change from 0 to 1024 [ 370.192129][T10684] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 370.210402][T10672] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2382: corrupted inode contents [ 370.231377][T10686] EXT4-fs: test_dummy_encryption option not supported [ 370.264742][T10672] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.2382: mark_inode_dirty error [ 370.462751][T10672] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2382: corrupted inode contents [ 370.475631][T10672] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.2382: mark_inode_dirty error [ 370.493580][T10672] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2382: corrupted inode contents [ 370.517875][T10672] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 370.534922][T10672] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2382: corrupted inode contents [ 370.547592][T10672] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.2382: mark_inode_dirty error [ 370.681070][T10672] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 370.709819][T10672] EXT4-fs (loop2): 1 truncate cleaned up [ 370.727199][T10672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.096823][T10703] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 371.105962][T10703] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 371.115399][T10703] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2382: Failed to acquire dquot type 0 [ 372.519767][T10724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2399'. [ 372.529052][T10724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2399'. [ 372.557652][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.717437][T10740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2401'. [ 373.726645][T10740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2401'. [ 373.863004][T10746] netlink: 'syz.4.2406': attribute type 12 has an invalid length. [ 374.090630][T10760] loop4: detected capacity change from 0 to 1024 [ 374.132900][T10760] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 374.141996][T10760] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 374.151365][T10760] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2409: Failed to acquire dquot type 0 [ 374.218977][T10763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2407'. [ 374.228022][T10763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2407'. [ 374.417220][T10760] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 374.495069][T10760] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2409: corrupted inode contents [ 374.525599][T10760] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #13: comm syz.4.2409: mark_inode_dirty error [ 374.626643][T10760] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2409: corrupted inode contents [ 375.016683][T10760] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.2409: mark_inode_dirty error [ 375.064040][T10760] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2409: corrupted inode contents [ 375.107736][T10760] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 375.167315][T10760] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2409: corrupted inode contents [ 375.181562][T10760] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.2409: mark_inode_dirty error [ 375.203951][T10760] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 375.215313][T10760] EXT4-fs (loop4): 1 truncate cleaned up [ 375.233724][T10760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.641242][T10788] xt_TPROXY: Can be used only with -p tcp or -p udp [ 376.128793][T10791] loop0: detected capacity change from 0 to 128 [ 376.230216][T10796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2420'. [ 376.523432][T10797] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 376.532612][T10797] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 376.542040][T10797] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2409: Failed to acquire dquot type 0 [ 376.616264][T10801] loop3: detected capacity change from 0 to 128 [ 376.881490][T10804] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2422'. [ 376.891049][T10804] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2422'. [ 376.891104][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.034461][T10801] syz.3.2421: attempt to access beyond end of device [ 377.034461][T10801] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 377.047991][T10801] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 377.691314][T10815] netlink: 'syz.0.2425': attribute type 12 has an invalid length. [ 377.889786][T10817] loop4: detected capacity change from 0 to 512 [ 378.027066][T10817] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2426: inode has both inline data and extents flags [ 378.071631][T10817] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2426: couldn't read orphan inode 15 (err -117) [ 378.134534][T10817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.212580][T10826] tipc: Enabled bearer , priority 0 [ 378.249607][T10826] tipc: Resetting bearer [ 378.275100][T10825] tipc: Disabling bearer [ 378.332345][T10834] loop0: detected capacity change from 0 to 1024 [ 378.342326][T10834] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 378.351470][T10834] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 378.360861][T10834] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2433: Failed to acquire dquot type 0 [ 378.381032][T10834] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 378.396165][T10834] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2433: corrupted inode contents [ 378.409278][T10834] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #13: comm syz.0.2433: mark_inode_dirty error [ 378.428305][T10834] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2433: corrupted inode contents [ 378.449935][T10834] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.2433: mark_inode_dirty error [ 378.461439][T10834] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2433: corrupted inode contents [ 378.473602][T10834] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 378.482689][T10834] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2433: corrupted inode contents [ 378.494698][T10834] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.2433: mark_inode_dirty error [ 378.533929][T10834] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 378.559573][T10834] EXT4-fs (loop0): 1 truncate cleaned up [ 378.574758][T10834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.956878][T10843] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 378.966037][T10843] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 378.975564][T10843] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2433: Failed to acquire dquot type 0 [ 379.726565][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.281801][T10871] loop2: detected capacity change from 0 to 128 [ 380.687445][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.936095][T10871] syz.2.2445: attempt to access beyond end of device [ 380.936095][T10871] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 380.949672][T10871] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 381.043930][T10879] loop1: detected capacity change from 0 to 512 [ 381.145429][T10879] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2448: inode has both inline data and extents flags [ 381.189143][T10879] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2448: couldn't read orphan inode 15 (err -117) [ 381.212567][T10879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.240647][T10894] netlink: 'syz.2.2451': attribute type 13 has an invalid length. [ 381.266615][T10894] gretap0: refused to change device tx_queue_len [ 381.273241][T10894] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 381.358123][T10896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2447'. [ 381.367340][T10896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2447'. [ 383.556703][T10920] syzkaller0: entered promiscuous mode [ 383.562288][T10920] syzkaller0: entered allmulticast mode [ 384.126157][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.752955][T10939] xt_TPROXY: Can be used only with -p tcp or -p udp [ 385.236032][T10951] loop2: detected capacity change from 0 to 1024 [ 385.284120][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2474'. [ 385.305045][T10951] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 385.314180][T10951] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 385.323609][T10951] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2472: Failed to acquire dquot type 0 [ 385.361682][T10951] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 385.373595][T10958] syzkaller0: entered promiscuous mode [ 385.381630][T10958] syzkaller0: entered allmulticast mode [ 385.402766][T10951] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2472: corrupted inode contents [ 385.414984][T10951] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.2472: mark_inode_dirty error [ 385.432854][T10954] bridge8: port 1(veth9) entered blocking state [ 385.434811][T10951] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2472: corrupted inode contents [ 385.439204][T10954] bridge8: port 1(veth9) entered disabled state [ 385.457954][T10954] veth9: entered allmulticast mode [ 385.464477][T10954] veth9: entered promiscuous mode [ 385.470239][T10951] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.2472: mark_inode_dirty error [ 385.474108][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2474'. [ 385.482428][T10951] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2472: corrupted inode contents [ 385.503805][T10951] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 385.529371][T10951] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2472: corrupted inode contents [ 385.552845][T10951] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.2472: mark_inode_dirty error [ 385.579725][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2480'. [ 385.596546][T10951] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 385.632884][T10951] EXT4-fs (loop2): 1 truncate cleaned up [ 385.651966][T10951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.993608][T10981] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2482'. [ 386.002657][T10981] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2482'. [ 386.789603][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2488'. [ 386.824676][T10990] bridge3: port 1(veth5) entered blocking state [ 386.831064][T10990] bridge3: port 1(veth5) entered disabled state [ 387.634419][T10990] veth5: entered allmulticast mode [ 387.643843][T10995] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 387.653132][T10995] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 387.662633][T10995] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2472: Failed to acquire dquot type 0 [ 388.052322][T10990] veth5: entered promiscuous mode [ 388.072535][T10990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2488'. [ 388.110430][T10990] vlan2: entered allmulticast mode [ 388.116213][T10990] bridge3: port 2(vlan2) entered blocking state [ 388.122597][T10990] bridge3: port 2(vlan2) entered disabled state [ 388.130972][T10990] vlan2: entered promiscuous mode [ 388.136051][T10990] veth0_to_bond: entered promiscuous mode [ 388.470062][T11006] syzkaller0: entered promiscuous mode [ 388.475740][T11006] syzkaller0: entered allmulticast mode [ 388.749418][T11013] syzkaller0: entered promiscuous mode [ 388.755022][T11013] syzkaller0: entered allmulticast mode [ 388.950569][T11020] loop3: detected capacity change from 0 to 128 [ 389.128228][T11021] syz.3.2498: attempt to access beyond end of device [ 389.128228][T11021] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 389.141698][T11021] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 389.201635][T11020] syz.3.2498: attempt to access beyond end of device [ 389.201635][T11020] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 389.215135][T11020] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 389.292149][T11021] syz.3.2498: attempt to access beyond end of device [ 389.292149][T11021] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 389.305603][T11021] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 389.442601][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.724647][T11037] loop2: detected capacity change from 0 to 2048 [ 389.762060][T11043] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 389.798381][T11037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.962641][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.068625][T11053] syzkaller0: entered promiscuous mode [ 390.074307][T11053] syzkaller0: entered allmulticast mode [ 390.086460][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2508'. [ 390.208001][T11061] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2510'. [ 390.217439][T11061] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2510'. [ 390.261641][T11065] netlink: 'syz.2.2513': attribute type 12 has an invalid length. [ 390.361368][T11068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2511'. [ 390.370670][T11068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2511'. [ 390.432125][T11071] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 390.826821][T11082] loop1: detected capacity change from 0 to 2048 [ 390.844403][T11082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.870992][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.493663][T11097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2520'. [ 391.502796][T11097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2520'. [ 392.767675][T11118] loop0: detected capacity change from 0 to 2048 [ 392.783876][T11118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.029868][T11130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2532'. [ 393.077225][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.094803][T11130] bridge6: port 1(veth11) entered blocking state [ 393.101569][T11130] bridge6: port 1(veth11) entered disabled state [ 393.122857][T11130] veth11: entered allmulticast mode [ 393.130364][T11130] veth11: entered promiscuous mode [ 393.138169][T11131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2531'. [ 393.150099][T11131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2531'. [ 394.428604][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2545'. [ 394.552076][T11167] bridge9: port 1(veth11) entered blocking state [ 394.558465][T11167] bridge9: port 1(veth11) entered disabled state [ 394.730794][T11167] veth11: entered allmulticast mode [ 394.758293][T11167] veth11: entered promiscuous mode [ 394.811647][T11174] loop0: detected capacity change from 0 to 2048 [ 394.884712][T11174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.930843][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.000704][T11195] loop2: detected capacity change from 0 to 1024 [ 395.032984][T11195] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 395.042126][T11195] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 395.051553][T11195] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2555: Failed to acquire dquot type 0 [ 395.106850][T11195] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 395.139100][T11195] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2555: corrupted inode contents [ 395.151779][T11195] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.2555: mark_inode_dirty error [ 395.163444][T11195] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2555: corrupted inode contents [ 395.344626][T11195] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.2555: mark_inode_dirty error [ 395.356490][T11195] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2555: corrupted inode contents [ 395.369100][T11195] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 395.377952][T11195] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2555: corrupted inode contents [ 395.425462][T11195] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.2555: mark_inode_dirty error [ 395.475127][T11195] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 395.512674][T11195] EXT4-fs (loop2): 1 truncate cleaned up [ 395.540140][T11195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.872681][T11213] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 395.881791][T11213] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 395.891158][T11213] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2555: Failed to acquire dquot type 0 [ 396.035443][T11218] netlink: 'syz.4.2560': attribute type 12 has an invalid length. [ 396.430414][T11231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2565'. [ 396.439563][T11231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2565'. [ 396.648927][T11224] loop4: detected capacity change from 0 to 2048 [ 396.762642][T11224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.787581][T11236] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 396.838582][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.877049][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.907290][T11241] loop4: detected capacity change from 0 to 128 [ 396.925625][T11242] loop3: detected capacity change from 0 to 256 [ 396.944001][T11242] FAT-fs (loop3): bogus number of FAT sectors [ 396.950111][T11242] FAT-fs (loop3): Can't find a valid FAT filesystem [ 397.009065][T11245] netlink: 'syz.2.2569': attribute type 13 has an invalid length. [ 397.076310][T11245] gretap0: refused to change device tx_queue_len [ 397.082989][T11245] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 397.191755][T11241] syz.4.2568: attempt to access beyond end of device [ 397.191755][T11241] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 397.205191][T11241] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 397.214856][T11246] syz.4.2568: attempt to access beyond end of device [ 397.214856][T11246] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 397.228294][T11246] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 397.250743][T11250] loop0: detected capacity change from 0 to 128 [ 397.406918][T11252] syz.0.2570: attempt to access beyond end of device [ 397.406918][T11252] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 397.420364][T11252] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 397.442397][T11255] netlink: 'syz.4.2573': attribute type 12 has an invalid length. [ 397.506916][T11252] syz.0.2570: attempt to access beyond end of device [ 397.506916][T11252] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 397.520617][T11252] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 397.633103][T11261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2572'. [ 397.642361][T11261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2572'. [ 398.308222][T11267] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 398.478177][T11277] loop4: detected capacity change from 0 to 1024 [ 398.498683][T11277] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 398.507802][T11277] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 398.507864][T11269] loop3: detected capacity change from 0 to 2048 [ 398.523610][T11277] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2581: Failed to acquire dquot type 0 [ 398.536353][T11277] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 398.540374][T11269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.551338][T11277] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2581: corrupted inode contents [ 398.583745][T11277] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #13: comm syz.4.2581: mark_inode_dirty error [ 398.589833][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2582'. [ 398.604717][T11277] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2581: corrupted inode contents [ 398.617962][T11283] bridge6: port 1(veth13) entered blocking state [ 398.624365][T11283] bridge6: port 1(veth13) entered disabled state [ 398.636485][T11277] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.2581: mark_inode_dirty error [ 398.648344][T11283] veth13: entered allmulticast mode [ 398.654277][T11283] veth13: entered promiscuous mode [ 398.671774][T11277] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2581: corrupted inode contents [ 398.685643][T11277] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 398.694585][T11277] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2581: corrupted inode contents [ 398.707446][T11277] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.2581: mark_inode_dirty error [ 398.718846][T11277] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 398.728299][T11277] EXT4-fs (loop4): 1 truncate cleaned up [ 398.734648][T11277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.754601][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.872978][T11277] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 398.882093][T11277] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 398.891505][T11277] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2581: Failed to acquire dquot type 0 [ 398.947804][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.078288][T11297] loop2: detected capacity change from 0 to 512 [ 399.089755][T11297] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 399.631056][T11297] EXT4-fs (loop2): orphan cleanup on readonly fs [ 399.638587][T11297] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2586: bg 0: block 248: padding at end of block bitmap is not set [ 399.654446][T11297] Quota error (device loop2): write_blk: dquota write failed [ 399.661939][T11297] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 399.671957][T11297] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2586: Failed to acquire dquot type 1 [ 399.687017][T11297] EXT4-fs (loop2): 1 truncate cleaned up [ 399.693815][T11297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.993617][T11304] loop3: detected capacity change from 0 to 128 [ 400.011002][T11305] 9pnet_fd: Insufficient options for proto=fd [ 400.996951][T11318] loop3: detected capacity change from 0 to 256 [ 401.129797][T11318] FAT-fs (loop3): bogus number of FAT sectors [ 401.135942][T11318] FAT-fs (loop3): Can't find a valid FAT filesystem [ 401.596648][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.761247][T11327] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2594'. [ 401.770369][T11327] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2594'. [ 402.093220][T11321] loop0: detected capacity change from 0 to 2048 [ 402.101956][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2596'. [ 402.131776][T11328] loop2: detected capacity change from 0 to 256 [ 402.172480][T11328] FAT-fs (loop2): bogus number of FAT sectors [ 402.178640][T11328] FAT-fs (loop2): Can't find a valid FAT filesystem [ 402.192816][T11321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.210022][T11330] bridge4: port 1(veth7) entered blocking state [ 402.216392][T11330] bridge4: port 1(veth7) entered disabled state [ 402.238560][T11330] veth7: entered allmulticast mode [ 402.251326][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.254206][T11330] veth7: entered promiscuous mode [ 402.666831][T11349] 9pnet_fd: Insufficient options for proto=fd [ 402.804093][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2605'. [ 402.909252][T11359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2603'. [ 402.918440][T11359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2603'. [ 404.151473][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2611'. [ 404.187138][T11375] loop2: detected capacity change from 0 to 2048 [ 404.234786][T11379] bridge11: port 1(veth13) entered blocking state [ 404.241289][T11379] bridge11: port 1(veth13) entered disabled state [ 404.258874][T11375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.261693][T11379] veth13: entered allmulticast mode [ 404.304827][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.322458][T11379] veth13: entered promiscuous mode [ 405.269379][T11394] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2614'. [ 405.278473][T11394] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2614'. [ 405.726853][T11401] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2616'. [ 405.741319][T11401] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2616'. [ 405.751689][T11406] loop4: detected capacity change from 0 to 128 [ 405.902880][T11410] syz.4.2618: attempt to access beyond end of device [ 405.902880][T11410] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 405.916410][T11410] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 405.925429][T11406] syz.4.2618: attempt to access beyond end of device [ 405.925429][T11406] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 405.938857][T11406] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 405.948778][T11410] syz.4.2618: attempt to access beyond end of device [ 405.948778][T11410] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 405.962295][T11410] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 406.028772][T11414] tipc: Enabled bearer , priority 0 [ 406.037871][T11414] tipc: Resetting bearer [ 406.050706][T11413] tipc: Disabling bearer [ 406.230480][T11424] loop0: detected capacity change from 0 to 256 [ 406.304872][T11424] FAT-fs (loop0): bogus number of FAT sectors [ 406.311035][T11424] FAT-fs (loop0): Can't find a valid FAT filesystem [ 406.369229][T11426] 9pnet_fd: Insufficient options for proto=fd [ 406.624882][T11432] loop4: detected capacity change from 0 to 512 [ 406.634378][T11432] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 406.649998][T11432] EXT4-fs (loop4): orphan cleanup on readonly fs [ 406.659630][T11432] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2626: bg 0: block 248: padding at end of block bitmap is not set [ 406.677021][T11432] Quota error (device loop4): write_blk: dquota write failed [ 406.684466][T11432] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 406.694523][T11432] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2626: Failed to acquire dquot type 1 [ 406.712066][T11432] EXT4-fs (loop4): 1 truncate cleaned up [ 406.725122][T11432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 407.856443][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2633'. [ 408.478953][ T29] audit: type=1326 audit(1763591621.239:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36997ff749 code=0x7ffc0000 [ 408.502538][ T29] audit: type=1326 audit(1763591621.239:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36997ff749 code=0x7ffc0000 [ 408.526217][ T29] audit: type=1326 audit(1763591621.239:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36997ff749 code=0x7ffc0000 [ 408.549756][ T29] audit: type=1326 audit(1763591621.239:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36997ff749 code=0x7ffc0000 [ 408.573340][ T29] audit: type=1326 audit(1763591621.239:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36997ff749 code=0x7ffc0000 [ 408.596837][ T29] audit: type=1326 audit(1763591621.239:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36997ff749 code=0x7ffc0000 [ 408.620423][ T29] audit: type=1326 audit(1763591621.239:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36997ff749 code=0x7ffc0000 [ 408.644130][ T29] audit: type=1326 audit(1763591621.239:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36997ff749 code=0x7ffc0000 [ 408.799910][T11455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2633'. [ 408.827451][T11449] bridge5: port 1(veth9) entered blocking state [ 408.833933][T11449] bridge5: port 1(veth9) entered disabled state [ 408.938570][T11449] veth9: entered allmulticast mode [ 408.944412][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.944905][T11449] veth9: entered promiscuous mode [ 408.974671][T11464] netlink: 'syz.4.2636': attribute type 12 has an invalid length. [ 409.817519][T11477] loop3: detected capacity change from 0 to 1024 [ 409.897514][T11477] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2639: Failed to acquire dquot type 0 [ 409.927040][T11477] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 409.952499][T11477] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.2639: corrupted inode contents [ 409.977704][T11477] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #13: comm syz.3.2639: mark_inode_dirty error [ 409.996145][T11477] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.2639: corrupted inode contents [ 410.010643][T11477] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.2639: mark_inode_dirty error [ 410.024036][T11477] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.2639: corrupted inode contents [ 410.048525][T11477] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 410.076339][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2643'. [ 410.091708][T11477] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.2639: corrupted inode contents [ 410.128648][T11477] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.2639: mark_inode_dirty error [ 410.159392][T11477] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 410.175289][T11477] EXT4-fs (loop3): 1 truncate cleaned up [ 410.201790][T11477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.648052][T11501] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2639: Failed to acquire dquot type 0 [ 410.719893][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.796347][T11507] loop3: detected capacity change from 0 to 128 [ 410.938417][T11510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2650'. [ 411.001845][T11507] syz.3.2649: attempt to access beyond end of device [ 411.001845][T11507] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 411.015506][T11507] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 411.036077][T11507] syz.3.2649: attempt to access beyond end of device [ 411.036077][T11507] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 411.049644][T11507] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 411.058707][T11510] bridge12: port 1(veth15) entered blocking state [ 411.065237][T11510] bridge12: port 1(veth15) entered disabled state [ 411.072518][T11510] veth15: entered allmulticast mode [ 411.078345][T11510] veth15: entered promiscuous mode [ 411.089734][T11512] syzkaller0: entered promiscuous mode [ 411.095307][T11512] syzkaller0: entered allmulticast mode [ 411.119914][T11513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2650'. [ 411.206427][T11520] netlink: 'syz.4.2652': attribute type 13 has an invalid length. [ 411.221545][T11520] gretap0: refused to change device tx_queue_len [ 411.228225][T11520] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 411.353147][T11530] loop1: detected capacity change from 0 to 1024 [ 411.361837][T11532] loop2: detected capacity change from 0 to 128 [ 411.387599][T11530] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2659: Failed to acquire dquot type 0 [ 411.405189][T11530] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 411.419974][T11530] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2659: corrupted inode contents [ 411.433019][T11530] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.2659: mark_inode_dirty error [ 411.451966][T11530] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2659: corrupted inode contents [ 411.475270][T11530] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.2659: mark_inode_dirty error [ 411.497710][T11532] syz.2.2660: attempt to access beyond end of device [ 411.497710][T11532] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 411.511160][T11532] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 411.520306][T11532] syz.2.2660: attempt to access beyond end of device [ 411.520306][T11532] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 411.533768][T11532] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 411.542517][T11530] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2659: corrupted inode contents [ 411.556831][T11530] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 411.581911][T11530] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2659: corrupted inode contents [ 411.601253][T11530] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.2659: mark_inode_dirty error [ 411.612973][T11530] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 411.622602][T11530] EXT4-fs (loop1): 1 truncate cleaned up [ 411.628674][T11530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.325294][T11546] __quota_error: 24 callbacks suppressed [ 412.325310][T11546] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 412.340028][T11546] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 412.349465][T11546] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2659: Failed to acquire dquot type 0 [ 412.392051][T11549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2664'. [ 412.433507][T11551] syzkaller0: entered promiscuous mode [ 412.439066][T11551] syzkaller0: entered allmulticast mode [ 412.461947][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.546312][T11555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2664'. [ 412.569397][T11549] bridge7: port 1(veth13) entered blocking state [ 412.576113][T11549] bridge7: port 1(veth13) entered disabled state [ 412.583132][T11549] veth13: entered allmulticast mode [ 412.589313][T11549] veth13: entered promiscuous mode [ 412.646381][T11563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2669'. [ 412.685516][T11563] bridge8: port 1(veth15) entered blocking state [ 412.692218][T11563] bridge8: port 1(veth15) entered disabled state [ 412.704609][T11563] veth15: entered allmulticast mode [ 412.710405][T11563] veth15: entered promiscuous mode [ 412.884781][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2675'. [ 412.953271][T11580] netlink: 'syz.3.2676': attribute type 12 has an invalid length. [ 413.055088][T11586] tipc: Enabled bearer , priority 0 [ 413.106376][T11579] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2672'. [ 413.115733][T11579] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2672'. [ 413.188922][T11588] tipc: Resetting bearer [ 413.232450][T11585] tipc: Disabling bearer [ 413.424359][T11592] netlink: 'syz.3.2680': attribute type 12 has an invalid length. [ 413.497780][T11594] syzkaller0: entered promiscuous mode [ 413.503357][T11594] syzkaller0: entered allmulticast mode [ 413.696328][T11603] loop3: detected capacity change from 0 to 256 [ 413.703368][T11603] FAT-fs (loop3): bogus number of FAT sectors [ 413.709472][T11603] FAT-fs (loop3): Can't find a valid FAT filesystem [ 413.746260][T11608] netlink: 'syz.1.2688': attribute type 12 has an invalid length. [ 413.770419][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2687'. [ 414.004192][T11624] loop2: detected capacity change from 0 to 256 [ 414.430783][T11624] FAT-fs (loop2): bogus number of FAT sectors [ 414.436901][T11624] FAT-fs (loop2): Can't find a valid FAT filesystem [ 415.387128][T11643] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 415.406399][T11650] netlink: 'syz.1.2701': attribute type 12 has an invalid length. [ 415.673391][T11656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2702'. [ 415.943549][T11666] loop0: detected capacity change from 0 to 256 [ 415.950493][T11666] FAT-fs (loop0): bogus number of FAT sectors [ 415.956713][T11666] FAT-fs (loop0): Can't find a valid FAT filesystem [ 416.407109][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2715'. [ 416.476850][T11688] loop4: detected capacity change from 0 to 1024 [ 416.483931][T11688] EXT4-fs: test_dummy_encryption option not supported [ 416.504460][ T29] audit: type=1400 audit(1763591629.669:1967): avc: denied { execute } for pid=11675 comm="syz.4.2711" name="file0" dev="tmpfs" ino=2852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 416.612740][T11691] syzkaller0: entered promiscuous mode [ 416.618409][T11691] syzkaller0: entered allmulticast mode [ 418.230690][T11701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2717'. [ 418.239856][T11701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2717'. [ 418.627125][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2726'. [ 419.565434][ T29] audit: type=1326 audit(1763591632.759:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991747f749 code=0x7ffc0000 [ 419.589062][ T29] audit: type=1326 audit(1763591632.759:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991747f749 code=0x7ffc0000 [ 419.612637][ T29] audit: type=1326 audit(1763591632.759:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f991747f749 code=0x7ffc0000 [ 419.636224][ T29] audit: type=1326 audit(1763591632.759:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991747f749 code=0x7ffc0000 [ 419.659888][ T29] audit: type=1326 audit(1763591632.769:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991747f749 code=0x7ffc0000 [ 419.683579][ T29] audit: type=1326 audit(1763591632.769:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f991747f749 code=0x7ffc0000 [ 419.707171][ T29] audit: type=1326 audit(1763591632.769:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991747f749 code=0x7ffc0000 [ 419.730784][ T29] audit: type=1326 audit(1763591632.769:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991747f749 code=0x7ffc0000 [ 419.754543][ T29] audit: type=1326 audit(1763591632.769:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f991747f749 code=0x7ffc0000 [ 419.777971][ T29] audit: type=1326 audit(1763591632.769:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991747f749 code=0x7ffc0000 [ 420.367234][T11747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2732'. [ 420.381670][T11747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2732'. [ 420.649108][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2741'. [ 420.784429][T11770] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 420.847071][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2748'. [ 420.873019][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2749'. [ 420.903226][T11780] bridge6: port 1(veth11) entered blocking state [ 420.909607][T11780] bridge6: port 1(veth11) entered disabled state [ 420.923414][T11780] veth11: entered allmulticast mode [ 420.929828][T11780] veth11: entered promiscuous mode [ 420.936260][T11787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2748'. [ 420.965322][T11790] loop1: detected capacity change from 0 to 128 [ 421.084771][T11791] syz.1.2752: attempt to access beyond end of device [ 421.084771][T11791] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 421.084938][T11788] bridge7: port 1(veth15) entered blocking state [ 421.098248][T11791] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 421.103851][T11790] syz.1.2752: attempt to access beyond end of device [ 421.103851][T11790] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 421.104682][T11788] bridge7: port 1(veth15) entered disabled state [ 421.113168][T11790] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 421.128374][T11788] veth15: entered allmulticast mode [ 421.133819][T11791] syz.1.2752: attempt to access beyond end of device [ 421.133819][T11791] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 421.142210][T11788] veth15: entered promiscuous mode [ 421.146779][T11791] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 421.388517][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2754'. [ 421.483940][T11809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2757'. [ 421.493189][T11809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2757'. [ 421.521821][T11806] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 421.596981][T11816] xt_TPROXY: Can be used only with -p tcp or -p udp [ 421.653172][T11819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2763'. [ 421.685228][T11819] bridge8: port 1(veth17) entered blocking state [ 421.691705][T11819] bridge8: port 1(veth17) entered disabled state [ 421.733322][T11819] veth17: entered allmulticast mode [ 421.738890][T11821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2763'. [ 421.748667][T11819] veth17: entered promiscuous mode [ 422.010771][T11831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2768'. [ 422.090027][T11837] netlink: 'syz.4.2771': attribute type 12 has an invalid length. [ 422.150511][T11839] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 423.069419][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2780'. [ 423.097241][T11864] syzkaller0: entered promiscuous mode [ 423.103061][T11864] syzkaller0: entered allmulticast mode [ 424.059553][T11879] netlink: 'syz.2.2786': attribute type 12 has an invalid length. [ 424.088646][T11881] loop1: detected capacity change from 0 to 512 [ 424.318253][T11881] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2787: inode has both inline data and extents flags [ 424.334768][T11883] bridge9: port 1(veth19) entered blocking state [ 424.341193][T11883] bridge9: port 1(veth19) entered disabled state [ 424.346159][T11881] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2787: couldn't read orphan inode 15 (err -117) [ 424.348249][T11883] veth19: entered allmulticast mode [ 424.372185][T11881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.386970][T11883] veth19: entered promiscuous mode [ 424.882060][T11894] loop2: detected capacity change from 0 to 1024 [ 424.888686][T11894] EXT4-fs: test_dummy_encryption option not supported [ 425.424325][T11903] 9pnet_fd: Insufficient options for proto=fd [ 425.446211][T11905] loop4: detected capacity change from 0 to 128 [ 426.326328][T11908] syz.4.2795: attempt to access beyond end of device [ 426.326328][T11908] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 426.339810][T11908] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 426.610169][T11919] __nla_validate_parse: 5 callbacks suppressed [ 426.610187][T11919] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2798'. [ 426.664820][T11919] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2798'. [ 426.684425][T11922] loop2: detected capacity change from 0 to 128 [ 426.713646][T11908] syz.4.2795: attempt to access beyond end of device [ 426.713646][T11908] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 426.727101][T11908] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 426.830905][T11923] syz.2.2800: attempt to access beyond end of device [ 426.830905][T11923] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 426.844412][T11923] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 426.904071][T11923] syz.2.2800: attempt to access beyond end of device [ 426.904071][T11923] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 426.917538][T11923] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 426.936940][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.046237][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2805'. [ 427.090546][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2806'. [ 427.253931][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2808'. [ 427.480764][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2809'. [ 427.706542][T11944] veth0_to_bond: left promiscuous mode [ 427.712234][T11944] bridge5: port 1(veth0_to_bond) entered disabled state [ 427.828542][T11951] loop1: detected capacity change from 0 to 2048 [ 427.907304][T11951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.999523][T11951] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.776593][T11980] loop2: detected capacity change from 0 to 2048 [ 428.875949][T11980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.888928][T11980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.427489][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 429.427506][ T29] audit: type=1326 audit(1763591642.579:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12004 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1cb2f749 code=0x7ffc0000 [ 429.457409][ T29] audit: type=1326 audit(1763591642.579:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12004 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1cb2f749 code=0x7ffc0000 [ 429.480968][ T29] audit: type=1326 audit(1763591642.579:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12004 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a1cb2f749 code=0x7ffc0000 [ 429.504451][ T29] audit: type=1326 audit(1763591642.579:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12004 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1cb2f749 code=0x7ffc0000 [ 429.528032][ T29] audit: type=1326 audit(1763591642.579:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12004 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1cb2f749 code=0x7ffc0000 [ 429.551576][ T29] audit: type=1326 audit(1763591642.579:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12004 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a1cb2f749 code=0x7ffc0000 [ 429.575147][ T29] audit: type=1326 audit(1763591642.579:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12004 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1cb2f749 code=0x7ffc0000 [ 429.598629][ T29] audit: type=1326 audit(1763591642.579:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12004 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1cb2f749 code=0x7ffc0000 [ 429.622118][ T29] audit: type=1326 audit(1763591642.579:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12004 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0a1cb2f749 code=0x7ffc0000 [ 429.645427][ T29] audit: type=1326 audit(1763591642.579:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12004 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1cb2f749 code=0x7ffc0000 [ 429.758065][T12012] tipc: Enabling of bearer rejected, failed to enable media [ 429.941663][T12021] loop1: detected capacity change from 0 to 2048 [ 430.013062][T12021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.062576][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.123382][T12029] loop0: detected capacity change from 0 to 1024 [ 430.216540][T12029] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2836: Failed to acquire dquot type 0 [ 430.237127][T12031] loop1: detected capacity change from 0 to 2048 [ 430.245377][T12036] xt_TPROXY: Can be used only with -p tcp or -p udp [ 430.252644][T12029] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 430.273073][T12029] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2836: corrupted inode contents [ 430.287150][T12031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.335750][T12029] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #13: comm syz.0.2836: mark_inode_dirty error [ 430.393191][T12029] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2836: corrupted inode contents [ 430.417486][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.447694][T12029] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.2836: mark_inode_dirty error [ 430.490183][T12029] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2836: corrupted inode contents [ 430.502829][T12029] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 430.511885][T12029] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2836: corrupted inode contents [ 430.558266][T12029] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.2836: mark_inode_dirty error [ 430.572006][T12029] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 430.581383][T12029] EXT4-fs (loop0): 1 truncate cleaned up [ 430.587831][T12029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.658533][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2838'. [ 430.682425][T12043] bridge7: port 1(veth13) entered blocking state [ 430.688803][T12043] bridge7: port 1(veth13) entered disabled state [ 430.701761][T12043] veth13: entered allmulticast mode [ 431.274028][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.294282][T12043] veth13: entered promiscuous mode [ 431.376947][T12050] bridge7: port 2(veth0_to_bond) entered blocking state [ 431.383987][T12050] bridge7: port 2(veth0_to_bond) entered disabled state [ 431.530908][T12059] tipc: Enabling of bearer rejected, failed to enable media [ 431.640443][T12069] loop1: detected capacity change from 0 to 2048 [ 431.683369][T12069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.872827][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.328977][T12081] loop2: detected capacity change from 0 to 2048 [ 432.363848][T12081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.656020][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.369763][T12102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2852'. [ 433.404354][T12102] bridge9: port 1(veth17) entered blocking state [ 433.410775][T12102] bridge9: port 1(veth17) entered disabled state [ 433.417807][T12102] veth17: entered allmulticast mode [ 433.424029][T12102] veth17: entered promiscuous mode [ 433.431219][T12102] bridge9: port 2(veth0_to_bond) entered blocking state [ 433.438250][T12102] bridge9: port 2(veth0_to_bond) entered disabled state [ 433.465293][T12103] loop2: detected capacity change from 0 to 2048 [ 433.511244][T12109] tipc: Enabling of bearer rejected, failed to enable media [ 433.736188][T12103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.772856][T12103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.903579][T12127] loop0: detected capacity change from 0 to 2048 [ 433.982732][T12127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.009616][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.274130][T12140] loop0: detected capacity change from 0 to 2048 [ 434.296364][T12142] loop3: detected capacity change from 0 to 128 [ 434.322892][T12140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.546906][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.569797][T12152] tipc: Enabled bearer , priority 0 [ 434.578034][T12152] tipc: Resetting bearer [ 434.586138][T12151] tipc: Disabling bearer [ 436.609088][T12172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2866'. [ 436.618211][T12172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2866'. [ 436.667526][T12176] loop1: detected capacity change from 0 to 2048 [ 436.692797][T12179] netlink: 'syz.4.2875': attribute type 12 has an invalid length. [ 436.702572][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2874'. [ 436.741783][T12176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.865406][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.945155][T12197] loop1: detected capacity change from 0 to 2048 [ 438.072868][T12197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.152614][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.446512][T12214] netlink: 'syz.0.2885': attribute type 13 has an invalid length. [ 438.457007][T12214] gretap0: refused to change device tx_queue_len [ 438.464192][T12214] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 439.257714][T12224] loop1: detected capacity change from 0 to 2048 [ 439.285648][T12224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.318863][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.471860][T12236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2891'. [ 439.725192][T12241] netlink: 'syz.4.2893': attribute type 12 has an invalid length. [ 440.324764][T12263] loop3: detected capacity change from 0 to 128 [ 440.579413][T12268] bridge7: port 2(veth0_to_bond) entered disabled state [ 440.693073][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 440.693086][ T29] audit: type=1400 audit(1763591653.909:2028): avc: denied { mounton } for pid=12271 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 440.729713][T12269] loop0: detected capacity change from 0 to 1024 [ 440.737002][T12269] EXT4-fs: test_dummy_encryption option not supported [ 440.820482][T12281] netlink: 'syz.1.2905': attribute type 12 has an invalid length. [ 440.894956][T12287] loop1: detected capacity change from 0 to 1024 [ 440.922577][T12287] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 440.931694][T12287] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 440.941114][T12287] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2907: Failed to acquire dquot type 0 [ 440.969911][T12271] chnl_net:caif_netlink_parms(): no params data found [ 441.015248][T12287] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 441.030046][T12287] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2907: corrupted inode contents [ 441.044295][ T4945] bridge_slave_1: left allmulticast mode [ 441.049976][ T4945] bridge_slave_1: left promiscuous mode [ 441.055707][ T4945] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.063485][ T4945] bridge_slave_0: left allmulticast mode [ 441.064252][T12287] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.2907: mark_inode_dirty error [ 441.069336][ T4945] bridge_slave_0: left promiscuous mode [ 441.086627][ T4945] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.088368][T12287] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2907: corrupted inode contents [ 441.106213][T12287] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.2907: mark_inode_dirty error [ 441.133023][ T4945] veth3: left allmulticast mode [ 441.138007][ T4945] veth3: left promiscuous mode [ 441.142874][ T4945] bridge2: port 1(veth3) entered disabled state [ 441.155213][ T4945] vlan2: left promiscuous mode [ 441.160021][ T4945] veth0_to_bond: left promiscuous mode [ 441.165814][ T4945] bridge3: port 2(vlan2) entered disabled state [ 441.177641][ T4945] veth5: left allmulticast mode [ 441.182576][ T4945] veth5: left promiscuous mode [ 441.187524][ T4945] bridge3: port 1(veth5) entered disabled state [ 441.256840][ T4945] veth7: left allmulticast mode [ 441.261812][ T4945] veth7: left promiscuous mode [ 441.266753][ T4945] bridge4: port 1(veth7) entered disabled state [ 441.286027][ T4945] veth9: left allmulticast mode [ 441.290919][ T4945] veth9: left promiscuous mode [ 441.295802][ T4945] bridge5: port 1(veth9) entered disabled state [ 441.304194][ T4945] veth11: left allmulticast mode [ 441.309236][ T4945] veth11: left promiscuous mode [ 441.314275][ T4945] bridge6: port 1(veth11) entered disabled state [ 441.331890][ T4945] veth13: left allmulticast mode [ 441.336958][ T4945] veth13: left promiscuous mode [ 441.342049][ T4945] bridge7: port 1(veth13) entered disabled state [ 441.462375][T12287] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2907: corrupted inode contents [ 441.474420][T12287] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 441.483443][T12287] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2907: corrupted inode contents [ 441.495623][T12287] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.2907: mark_inode_dirty error [ 441.507198][T12287] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 441.519229][T12287] EXT4-fs (loop1): 1 truncate cleaned up [ 441.526818][T12287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.706677][T12302] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 441.715892][T12302] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 441.725306][T12302] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2907: Failed to acquire dquot type 0 [ 441.881941][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.893848][ T4945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.903349][ T4945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.912815][ T4945] bond0 (unregistering): Released all slaves [ 441.959865][T12271] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.967032][T12271] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.974409][T12271] bridge_slave_0: entered allmulticast mode [ 441.980874][T12271] bridge_slave_0: entered promiscuous mode [ 441.987884][T12271] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.995069][T12271] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.002852][T12271] bridge_slave_1: entered allmulticast mode [ 442.009259][T12271] bridge_slave_1: entered promiscuous mode [ 442.023178][ T4945] tipc: Left network mode [ 442.031279][ T4945] hsr_slave_0: left promiscuous mode [ 442.037334][ T4945] hsr_slave_1: left promiscuous mode [ 442.042974][ T4945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.050620][ T4945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.230972][ T4945] team0 (unregistering): Port device team_slave_1 removed [ 442.245711][ T4945] team0 (unregistering): Port device team_slave_0 removed [ 442.365241][ T29] audit: type=1400 audit(1763591655.579:2029): avc: denied { search } for pid=3042 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.386737][ T29] audit: type=1400 audit(1763591655.579:2030): avc: denied { search } for pid=3042 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.408430][ T29] audit: type=1400 audit(1763591655.579:2031): avc: denied { search } for pid=3042 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.430134][ T29] audit: type=1400 audit(1763591655.579:2032): avc: denied { read } for pid=3042 comm="dhcpcd" name="n25" dev="tmpfs" ino=17677 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 442.451983][ T29] audit: type=1400 audit(1763591655.579:2033): avc: denied { open } for pid=3042 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=17677 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 442.498378][T12271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.509390][T12271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.550398][T12271] team0: Port device team_slave_0 added [ 442.561871][T12271] team0: Port device team_slave_1 added [ 442.610993][T12271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.618033][T12271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.643996][T12271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.655637][T12271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.662648][T12271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.688623][T12271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.724402][T12271] hsr_slave_0: entered promiscuous mode [ 442.731125][T12271] hsr_slave_1: entered promiscuous mode [ 442.954095][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2917'. [ 443.039456][T12337] bridge14: port 1(veth17) entered blocking state [ 443.045964][T12337] bridge14: port 1(veth17) entered disabled state [ 443.114191][T12337] veth17: entered allmulticast mode [ 443.120153][T12337] veth17: entered promiscuous mode [ 443.153709][T12335] bridge14: port 2(veth0_to_bond) entered blocking state [ 443.161045][T12335] bridge14: port 2(veth0_to_bond) entered disabled state [ 443.864722][T12271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 443.878532][T12271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 443.917313][T12271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 444.080759][T12271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 444.421561][T12389] loop2: detected capacity change from 0 to 1024 [ 444.428565][T12389] EXT4-fs: test_dummy_encryption option not supported [ 445.332627][ T4945] IPVS: stop unused estimator thread 0... [ 445.347821][T12271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.919423][T12397] loop1: detected capacity change from 0 to 256 [ 445.933131][T12397] FAT-fs (loop1): bogus number of FAT sectors [ 445.939239][T12397] FAT-fs (loop1): Can't find a valid FAT filesystem [ 446.054731][T12271] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.073839][T12271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 446.084241][T12271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.119183][T12097] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.126288][T12097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.152473][T12097] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.159559][T12097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.164757][T12403] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2927'. [ 446.204577][T12393] netlink: 'syz.4.2924': attribute type 12 has an invalid length. [ 446.366409][T12271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.740173][T12443] loop1: detected capacity change from 0 to 1024 [ 447.760993][T12443] __quota_error: 9 callbacks suppressed [ 447.761009][T12443] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 447.775800][T12443] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 447.785205][T12443] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2933: Failed to acquire dquot type 0 [ 447.799187][T12443] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 447.812537][T12271] veth0_vlan: entered promiscuous mode [ 447.825538][T12271] veth1_vlan: entered promiscuous mode [ 447.850720][T12271] veth0_macvtap: entered promiscuous mode [ 447.861656][T12443] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2933: corrupted inode contents [ 447.871722][T12271] veth1_macvtap: entered promiscuous mode [ 447.900804][T12271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.915537][T12443] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.2933: mark_inode_dirty error [ 447.923190][T12271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.954156][ T4957] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.967114][T12443] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2933: corrupted inode contents [ 447.986508][ T4916] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.993935][ T29] audit: type=1400 audit(1763591661.199:2043): avc: denied { mounton } for pid=12271 comm="syz-executor" path="/root/syzkaller.k3kztS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 447.998533][ T4916] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.025862][T12443] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.2933: mark_inode_dirty error [ 448.049125][T12443] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2933: corrupted inode contents [ 448.063683][T12443] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 448.069670][T12463] loop4: detected capacity change from 0 to 1024 [ 448.072984][ T4916] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.087688][T12463] EXT4-fs: test_dummy_encryption option not supported [ 448.097041][T12443] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2933: corrupted inode contents [ 448.109747][T12443] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.2933: mark_inode_dirty error [ 448.121532][T12443] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 448.130789][T12443] EXT4-fs (loop1): 1 truncate cleaned up [ 448.137237][T12443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.152796][T12469] netlink: 'syz.2.2935': attribute type 13 has an invalid length. [ 448.161549][T12469] gretap0: refused to change device tx_queue_len [ 448.168355][T12469] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 448.195733][T12470] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 448.254809][T12472] netlink: 'syz.3.2936': attribute type 12 has an invalid length. [ 448.424530][T12479] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 448.433631][T12479] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 448.443076][T12479] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2933: Failed to acquire dquot type 0 [ 448.807657][T12481] netlink: 'syz.0.2939': attribute type 12 has an invalid length. [ 448.825885][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.911743][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2941'. [ 449.117206][ T4916] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.263078][T12492] loop4: detected capacity change from 0 to 2048 [ 449.275112][T12492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.324545][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.567220][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2946'. [ 449.590804][ T4916] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.643789][T12509] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 449.659411][T12512] bridge9: port 2(veth0_to_bond) entered disabled state [ 449.683794][ T4916] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.753906][T12483] chnl_net:caif_netlink_parms(): no params data found [ 449.778474][ T4916] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.872850][T12483] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.880017][T12483] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.888484][T12483] bridge_slave_0: entered allmulticast mode [ 449.916255][T12483] bridge_slave_0: entered promiscuous mode [ 449.928738][T12528] netlink: 'syz.2.2951': attribute type 12 has an invalid length. [ 449.937375][T12483] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.944489][T12483] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.952018][T12483] bridge_slave_1: entered allmulticast mode [ 449.972490][T12483] bridge_slave_1: entered promiscuous mode [ 450.058405][T12483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.096653][ T4916] bridge_slave_1: left allmulticast mode [ 450.102557][ T4916] bridge_slave_1: left promiscuous mode [ 450.108253][ T4916] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.137365][ T4916] bridge_slave_0: left allmulticast mode [ 450.143152][ T4916] bridge_slave_0: left promiscuous mode [ 450.149040][ T4916] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.186909][ T4916] vlan2: left promiscuous mode [ 450.192125][ T4916] bridge1: port 3(vlan2) entered disabled state [ 450.224012][ T4916] veth3: left allmulticast mode [ 450.228904][ T4916] veth3: left promiscuous mode [ 450.233856][ T4916] bridge1: port 1(veth3) entered disabled state [ 450.262699][ T4916] veth5: left allmulticast mode [ 450.267620][ T4916] veth5: left promiscuous mode [ 450.272630][ T4916] bridge2: port 1(veth5) entered disabled state [ 450.292807][ T4916] veth7: left allmulticast mode [ 450.297740][ T4916] veth7: left promiscuous mode [ 450.302786][ T4916] bridge7: port 1(veth7) entered disabled state [ 450.321202][ T4916] veth9: left allmulticast mode [ 450.326225][ T4916] veth9: left promiscuous mode [ 450.331528][ T4916] bridge8: port 1(veth9) entered disabled state [ 450.342978][T12541] loop2: detected capacity change from 0 to 1024 [ 450.350365][T12541] EXT4-fs: test_dummy_encryption option not supported [ 450.390527][ T4916] veth11: left allmulticast mode [ 450.395564][ T4916] veth11: left promiscuous mode [ 450.400550][ T4916] bridge9: port 1(veth11) entered disabled state [ 450.430788][ T4916] veth13: left allmulticast mode [ 450.435870][ T4916] veth13: left promiscuous mode [ 450.440905][ T4916] bridge11: port 1(veth13) entered disabled state [ 450.456401][ T4916] veth15: left allmulticast mode [ 450.461433][ T4916] veth15: left promiscuous mode [ 450.466448][ T4916] bridge12: port 1(veth15) entered disabled state [ 450.475076][ T4916] veth0_to_bond: left promiscuous mode [ 450.480859][ T4916] bridge14: port 2(veth0_to_bond) entered disabled state [ 450.504566][ T4916] veth17: left allmulticast mode [ 450.509579][ T4916] veth17: left promiscuous mode [ 450.514719][ T4916] bridge14: port 1(veth17) entered disabled state [ 450.558517][T12551] netlink: 'syz.0.2953': attribute type 13 has an invalid length. [ 451.979964][T12563] loop3: detected capacity change from 0 to 2048 [ 451.993470][T12563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.006306][T12563] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.543815][ T4916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.553832][ T4916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.563488][ T4916] bond0 (unregistering): Released all slaves [ 452.572688][T12483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.590515][T12551] gretap0: refused to change device tx_queue_len [ 452.597823][T12551] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 452.619427][ T4916] tipc: Disabling bearer [ 452.625457][ T4916] tipc: Left network mode [ 452.637287][ T4916] hsr_slave_0: left promiscuous mode [ 452.642937][ T4916] hsr_slave_1: left promiscuous mode [ 452.648570][ T4916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.656144][ T4916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.663824][ T4916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.671232][ T4916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.681069][ T4916] veth1_macvtap: left promiscuous mode [ 452.686711][ T4916] veth0_macvtap: left promiscuous mode [ 452.692835][ T4916] veth1_vlan: left promiscuous mode [ 452.698173][ T4916] veth0_vlan: left promiscuous mode [ 452.745282][T12575] loop0: detected capacity change from 0 to 512 [ 452.785055][T12575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 452.802663][T12575] EXT4-fs (loop0): orphan cleanup on readonly fs [ 452.809986][T12575] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2959: bg 0: block 248: padding at end of block bitmap is not set [ 452.825883][T12575] Quota error (device loop0): write_blk: dquota write failed [ 452.833443][T12575] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 452.843465][T12575] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2959: Failed to acquire dquot type 1 [ 452.858313][T12575] EXT4-fs (loop0): 1 truncate cleaned up [ 452.866221][T12575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 453.027647][ T4916] team0 (unregistering): Port device team_slave_1 removed [ 453.040561][ T4916] team0 (unregistering): Port device team_slave_0 removed [ 453.332376][T12483] team0: Port device team_slave_0 added [ 453.425663][T12483] team0: Port device team_slave_1 added [ 453.454503][T12585] 9pnet_fd: Insufficient options for proto=fd [ 453.744823][T12591] loop2: detected capacity change from 0 to 256 [ 454.155596][T12591] FAT-fs (loop2): bogus number of FAT sectors [ 454.161735][T12591] FAT-fs (loop2): Can't find a valid FAT filesystem [ 454.549857][T12483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.556898][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.583106][T12483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.747886][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.943624][ T4916] IPVS: stop unused estimator thread 0... [ 454.956968][T12609] loop0: detected capacity change from 0 to 1024 [ 455.058244][T12609] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 455.067440][T12609] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 455.076935][T12609] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2966: Failed to acquire dquot type 0 [ 455.090229][T12483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.097247][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.098859][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 455.123233][T12483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.145268][T12613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2968'. [ 455.154995][T12609] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 455.164398][T12613] bridge11: port 1(veth0_to_bond) entered blocking state [ 455.176447][T12613] bridge11: port 1(veth0_to_bond) entered disabled state [ 455.185153][T12609] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2966: corrupted inode contents [ 455.199191][T12609] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #13: comm syz.0.2966: mark_inode_dirty error [ 455.214845][T12483] hsr_slave_0: entered promiscuous mode [ 455.220710][T12609] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2966: corrupted inode contents [ 455.221013][T12483] hsr_slave_1: entered promiscuous mode [ 455.238584][T12609] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.2966: mark_inode_dirty error [ 455.238631][T12483] debugfs: 'hsr0' already exists in 'hsr' [ 455.238642][T12483] Cannot create hsr debugfs directory [ 455.262585][T12609] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2966: corrupted inode contents [ 455.274603][T12609] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 455.283365][T12609] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.2966: corrupted inode contents [ 455.297010][T12609] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.2966: mark_inode_dirty error [ 455.313988][T12620] loop3: detected capacity change from 0 to 1024 [ 455.320733][T12609] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 455.330365][T12609] EXT4-fs (loop0): 1 truncate cleaned up [ 455.336771][T12609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.351270][T12620] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 455.360458][T12620] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 455.369998][T12620] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2969: Failed to acquire dquot type 0 [ 455.382797][T12620] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 455.399375][T12620] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.2969: corrupted inode contents [ 455.411916][T12620] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #13: comm syz.3.2969: mark_inode_dirty error [ 455.450207][T12620] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.2969: corrupted inode contents [ 455.480618][T12620] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.2969: mark_inode_dirty error [ 455.492967][T12620] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.2969: corrupted inode contents [ 455.506011][T12630] loop4: detected capacity change from 0 to 128 [ 455.525293][T12609] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 455.534490][T12609] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 455.543929][T12609] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2966: Failed to acquire dquot type 0 [ 455.558355][T12620] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 455.569888][T12620] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.2969: corrupted inode contents [ 455.583390][T12620] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.2969: mark_inode_dirty error [ 455.594635][T12620] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 455.617249][T12620] EXT4-fs (loop3): 1 truncate cleaned up [ 455.617612][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.634244][T12620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.812800][T12637] loop0: detected capacity change from 0 to 2048 [ 455.840696][T12646] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 455.841284][T12630] syz.4.2971: attempt to access beyond end of device [ 455.841284][T12630] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 455.850064][T12646] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 455.863354][T12630] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 455.872772][T12646] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2969: Failed to acquire dquot type 0 [ 455.910463][T12637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.929498][T12637] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.934306][T12630] syz.4.2971: attempt to access beyond end of device [ 455.934306][T12630] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 455.951932][T12630] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 455.973337][T12483] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 455.983502][T12483] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 455.998066][T12483] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 456.011128][T12659] loop2: detected capacity change from 0 to 256 [ 456.018675][T12659] FAT-fs (loop2): bogus number of FAT sectors [ 456.024876][T12659] FAT-fs (loop2): Can't find a valid FAT filesystem [ 456.079673][T12483] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 456.494044][T12271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.638167][T12666] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 456.710165][T12483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.795199][T12698] loop3: detected capacity change from 0 to 512 [ 456.804113][T12698] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 456.829017][T12483] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.839670][ T4945] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.846772][ T4945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.874624][T12698] EXT4-fs (loop3): orphan cleanup on readonly fs [ 456.882758][T12698] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2975: bg 0: block 248: padding at end of block bitmap is not set [ 456.898880][T12698] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2975: Failed to acquire dquot type 1 [ 456.911201][T12698] EXT4-fs (loop3): 1 truncate cleaned up [ 456.919046][T12698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 456.978141][ T4945] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.985254][ T4945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.044468][T12705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2979'. [ 457.727475][T12721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2981'. [ 457.736788][T12721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2981'. [ 458.413299][T12729] loop0: detected capacity change from 0 to 128 [ 458.425429][T12730] loop2: detected capacity change from 0 to 1024 [ 458.479811][T12730] __quota_error: 2 callbacks suppressed [ 458.479827][T12730] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 458.494674][T12730] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 458.504177][T12730] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2982: Failed to acquire dquot type 0 [ 458.666842][T12730] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 458.699485][T12483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.710571][T12730] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2982: corrupted inode contents [ 458.744074][T12730] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.2982: mark_inode_dirty error [ 458.744544][T12271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.767497][T12730] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2982: corrupted inode contents [ 458.779202][T12729] syz.0.2983: attempt to access beyond end of device [ 458.779202][T12729] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 458.792850][T12729] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 458.801758][T12735] syz.0.2983: attempt to access beyond end of device [ 458.801758][T12735] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 458.815388][T12735] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 458.817051][T12730] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.2982: mark_inode_dirty error [ 458.861850][T12730] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2982: corrupted inode contents [ 458.877071][T12729] syz.0.2983: attempt to access beyond end of device [ 458.877071][T12729] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 458.890548][T12729] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 458.899546][T12483] veth0_vlan: entered promiscuous mode [ 458.907500][T12483] veth1_vlan: entered promiscuous mode [ 458.920462][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2984'. [ 458.939376][T12483] veth0_macvtap: entered promiscuous mode [ 458.948086][T12483] veth1_macvtap: entered promiscuous mode [ 458.955808][T12730] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 458.969054][T12730] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.2982: corrupted inode contents [ 458.990456][T12483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.996856][T12730] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.2982: mark_inode_dirty error [ 459.014677][T12483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.034394][ T4928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.048280][T12730] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 459.069613][T12730] EXT4-fs (loop2): 1 truncate cleaned up [ 459.080543][ T4928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.082253][T12730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.102078][ T4928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.110797][ T4928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.133299][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2940'. [ 459.258614][T12770] loop0: detected capacity change from 0 to 128 [ 459.271740][T12730] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 459.280880][T12730] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 459.290348][T12730] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2982: Failed to acquire dquot type 0 [ 459.408917][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.425298][T12764] vlan2: entered allmulticast mode [ 459.430501][T12764] veth0_to_bond: entered allmulticast mode [ 459.567738][T12778] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2986'. [ 459.576912][T12778] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2986'. [ 460.245712][T12761] loop3: detected capacity change from 0 to 2048 [ 460.390529][T12794] loop1: detected capacity change from 0 to 512 [ 460.398786][T12794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 460.420148][T12794] EXT4-fs (loop1): orphan cleanup on readonly fs [ 460.428281][T12794] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2993: bg 0: block 248: padding at end of block bitmap is not set [ 460.443829][T12794] Quota error (device loop1): write_blk: dquota write failed [ 460.451271][T12794] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 460.461207][T12794] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2993: Failed to acquire dquot type 1 [ 460.478967][T12794] EXT4-fs (loop1): 1 truncate cleaned up [ 460.493307][T12794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 460.641239][T12761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.836820][T12801] syzkaller0: entered promiscuous mode [ 460.842476][T12801] syzkaller0: entered allmulticast mode [ 461.291200][T12271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.333381][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2995'. [ 462.202513][ T4928] veth5: left allmulticast mode [ 462.207417][ T4928] veth5: left promiscuous mode [ 462.212335][ T4928] bridge1: port 1(veth5) entered disabled state [ 462.229932][ T4928] veth7: left allmulticast mode [ 462.234867][ T4928] veth7: left promiscuous mode [ 462.239855][ T4928] bridge2: port 1(veth7) entered disabled state [ 462.669048][T12483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.698662][ T4928] vlan2: left promiscuous mode [ 462.703773][ T4928] bridge3: port 2(vlan2) entered disabled state [ 463.058127][ T4928] veth9: left allmulticast mode [ 463.063130][ T4928] veth9: left promiscuous mode [ 463.068060][ T4928] bridge3: port 1(veth9) entered disabled state [ 463.159844][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3000'. [ 463.284795][ T4928] veth11: left allmulticast mode [ 463.289870][ T4928] veth11: left promiscuous mode [ 463.294862][ T4928] bridge6: port 1(veth11) entered disabled state [ 463.312768][T12854] loop3: detected capacity change from 0 to 128 [ 463.371067][ T4928] veth13: left allmulticast mode [ 463.376140][ T4928] veth13: left promiscuous mode [ 463.381119][ T4928] bridge7: port 1(veth13) entered disabled state [ 463.391155][ T4928] veth15: left allmulticast mode [ 463.396171][ T4928] veth15: left promiscuous mode [ 463.401213][ T4928] bridge8: port 1(veth15) entered disabled state [ 463.410650][ T4928] veth17: left allmulticast mode [ 463.415647][ T4928] veth17: left promiscuous mode [ 463.420618][ T4928] bridge9: port 1(veth17) entered disabled state [ 463.430272][ T4928] veth0_to_bond: left promiscuous mode [ 463.436041][ T4928] bridge11: port 1(veth0_to_bond) entered disabled state [ 463.528692][T12854] syz.3.3003: attempt to access beyond end of device [ 463.528692][T12854] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 463.542201][T12854] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 463.551107][T12854] syz.3.3003: attempt to access beyond end of device [ 463.551107][T12854] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 463.564585][T12854] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 464.114061][ T4928] bond0 (unregistering): Released all slaves [ 464.160483][T12785] chnl_net:caif_netlink_parms(): no params data found [ 464.344747][ T4928] tipc: Left network mode [ 464.370726][ T4928] hsr_slave_0: left promiscuous mode [ 464.385489][ T4928] hsr_slave_1: left promiscuous mode [ 464.415256][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3007'. [ 464.915496][T12785] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.922747][T12785] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.949006][T12785] bridge_slave_0: entered allmulticast mode [ 464.973677][T12785] bridge_slave_0: entered promiscuous mode [ 464.982369][T12785] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.989499][T12785] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.996983][T12785] bridge_slave_1: entered allmulticast mode [ 465.003510][T12785] bridge_slave_1: entered promiscuous mode [ 465.484480][T12905] loop0: detected capacity change from 0 to 2048 [ 465.585580][T12905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.625047][T12785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.638815][T12905] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.658906][T12785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.758555][T12785] team0: Port device team_slave_0 added [ 465.904804][T12785] team0: Port device team_slave_1 added [ 465.915901][T12930] syzkaller0: entered promiscuous mode [ 465.921778][T12930] syzkaller0: entered allmulticast mode [ 466.240452][T12785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.247502][T12785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.273573][T12785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.611206][T12941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3018'. [ 466.620345][T12941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3018'. [ 466.740329][T12945] loop2: detected capacity change from 0 to 1024 [ 466.752205][T12785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.759187][T12785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.785385][T12785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.847077][T12949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'. [ 466.857710][T12945] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 466.866923][T12945] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 466.876325][T12945] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3019: Failed to acquire dquot type 0 [ 466.888673][T12945] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 466.907372][T12945] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.3019: corrupted inode contents [ 466.909588][T12785] hsr_slave_0: entered promiscuous mode [ 466.919628][T12945] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.3019: mark_inode_dirty error [ 466.935817][T12785] hsr_slave_1: entered promiscuous mode [ 466.942113][T12785] debugfs: 'hsr0' already exists in 'hsr' [ 466.947959][T12785] Cannot create hsr debugfs directory [ 466.958167][T12949] vlan2: entered allmulticast mode [ 466.963398][T12949] veth0_to_bond: entered allmulticast mode [ 466.993413][T12945] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.3019: corrupted inode contents [ 467.018954][T12945] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.3019: mark_inode_dirty error [ 467.082196][T12945] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.3019: corrupted inode contents [ 467.100238][T12945] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 467.119250][T12945] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.3019: corrupted inode contents [ 467.155815][T12945] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.3019: mark_inode_dirty error [ 467.168089][T12945] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 467.252617][T12945] EXT4-fs (loop2): 1 truncate cleaned up [ 467.259472][T12945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.558806][T12945] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 467.567928][T12945] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 467.577398][T12945] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3019: Failed to acquire dquot type 0 [ 467.738869][T12785] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 467.770104][T12785] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 467.794710][T12785] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 467.827773][T12785] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 467.996727][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.068545][T12785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.080037][T12785] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.095491][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.102702][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.125238][T12505] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.132352][T12505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.179229][T12985] loop0: detected capacity change from 0 to 2048 [ 468.240368][T13013] syzkaller0: entered promiscuous mode [ 468.245946][T13013] syzkaller0: entered allmulticast mode [ 468.292249][T12985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.364768][T13016] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 468.388992][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.415968][T12785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.433872][T13037] loop1: detected capacity change from 0 to 128 [ 468.521864][T13047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3035'. [ 468.614049][T13056] vlan2: entered allmulticast mode [ 468.625804][T13019] loop2: detected capacity change from 0 to 2048 [ 468.634538][T13037] ================================================================== [ 468.642659][T13037] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 468.650674][T13037] [ 468.653007][T13037] write to 0xffff88811a881928 of 4 bytes by task 13045 on cpu 1: [ 468.660746][T13037] writeback_single_inode+0x150/0x3f0 [ 468.666157][T13037] sync_inode_metadata+0x5b/0x90 [ 468.671126][T13037] __generic_file_fsync+0xf8/0x140 [ 468.676263][T13037] fat_file_fsync+0x49/0x100 [ 468.680856][T13037] vfs_fsync_range+0x10d/0x130 [ 468.685646][T13037] generic_file_write_iter+0x1b8/0x2f0 [ 468.691124][T13037] iter_file_splice_write+0x666/0xa60 [ 468.696617][T13037] direct_splice_actor+0x156/0x2a0 [ 468.701767][T13037] splice_direct_to_actor+0x312/0x680 [ 468.707166][T13037] do_splice_direct+0xda/0x150 [ 468.711955][T13037] do_sendfile+0x380/0x650 [ 468.716394][T13037] __x64_sys_sendfile64+0x105/0x150 [ 468.721607][T13037] x64_sys_call+0x2bb4/0x3000 [ 468.726290][T13037] do_syscall_64+0xd2/0x200 [ 468.730800][T13037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.736707][T13037] [ 468.739048][T13037] read to 0xffff88811a881928 of 4 bytes by task 13037 on cpu 0: [ 468.746717][T13037] vfs_fsync_range+0x9b/0x130 [ 468.751410][T13037] generic_file_write_iter+0x1b8/0x2f0 [ 468.756877][T13037] iter_file_splice_write+0x666/0xa60 [ 468.762260][T13037] direct_splice_actor+0x156/0x2a0 [ 468.767400][T13037] splice_direct_to_actor+0x312/0x680 [ 468.772779][T13037] do_splice_direct+0xda/0x150 [ 468.777557][T13037] do_sendfile+0x380/0x650 [ 468.781985][T13037] __x64_sys_sendfile64+0x105/0x150 [ 468.787195][T13037] x64_sys_call+0x2bb4/0x3000 [ 468.791881][T13037] do_syscall_64+0xd2/0x200 [ 468.796393][T13037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.802289][T13037] [ 468.804609][T13037] value changed: 0x00000070 -> 0x00000040 [ 468.810325][T13037] [ 468.812689][T13037] Reported by Kernel Concurrency Sanitizer on: [ 468.818854][T13037] CPU: 0 UID: 0 PID: 13037 Comm: syz.1.3034 Not tainted syzkaller #0 PREEMPT(voluntary) [ 468.828664][T13037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 468.838726][T13037] ================================================================== [ 468.877750][T13019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.914318][T12785] veth0_vlan: entered promiscuous mode [ 468.924317][T12785] veth1_vlan: entered promiscuous mode [ 468.934835][T13037] syz.1.3034: attempt to access beyond end of device [ 468.934835][T13037] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 468.948399][T13037] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 468.969312][T12785] veth0_macvtap: entered promiscuous mode [ 468.987957][T13045] syz.1.3034: attempt to access beyond end of device [ 468.987957][T13045] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 468.995200][T12785] veth1_macvtap: entered promiscuous mode [ 469.001622][T13045] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 469.016639][T13045] syz.1.3034: attempt to access beyond end of device [ 469.016639][T13045] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 469.021607][T12785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.030131][T13045] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 469.039506][T12785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.199839][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.218188][ T4916] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.248174][ T4916] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.289771][ T4916] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.339338][ T4916] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0