last executing test programs: 3.949291518s ago: executing program 0 (id=3659): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0xfe, 0x1231, &(0x7f0000003700)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x80004509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) 3.212084228s ago: executing program 2 (id=3665): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0xfe, 0x1231, &(0x7f0000003700)="$eJzs3E9rXFUYB+C3k7RJE/NHrdUWpAe70c0lycKNggRJQTqg1EZoBeHW3OiQ60zIHQIjYnTl1o0fwK24dCeIO91k42dwl41LF+qVzqS1aUdLU8yE8DybOcw5P+57ZuYeOMOc2Xv1y4821qtsPe9G49Rr0diMGP8zRYpG3PFZvPTKTz8///aNm1eXm82VayldWb6++HJKafbSD+9+8u0LP3an3/lu9vuJ2J1/b++3pV93z+9e2Pvr+oetKrWq1O50U55udTrd/FZZpLVWtZGl9FZZ5FWRWu2q2DrQv152Njd7KW+vzUxtbhVVlfJ2L20UvdTtpO5WL+Uf5K12yrIszUwFj2P1m9/ruo6o69NxJuq6rs/GVDTiiZiJ2ZiL+Xgynoqn41w8E+fj2XguLvRHjbpuAAAAAAAAAAAAAAAAAAAAOFmGnf+ffuD8/1cRw87/Xxpx8QAAAAAAAAAAAAAAAAAAAHBCjN+4eXW52Vy5ltJkRPnF9ur26uBx0L+8Hq0oo4iFmIs/on/6f2DQPhPNlYXUNx+flzv7+Z3t1bGD+cX+3wk8kL/yRnNlcZBPB/MTMXVvfinm4tzw/NJ9+cv9/GS8ePmefBZz8cv70Yky1uJ29p/8p4spvf5m877rX+yPAwAAgJMgS3cN3b9n2b/1D/IP+37g9v56Yej+fjwujo927kRUvY838rIstkbeuFPR4JmdiDgmhR260YiIY1DGfzROP3TM9OEvcWr/9n7k+NfTEY8xr7EDH6Rj8TofvjE5svv07hJxdvjKMfb/LUocmf03fWLUdQAAAAAAAAAAAPBojuLnhKOeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+zA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgoAAP//a7/B7g==") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x80004509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) 3.031503903s ago: executing program 0 (id=3667): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0xfe, 0x1231, &(0x7f0000003700)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x80004509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) 2.837788428s ago: executing program 3 (id=3668): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0xfe, 0x1231, &(0x7f0000003700)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x3, 0xff) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x80004509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) 2.394700525s ago: executing program 4 (id=3671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x74}}, 0xc840) 2.377965076s ago: executing program 4 (id=3672): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.357711908s ago: executing program 4 (id=3673): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0xfe, 0x1231, &(0x7f0000003700)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x80004509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) 2.348493098s ago: executing program 2 (id=3674): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.304593612s ago: executing program 2 (id=3675): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0xfe, 0x1231, &(0x7f0000003700)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x80004509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) 2.100855059s ago: executing program 0 (id=3680): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fA,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',k']) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f00000003c0), &(0x7f00000001c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x1) 1.914686584s ago: executing program 3 (id=3681): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff5300000080039503230"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.889070836s ago: executing program 3 (id=3682): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0xfe, 0x1231, &(0x7f0000003700)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x3, 0xff) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x80004509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) 1.83420865s ago: executing program 0 (id=3683): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0xfe, 0x1231, &(0x7f0000003700)="$eJzs3E9rXFUYB+C3k7RJE/NHrdUWpAe70c0lycKNggRJQTqg1EZoBeHW3OiQ60zIHQIjYnTl1o0fwK24dCeIO91k42dwl41LF+qVzqS1aUdLU8yE8DybOcw5P+57ZuYeOMOc2Xv1y4821qtsPe9G49Rr0diMGP8zRYpG3PFZvPTKTz8///aNm1eXm82VayldWb6++HJKafbSD+9+8u0LP3an3/lu9vuJ2J1/b++3pV93z+9e2Pvr+oetKrWq1O50U55udTrd/FZZpLVWtZGl9FZZ5FWRWu2q2DrQv152Njd7KW+vzUxtbhVVlfJ2L20UvdTtpO5WL+Uf5K12yrIszUwFj2P1m9/ruo6o69NxJuq6rs/GVDTiiZiJ2ZiL+Xgynoqn41w8E+fj2XguLvRHjbpuAAAAAAAAAAAAAAAAAAAAOFmGnf+ffuD8/1cRw87/Xxpx8QAAAAAAAAAAAAAAAAAAAHBCjN+4eXW52Vy5ltJkRPnF9ur26uBx0L+8Hq0oo4iFmIs/on/6f2DQPhPNlYXUNx+flzv7+Z3t1bGD+cX+3wk8kL/yRnNlcZBPB/MTMXVvfinm4tzw/NJ9+cv9/GS8ePmefBZz8cv70Yky1uJ29p/8p4spvf5m877rX+yPAwAAgJMgS3cN3b9n2b/1D/IP+37g9v56Yej+fjwujo927kRUvY838rIstkbeuFPR4JmdiDgmhR260YiIY1DGfzROP3TM9OEvcWr/9n7k+NfTEY8xr7EDH6Rj8TofvjE5svv07hJxdvjKMfb/LUocmf03fWLUdQAAAAAAAAAAAPBojuLnhKOeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+zA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgoAAP//a7/B7g==") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x80004509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) 1.785615675s ago: executing program 1 (id=3684): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0xfe, 0x1231, &(0x7f0000003700)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x80004509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) 1.498207848s ago: executing program 4 (id=3685): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0xfe, 0x1231, &(0x7f0000003700)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x80004509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) 1.420967224s ago: executing program 2 (id=3686): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x50a, 0xae0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]}) r1 = gettid() ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000300)={{0x8, 0x7f}, 0x100, './file0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x20000400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040), 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2e", 0x69}, {&(0x7f0000000500)="905783db451f", 0x6}], 0x2}, 0x2008854) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x0, 0x3, 0x3, 0x4, 0xc1, @private2, @remote, 0x10, 0x40, 0x5, 0x6}}) sendmsg$inet(r5, &(0x7f0000000700)={&(0x7f0000000440)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000480)="ccce625b0480d68735edce4c3194b7295bbb221451c06955361319821f3895ca6237c3003a25d684149c396c", 0x2c}, {&(0x7f00000005c0)="92c2f2fd55f955b02668ce82a4a54178c08570bf2efc360bf26e738e24c42f58dc926a22ab0c025f6514c6353427b04a5c7634cc30d613c561003db6fdc273d835124e40af49c77314033eb8b79e39c9c6037367e17df6cf29b3a4790a824303ef7211bb7c6d846e785387501f889227e7f397abfa76b3e356825ce4569b5dbce5", 0x81}, {&(0x7f0000000880)="773a1abbd112fad5b8e5577887b4241833cb7fd57eb418aca65ca837bd0818d866fa5aa5b3306b57ae47ae743fc29f5f27107f920e4ace035f1123a4d2bdf250e74dce17860ff0de154587b2fc189b57871c2c207696ca7810014c70c555d673d9758cae87e4aa8580eff5cba34e379756053729e6768592eb5f5dad4275c664a93a8627a2e17a826edc035dd51604e11b483a77beff9d21976791cc055ae10fe64029996070810ce513219dd489c7a3116c3f2e767e23feb38809f21590281251892486d9f973b9fed973d4c7a28b782b03a22901fd3e36334b833adaca7d30", 0xe0}, {&(0x7f0000000680)="ca3430a4d076b8665b6fb1174c89124f7c9ceca577a17b0cdf892f76b3afdbca69c4a58a74edc7c72431d35189ff1e3e64544d6906d93a25e3df6dba5c8354a2f0125c8e5e36df5a251fa0f0b4fd354f61", 0x51}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1100000000000000000000000100000081000000000000001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="e0000001ac1e00010000000010005636f47cd341ef54abdcf5d1d695284c7660a99a7632df83a35a0697ba9fe07281b4c992d080e3db74c344bf4a8aab2d3c444339a7bec994a61143eedad4c3588b72b4916322da9f51c56855befba689c2a02c6a015b8836609ffd37801401d3c6925268920621a41204ebe653d49bda7a23cba4b7d598e079e24a98305c6c2182a3c7b4406f94cfd0af3b0a13d3c0240909ce6412049ede14be2ae536b74eedc3cbe1fe26214a256b9e67f517e295c28392d12424e1e065127c2acf74"], 0x48}, 0x48000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r7}, 0x10) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69700000616300000005000400000000000900020073797a3000000000240007800400028008000640000000020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) 1.041187185s ago: executing program 2 (id=3687): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x3}, 0x94) recvmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20570, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0xd}, 0x10000, 0x10000, 0x0, 0x0, 0x8, 0x20205, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x2}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) 1.002812098s ago: executing program 3 (id=3688): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fA,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',k']) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f00000003c0), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) 908.278746ms ago: executing program 1 (id=3689): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fA,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',k']) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f00000003c0), &(0x7f00000001c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x1) 884.009158ms ago: executing program 0 (id=3690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) stat(&(0x7f0000001480)='./file0\x00', 0x0) 879.437048ms ago: executing program 3 (id=3691): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20570, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0xd}, 0x10000, 0x10000, 0x0, 0x0, 0x8, 0x20205, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 807.098484ms ago: executing program 0 (id=3692): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0xfe, 0x1231, &(0x7f0000003700)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x80004509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) 632.155949ms ago: executing program 1 (id=3693): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030"], 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000740), 0x0) 588.280723ms ago: executing program 4 (id=3694): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000002"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 518.882208ms ago: executing program 1 (id=3695): mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000740), 0x0) 505.288119ms ago: executing program 4 (id=3696): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0xfe, 0x1231, &(0x7f0000003700)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x80004509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) 483.018271ms ago: executing program 1 (id=3697): syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 440.286435ms ago: executing program 1 (id=3698): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20570, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0xd}, 0x10000, 0x10000, 0x0, 0x0, 0x8, 0x20205, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) 190.299895ms ago: executing program 2 (id=3699): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0xfe, 0x1231, &(0x7f0000003700)="$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") socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x80004509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) 0s ago: executing program 3 (id=3700): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0xc104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = dup(r2) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r1}, 0x18) gettid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0400000025", @ANYBLOB], 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r9, 0x0, 0x8000000000000}, 0x18) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) kernel console output (not intermixed with test programs): 215.902569][T14430] FAT-fs (loop0): Directory bread(block 162) failed [ 215.911420][T14434] loop3: detected capacity change from 0 to 128 [ 215.917735][T14430] FAT-fs (loop0): Directory bread(block 163) failed [ 215.931887][T14430] FAT-fs (loop0): Directory bread(block 164) failed [ 215.940178][T14430] FAT-fs (loop0): Directory bread(block 165) failed [ 215.947216][T14434] FAT-fs (loop3): Directory bread(block 162) failed [ 215.955268][T14436] loop1: detected capacity change from 0 to 128 [ 215.957580][T14434] FAT-fs (loop3): Directory bread(block 163) failed [ 215.969480][T14434] FAT-fs (loop3): Directory bread(block 164) failed [ 215.977649][T14434] FAT-fs (loop3): Directory bread(block 165) failed [ 215.978012][T14430] FAT-fs (loop0): Directory bread(block 166) failed [ 215.993594][T14430] FAT-fs (loop0): Directory bread(block 167) failed [ 216.000326][T14430] FAT-fs (loop0): Directory bread(block 168) failed [ 216.007088][T14430] FAT-fs (loop0): Directory bread(block 169) failed [ 216.022531][T14436] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.034867][T14434] FAT-fs (loop3): Directory bread(block 166) failed [ 216.041853][T14441] loop4: detected capacity change from 0 to 128 [ 216.041968][T14434] FAT-fs (loop3): Directory bread(block 167) failed [ 216.054917][T14434] FAT-fs (loop3): Directory bread(block 168) failed [ 216.055962][T14441] FAT-fs (loop4): Directory bread(block 162) failed [ 216.061691][T14434] FAT-fs (loop3): Directory bread(block 169) failed [ 216.072706][T14436] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.078786][T14441] FAT-fs (loop4): Directory bread(block 163) failed [ 216.104470][T14441] FAT-fs (loop4): Directory bread(block 164) failed [ 216.111441][T14441] FAT-fs (loop4): Directory bread(block 165) failed [ 216.128203][T14441] FAT-fs (loop4): Directory bread(block 166) failed [ 216.138390][T14441] FAT-fs (loop4): Directory bread(block 167) failed [ 216.146467][T14441] FAT-fs (loop4): Directory bread(block 168) failed [ 216.177764][T14430] FAT-fs (loop0): Directory bread(block 162) failed [ 216.186114][T14430] FAT-fs (loop0): Directory bread(block 163) failed [ 216.198399][T14430] syz.0.2992: attempt to access beyond end of device [ 216.198399][T14430] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 216.200596][T14441] FAT-fs (loop4): Directory bread(block 169) failed [ 216.212899][T14430] syz.0.2992: attempt to access beyond end of device [ 216.212899][T14430] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 216.268786][T14434] __nla_validate_parse: 12 callbacks suppressed [ 216.268839][T14434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2990'. [ 216.295185][T14434] FAT-fs (loop3): Directory bread(block 162) failed [ 216.303216][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.303611][T14434] FAT-fs (loop3): Directory bread(block 163) failed [ 216.343617][T14434] syz.3.2990: attempt to access beyond end of device [ 216.343617][T14434] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 216.358160][T14434] syz.3.2990: attempt to access beyond end of device [ 216.358160][T14434] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 216.397236][T14448] loop0: detected capacity change from 0 to 128 [ 216.441053][T14448] FAT-fs (loop0): Directory bread(block 162) failed [ 216.444143][T14441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2995'. [ 216.449808][T14448] FAT-fs (loop0): Directory bread(block 163) failed [ 216.464240][T14441] FAT-fs (loop4): Directory bread(block 162) failed [ 216.472397][T14441] FAT-fs (loop4): Directory bread(block 163) failed [ 216.493909][T14448] FAT-fs (loop0): Directory bread(block 164) failed [ 216.529597][T14448] FAT-fs (loop0): Directory bread(block 165) failed [ 216.547014][T14448] FAT-fs (loop0): Directory bread(block 166) failed [ 216.558900][T14448] FAT-fs (loop0): Directory bread(block 167) failed [ 216.575883][T14459] loop3: detected capacity change from 0 to 128 [ 216.598632][T14448] FAT-fs (loop0): Directory bread(block 168) failed [ 216.605674][T14448] FAT-fs (loop0): Directory bread(block 169) failed [ 216.619522][T14459] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.647527][T14467] loop4: detected capacity change from 0 to 128 [ 216.656229][T14459] ext4 filesystem being mounted at /664/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.704097][T14467] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.731340][T14467] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.816828][T14448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2998'. [ 216.862179][T14448] FAT-fs (loop0): Directory bread(block 162) failed [ 216.863600][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.880268][T14448] FAT-fs (loop0): Directory bread(block 163) failed [ 216.904856][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.925567][T14477] loop3: detected capacity change from 0 to 128 [ 216.961312][T14477] FAT-fs (loop3): Directory bread(block 162) failed [ 216.995093][T14483] loop0: detected capacity change from 0 to 128 [ 217.018618][T14477] FAT-fs (loop3): Directory bread(block 163) failed [ 217.023739][T14446] netlink: 'syz.1.2997': attribute type 13 has an invalid length. [ 217.030448][T14485] loop4: detected capacity change from 0 to 128 [ 217.033136][T14446] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2997'. [ 217.048452][T14477] FAT-fs (loop3): Directory bread(block 164) failed [ 217.048480][T14477] FAT-fs (loop3): Directory bread(block 165) failed [ 217.048499][T14477] FAT-fs (loop3): Directory bread(block 166) failed [ 217.080567][T14477] FAT-fs (loop3): Directory bread(block 167) failed [ 217.083765][T14485] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.087316][T14446] erspan0: refused to change device tx_queue_len [ 217.106431][T14477] FAT-fs (loop3): Directory bread(block 168) failed [ 217.113949][T14477] FAT-fs (loop3): Directory bread(block 169) failed [ 217.118238][T14483] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.121437][T14446] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 217.153268][T14485] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.170724][T14483] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.217268][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.257537][T14477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3004'. [ 217.293007][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.293483][T14477] FAT-fs (loop3): Directory bread(block 162) failed [ 217.319693][T14477] FAT-fs (loop3): Directory bread(block 163) failed [ 217.509419][T14502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3013'. [ 217.540517][T14517] loop1: detected capacity change from 0 to 128 [ 217.555805][T14517] FAT-fs (loop1): Directory bread(block 162) failed [ 217.564975][T14517] FAT-fs (loop1): Directory bread(block 163) failed [ 217.572438][T14517] FAT-fs (loop1): Directory bread(block 164) failed [ 217.579180][T14517] FAT-fs (loop1): Directory bread(block 165) failed [ 217.585772][T14517] FAT-fs (loop1): Directory bread(block 166) failed [ 217.592717][T14517] FAT-fs (loop1): Directory bread(block 167) failed [ 217.622526][T14521] loop2: detected capacity change from 0 to 128 [ 217.628711][T14517] FAT-fs (loop1): Directory bread(block 168) failed [ 217.631195][T14521] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.639926][T14517] FAT-fs (loop1): Directory bread(block 169) failed [ 217.682645][T14521] ext4 filesystem being mounted at /600/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.722642][T14515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3016'. [ 217.759961][T14524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3019'. [ 217.852366][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.857025][T14517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3017'. [ 217.882884][T14517] FAT-fs (loop1): Directory bread(block 162) failed [ 217.891467][T14517] FAT-fs (loop1): Directory bread(block 163) failed [ 218.020262][T14540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3024'. [ 218.031925][T14495] netlink: 'syz.4.3010': attribute type 13 has an invalid length. [ 218.040147][T14495] erspan0: refused to change device tx_queue_len [ 218.047616][T14495] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 218.237998][T14551] loop4: detected capacity change from 0 to 128 [ 218.265371][T14551] FAT-fs (loop4): Directory bread(block 162) failed [ 218.310343][T14551] FAT-fs (loop4): Directory bread(block 163) failed [ 218.317032][T14551] FAT-fs (loop4): Directory bread(block 164) failed [ 218.346681][T14551] FAT-fs (loop4): Directory bread(block 165) failed [ 218.364031][T14551] FAT-fs (loop4): Directory bread(block 166) failed [ 218.396041][T14551] FAT-fs (loop4): Directory bread(block 167) failed [ 218.420752][T14551] FAT-fs (loop4): Directory bread(block 168) failed [ 218.427626][T14551] FAT-fs (loop4): Directory bread(block 169) failed [ 218.435189][T14557] loop0: detected capacity change from 0 to 128 [ 218.452032][T14557] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.573039][T14551] FAT-fs (loop4): Directory bread(block 162) failed [ 218.599639][T14551] FAT-fs (loop4): Directory bread(block 163) failed [ 218.926093][T14587] loop4: detected capacity change from 0 to 128 [ 218.952154][T14587] ext4 filesystem being mounted at /602/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.133993][T14606] loop0: detected capacity change from 0 to 128 [ 219.164649][T14606] EXT4-fs mount: 3 callbacks suppressed [ 219.164665][T14606] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.193436][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.223243][T14606] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.311152][T14623] loop3: detected capacity change from 0 to 128 [ 219.318711][T14623] FAT-fs (loop3): Directory bread(block 162) failed [ 219.332471][T14623] FAT-fs (loop3): Directory bread(block 163) failed [ 219.339504][T14623] FAT-fs (loop3): Directory bread(block 164) failed [ 219.346442][T14623] FAT-fs (loop3): Directory bread(block 165) failed [ 219.353362][T14623] FAT-fs (loop3): Directory bread(block 166) failed [ 219.360204][T14623] FAT-fs (loop3): Directory bread(block 167) failed [ 219.366927][T14623] FAT-fs (loop3): Directory bread(block 168) failed [ 219.374658][T14623] FAT-fs (loop3): Directory bread(block 169) failed [ 219.426920][T14629] loop2: detected capacity change from 0 to 512 [ 219.462738][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.477928][T14623] FAT-fs (loop3): Directory bread(block 162) failed [ 219.485591][T14623] FAT-fs (loop3): Directory bread(block 163) failed [ 219.532904][T14629] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3045: Failed to acquire dquot type 1 [ 219.545538][T14629] EXT4-fs (loop2): 1 truncate cleaned up [ 219.558871][T14629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.615499][T14648] loop1: detected capacity change from 0 to 128 [ 219.657435][T14629] ext4 filesystem being mounted at /604/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.662436][ T29] kauditd_printk_skb: 1791 callbacks suppressed [ 219.662452][ T29] audit: type=1326 audit(1753983627.829:38876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14653 comm="syz.3.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 219.697750][ T29] audit: type=1326 audit(1753983627.829:38877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14653 comm="syz.3.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 219.732932][ T29] audit: type=1400 audit(1753983627.879:38878): avc: denied { create } for pid=14628 comm="syz.2.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.750680][T14648] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.752668][ T29] audit: type=1400 audit(1753983627.879:38879): avc: denied { mounton } for pid=14628 comm="syz.2.3045" path="/604/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.776145][T14648] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.787429][ T29] audit: type=1400 audit(1753983627.879:38880): avc: denied { mount } for pid=14628 comm="syz.2.3045" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 219.819795][ T29] audit: type=1400 audit(1753983627.879:38881): avc: denied { mounton } for pid=14628 comm="syz.2.3045" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 219.841295][ T29] audit: type=1400 audit(1753983627.879:38882): avc: denied { ioctl } for pid=14628 comm="syz.2.3045" path="socket:[35522]" dev="sockfs" ino=35522 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.866200][ T29] audit: type=1326 audit(1753983627.899:38883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14653 comm="syz.3.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 219.889704][ T29] audit: type=1326 audit(1753983627.899:38884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14653 comm="syz.3.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 219.913277][ T29] audit: type=1326 audit(1753983627.899:38885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14653 comm="syz.3.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 220.007805][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.017057][T14669] loop0: detected capacity change from 0 to 512 [ 220.030931][T14671] loop2: detected capacity change from 0 to 128 [ 220.038511][T14669] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.058480][T14671] FAT-fs (loop2): Directory bread(block 162) failed [ 220.065529][T14671] FAT-fs (loop2): Directory bread(block 163) failed [ 220.072431][T14671] FAT-fs (loop2): Directory bread(block 164) failed [ 220.079540][T14671] FAT-fs (loop2): Directory bread(block 165) failed [ 220.086668][T14671] FAT-fs (loop2): Directory bread(block 166) failed [ 220.090414][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.093491][T14671] FAT-fs (loop2): Directory bread(block 167) failed [ 220.109226][T14669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.122003][T14669] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.134641][T14671] FAT-fs (loop2): Directory bread(block 168) failed [ 220.141321][T14671] FAT-fs (loop2): Directory bread(block 169) failed [ 220.166324][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.285939][T14671] FAT-fs (loop2): Directory bread(block 162) failed [ 220.298536][T14671] FAT-fs (loop2): Directory bread(block 163) failed [ 220.321218][T14671] bio_check_eod: 12 callbacks suppressed [ 220.321243][T14671] syz.2.3052: attempt to access beyond end of device [ 220.321243][T14671] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 220.346800][T14671] syz.2.3052: attempt to access beyond end of device [ 220.346800][T14671] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 220.430050][T14694] loop3: detected capacity change from 0 to 128 [ 220.459523][T14694] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.513238][T14694] ext4 filesystem being mounted at /676/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.556398][T14705] loop4: detected capacity change from 0 to 128 [ 220.575908][T14705] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.603218][T14716] loop0: detected capacity change from 0 to 128 [ 220.603919][T14705] ext4 filesystem being mounted at /608/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.635235][T14716] FAT-fs (loop0): Directory bread(block 162) failed [ 220.642526][T14716] FAT-fs (loop0): Directory bread(block 163) failed [ 220.651764][T14716] FAT-fs (loop0): Directory bread(block 164) failed [ 220.660638][T14716] FAT-fs (loop0): Directory bread(block 165) failed [ 220.667298][T14716] FAT-fs (loop0): Directory bread(block 166) failed [ 220.674324][T14716] FAT-fs (loop0): Directory bread(block 167) failed [ 220.680979][T14716] FAT-fs (loop0): Directory bread(block 168) failed [ 220.687896][T14716] FAT-fs (loop0): Directory bread(block 169) failed [ 220.707382][T14720] loop2: detected capacity change from 0 to 128 [ 220.717226][T14720] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.731630][T14720] ext4 filesystem being mounted at /607/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.756854][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.784304][T14723] loop3: detected capacity change from 0 to 128 [ 220.797108][T14723] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.815644][T14723] ext4 filesystem being mounted at /677/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.840732][T14716] FAT-fs (loop0): Directory bread(block 162) failed [ 220.847564][T14716] FAT-fs (loop0): Directory bread(block 163) failed [ 220.860928][T14716] syz.0.3062: attempt to access beyond end of device [ 220.860928][T14716] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 220.879975][T14716] syz.0.3062: attempt to access beyond end of device [ 220.879975][T14716] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 220.895223][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.917008][T14727] loop4: detected capacity change from 0 to 128 [ 220.928338][T14727] FAT-fs (loop4): Directory bread(block 162) failed [ 220.935464][T14727] FAT-fs (loop4): Directory bread(block 163) failed [ 220.942347][T14727] FAT-fs (loop4): Directory bread(block 164) failed [ 220.950214][T14727] FAT-fs (loop4): Directory bread(block 165) failed [ 220.958722][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.968914][T14727] FAT-fs (loop4): Directory bread(block 166) failed [ 220.976538][T14727] FAT-fs (loop4): Directory bread(block 167) failed [ 220.985819][T14727] FAT-fs (loop4): Directory bread(block 168) failed [ 220.993459][T14727] FAT-fs (loop4): Directory bread(block 169) failed [ 221.009998][T14730] loop0: detected capacity change from 0 to 512 [ 221.025294][T14733] loop1: detected capacity change from 0 to 128 [ 221.043008][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.065663][T14730] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.074567][T14733] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.096879][T14733] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.125365][T14727] FAT-fs (loop4): Directory bread(block 162) failed [ 221.139514][T14737] loop3: detected capacity change from 0 to 128 [ 221.140669][T14730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.146726][T14727] FAT-fs (loop4): Directory bread(block 163) failed [ 221.159681][T14737] FAT-fs (loop3): Directory bread(block 162) failed [ 221.166063][T14727] syz.4.3065: attempt to access beyond end of device [ 221.166063][T14727] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 221.187062][T14727] syz.4.3065: attempt to access beyond end of device [ 221.187062][T14727] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 221.199270][T14737] FAT-fs (loop3): Directory bread(block 163) failed [ 221.203706][T14730] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.207204][T14737] FAT-fs (loop3): Directory bread(block 164) failed [ 221.224431][T14737] FAT-fs (loop3): Directory bread(block 165) failed [ 221.234167][T14737] FAT-fs (loop3): Directory bread(block 166) failed [ 221.241000][T14737] FAT-fs (loop3): Directory bread(block 167) failed [ 221.247598][T14737] FAT-fs (loop3): Directory bread(block 168) failed [ 221.254265][T14737] FAT-fs (loop3): Directory bread(block 169) failed [ 221.276844][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.314953][T14734] __nla_validate_parse: 17 callbacks suppressed [ 221.314969][T14734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3067'. [ 221.398812][T14748] loop4: detected capacity change from 0 to 128 [ 221.413843][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.414202][T14748] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.441993][T14748] ext4 filesystem being mounted at /611/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.447726][T14737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3069'. [ 221.512216][T14754] loop1: detected capacity change from 0 to 128 [ 221.523760][T14737] FAT-fs (loop3): Directory bread(block 162) failed [ 221.540917][T14737] FAT-fs (loop3): Directory bread(block 163) failed [ 221.551648][T14754] FAT-fs (loop1): Directory bread(block 162) failed [ 221.558294][T14754] FAT-fs (loop1): Directory bread(block 163) failed [ 221.570819][T14737] syz.3.3069: attempt to access beyond end of device [ 221.570819][T14737] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 221.600582][T14758] loop2: detected capacity change from 0 to 128 [ 221.605822][T14754] FAT-fs (loop1): Directory bread(block 164) failed [ 221.621312][T14737] syz.3.3069: attempt to access beyond end of device [ 221.621312][T14737] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 221.636799][T14754] FAT-fs (loop1): Directory bread(block 165) failed [ 221.642017][T14758] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.644014][T14754] FAT-fs (loop1): Directory bread(block 166) failed [ 221.665661][T14758] ext4 filesystem being mounted at /609/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.673222][T14754] FAT-fs (loop1): Directory bread(block 167) failed [ 221.682783][T14754] FAT-fs (loop1): Directory bread(block 168) failed [ 221.689484][T14754] FAT-fs (loop1): Directory bread(block 169) failed [ 221.735518][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.756648][T14762] loop3: detected capacity change from 0 to 128 [ 221.796394][T14764] loop4: detected capacity change from 0 to 128 [ 221.797439][T14762] FAT-fs (loop3): Directory bread(block 162) failed [ 221.811027][T14764] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.826721][T14764] ext4 filesystem being mounted at /612/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.831851][T14762] FAT-fs (loop3): Directory bread(block 163) failed [ 221.843985][T14762] FAT-fs (loop3): Directory bread(block 164) failed [ 221.850793][T14762] FAT-fs (loop3): Directory bread(block 165) failed [ 221.857540][T14762] FAT-fs (loop3): Directory bread(block 166) failed [ 221.864306][T14762] FAT-fs (loop3): Directory bread(block 167) failed [ 221.871261][T14762] FAT-fs (loop3): Directory bread(block 168) failed [ 221.877844][T14762] FAT-fs (loop3): Directory bread(block 169) failed [ 221.883222][T14754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3074'. [ 221.903972][T14754] FAT-fs (loop1): Directory bread(block 162) failed [ 221.917145][T14754] FAT-fs (loop1): Directory bread(block 163) failed [ 221.928539][T14754] syz.1.3074: attempt to access beyond end of device [ 221.928539][T14754] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 221.942792][T14754] syz.1.3074: attempt to access beyond end of device [ 221.942792][T14754] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 221.993281][T14770] loop1: detected capacity change from 0 to 128 [ 222.006858][T14770] FAT-fs (loop1): Directory bread(block 162) failed [ 222.007038][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.022529][T14770] FAT-fs (loop1): Directory bread(block 163) failed [ 222.030375][T14770] FAT-fs (loop1): Directory bread(block 164) failed [ 222.037287][T14770] FAT-fs (loop1): Directory bread(block 165) failed [ 222.048432][T14770] FAT-fs (loop1): Directory bread(block 166) failed [ 222.062170][T14770] FAT-fs (loop1): Directory bread(block 167) failed [ 222.066923][T14762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3076'. [ 222.069872][T14770] FAT-fs (loop1): Directory bread(block 168) failed [ 222.069921][T14770] FAT-fs (loop1): Directory bread(block 169) failed [ 222.115957][T14762] FAT-fs (loop3): Directory bread(block 162) failed [ 222.123188][T14762] FAT-fs (loop3): Directory bread(block 163) failed [ 222.187402][T14770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3078'. [ 222.214207][T14770] FAT-fs (loop1): Directory bread(block 162) failed [ 222.225122][T14770] FAT-fs (loop1): Directory bread(block 163) failed [ 222.233212][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.312105][T14788] loop4: detected capacity change from 0 to 128 [ 222.330595][T14790] loop1: detected capacity change from 0 to 128 [ 222.348495][T14788] FAT-fs (loop4): Directory bread(block 162) failed [ 222.355491][T14788] FAT-fs (loop4): Directory bread(block 163) failed [ 222.368658][T14788] FAT-fs (loop4): Directory bread(block 164) failed [ 222.378191][T14790] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.398742][T14788] FAT-fs (loop4): Directory bread(block 165) failed [ 222.415997][T14790] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.426713][T14788] FAT-fs (loop4): Directory bread(block 166) failed [ 222.438659][T14788] FAT-fs (loop4): Directory bread(block 167) failed [ 222.441458][T14780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3082'. [ 222.460145][T14788] FAT-fs (loop4): Directory bread(block 168) failed [ 222.467174][T14788] FAT-fs (loop4): Directory bread(block 169) failed [ 222.506810][T14795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3085'. [ 222.602357][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.622245][T14800] loop3: detected capacity change from 0 to 128 [ 222.623779][T14802] loop1: detected capacity change from 0 to 128 [ 222.643337][T14800] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.661337][T14802] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.685400][T14772] netlink: 'syz.2.3079': attribute type 13 has an invalid length. [ 222.692187][T14788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3083'. [ 222.693251][T14772] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3079'. [ 222.717066][T14772] erspan0: refused to change device tx_queue_len [ 222.720804][T14800] ext4 filesystem being mounted at /682/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.726794][T14802] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.741283][T14772] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 222.757664][T14788] FAT-fs (loop4): Directory bread(block 162) failed [ 222.775988][T14788] FAT-fs (loop4): Directory bread(block 163) failed [ 222.806606][T14811] loop4: detected capacity change from 0 to 128 [ 222.810299][T14810] loop2: detected capacity change from 0 to 128 [ 222.815351][T14811] FAT-fs (loop4): Directory bread(block 162) failed [ 222.833024][T14810] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.845774][T14811] FAT-fs (loop4): Directory bread(block 163) failed [ 222.852612][T14810] ext4 filesystem being mounted at /611/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.863275][T14811] FAT-fs (loop4): Directory bread(block 164) failed [ 222.870041][T14811] FAT-fs (loop4): Directory bread(block 165) failed [ 222.876703][T14811] FAT-fs (loop4): Directory bread(block 166) failed [ 222.905239][T14811] FAT-fs (loop4): Directory bread(block 167) failed [ 222.913813][T14811] FAT-fs (loop4): Directory bread(block 168) failed [ 222.920997][T14811] FAT-fs (loop4): Directory bread(block 169) failed [ 222.973224][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.997073][T14818] loop3: detected capacity change from 0 to 128 [ 223.018556][T14811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3090'. [ 223.032624][T14818] FAT-fs (loop3): Directory bread(block 162) failed [ 223.040696][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.049804][T14818] FAT-fs (loop3): Directory bread(block 163) failed [ 223.056473][T14818] FAT-fs (loop3): Directory bread(block 164) failed [ 223.057385][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.063214][T14818] FAT-fs (loop3): Directory bread(block 165) failed [ 223.073814][T14819] FAT-fs (loop4): Directory bread(block 162) failed [ 223.078753][T14818] FAT-fs (loop3): Directory bread(block 166) failed [ 223.094059][T14818] FAT-fs (loop3): Directory bread(block 167) failed [ 223.100820][T14818] FAT-fs (loop3): Directory bread(block 168) failed [ 223.107399][T14818] FAT-fs (loop3): Directory bread(block 169) failed [ 223.124522][T14819] FAT-fs (loop4): Directory bread(block 163) failed [ 223.135167][T14821] loop1: detected capacity change from 0 to 128 [ 223.177898][T14823] loop2: detected capacity change from 0 to 1024 [ 223.185076][T14823] EXT4-fs: Invalid want_extra_isize 0 [ 223.190847][T14821] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.266707][T14821] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.297978][T14830] loop2: detected capacity change from 0 to 128 [ 223.335061][T14832] loop4: detected capacity change from 0 to 128 [ 223.349196][T14832] FAT-fs (loop4): Directory bread(block 162) failed [ 223.351959][T14830] FAT-fs (loop2): Directory bread(block 162) failed [ 223.355872][T14832] FAT-fs (loop4): Directory bread(block 163) failed [ 223.374208][T14830] FAT-fs (loop2): Directory bread(block 163) failed [ 223.381122][T14830] FAT-fs (loop2): Directory bread(block 164) failed [ 223.387264][T14832] FAT-fs (loop4): Directory bread(block 164) failed [ 223.410508][T14830] FAT-fs (loop2): Directory bread(block 165) failed [ 223.415152][T14807] netlink: 'syz.0.3088': attribute type 13 has an invalid length. [ 223.432215][T14830] FAT-fs (loop2): Directory bread(block 166) failed [ 223.439037][T14830] FAT-fs (loop2): Directory bread(block 167) failed [ 223.441871][T14818] FAT-fs (loop3): Directory bread(block 162) failed [ 223.445915][T14830] FAT-fs (loop2): Directory bread(block 168) failed [ 223.454313][T14818] FAT-fs (loop3): Directory bread(block 163) failed [ 223.459075][T14832] FAT-fs (loop4): Directory bread(block 165) failed [ 223.459098][T14832] FAT-fs (loop4): Directory bread(block 166) failed [ 223.459118][T14832] FAT-fs (loop4): Directory bread(block 167) failed [ 223.459138][T14832] FAT-fs (loop4): Directory bread(block 168) failed [ 223.459155][T14832] FAT-fs (loop4): Directory bread(block 169) failed [ 223.459885][T14830] FAT-fs (loop2): Directory bread(block 169) failed [ 223.507393][T14807] erspan0: refused to change device tx_queue_len [ 223.513799][T14807] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 223.590741][T14832] FAT-fs (loop4): Directory bread(block 162) failed [ 223.610061][T14832] FAT-fs (loop4): Directory bread(block 163) failed [ 223.620527][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.642367][T14839] loop3: detected capacity change from 0 to 128 [ 223.664391][T14839] FAT-fs (loop3): Directory bread(block 162) failed [ 223.687233][T14842] loop1: detected capacity change from 0 to 128 [ 223.707109][T14842] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.708753][T14839] FAT-fs (loop3): Directory bread(block 163) failed [ 223.722964][T14842] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.776630][T14830] FAT-fs (loop2): Directory bread(block 162) failed [ 223.792258][T14830] FAT-fs (loop2): Directory bread(block 163) failed [ 223.799700][T14839] FAT-fs (loop3): Directory bread(block 164) failed [ 223.816581][T14839] FAT-fs (loop3): Directory bread(block 165) failed [ 223.836844][T14839] FAT-fs (loop3): Directory bread(block 166) failed [ 223.844128][T14839] FAT-fs (loop3): Directory bread(block 167) failed [ 223.851132][T14839] FAT-fs (loop3): Directory bread(block 168) failed [ 223.861756][T14839] FAT-fs (loop3): Directory bread(block 169) failed [ 223.911590][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.964490][T14857] loop4: detected capacity change from 0 to 1024 [ 223.977899][T14858] loop1: detected capacity change from 0 to 128 [ 223.985163][T14857] EXT4-fs: Invalid want_extra_isize 0 [ 224.000214][T14858] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.004883][T14839] FAT-fs (loop3): Directory bread(block 162) failed [ 224.024871][T14839] FAT-fs (loop3): Directory bread(block 163) failed [ 224.123596][T14858] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.227336][T14879] loop0: detected capacity change from 0 to 128 [ 224.272905][T14886] loop3: detected capacity change from 0 to 128 [ 224.284866][T14879] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.317765][T14886] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.337836][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.366127][T14886] ext4 filesystem being mounted at /689/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.390012][T14879] ext4 filesystem being mounted at /605/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.522614][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.561897][T14852] netlink: 'syz.2.3103': attribute type 13 has an invalid length. [ 224.581644][T14852] erspan0: refused to change device tx_queue_len [ 224.588896][T14852] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 224.609389][T14912] loop4: detected capacity change from 0 to 128 [ 224.615004][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.631134][T14912] FAT-fs (loop4): Directory bread(block 162) failed [ 224.661809][ T29] kauditd_printk_skb: 1237 callbacks suppressed [ 224.661823][ T29] audit: type=1400 audit(1753983632.839:40123): avc: denied { prog_run } for pid=14916 comm="syz.0.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.670801][T14912] FAT-fs (loop4): Directory bread(block 163) failed [ 224.706068][T14912] FAT-fs (loop4): Directory bread(block 164) failed [ 224.711861][ T29] audit: type=1326 audit(1753983632.879:40124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14916 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 224.720676][T14912] FAT-fs (loop4): Directory bread(block 165) failed [ 224.736346][ T29] audit: type=1326 audit(1753983632.879:40125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14916 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 224.744400][T14912] FAT-fs (loop4): Directory bread(block 166) failed [ 224.766389][ T29] audit: type=1326 audit(1753983632.879:40126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14916 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 224.766420][ T29] audit: type=1326 audit(1753983632.879:40127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14916 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 224.766445][ T29] audit: type=1326 audit(1753983632.879:40128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14916 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 224.822523][T14912] FAT-fs (loop4): Directory bread(block 167) failed [ 224.843634][ T29] audit: type=1326 audit(1753983632.879:40129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14916 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 224.843663][ T29] audit: type=1326 audit(1753983632.879:40130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14916 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 224.897203][ T29] audit: type=1326 audit(1753983632.879:40131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14916 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 224.920853][ T29] audit: type=1326 audit(1753983632.879:40132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14916 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 224.937429][T14912] FAT-fs (loop4): Directory bread(block 168) failed [ 224.984251][T14912] FAT-fs (loop4): Directory bread(block 169) failed [ 225.167423][T14912] FAT-fs (loop4): Directory bread(block 162) failed [ 225.174661][T14912] FAT-fs (loop4): Directory bread(block 163) failed [ 225.222356][T14942] loop2: detected capacity change from 0 to 128 [ 225.241734][T14942] FAT-fs (loop2): Directory bread(block 162) failed [ 225.248522][T14942] FAT-fs (loop2): Directory bread(block 163) failed [ 225.275652][T14942] FAT-fs (loop2): Directory bread(block 164) failed [ 225.275847][T14944] loop4: detected capacity change from 0 to 128 [ 225.282928][T14942] FAT-fs (loop2): Directory bread(block 165) failed [ 225.295542][T14942] FAT-fs (loop2): Directory bread(block 166) failed [ 225.314451][T14944] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.339593][T14942] FAT-fs (loop2): Directory bread(block 167) failed [ 225.343552][T14944] ext4 filesystem being mounted at /624/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.346253][T14942] FAT-fs (loop2): Directory bread(block 168) failed [ 225.364829][T14942] FAT-fs (loop2): Directory bread(block 169) failed [ 225.484351][T14942] FAT-fs (loop2): Directory bread(block 162) failed [ 225.496573][T14942] FAT-fs (loop2): Directory bread(block 163) failed [ 225.504755][T14942] bio_check_eod: 18 callbacks suppressed [ 225.504801][T14942] syz.2.3126: attempt to access beyond end of device [ 225.504801][T14942] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 225.525813][T14942] syz.2.3126: attempt to access beyond end of device [ 225.525813][T14942] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 225.547619][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.587464][T14953] loop2: detected capacity change from 0 to 128 [ 225.589686][T14955] loop4: detected capacity change from 0 to 128 [ 225.607616][T14955] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.634962][T14953] FAT-fs (loop2): Directory bread(block 162) failed [ 225.644291][T14933] netlink: 'syz.3.3124': attribute type 13 has an invalid length. [ 225.655735][T14953] FAT-fs (loop2): Directory bread(block 163) failed [ 225.663170][T14933] erspan0: refused to change device tx_queue_len [ 225.673666][T14953] FAT-fs (loop2): Directory bread(block 164) failed [ 225.681629][T14955] ext4 filesystem being mounted at /625/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.693375][T14933] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 225.698461][T14953] FAT-fs (loop2): Directory bread(block 165) failed [ 225.715653][T14953] FAT-fs (loop2): Directory bread(block 166) failed [ 225.722469][T14953] FAT-fs (loop2): Directory bread(block 167) failed [ 225.729164][T14953] FAT-fs (loop2): Directory bread(block 168) failed [ 225.735760][T14953] FAT-fs (loop2): Directory bread(block 169) failed [ 225.827354][T14959] loop1: detected capacity change from 0 to 128 [ 225.856674][T14959] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.870489][T14959] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.904163][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.915086][T14953] FAT-fs (loop2): Directory bread(block 162) failed [ 225.922212][T14953] FAT-fs (loop2): Directory bread(block 163) failed [ 225.930027][T14953] syz.2.3130: attempt to access beyond end of device [ 225.930027][T14953] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 225.944207][T14953] syz.2.3130: attempt to access beyond end of device [ 225.944207][T14953] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 225.977848][T14968] loop4: detected capacity change from 0 to 128 [ 225.998768][T14968] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.079726][T14968] ext4 filesystem being mounted at /626/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.102719][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.157867][T14950] netlink: 'syz.0.3128': attribute type 13 has an invalid length. [ 226.166298][T14950] erspan0: refused to change device tx_queue_len [ 226.172659][T14950] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 226.278732][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.357497][T14987] loop4: detected capacity change from 0 to 128 [ 226.400444][T14987] FAT-fs (loop4): Directory bread(block 162) failed [ 226.417605][T14981] __nla_validate_parse: 18 callbacks suppressed [ 226.417651][T14981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3137'. [ 226.443100][T14987] FAT-fs (loop4): Directory bread(block 163) failed [ 226.450004][T14989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3140'. [ 226.463298][T14987] FAT-fs (loop4): Directory bread(block 164) failed [ 226.483488][T14987] FAT-fs (loop4): Directory bread(block 165) failed [ 226.498826][T14987] FAT-fs (loop4): Directory bread(block 166) failed [ 226.509097][T14961] netlink: 'syz.3.3131': attribute type 13 has an invalid length. [ 226.515601][T14987] FAT-fs (loop4): Directory bread(block 167) failed [ 226.516997][T14961] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3131'. [ 226.532824][T14987] FAT-fs (loop4): Directory bread(block 168) failed [ 226.545538][T14961] erspan0: refused to change device tx_queue_len [ 226.546238][T14987] FAT-fs (loop4): Directory bread(block 169) failed [ 226.552536][T14961] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 226.682450][T14987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3139'. [ 226.717691][T14987] FAT-fs (loop4): Directory bread(block 162) failed [ 226.750920][T14987] FAT-fs (loop4): Directory bread(block 163) failed [ 226.796292][T14987] syz.4.3139: attempt to access beyond end of device [ 226.796292][T14987] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 226.818253][T14987] syz.4.3139: attempt to access beyond end of device [ 226.818253][T14987] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 226.907127][T15013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3145'. [ 226.920081][T15022] loop4: detected capacity change from 0 to 128 [ 226.978106][T15022] FAT-fs (loop4): Directory bread(block 162) failed [ 226.989460][T15022] FAT-fs (loop4): Directory bread(block 163) failed [ 227.000908][T15022] FAT-fs (loop4): Directory bread(block 164) failed [ 227.007865][T15022] FAT-fs (loop4): Directory bread(block 165) failed [ 227.023814][T15022] FAT-fs (loop4): Directory bread(block 166) failed [ 227.031062][T15022] FAT-fs (loop4): Directory bread(block 167) failed [ 227.037824][T15022] FAT-fs (loop4): Directory bread(block 168) failed [ 227.045075][T15022] FAT-fs (loop4): Directory bread(block 169) failed [ 227.178744][T15030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3152'. [ 227.183715][T15022] netlink: 464 bytes leftover after parsing attributes in process `syz.4.3149'. [ 227.187959][T14974] netlink: 'syz.1.3135': attribute type 13 has an invalid length. [ 227.203999][T15022] FAT-fs (loop4): Directory bread(block 162) failed [ 227.204737][T14974] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3135'. [ 227.212337][T15022] FAT-fs (loop4): Directory bread(block 163) failed [ 227.232595][T15022] syz.4.3149: attempt to access beyond end of device [ 227.232595][T15022] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 227.251640][T15022] syz.4.3149: attempt to access beyond end of device [ 227.251640][T15022] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 227.270596][T14974] erspan0: refused to change device tx_queue_len [ 227.287796][T14974] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 227.488471][T15058] loop2: detected capacity change from 0 to 128 [ 227.520287][T15016] netlink: 'syz.3.3146': attribute type 13 has an invalid length. [ 227.528117][T15016] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3146'. [ 227.555791][T15058] FAT-fs (loop2): Directory bread(block 162) failed [ 227.562568][T15058] FAT-fs (loop2): Directory bread(block 163) failed [ 227.580267][T15058] FAT-fs (loop2): Directory bread(block 164) failed [ 227.590418][T15016] erspan0: refused to change device tx_queue_len [ 227.618778][T15061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3161'. [ 227.624671][T15058] FAT-fs (loop2): Directory bread(block 165) failed [ 227.635322][T15016] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 227.651566][T15058] FAT-fs (loop2): Directory bread(block 166) failed [ 227.658224][T15058] FAT-fs (loop2): Directory bread(block 167) failed [ 227.665652][T15058] FAT-fs (loop2): Directory bread(block 168) failed [ 227.675242][T15058] FAT-fs (loop2): Directory bread(block 169) failed [ 227.769677][T15076] loop3: detected capacity change from 0 to 512 [ 227.771921][T15058] FAT-fs (loop2): Directory bread(block 162) failed [ 227.821899][T15076] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3163: Failed to acquire dquot type 1 [ 227.865333][T15076] EXT4-fs (loop3): 1 truncate cleaned up [ 227.875523][T15058] FAT-fs (loop2): Directory bread(block 163) failed [ 227.902301][T15076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.930937][T15058] syz.2.3160: attempt to access beyond end of device [ 227.930937][T15058] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 227.960056][T15076] ext4 filesystem being mounted at /696/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.982046][T15058] syz.2.3160: attempt to access beyond end of device [ 227.982046][T15058] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 228.060667][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.080943][T15090] loop2: detected capacity change from 0 to 128 [ 228.088327][T15090] FAT-fs (loop2): Directory bread(block 162) failed [ 228.095520][T15090] FAT-fs (loop2): Directory bread(block 163) failed [ 228.102735][T15090] FAT-fs (loop2): Directory bread(block 164) failed [ 228.109388][T15090] FAT-fs (loop2): Directory bread(block 165) failed [ 228.116113][T15090] FAT-fs (loop2): Directory bread(block 166) failed [ 228.122985][T15090] FAT-fs (loop2): Directory bread(block 167) failed [ 228.129746][T15090] FAT-fs (loop2): Directory bread(block 168) failed [ 228.136489][T15090] FAT-fs (loop2): Directory bread(block 169) failed [ 228.298305][T15090] FAT-fs (loop2): Directory bread(block 162) failed [ 228.323679][T15090] FAT-fs (loop2): Directory bread(block 163) failed [ 228.754691][T15118] loop0: detected capacity change from 0 to 128 [ 228.792154][T15118] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.805301][T15096] netlink: 'syz.1.3169': attribute type 13 has an invalid length. [ 228.813822][T15118] ext4 filesystem being mounted at /623/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.826827][T15096] erspan0: refused to change device tx_queue_len [ 228.837979][T15093] netlink: 'syz.4.3168': attribute type 13 has an invalid length. [ 228.843778][T15096] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 228.861712][T15093] erspan0: refused to change device tx_queue_len [ 228.872795][T15093] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 228.902802][T15093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=15093 comm=syz.4.3168 [ 229.023241][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.051446][T15135] loop0: detected capacity change from 0 to 128 [ 229.088831][T15135] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.160687][T15135] ext4 filesystem being mounted at /624/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.300843][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.346899][T15162] loop2: detected capacity change from 0 to 128 [ 229.359062][T15167] loop4: detected capacity change from 0 to 128 [ 229.390294][T15167] FAT-fs (loop4): Directory bread(block 162) failed [ 229.401270][T15162] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.436955][T15167] FAT-fs (loop4): Directory bread(block 163) failed [ 229.454989][T15167] FAT-fs (loop4): Directory bread(block 164) failed [ 229.462955][T15167] FAT-fs (loop4): Directory bread(block 165) failed [ 229.469652][T15167] FAT-fs (loop4): Directory bread(block 166) failed [ 229.473688][T15162] ext4 filesystem being mounted at /632/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.476288][T15167] FAT-fs (loop4): Directory bread(block 167) failed [ 229.493332][T15167] FAT-fs (loop4): Directory bread(block 168) failed [ 229.506964][T15167] FAT-fs (loop4): Directory bread(block 169) failed [ 229.627740][T15167] FAT-fs (loop4): Directory bread(block 162) failed [ 229.663339][T15167] FAT-fs (loop4): Directory bread(block 163) failed [ 229.673284][ T29] kauditd_printk_skb: 2406 callbacks suppressed [ 229.673298][ T29] audit: type=1326 audit(1753983637.849:42537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.1.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 229.720895][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.728797][ T29] audit: type=1400 audit(1753983637.879:42538): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 229.749606][ T29] audit: type=1326 audit(1753983637.879:42539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15183 comm="syz.0.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 229.773006][ T29] audit: type=1400 audit(1753983637.879:42540): avc: denied { execmem } for pid=15183 comm="syz.0.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 229.792553][ T29] audit: type=1326 audit(1753983637.889:42541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.3.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 229.816122][ T29] audit: type=1326 audit(1753983637.889:42542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.3.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 229.839751][ T29] audit: type=1326 audit(1753983637.889:42543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.3.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 229.863234][ T29] audit: type=1326 audit(1753983637.899:42544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.1.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 229.886833][ T29] audit: type=1326 audit(1753983637.899:42545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.1.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 229.910396][ T29] audit: type=1326 audit(1753983637.899:42546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.1.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 230.058207][T15187] netlink: 'syz.0.3191': attribute type 13 has an invalid length. [ 230.066246][T15187] erspan0: refused to change device tx_queue_len [ 230.072602][T15187] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 231.311709][T15258] netlink: 'syz.2.3210': attribute type 13 has an invalid length. [ 231.340052][T15277] loop4: detected capacity change from 0 to 128 [ 231.346604][T15258] erspan0: refused to change device tx_queue_len [ 231.356695][T15258] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 231.383578][T15277] FAT-fs (loop4): Directory bread(block 162) failed [ 231.390268][T15277] FAT-fs (loop4): Directory bread(block 163) failed [ 231.396865][T15277] FAT-fs (loop4): Directory bread(block 164) failed [ 231.448743][T15277] FAT-fs (loop4): Directory bread(block 165) failed [ 231.465543][T15277] FAT-fs (loop4): Directory bread(block 166) failed [ 231.475633][T15277] FAT-fs (loop4): Directory bread(block 167) failed [ 231.489501][T15277] FAT-fs (loop4): Directory bread(block 168) failed [ 231.506341][T15277] FAT-fs (loop4): Directory bread(block 169) failed [ 231.574500][T15255] netlink: 'syz.1.3208': attribute type 13 has an invalid length. [ 231.582370][T15255] __nla_validate_parse: 24 callbacks suppressed [ 231.582398][T15255] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3208'. [ 231.599554][T15255] erspan0: refused to change device tx_queue_len [ 231.616936][T15277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3214'. [ 231.630814][T15277] FAT-fs (loop4): Directory bread(block 162) failed [ 231.636326][T15255] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 231.637684][T15277] FAT-fs (loop4): Directory bread(block 163) failed [ 231.680565][T15259] netlink: 'syz.0.3209': attribute type 13 has an invalid length. [ 231.688401][T15259] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3209'. [ 231.701718][T15277] bio_check_eod: 4 callbacks suppressed [ 231.701762][T15277] syz.4.3214: attempt to access beyond end of device [ 231.701762][T15277] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 231.726573][T15259] erspan0: refused to change device tx_queue_len [ 231.732957][T15259] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 231.758223][T15277] syz.4.3214: attempt to access beyond end of device [ 231.758223][T15277] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 231.928345][T15287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3216'. [ 231.958848][T15295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3219'. [ 232.309551][T15289] netlink: 'syz.3.3217': attribute type 13 has an invalid length. [ 232.317429][T15289] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3217'. [ 232.331863][T15289] erspan0: refused to change device tx_queue_len [ 232.338753][T15289] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 233.088675][T15318] netlink: 'syz.4.3225': attribute type 13 has an invalid length. [ 233.096626][T15318] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3225'. [ 233.115375][T15318] erspan0: refused to change device tx_queue_len [ 233.126581][T15318] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 233.155426][T15338] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3229'. [ 233.233016][T15326] netlink: 'syz.2.3228': attribute type 13 has an invalid length. [ 233.241033][T15326] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3228'. [ 233.242859][T15322] netlink: 'syz.1.3226': attribute type 13 has an invalid length. [ 233.257996][T15322] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3226'. [ 233.267201][T15326] erspan0: refused to change device tx_queue_len [ 233.274275][T15326] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 233.290609][T15322] erspan0: refused to change device tx_queue_len [ 233.311655][T15322] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 233.339363][T15348] loop0: detected capacity change from 0 to 1024 [ 233.346607][T15348] EXT4-fs: Invalid want_extra_isize 0 [ 234.029047][T15387] loop2: detected capacity change from 0 to 1024 [ 234.046457][T15387] EXT4-fs: Invalid want_extra_isize 0 [ 234.094961][T15350] netlink: 'syz.3.3232': attribute type 13 has an invalid length. [ 234.131924][T15350] erspan0: refused to change device tx_queue_len [ 234.145675][T15350] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 234.380481][T15370] netlink: 'syz.1.3239': attribute type 13 has an invalid length. [ 234.389263][T15370] erspan0: refused to change device tx_queue_len [ 234.396219][T15370] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 234.536544][T15373] netlink: 'syz.0.3240': attribute type 13 has an invalid length. [ 234.577360][T15373] erspan0: refused to change device tx_queue_len [ 234.583914][T15373] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 234.679460][ T29] kauditd_printk_skb: 2643 callbacks suppressed [ 234.679474][ T29] audit: type=1326 audit(1753983642.839:45187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 234.709423][ T29] audit: type=1326 audit(1753983642.849:45188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15401 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 234.733009][ T29] audit: type=1326 audit(1753983642.849:45189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15401 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 234.756597][ T29] audit: type=1326 audit(1753983642.849:45190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 234.780209][ T29] audit: type=1326 audit(1753983642.849:45191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 234.803804][ T29] audit: type=1326 audit(1753983642.849:45192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 234.827427][ T29] audit: type=1326 audit(1753983642.849:45193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 234.851014][ T29] audit: type=1326 audit(1753983642.849:45194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 234.874561][ T29] audit: type=1326 audit(1753983642.849:45195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 234.898190][ T29] audit: type=1326 audit(1753983642.849:45196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 235.235753][T15451] loop2: detected capacity change from 0 to 512 [ 235.262867][T15451] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3262: Failed to acquire dquot type 1 [ 235.395544][T15451] EXT4-fs (loop2): 1 truncate cleaned up [ 235.418940][T15451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.454480][T15451] ext4 filesystem being mounted at /646/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.582515][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.116070][T15467] netlink: 'syz.0.3266': attribute type 13 has an invalid length. [ 236.139051][T15467] erspan0: refused to change device tx_queue_len [ 236.145421][T15467] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 236.333450][T15474] netlink: 'syz.2.3267': attribute type 13 has an invalid length. [ 236.353321][T15474] erspan0: refused to change device tx_queue_len [ 236.375533][T15474] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 236.513282][T15487] netlink: 'syz.4.3272': attribute type 13 has an invalid length. [ 236.541518][T15487] erspan0: refused to change device tx_queue_len [ 236.548116][T15487] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 236.639084][T15514] __nla_validate_parse: 23 callbacks suppressed [ 236.639101][T15514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3279'. [ 236.668386][T15518] netlink: 464 bytes leftover after parsing attributes in process `syz.4.3280'. [ 236.869028][T15502] netlink: 'syz.3.3276': attribute type 13 has an invalid length. [ 236.876871][T15502] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3276'. [ 236.898944][T15502] erspan0: refused to change device tx_queue_len [ 236.919690][T15502] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 236.946296][T15525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3283'. [ 237.008037][T15533] loop3: detected capacity change from 0 to 128 [ 237.038177][T15533] FAT-fs (loop3): Directory bread(block 162) failed [ 237.051522][T15533] FAT-fs (loop3): Directory bread(block 163) failed [ 237.058171][T15533] FAT-fs (loop3): Directory bread(block 164) failed [ 237.066808][T15533] FAT-fs (loop3): Directory bread(block 165) failed [ 237.073480][T15533] FAT-fs (loop3): Directory bread(block 166) failed [ 237.080950][T15533] FAT-fs (loop3): Directory bread(block 167) failed [ 237.097722][T15533] FAT-fs (loop3): Directory bread(block 168) failed [ 237.117853][T15533] FAT-fs (loop3): Directory bread(block 169) failed [ 237.178361][T15533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3285'. [ 237.190329][T15533] FAT-fs (loop3): Directory bread(block 162) failed [ 237.197409][T15533] FAT-fs (loop3): Directory bread(block 163) failed [ 237.215619][T15533] syz.3.3285: attempt to access beyond end of device [ 237.215619][T15533] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 237.253708][T15533] syz.3.3285: attempt to access beyond end of device [ 237.253708][T15533] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 237.280752][T15510] netlink: 'syz.2.3278': attribute type 13 has an invalid length. [ 237.288660][T15510] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3278'. [ 237.310653][T15510] erspan0: refused to change device tx_queue_len [ 237.317737][T15510] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 237.437245][T15541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3287'. [ 237.518001][T15528] netlink: 'syz.1.3284': attribute type 13 has an invalid length. [ 237.519175][T15544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3288'. [ 237.525885][T15528] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3284'. [ 237.551331][T15528] erspan0: refused to change device tx_queue_len [ 237.558188][T15528] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 237.566654][T15523] netlink: 'syz.0.3282': attribute type 13 has an invalid length. [ 237.581682][T15523] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3282'. [ 237.600631][T15523] erspan0: refused to change device tx_queue_len [ 237.607054][T15523] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 238.472442][T15554] erspan0: refused to change device tx_queue_len [ 238.493022][T15562] erspan0: refused to change device tx_queue_len [ 238.569901][T15556] erspan0: refused to change device tx_queue_len [ 238.688923][T15570] erspan0: refused to change device tx_queue_len [ 238.778030][T15628] loop0: detected capacity change from 0 to 1024 [ 238.854976][T15628] EXT4-fs: Invalid want_extra_isize 0 [ 239.480390][T15699] loop1: detected capacity change from 0 to 1024 [ 239.499369][T15699] EXT4-fs: Invalid want_extra_isize 0 [ 239.597359][T15644] validate_nla: 4 callbacks suppressed [ 239.597425][T15644] netlink: 'syz.0.3310': attribute type 13 has an invalid length. [ 239.628872][T15644] erspan0: refused to change device tx_queue_len [ 239.635283][T15644] net_ratelimit: 4 callbacks suppressed [ 239.635296][T15644] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 239.718903][ T29] kauditd_printk_skb: 2907 callbacks suppressed [ 239.718919][ T29] audit: type=1400 audit(1753983647.869:48102): avc: denied { create } for pid=15703 comm="syz.0.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.745900][ T29] audit: type=1400 audit(1753983647.869:48103): avc: denied { write } for pid=15703 comm="syz.0.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.767220][ T29] audit: type=1400 audit(1753983647.869:48104): avc: denied { nlmsg_write } for pid=15703 comm="syz.0.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.788101][ T29] audit: type=1400 audit(1753983647.869:48105): avc: denied { mounton } for pid=15703 comm="syz.0.3323" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 239.812028][ T29] audit: type=1326 audit(1753983647.869:48106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15703 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 239.835595][ T29] audit: type=1326 audit(1753983647.869:48107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15703 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 239.859108][ T29] audit: type=1400 audit(1753983647.869:48108): avc: denied { create } for pid=15703 comm="syz.0.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 239.878768][ T29] audit: type=1326 audit(1753983647.869:48109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15703 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 239.902319][ T29] audit: type=1326 audit(1753983647.869:48110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15703 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 239.925809][ T29] audit: type=1326 audit(1753983647.869:48111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15703 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825d0eb69 code=0x7ffc0000 [ 240.200157][T15664] netlink: 'syz.2.3314': attribute type 13 has an invalid length. [ 240.200261][T15685] netlink: 'syz.4.3319': attribute type 13 has an invalid length. [ 240.215599][T15669] netlink: 'syz.3.3315': attribute type 13 has an invalid length. [ 240.224777][T15664] erspan0: refused to change device tx_queue_len [ 240.239279][T15664] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 240.255258][T15685] erspan0: refused to change device tx_queue_len [ 240.263006][T15685] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 240.279615][T15669] erspan0: refused to change device tx_queue_len [ 240.289528][T15669] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 240.530124][T15748] loop4: detected capacity change from 0 to 1024 [ 240.548336][T15748] EXT4-fs: Invalid want_extra_isize 0 [ 241.120619][T15714] netlink: 'syz.1.3325': attribute type 13 has an invalid length. [ 241.156900][T15714] erspan0: refused to change device tx_queue_len [ 241.179732][T15714] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 241.474463][T15767] netlink: 'syz.3.3336': attribute type 13 has an invalid length. [ 241.482856][T15767] erspan0: refused to change device tx_queue_len [ 241.491261][T15767] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 241.718710][T15881] __nla_validate_parse: 29 callbacks suppressed [ 241.718726][T15881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3359'. [ 241.822463][T15882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3358'. [ 242.020687][T15943] netlink: 464 bytes leftover after parsing attributes in process `syz.3.3370'. [ 242.261933][T15974] loop4: detected capacity change from 0 to 512 [ 242.292936][T15974] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3376: Failed to acquire dquot type 1 [ 242.305346][T15974] EXT4-fs (loop4): 1 truncate cleaned up [ 242.312244][T15974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.325244][T15974] ext4 filesystem being mounted at /683/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.560408][T16168] netlink: 464 bytes leftover after parsing attributes in process `syz.0.3415'. [ 243.607599][T16079] netlink: 'syz.1.3401': attribute type 13 has an invalid length. [ 243.615533][T16079] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3401'. [ 243.625634][T16079] erspan0: refused to change device tx_queue_len [ 243.633357][T16079] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 244.205319][T16171] netlink: 'syz.0.3417': attribute type 13 has an invalid length. [ 244.213204][T16171] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3417'. [ 244.235603][T16171] erspan0: refused to change device tx_queue_len [ 244.242011][T16171] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 244.269019][T16166] netlink: 'syz.3.3416': attribute type 13 has an invalid length. [ 244.276905][T16166] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3416'. [ 244.286612][T16166] erspan0: refused to change device tx_queue_len [ 244.300732][T16166] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 244.421343][T16173] netlink: 'syz.2.3418': attribute type 13 has an invalid length. [ 244.429293][T16173] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3418'. [ 244.460471][T16173] erspan0: refused to change device tx_queue_len [ 244.467478][T16173] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 244.490360][T16194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3422'. [ 244.580636][T16183] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3420'. [ 244.594143][T16183] erspan0: refused to change device tx_queue_len [ 244.739308][ T29] kauditd_printk_skb: 1874 callbacks suppressed [ 244.739324][ T29] audit: type=1400 audit(1753983652.919:49984): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.769865][ T29] audit: type=1400 audit(1753983652.919:49985): avc: denied { open } for pid=3311 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.828537][ T29] audit: type=1326 audit(1753983652.919:49986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 244.852380][ T29] audit: type=1326 audit(1753983652.919:49987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 244.876021][ T29] audit: type=1326 audit(1753983652.919:49988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 244.899418][ T29] audit: type=1400 audit(1753983652.969:49989): avc: denied { ioctl } for pid=3311 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.925080][ T29] audit: type=1400 audit(1753983652.979:49990): avc: denied { open } for pid=16222 comm="syz.2.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 244.944467][ T29] audit: type=1400 audit(1753983652.979:49991): avc: denied { perfmon } for pid=16222 comm="syz.2.3427" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 244.965571][ T29] audit: type=1400 audit(1753983652.979:49992): avc: denied { kernel } for pid=16222 comm="syz.2.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 244.985143][ T29] audit: type=1400 audit(1753983652.979:49993): avc: denied { write } for pid=16188 comm="syz.4.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 245.096293][T16196] validate_nla: 1 callbacks suppressed [ 245.096307][T16196] netlink: 'syz.3.3423': attribute type 13 has an invalid length. [ 245.134068][T16189] netlink: 'syz.4.3421': attribute type 13 has an invalid length. [ 245.142222][T16189] erspan0: refused to change device tx_queue_len [ 245.158840][T16189] net_ratelimit: 1 callbacks suppressed [ 245.158856][T16189] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 245.180244][T16196] erspan0: refused to change device tx_queue_len [ 245.207467][T16196] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 245.245333][T16223] netlink: 'syz.2.3427': attribute type 13 has an invalid length. [ 245.258713][T16223] erspan0: refused to change device tx_queue_len [ 245.265780][T16223] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 245.494626][T16225] netlink: 'syz.0.3428': attribute type 13 has an invalid length. [ 245.502722][T16225] erspan0: refused to change device tx_queue_len [ 245.509129][T16225] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 245.560855][T16216] netlink: 'syz.1.3426': attribute type 13 has an invalid length. [ 245.578433][T16216] erspan0: refused to change device tx_queue_len [ 245.694474][T16216] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 245.990911][T16237] netlink: 'syz.3.3430': attribute type 13 has an invalid length. [ 246.007136][T16235] netlink: 'syz.4.3429': attribute type 13 has an invalid length. [ 246.028057][T16235] erspan0: refused to change device tx_queue_len [ 246.035752][T16235] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 246.052188][T16237] erspan0: refused to change device tx_queue_len [ 246.065277][T16237] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 246.384598][T16244] netlink: 'syz.0.3432': attribute type 13 has an invalid length. [ 246.393283][T16244] erspan0: refused to change device tx_queue_len [ 246.399641][T16244] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 246.466937][T16299] loop1: detected capacity change from 0 to 512 [ 246.526430][T16299] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3441: Failed to acquire dquot type 1 [ 246.617818][T16299] EXT4-fs (loop1): 1 truncate cleaned up [ 246.629153][T16299] ext4 filesystem being mounted at /640/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.812150][T16318] __nla_validate_parse: 13 callbacks suppressed [ 246.812166][T16318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3445'. [ 246.864474][T16276] netlink: 'syz.3.3438': attribute type 13 has an invalid length. [ 246.872367][T16276] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3438'. [ 246.924225][T16276] erspan0: refused to change device tx_queue_len [ 246.935669][T16276] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 247.184962][T16350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3451'. [ 247.255610][T16355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3453'. [ 247.388224][T16315] netlink: 'syz.0.3444': attribute type 13 has an invalid length. [ 247.395785][T16322] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3447'. [ 247.396179][T16315] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3444'. [ 247.414845][T16322] erspan0: refused to change device tx_queue_len [ 247.422706][T16322] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 247.447475][T16315] erspan0: refused to change device tx_queue_len [ 247.630270][T16353] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3452'. [ 247.659044][T16353] erspan0: refused to change device tx_queue_len [ 248.147344][T16363] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3454'. [ 248.163504][T16363] erspan0: refused to change device tx_queue_len [ 248.186127][T16373] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3457'. [ 248.195694][T16373] erspan0: refused to change device tx_queue_len [ 248.295363][T16367] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3455'. [ 248.314880][T16367] erspan0: refused to change device tx_queue_len [ 248.820646][T16378] erspan0: refused to change device tx_queue_len [ 248.881097][T16423] erspan0: refused to change device tx_queue_len [ 249.025543][T16400] erspan0: refused to change device tx_queue_len [ 249.100953][T16394] erspan0: refused to change device tx_queue_len [ 249.520958][T16429] erspan0: refused to change device tx_queue_len [ 249.587880][T16435] erspan0: refused to change device tx_queue_len [ 249.737637][T16445] erspan0: refused to change device tx_queue_len [ 249.749671][ T29] kauditd_printk_skb: 2090 callbacks suppressed [ 249.749685][ T29] audit: type=1326 audit(1753983657.929:52082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 249.779555][ T29] audit: type=1326 audit(1753983657.929:52083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 249.853691][ T29] audit: type=1326 audit(1753983657.969:52084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 249.877462][ T29] audit: type=1326 audit(1753983657.969:52085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 249.901084][ T29] audit: type=1326 audit(1753983657.969:52086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 249.924820][ T29] audit: type=1326 audit(1753983657.969:52087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 249.948439][ T29] audit: type=1326 audit(1753983657.969:52088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 249.972130][ T29] audit: type=1326 audit(1753983657.969:52089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 249.995631][ T29] audit: type=1326 audit(1753983657.969:52090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 250.019272][ T29] audit: type=1326 audit(1753983657.969:52091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 250.037295][T16450] erspan0: refused to change device tx_queue_len [ 250.277390][T16458] validate_nla: 13 callbacks suppressed [ 250.277406][T16458] netlink: 'syz.3.3471': attribute type 13 has an invalid length. [ 250.318986][T16458] erspan0: refused to change device tx_queue_len [ 250.336103][T16458] net_ratelimit: 13 callbacks suppressed [ 250.336145][T16458] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 250.842205][T16474] netlink: 'syz.1.3475': attribute type 13 has an invalid length. [ 250.859084][T16474] erspan0: refused to change device tx_queue_len [ 250.866020][T16474] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 251.009244][T16489] netlink: 'syz.3.3479': attribute type 13 has an invalid length. [ 251.024932][T16489] erspan0: refused to change device tx_queue_len [ 251.039589][T16489] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 251.200714][T16486] netlink: 'syz.4.3478': attribute type 13 has an invalid length. [ 251.219756][T16486] erspan0: refused to change device tx_queue_len [ 251.238149][T16486] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 251.264408][T16491] netlink: 'syz.2.3480': attribute type 13 has an invalid length. [ 251.284138][T16491] erspan0: refused to change device tx_queue_len [ 251.301088][T16491] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 251.339862][T16496] netlink: 'syz.0.3481': attribute type 13 has an invalid length. [ 251.348103][T16496] erspan0: refused to change device tx_queue_len [ 251.354543][T16496] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 251.751833][T16524] netlink: 'syz.0.3485': attribute type 13 has an invalid length. [ 251.769825][T16524] erspan0: refused to change device tx_queue_len [ 251.776205][T16524] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 252.028892][T16510] netlink: 'syz.3.3483': attribute type 13 has an invalid length. [ 252.033915][T16532] netlink: 'syz.2.3486': attribute type 13 has an invalid length. [ 252.036917][T16510] __nla_validate_parse: 20 callbacks suppressed [ 252.036930][T16510] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3483'. [ 252.044729][T16532] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3486'. [ 252.077567][T16532] erspan0: refused to change device tx_queue_len [ 252.092251][T16532] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 252.119439][T16510] erspan0: refused to change device tx_queue_len [ 252.126475][T16510] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 252.162674][T16506] netlink: 'syz.1.3482': attribute type 13 has an invalid length. [ 252.170671][T16506] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3482'. [ 252.223741][T16506] erspan0: refused to change device tx_queue_len [ 252.264282][T16506] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 252.381669][T16541] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3488'. [ 252.395381][T16541] erspan0: refused to change device tx_queue_len [ 252.936166][T16551] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3489'. [ 252.976162][T16551] erspan0: refused to change device tx_queue_len [ 253.039107][T16555] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3491'. [ 253.048628][T16555] erspan0: refused to change device tx_queue_len [ 253.215578][T16553] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3490'. [ 253.226302][T16553] erspan0: refused to change device tx_queue_len [ 253.279325][T16562] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3493'. [ 253.305041][T16562] erspan0: refused to change device tx_queue_len [ 253.369421][T16570] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3495'. [ 253.388353][T16570] erspan0: refused to change device tx_queue_len [ 253.439255][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'. [ 253.755744][T16589] erspan0: refused to change device tx_queue_len [ 253.850842][T16583] erspan0: refused to change device tx_queue_len [ 253.863094][T16578] erspan0: refused to change device tx_queue_len [ 254.165254][T16596] erspan0: refused to change device tx_queue_len [ 254.758686][ T29] kauditd_printk_skb: 1792 callbacks suppressed [ 254.758702][ T29] audit: type=1326 audit(1753983662.939:53884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.2.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 254.818729][T16615] erspan0: refused to change device tx_queue_len [ 254.840618][ T29] audit: type=1326 audit(1753983662.959:53885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.3.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 254.849627][T16656] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.864186][ T29] audit: type=1326 audit(1753983662.959:53886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.3.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 254.870654][T16656] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 254.894208][ T29] audit: type=1326 audit(1753983662.959:53887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.3.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 254.901823][T16656] audit: backlog limit exceeded [ 254.930309][ T29] audit: type=1326 audit(1753983662.959:53888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.3.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 254.953821][ T29] audit: type=1326 audit(1753983662.959:53889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.3.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 254.977427][ T29] audit: type=1326 audit(1753983662.959:53890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16612 comm="syz.3.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143d27eb69 code=0x7ffc0000 [ 255.034587][T16607] erspan0: refused to change device tx_queue_len [ 255.119190][T16620] erspan0: refused to change device tx_queue_len [ 255.142795][T16654] erspan0: refused to change device tx_queue_len [ 255.679362][T16668] validate_nla: 14 callbacks suppressed [ 255.679383][T16668] netlink: 'syz.1.3514': attribute type 13 has an invalid length. [ 255.703365][T16668] erspan0: refused to change device tx_queue_len [ 255.710374][T16668] net_ratelimit: 14 callbacks suppressed [ 255.710389][T16668] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 255.876436][T16691] netlink: 'syz.4.3519': attribute type 13 has an invalid length. [ 255.884829][T16691] erspan0: refused to change device tx_queue_len [ 255.891657][T16691] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 255.926455][T16661] netlink: 'syz.2.3513': attribute type 13 has an invalid length. [ 255.936581][T16661] erspan0: refused to change device tx_queue_len [ 255.944093][T16661] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 256.054575][T16687] netlink: 'syz.0.3518': attribute type 13 has an invalid length. [ 256.062644][T16687] erspan0: refused to change device tx_queue_len [ 256.069038][T16687] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 256.109072][T16666] netlink: 'syz.3.3515': attribute type 13 has an invalid length. [ 256.117247][T16666] erspan0: refused to change device tx_queue_len [ 256.124690][T16666] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 256.989896][T16737] netlink: 'syz.3.3528': attribute type 13 has an invalid length. [ 257.010216][T16737] erspan0: refused to change device tx_queue_len [ 257.017061][T16737] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 257.043052][T16715] netlink: 'syz.1.3522': attribute type 13 has an invalid length. [ 257.050951][T16715] __nla_validate_parse: 15 callbacks suppressed [ 257.050968][T16715] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3522'. [ 257.068180][T16715] erspan0: refused to change device tx_queue_len [ 257.075122][T16715] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 257.088022][T16744] netlink: 'syz.0.3529': attribute type 13 has an invalid length. [ 257.098499][T16744] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3529'. [ 257.101032][T16715] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3522'. [ 257.147225][T16744] erspan0: refused to change device tx_queue_len [ 257.153696][T16744] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 257.192445][T16721] netlink: 'syz.2.3523': attribute type 13 has an invalid length. [ 257.200430][T16721] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3523'. [ 257.223000][T16721] erspan0: refused to change device tx_queue_len [ 257.233399][T16721] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 257.845277][T16780] netlink: 'syz.4.3534': attribute type 13 has an invalid length. [ 257.853180][T16780] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3534'. [ 257.864021][T16780] erspan0: refused to change device tx_queue_len [ 257.882208][T16780] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 257.953688][T16793] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3537'. [ 257.955535][T16786] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3535'. [ 257.982543][T16793] erspan0: refused to change device tx_queue_len [ 257.999109][T16786] erspan0: refused to change device tx_queue_len [ 258.044040][T16786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3535'. [ 258.112374][T16789] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3536'. [ 258.124228][T16789] erspan0: refused to change device tx_queue_len [ 258.170841][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3536'. [ 258.521259][T16814] erspan0: refused to change device tx_queue_len [ 258.653382][T16831] erspan0: refused to change device tx_queue_len [ 258.934863][T16821] erspan0: refused to change device tx_queue_len [ 259.039335][T16863] erspan0: refused to change device tx_queue_len [ 259.071341][T16823] erspan0: refused to change device tx_queue_len [ 259.556333][T16860] erspan0: refused to change device tx_queue_len [ 259.768595][ T29] kauditd_printk_skb: 1939 callbacks suppressed [ 259.768676][ T29] audit: type=1326 audit(1753983667.939:55830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 259.798612][ T29] audit: type=1326 audit(1753983667.939:55831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 259.822545][ T29] audit: type=1400 audit(1753983667.939:55832): avc: denied { map_read map_write } for pid=16872 comm="syz.1.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 259.842601][ T29] audit: type=1326 audit(1753983667.939:55833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 259.866321][ T29] audit: type=1326 audit(1753983667.939:55834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa201d1eb69 code=0x7ffc0000 [ 259.889911][ T29] audit: type=1326 audit(1753983667.939:55835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.4.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd15e10eb69 code=0x7ffc0000 [ 259.913519][ T29] audit: type=1400 audit(1753983667.939:55836): avc: denied { write } for pid=16900 comm="syz.4.3556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 259.933056][ T29] audit: type=1326 audit(1753983667.939:55837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.4.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15e10eb69 code=0x7ffc0000 [ 259.956640][ T29] audit: type=1326 audit(1753983667.939:55838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.4.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15e10eb69 code=0x7ffc0000 [ 260.003632][T16873] erspan0: refused to change device tx_queue_len [ 260.025455][T16901] erspan0: refused to change device tx_queue_len [ 260.032872][T16905] erspan0: refused to change device tx_queue_len [ 260.067780][T16934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 260.115652][T16945] loop2: detected capacity change from 0 to 512 [ 260.188590][T16945] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3563: Failed to acquire dquot type 1 [ 260.235615][T16945] EXT4-fs (loop2): 1 truncate cleaned up [ 260.265121][T16945] EXT4-fs mount: 3 callbacks suppressed [ 260.265137][T16945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.291689][T16945] ext4 filesystem being mounted at /702/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.294902][T16903] erspan0: refused to change device tx_queue_len [ 260.387356][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.479927][T16975] lo speed is unknown, defaulting to 1000 [ 260.514067][T16981] lo speed is unknown, defaulting to 1000 [ 260.606955][T16985] tipc: Enabled bearer , priority 0 [ 260.629348][T16985] syzkaller0: entered promiscuous mode [ 260.634844][T16985] syzkaller0: entered allmulticast mode [ 260.681967][T16985] tipc: Resetting bearer [ 260.760706][T16984] tipc: Resetting bearer [ 260.800030][T16984] tipc: Disabling bearer [ 260.817736][T16934] validate_nla: 13 callbacks suppressed [ 260.817751][T16934] netlink: 'syz.4.3561': attribute type 13 has an invalid length. [ 260.833386][T16934] erspan0: refused to change device tx_queue_len [ 260.840040][T16934] net_ratelimit: 13 callbacks suppressed [ 260.840052][T16934] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 260.861600][T16971] netlink: 'syz.3.3569': attribute type 13 has an invalid length. [ 260.903309][T16971] erspan0: refused to change device tx_queue_len [ 260.921914][T16994] loop2: detected capacity change from 0 to 512 [ 260.931238][T16971] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 260.957741][T16994] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 260.966936][T16994] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 260.976562][T16994] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 260.985401][T16983] loop1: detected capacity change from 0 to 512 [ 261.003753][T16983] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.012835][T16983] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 261.022409][T16983] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 261.407731][T17012] lo speed is unknown, defaulting to 1000 [ 261.542790][T17019] loop2: detected capacity change from 0 to 512 [ 261.552756][T16996] netlink: 'syz.4.3575': attribute type 13 has an invalid length. [ 261.569030][T16996] erspan0: refused to change device tx_queue_len [ 261.575843][T16996] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 261.698645][T17019] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3579: Failed to acquire dquot type 1 [ 261.756252][T17019] EXT4-fs (loop2): 1 truncate cleaned up [ 261.775675][T17019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.840128][T16992] netlink: 'syz.0.3574': attribute type 13 has an invalid length. [ 261.849282][T16992] erspan0: refused to change device tx_queue_len [ 261.849375][T17019] ext4 filesystem being mounted at /704/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.855658][T16992] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 261.999986][T17012] loop3: detected capacity change from 0 to 512 [ 262.016843][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.028633][T17012] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.038123][T17012] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 262.047757][T17012] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 262.173500][T17016] netlink: 'syz.1.3578': attribute type 13 has an invalid length. [ 262.181571][T17016] __nla_validate_parse: 17 callbacks suppressed [ 262.181584][T17016] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3578'. [ 262.199116][T17039] loop2: detected capacity change from 0 to 1024 [ 262.206196][T17016] erspan0: refused to change device tx_queue_len [ 262.216374][T17039] EXT4-fs: Invalid want_extra_isize 0 [ 262.225926][T17016] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 262.434769][T17046] loop1: detected capacity change from 0 to 8192 [ 262.481680][T17024] netlink: 'syz.4.3580': attribute type 13 has an invalid length. [ 262.489589][T17024] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3580'. [ 262.491590][T17048] loop2: detected capacity change from 0 to 8192 [ 262.588362][T17024] erspan0: refused to change device tx_queue_len [ 262.595022][T17024] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 262.884672][T17044] netlink: 'syz.0.3586': attribute type 13 has an invalid length. [ 262.892554][T17044] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3586'. [ 262.923016][T17044] erspan0: refused to change device tx_queue_len [ 262.929477][T17044] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 263.008522][T17050] netlink: 'syz.3.3588': attribute type 13 has an invalid length. [ 263.010239][T17073] 9pnet_fd: Insufficient options for proto=fd [ 263.016472][T17050] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3588'. [ 263.043815][T17050] erspan0: refused to change device tx_queue_len [ 263.052649][T17050] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 263.085558][T17075] lo speed is unknown, defaulting to 1000 [ 263.149275][T17079] loop3: detected capacity change from 0 to 1024 [ 263.168403][T17079] EXT4-fs: Invalid want_extra_isize 0 [ 263.225059][T17083] loop1: detected capacity change from 0 to 128 [ 263.261744][T17083] FAT-fs (loop1): Directory bread(block 162) failed [ 263.268524][T17083] FAT-fs (loop1): Directory bread(block 163) failed [ 263.275281][T17083] FAT-fs (loop1): Directory bread(block 164) failed [ 263.282584][T17083] FAT-fs (loop1): Directory bread(block 165) failed [ 263.289348][T17083] FAT-fs (loop1): Directory bread(block 166) failed [ 263.296916][T17083] FAT-fs (loop1): Directory bread(block 167) failed [ 263.303702][T17083] FAT-fs (loop1): Directory bread(block 168) failed [ 263.310971][T17083] FAT-fs (loop1): Directory bread(block 169) failed [ 263.375169][T17086] lo speed is unknown, defaulting to 1000 [ 263.438111][T17083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3598'. [ 263.485875][T17083] FAT-fs (loop1): Directory bread(block 162) failed [ 263.510556][T17083] FAT-fs (loop1): Directory bread(block 163) failed [ 263.520549][T17075] loop2: detected capacity change from 0 to 512 [ 263.531400][T17083] syz.1.3598: attempt to access beyond end of device [ 263.531400][T17083] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 263.546222][T17083] syz.1.3598: attempt to access beyond end of device [ 263.546222][T17083] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 263.561307][T17075] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 263.570566][T17075] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 263.580196][T17075] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 263.646573][T17077] netlink: 'syz.0.3595': attribute type 13 has an invalid length. [ 263.654563][T17077] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3595'. [ 263.668509][T17077] erspan0: refused to change device tx_queue_len [ 263.674938][T17077] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 263.869157][T17086] loop3: detected capacity change from 0 to 512 [ 263.883979][T17086] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 263.893170][T17086] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 263.902765][T17086] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 263.980214][T17111] 9pnet_fd: Insufficient options for proto=fd [ 264.125001][T17116] loop0: detected capacity change from 0 to 1024 [ 264.147239][T17116] EXT4-fs: Invalid want_extra_isize 0 [ 264.154522][T17120] lo speed is unknown, defaulting to 1000 [ 264.382160][T17092] netlink: 'syz.1.3600': attribute type 13 has an invalid length. [ 264.390032][T17092] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3600'. [ 264.437428][T17092] erspan0: refused to change device tx_queue_len [ 264.446883][T17092] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 264.484910][T17128] loop0: detected capacity change from 0 to 8192 [ 264.567593][T17098] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3602'. [ 264.604904][T17098] erspan0: refused to change device tx_queue_len [ 264.734729][T17120] loop3: detected capacity change from 0 to 512 [ 264.748369][T17139] lo speed is unknown, defaulting to 1000 [ 264.755882][T17120] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 264.764957][T17120] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 264.774545][T17120] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 264.783295][ T29] kauditd_printk_skb: 1202 callbacks suppressed [ 264.783311][ T29] audit: type=1326 audit(1753983672.949:57035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz.2.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 264.813300][ T29] audit: type=1326 audit(1753983672.949:57036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz.2.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 264.892565][T17142] lo speed is unknown, defaulting to 1000 [ 264.902259][ T29] audit: type=1326 audit(1753983673.079:57037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz.2.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf5e97d4d0 code=0x7ffc0000 [ 264.938363][ T29] audit: type=1326 audit(1753983673.079:57038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz.2.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 264.950828][T17119] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3609'. [ 264.962056][ T29] audit: type=1326 audit(1753983673.079:57039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz.2.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 264.994694][ T29] audit: type=1326 audit(1753983673.079:57040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz.2.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 265.002476][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3609'. [ 265.018163][ T29] audit: type=1326 audit(1753983673.079:57041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz.2.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 265.018192][ T29] audit: type=1326 audit(1753983673.079:57042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz.2.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 265.074227][ T29] audit: type=1326 audit(1753983673.079:57043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz.2.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 265.097700][ T29] audit: type=1326 audit(1753983673.079:57044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz.2.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 265.122272][T17119] erspan0: refused to change device tx_queue_len [ 265.160067][T17146] loop4: detected capacity change from 0 to 512 [ 265.177816][T17146] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.186894][T17146] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (fffc1829) [ 265.196471][T17146] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 265.375275][T17155] lo speed is unknown, defaulting to 1000 [ 265.393381][T17143] loop1: detected capacity change from 0 to 512 [ 265.411834][T17157] loop2: detected capacity change from 0 to 8192 [ 265.428874][T17143] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.437950][T17143] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 265.447635][T17143] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 265.447677][T17153] loop3: detected capacity change from 0 to 8192 [ 265.793755][T17163] loop4: detected capacity change from 0 to 8192 [ 265.856529][T17155] loop0: detected capacity change from 0 to 512 [ 265.867497][T17155] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.876663][T17155] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (fffc1829) [ 265.886348][T17155] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 266.037268][T17172] loop1: detected capacity change from 0 to 8192 [ 266.244363][T17180] loop0: detected capacity change from 0 to 8192 [ 266.307438][T17182] loop2: detected capacity change from 0 to 8192 [ 266.416346][T17187] loop3: detected capacity change from 0 to 8192 [ 266.598373][T17191] loop4: detected capacity change from 0 to 8192 [ 266.947058][T17198] loop1: detected capacity change from 0 to 8192 [ 267.313575][T17213] loop2: detected capacity change from 0 to 8192 [ 267.354976][T17217] loop0: detected capacity change from 0 to 8192 [ 267.387220][T17221] loop3: detected capacity change from 0 to 8192 [ 267.667364][T17233] loop4: detected capacity change from 0 to 8192 [ 268.211447][T17248] loop1: detected capacity change from 0 to 1024 [ 268.220056][T17248] EXT4-fs: Invalid want_extra_isize 0 [ 268.242569][T17244] loop2: detected capacity change from 0 to 8192 [ 268.398394][T17257] loop0: detected capacity change from 0 to 8192 [ 268.530951][T17264] loop3: detected capacity change from 0 to 8192 [ 268.859525][T17272] loop4: detected capacity change from 0 to 8192 [ 269.054922][T17275] loop2: detected capacity change from 0 to 8192 [ 269.236881][T17282] loop0: detected capacity change from 0 to 8192 [ 269.421856][T17285] loop3: detected capacity change from 0 to 8192 [ 269.719653][T17288] loop4: detected capacity change from 0 to 512 [ 269.726810][T17288] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.741227][T17288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.753883][T17288] ext4 filesystem being mounted at /741/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.771553][T17288] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 269.797877][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.911754][T17299] loop4: detected capacity change from 0 to 8192 [ 269.956924][T17303] loop2: detected capacity change from 0 to 8192 [ 270.144857][T17313] loop0: detected capacity change from 0 to 512 [ 270.154971][T17313] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.172639][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 270.172655][ T29] audit: type=1400 audit(1753983678.349:57282): avc: denied { mount } for pid=17314 comm="syz.1.3679" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 270.174216][T17313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.214197][T17313] ext4 filesystem being mounted at /729/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.270980][T17313] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 270.337124][ T29] audit: type=1400 audit(1753983678.509:57283): avc: denied { read } for pid=17314 comm="syz.1.3679" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 270.360960][ T29] audit: type=1400 audit(1753983678.509:57284): avc: denied { open } for pid=17314 comm="syz.1.3679" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 270.385199][T17315] program syz.1.3679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.411448][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.421455][T17323] loop3: detected capacity change from 0 to 8192 [ 270.486757][T17327] loop0: detected capacity change from 0 to 8192 [ 270.495973][T17325] loop1: detected capacity change from 0 to 8192 [ 270.767199][T17332] loop4: detected capacity change from 0 to 8192 [ 270.818348][ T29] audit: type=1326 audit(1753983678.989:57285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17333 comm="syz.2.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 270.842530][ T29] audit: type=1326 audit(1753983678.989:57286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17333 comm="syz.2.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 270.866140][ T29] audit: type=1326 audit(1753983678.999:57287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17333 comm="syz.2.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 270.889775][ T29] audit: type=1326 audit(1753983678.999:57288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17333 comm="syz.2.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 270.913440][ T29] audit: type=1326 audit(1753983678.999:57289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17333 comm="syz.2.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 270.937267][ T29] audit: type=1326 audit(1753983679.049:57290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17333 comm="syz.2.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 270.960838][ T29] audit: type=1326 audit(1753983679.049:57291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17333 comm="syz.2.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5e97eb69 code=0x7ffc0000 [ 271.237470][T17343] loop3: detected capacity change from 0 to 512 [ 271.248325][T17343] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.263353][T17343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.276078][T17343] ext4 filesystem being mounted at /787/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.342600][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.379277][T17349] loop1: detected capacity change from 0 to 512 [ 271.394537][T17349] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.424009][T17349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.437302][T17349] ext4 filesystem being mounted at /692/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.500466][T17349] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 271.563555][T17360] loop0: detected capacity change from 0 to 8192 [ 271.575963][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.683554][T17365] netlink: 464 bytes leftover after parsing attributes in process `syz.4.3694'. [ 271.764147][T17369] loop4: detected capacity change from 0 to 8192 [ 272.071888][T17380] loop2: detected capacity change from 0 to 8192 [ 272.227287][T17383] loop3: detected capacity change from 0 to 128 [ 272.235140][T17383] FAT-fs (loop3): Directory bread(block 162) failed [ 272.242124][T17383] FAT-fs (loop3): Directory bread(block 163) failed [ 272.248992][T17383] FAT-fs (loop3): Directory bread(block 164) failed [ 272.255743][T17383] FAT-fs (loop3): Directory bread(block 165) failed [ 272.262598][T17383] FAT-fs (loop3): Directory bread(block 166) failed [ 272.269873][T17383] FAT-fs (loop3): Directory bread(block 167) failed [ 272.276499][T17383] FAT-fs (loop3): Directory bread(block 168) failed [ 272.283216][T17383] FAT-fs (loop3): Directory bread(block 169) failed [ 272.283318][ T2980] ================================================================== [ 272.297878][ T2980] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 272.304823][ T2980] [ 272.307148][ T2980] write to 0xffffffff86875f40 of 8 bytes by task 17383 on cpu 0: [ 272.314857][ T2980] data_alloc+0x271/0x2b0 [ 272.319201][ T2980] prb_reserve+0x808/0xaf0 [ 272.323623][ T2980] vprintk_store+0x56d/0x860 [ 272.328217][ T2980] vprintk_emit+0x178/0x650 [ 272.332712][ T2980] vprintk_default+0x26/0x30 [ 272.337300][ T2980] vprintk+0x1d/0x30 [ 272.341195][ T2980] _printk+0x79/0xa0 [ 272.345092][ T2980] _fat_msg+0xa4/0xd0 [ 272.349092][ T2980] fat_get_entry+0x52b/0x5d0 [ 272.353698][ T2980] fat_subdirs+0x59/0x190 [ 272.358037][ T2980] fat_read_root+0x316/0x360 [ 272.362620][ T2980] fat_fill_super+0x15bf/0x1ce0 [ 272.367479][ T2980] vfat_fill_super+0x24/0x30 [ 272.372159][ T2980] get_tree_bdev_flags+0x291/0x300 [ 272.377279][ T2980] get_tree_bdev+0x1f/0x30 [ 272.381691][ T2980] vfat_get_tree+0x1c/0x30 [ 272.386112][ T2980] vfs_get_tree+0x54/0x1d0 [ 272.390522][ T2980] do_new_mount+0x207/0x5e0 [ 272.395019][ T2980] path_mount+0x4a4/0xb20 [ 272.399343][ T2980] __se_sys_mount+0x28f/0x2e0 [ 272.404016][ T2980] __x64_sys_mount+0x67/0x80 [ 272.408602][ T2980] x64_sys_call+0x2b4d/0x2ff0 [ 272.413279][ T2980] do_syscall_64+0xd2/0x200 [ 272.417787][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.423676][ T2980] [ 272.425991][ T2980] read to 0xffffffff86875f40 of 16 bytes by task 2980 on cpu 1: [ 272.433627][ T2980] _prb_read_valid+0x1bc/0x920 [ 272.438408][ T2980] prb_read_valid+0x3c/0x60 [ 272.442927][ T2980] syslog_print+0xeb/0x540 [ 272.447376][ T2980] do_syslog+0x52b/0x7e0 [ 272.451637][ T2980] __x64_sys_syslog+0x41/0x50 [ 272.456330][ T2980] x64_sys_call+0x2f36/0x2ff0 [ 272.461005][ T2980] do_syscall_64+0xd2/0x200 [ 272.465514][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.471401][ T2980] [ 272.473720][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 272.479962][ T2980] CPU: 1 UID: 0 PID: 2980 Comm: klogd Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 272.491595][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.501651][ T2980] ================================================================== [ 272.583623][T17383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3700'. [ 272.599881][T17383] FAT-fs (loop3): Directory bread(block 162) failed [ 272.606814][T17383] FAT-fs (loop3): Directory bread(block 163) failed [ 272.640657][T17383] syz.3.3700: attempt to access beyond end of device [ 272.640657][T17383] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 272.655099][T17383] syz.3.3700: attempt to access beyond end of device [ 272.655099][T17383] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128