last executing test programs: 2.233017968s ago: executing program 3 (id=1809): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000300)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff}}, 0x18, &(0x7f0000000100)={&(0x7f00000000c0)="d45dac54b098953bd2", 0x9}}, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000000)={&(0x7f0000000500)={0x1d, 0x0, 0x2}, 0x18, &(0x7f0000000380)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x20000196, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f00000001c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x2, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000100000000018070000202064250000000000202020731b0fff00000000bfa100000000000007010000f8ffffffb702000009000000b70300000000000085000000060000009500000000000000de6b279050df2cc3f8092bfca5b238393a2cab71a776a5ef76e6a0c2e611fcc926c0ef21"], &(0x7f0000000240)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="a800000021006cb28f05abaa29780000ac14142c000000000000000000000000000000000000f98f44e70bfd3f517c0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f000001000000000000000000000000ffffffff000000000000000000000000ac1414aa"], 0xa8}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f7, 0x0, 0x32}, 0x9c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.062281664s ago: executing program 4 (id=1847): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000), 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, &(0x7f0000000080)) 1.062145324s ago: executing program 4 (id=1848): write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\tr'], 0xa) 1.061576014s ago: executing program 4 (id=1850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x3c, r1, 0x203, 0x0, 0x0, {0xb}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) 1.002420229s ago: executing program 4 (id=1851): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) lseek(r1, 0x0, 0x3) socket(0x23, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 1.001276049s ago: executing program 2 (id=1852): mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) open(&(0x7f0000007fc0)='./bus\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x1a}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000040)) 935.330914ms ago: executing program 2 (id=1855): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c2000001000010400c4eeffff89fffdffff0000", @ANYRES32, @ANYBLOB="01000000010700001c0012000d"], 0x3c}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c040007031a000900", 0x33a) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x404}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d00000085000000500000009500000000000000ac4ed1f05edbf68833674a316d7f4569822b4045cdc5fe3a20f5c8f661d31ddf7d987f3e4f6866d24c7319eb106cecbe6a94a214e1f3905ad9b19b583d0d2bb1454c0c96e79eed4e088632754f52c26e81780a75528dc33fa9b0417b856aa96c4b91ebd0e6510da0a7dea282989e2a84655598cee1d26de40690280c623e412ee3f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe"], 0x30}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000000002"]) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000040)=0x8, 0x4) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) read(r5, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x197, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc0105303, &(0x7f0000000440)) tkill(r4, 0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbsepd6Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgyeTRsRHIuIz+f2/EFP5v04A4DxrtxeivdCdBgDOuzQfA0vSUkSkadEJKHXG8J6LC2mt0Wxdv9fYWl/pjJVdipn03lqtevPy3O+/kx88k2TpxTwvz8/TlWPpWxFxOSJ+OPdUni4tN2or4+nyAMDEe7q7/Y+If8ylaanU16k9vtUDAD405sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBPtTM9gWTq68mPO8k/ObMywKMR8+Hec/33PygH/8PQfzOCP6vXPt4/+P/5niG88X4P0yuJxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jnEUtnnBj5qz+Vs98Y/qorzjcK38ju+KIq5MOvRYDbTwcVazxvScBo/Hoph93SQAAAAAAAAAAAAAAgNOM4r8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CQAA//+zi8zo") creat(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 821.164794ms ago: executing program 3 (id=1863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) setfsuid(0xee01) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x2, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8}}}]}]}, 0x3c}}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(0xffffffffffffffff, 0x105b01) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0xfb, 0x11e0, &(0x7f00000036c0)="$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") r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000500), 0xbf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) socket$phonet_pipe(0x23, 0x5, 0x2) sendfile(r2, r2, &(0x7f0000000240), 0x7f06) 425.322346ms ago: executing program 1 (id=1869): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$P9_RFLUSH(r4, &(0x7f0000000200)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000024c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 418.685937ms ago: executing program 2 (id=1871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x5}, {0x6}]}, 0x10) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x7, &(0x7f00000000c0)=[{0x0, 0x3f, 0x80, 0x1}, {0x6, 0x40, 0x20, 0x80a0}, {0x7fff, 0x0, 0x1, 0x80000001}, {0x0, 0x2}, {0x3, 0x7, 0x64, 0x7}, {0x4, 0x44, 0x1, 0x1}, {0xe7b, 0xff, 0x8, 0x2}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYRES8=0xffffffffffffffff], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x4b, 0x23, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f]}}) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, 0x0) socket$tipc(0x1e, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x20, r10, 0xb7dc99b6e07d1f89, 0x0, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='sched_pi_setprio\x00', r5}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00000095", @ANYRES64=r5, @ANYRES32=r7, @ANYRESOCT=r6], &(0x7f0000000180)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r11}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r12, 0x125d, &(0x7f0000001080)) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c0002"], 0xec}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x18) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) 384.098739ms ago: executing program 1 (id=1872): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xffffff8d, &(0x7f0000002800)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) 333.914913ms ago: executing program 1 (id=1873): syz_read_part_table(0x609, &(0x7f0000000d40)="$eJzs1E9rXFUYB+DfnczMnSmGBC0oIjRQ6CrEhXQRcLBBVLppQ6niwp0gCHVhoWBXE9ouRYpbIW4qlFLIF9CNlLRQ3LgKLktxbxGhRDwy98aZli5cJBAtz7M45z3vPf8u59wb/tc6qcelVMOM/8n0+nvBS23VTymlTAdc//jyhWnj/VvHbyfra+fOJ0c2Pkqy9NoLycJ0rtlCd55etyzslgzzaDBLVZOim2QjyWcPbjRhdzbL4jObr/fx4jwXtkZf/Jjm3oyGGaSXb5LV79pn4w9efvPDTlXNbmF1ahr2Dmr97WPNxU2dnemcS8n8SvetJPf2MsuTTr+28Xb7rVVnnpyo01Zz7WfwtOEzmQPaPfu1NdpeuHrtYv/rbtN8+O3RB79c6eXEzUuvL7/YuzO+XrWHdyzJoD/5yVXNYc8d8r4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDnz9Zoe6G/F+98Xj9845PuXmux/FVKSVInmXQZtPkqw4UjZVJn42DWv3r/y2Hq0ac7j0sp5VRKOfvb5vxK724vZzf31l2uMn5i2OZuW/f3vwMOU3P+1y6+99Xl0R+329TgyuMzJwZVE9dNOUx+7w/GRy8l6czGDg9lxwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf907755eWl87dz5J1R0k6Sze2J48OPlK26Ekr/5w8uaFe2urTXtlUvzZP13Xu+X+249uLf50/Oe7c1mv2+7fd5JSrc6n220TW03ZO4x349/9HQAA///wjWn4") openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x208, 0xc8, 0x8, 0x208, 0x5803, 0x348, 0x2e8, 0x2e8, 0x348, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1d8, 0x208, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) creat(&(0x7f0000000480)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x80}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010024d60000000000000000000003000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000304aad651117000000000000000000000000000000000000000000000000000000000000ebff45026d61b10057b73fe705c102d661acebd089596f87f767b165649f1440b43c533d86af171b3eba10a5ba7cfc8e83594edef143effea3"], 0x5000) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003299b8f276dc75584a8d87d907005858367d61f49e1639a48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000005, 0x12, r4, 0x0) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x2, 0x0, &(0x7f0000000080)) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x125f, 0x0) 325.669204ms ago: executing program 2 (id=1875): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x89f0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "bb5dee00"}) 305.379646ms ago: executing program 3 (id=1877): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="480b0000f1"], 0x20000600}}, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) r6 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) io_submit(r5, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)="7f", 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x3, 0x0, r6, 0x0}]) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@base={0x19, 0x6, 0x100, 0x401, 0x820, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x2, 0x3}, 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) r10 = syz_open_procfs(0x0, &(0x7f00000021c0)='net/softnet_stat\x00') read$char_usb(r10, &(0x7f0000000040)=""/4122, 0x101a) preadv(r10, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) read$char_usb(r10, &(0x7f0000001080)=""/147, 0x93) r11 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r11, 0x6609) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x9, &(0x7f0000000100)=ANY=[@ANYBLOB="00010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000280)='GPL\x00', 0x100, 0xf7, &(0x7f00000002c0)=""/247, 0x41000, 0x21, '\x00', 0x0, 0x34, r3, 0x8, &(0x7f0000000400)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x0, 0x8000, 0xffff}, 0x10, 0x0, r0, 0x4, &(0x7f0000000700)=[r4, r12, r8, r9, r7, r11, r12, r13, r14], &(0x7f0000000740)=[{0x3, 0x5, 0x20000004, 0x4}, {0x4, 0x4, 0x5, 0x7}, {0x2, 0x3, 0xa, 0x7}, {0x3, 0x4, 0x8, 0xa}], 0x10, 0xa779}, 0x90) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002340)={0xb8, r15, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x6c, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xb8}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r17 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r17, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r16, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) r18 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b020005586500"/32, 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) 275.806248ms ago: executing program 2 (id=1879): r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000580)={{0x2, 0x0, @local}, {0x0, @local}, 0x5a, {0x2, 0x0, @multicast2}}) 275.492908ms ago: executing program 0 (id=1880): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e22, 0x80, @local}, 0x1c, 0x0}, 0x0) 260.39629ms ago: executing program 1 (id=1881): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x82040, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002400)='./file0\x00', &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioprio_set$uid(0x3, r2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x3, 0x0, &(0x7f00000000c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x168, 0x0, 0x148, 0x168, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'erspan0\x00', 'wg2\x00', {}, {}, 0x6}, 0xffffe000, 0x100, 0x168, 0x0, {0x0, 0x1c030000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@physdev={{0x68}, {'veth1\x00', {}, 'veth1_to_bridge\x00', {}, 0x0, 0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "ee3a145e71108157c7a58fd52abd150cdc1d3c8bac3dd980a975afbb612f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x184, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@loopback, 0x0, 0x3c}, 0x0, @in=@remote}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@mcast2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x23c}}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0xb4, 0x453, 0x0, 0x70bd27, 0x25dfdbff, "31ccf8ee7b6beb9270a2d3976c87952b492537cda46de7a6ce125b1f109134fef8f0fd47e784679ebccfb3987edad78f1907dcc4e1578f06927fbb036f4ea605c41a96aa60ee8f7c990edbd1eefdecd7bcb66532765d111408809706bf2d0b23285fa3294d4982e9908f69582435f98440029bac2ab6b6f13e7caff6c776e1740da1c28784a79684ae9fa170b80332eaad0d95e1cbf5f01b625e61008c92ba11036feff9", ["", "", "", ""]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x168, 0x0, 0x148, 0x168, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'erspan0\x00', 'wg2\x00'}, 0xffffe000, 0x100, 0x168, 0x0, {0x0, 0x1c030000}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}, @common=@unspec=@physdev={{0x68}, {'veth1\x00', {}, 'veth1_to_bridge\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "ee3a145e71108157c7a58fd52abd150cdc1d3c8bac3dd980a975afbb612f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@lld, {}, {0x5, 0x1, 0xb, 0x1, 0x2}, {}, {0x5}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 255.7832ms ago: executing program 2 (id=1882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0xc0185502, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x48) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) write$tcp_mem(r2, &(0x7f0000000440)={0xfffffffffbfffffb}, 0xffffff88) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) socket(0x1, 0x2, 0x0) getpid() bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x202400, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x7, 0x10}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x336d3c3a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r1, 0x58, &(0x7f00000007c0)}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x6000, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{}, &(0x7f00000008c0), 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000002000)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000040)='q', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000000), 0x8) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000880)={0x200, 0x0, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000002000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900008000007a32000040006b00030091c3b9bdafae04b9abc16004cf378042f26c43f91f68d8a90767c0bc71f6033cfebf709a1f555162d9113a2d62886a5a0bfb0101630c2a7fcab5c9c2028c70d2e9"], 0xfc}}, 0x0) 250.66559ms ago: executing program 0 (id=1883): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x17c7, &(0x7f00000002c0)) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) listen(r2, 0x4) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0x400454a4, &(0x7f0000000d80)={0x2}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2200c407, &(0x7f0000000440)={[{@dioread_lock}, {@debug}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0xebdc}}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@delalloc}, {@jqfmt_vfsv1}, {@acl}], [], 0x2c}, 0x84, 0x4da, &(0x7f0000000f40)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r7, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8f}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1c5c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004050}, 0x20008001) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) 217.243903ms ago: executing program 1 (id=1884): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$qrtr(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000140)={0x0, 0x0}, 0x10) 208.248374ms ago: executing program 1 (id=1885): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) 188.864295ms ago: executing program 3 (id=1886): r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x0) 131.32438ms ago: executing program 3 (id=1887): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c80)="eb6bba8831fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811d40a2e8be40b3a7da5a8a64db041bd3a104ed", 0x31}], 0x1, 0x0, 0x0, 0x4851}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x1d, &(0x7f0000000180)=[{&(0x7f0000000000)=""/46, 0x3c}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f3757f0086dd6317ce800000000000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 123.068241ms ago: executing program 3 (id=1888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) setfsuid(0xee01) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x2, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8}}}]}]}, 0x3c}}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(0xffffffffffffffff, 0x105b01) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2dc5c07001a000100000000897b2a1d84f5c7ffff00000000000067e77dc70b90bbb45efd97899a16f2df4fa2a8f069d9b047389f672eb3080000000000000065890d2d0d1b8d3d62f6d77b0283e166e2ca4c35483d3f00d6bf7da9299e6e81c96daf520300a16cab12d75a852b3e4470420877efbe1f000000000000007e15f9b683e63cfff7c638bca835b33bc18c4ed0351cd285197b0241569048b5b416ba1c57217be5a338392f831637ee8c25bb2183634a33b18c4b459f9aea5ab222d7060000000000665106000000a803d1b56126efec0225a5433883b0d17cb21dbfd886caf2624e7f00da0ef9893ef57c79a182dceca9c46a9f8b001e53b29c0c698ed30d8942e94ac057bde74e42021d895c22b6400000002b2c604ed73249e80f08bfdcebee7a07856a3a23e0907f3dc0eb52c40f6b21c14832dd9845ee8d8733b52c8422295fde5626cd43fb43fb3acf9b2e840713cba86d43a570ee3589b7e9000000000000000000000000000000dc85131317c56465978d957d000000000000000000000000000000000000000000000000000000000000000000301171e8e3a2d0c842c20fd293c073b93f7662fad1f4ae3e1fe359aa29a4b8965229fa06b0fb2e23d2644cfbdbd6929aa42151ea48334743ad0c378641e74d55d6cd7b098599190100000055ec9c0c26b71588d6fc97e3098fb0e778be446659cf665e7f848d85de70c3c426a539a9a0e92e7bbf77528053dcb3b791b8e3faae507a3b721b670b06b78bb09e82ecc85a4bbc596d8ce02a2cbede5573f8bdc84d61c5634fffa50e74ec0f2da4f3d82c2d2b5a20ec152df14481c3bb59a23e014d07fc070d87f58118f468bf80283e0ce7efda7906f9c53319aef22e01a9ba5649fc10fb5b8132dcf42c47a4b79efb9f720ebd2dcc1634f870cee6201bc0ad9e17c4633a17de505bed8fded3053cb455636132bdae3239b9c8b437256ac21a49c4f03b268c47e9becbaff440728429f9e0b0222485188b745b3c871d01d27eb4e5e00bcd79b95601098e044345a8aaa12fda56277aef89192b9af038ab8808a2adf0c3a15ec863e5f352c7967607cede40848eae2704701b7af0a0b30e9e5b76f45500000000000000", @ANYRESDEC=0x0], 0xfb, 0x11e0, &(0x7f00000036c0)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eK4gjJmq7JR6KsFPK53PJD977wu9lYOAN8+bwja8+Hg2qbJDPY+PEidiYRqQ7KVJsxD8+j1df//GnF67duHml2+vtXk3pcvd657WU0taL37/36Tcv/TA/++63W9+djoPt9w9/3fnl4PzBhcM/rn80rNKwSuPJPOXp1mQyz2+VRdobVqMspXfKIq+KNBxXxezI+KCcTKeLlI/3NlvTWVFVKR8v0qhYpPkkzWeLlH+YD8cpy7K02Qr+j/7Xd+q6jqjrx+NU1HVdPxGtOBtPxmZsRTu246l4Op6Jc/FsnI/n4vm4sJzVdN8AAAAAAAAAAAAAAAAAAADwaHH+HwAAAAAAAAAAAAAAAAAAAJp37cbNK91eb/dqSmciyi/3+/v91e9qvDuIYZRRxKVox++xPP2/sqovv9XbvZSWtuOL8vbf+dv7/ceO5jvLzwmszXdW+XQ0fzpa9+Z3oh3n1ud31ubPxCsv35PPoh0/fxCTKGMv/srezX/WSenNt3v35S8u5wEAAMCjIEv/Wrt/z7L/Gl/lH+D5wH3765Nx8WSzayeiWnwyysuymCke+uJUs238Vtd183+C4piKpu9MHIe7F73pTgAAAAAAAAAAAHgQx/E6YdNrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4kx04FgAAAAAQ5m+dRscGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVwEAAP//zI7XaA==") r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000500), 0xbf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) socket$phonet_pipe(0x23, 0x5, 0x2) sendfile(r2, r2, &(0x7f0000000240), 0x7f06) 107.732372ms ago: executing program 4 (id=1889): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x13, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 89.364624ms ago: executing program 0 (id=1890): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x89f0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "bb5dee00"}) 44.389087ms ago: executing program 4 (id=1891): syz_read_part_table(0x609, &(0x7f0000000d40)="$eJzs1E9rXFUYB+DfnczMnSmGBC0oIjRQ6CrEhXQRcLBBVLppQ6niwp0gCHVhoWBXE9ouRYpbIW4qlFLIF9CNlLRQ3LgKLktxbxGhRDwy98aZli5cJBAtz7M45z3vPf8u59wb/tc6qcelVMOM/8n0+nvBS23VTymlTAdc//jyhWnj/VvHbyfra+fOJ0c2Pkqy9NoLycJ0rtlCd55etyzslgzzaDBLVZOim2QjyWcPbjRhdzbL4jObr/fx4jwXtkZf/Jjm3oyGGaSXb5LV79pn4w9efvPDTlXNbmF1ahr2Dmr97WPNxU2dnemcS8n8SvetJPf2MsuTTr+28Xb7rVVnnpyo01Zz7WfwtOEzmQPaPfu1NdpeuHrtYv/rbtN8+O3RB79c6eXEzUuvL7/YuzO+XrWHdyzJoD/5yVXNYc8d8r4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDnz9Zoe6G/F+98Xj9845PuXmux/FVKSVInmXQZtPkqw4UjZVJn42DWv3r/y2Hq0ac7j0sp5VRKOfvb5vxK724vZzf31l2uMn5i2OZuW/f3vwMOU3P+1y6+99Xl0R+329TgyuMzJwZVE9dNOUx+7w/GRy8l6czGDg9lxwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf907755eWl87dz5J1R0k6Sze2J48OPlK26Ekr/5w8uaFe2urTXtlUvzZP13Xu+X+249uLf50/Oe7c1mv2+7fd5JSrc6n220TW03ZO4x349/9HQAA///wjWn4") openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x208, 0xc8, 0x8, 0x208, 0x5803, 0x348, 0x2e8, 0x2e8, 0x348, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1d8, 0x208, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) creat(&(0x7f0000000480)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x80}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010024d60000000000000000000003000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000304aad651117000000000000000000000000000000000000000000000000000000000000ebff45026d61b10057b73fe705c102d661acebd089596f87f767b165649f1440b43c533d86af171b3eba10a5ba7cfc8e83594edef143effea3"], 0x5000) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003299b8f276dc75584a8d87d907005858367d61f49e1639a48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000005, 0x12, r4, 0x0) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x2, 0x0, &(0x7f0000000080)) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x125f, 0x0) 34.835878ms ago: executing program 0 (id=1892): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="28030600e0ff020002004788aa96a13b", 0x10, 0x0, &(0x7f0000000440)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 370.841µs ago: executing program 0 (id=1893): r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000580)={{0x2, 0x0, @local}, {0x0, @local}, 0x5a, {0x2, 0x0, @multicast2}}) 0s ago: executing program 0 (id=1894): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): tribute type 13 has an invalid length. [ 68.961570][ T6485] __nla_validate_parse: 1 callbacks suppressed [ 68.961606][ T6485] netlink: 164 bytes leftover after parsing attributes in process `syz.0.941'. [ 68.977334][ T2784] loop4: p237 size 65536 extends beyond EOD, truncated [ 68.985124][ T2784] loop4: p238 size 65536 extends beyond EOD, truncated [ 68.987537][ T6485] syz_tun: refused to change device tx_queue_len [ 68.996008][ T2784] loop4: p239 size 65536 extends beyond EOD, truncated [ 69.015872][ T2784] loop4: p240 size 65536 extends beyond EOD, truncated [ 69.033961][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.941'. [ 69.035065][ T2784] loop4: p241 size 65536 extends beyond EOD, truncated [ 69.053160][ T2784] loop4: p242 size 65536 extends beyond EOD, truncated [ 69.062482][ T2784] loop4: p243 size 65536 extends beyond EOD, truncated [ 69.073529][ T2784] loop4: p244 size 65536 extends beyond EOD, truncated [ 69.081027][ T2784] loop4: p245 size 65536 extends beyond EOD, truncated [ 69.089311][ T2784] loop4: p246 size 65536 extends beyond EOD, truncated [ 69.097056][ T2784] loop4: p247 size 65536 extends beyond EOD, truncated [ 69.115196][ T2784] loop4: p248 size 65536 extends beyond EOD, truncated [ 69.129941][ T2784] loop4: p249 size 65536 extends beyond EOD, truncated [ 69.139397][ T2784] loop4: p250 size 65536 extends beyond EOD, truncated [ 69.146903][ T2784] loop4: p251 size 65536 extends beyond EOD, truncated [ 69.155671][ T2784] loop4: p252 size 65536 extends beyond EOD, truncated [ 69.163918][ T2784] loop4: p253 size 65536 extends beyond EOD, truncated [ 69.176937][ T2784] loop4: p254 size 65536 extends beyond EOD, truncated [ 69.185137][ T2784] loop4: p255 size 65536 extends beyond EOD, truncated [ 69.231759][ T6499] loop3: detected capacity change from 0 to 512 [ 69.261308][ T6499] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.946: attempt to clear invalid blocks 1 len 1 [ 69.302326][ T6499] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.946: bg 0: block 343: padding at end of block bitmap is not set [ 69.355758][ T6499] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 69.391066][ T6511] loop2: detected capacity change from 0 to 512 [ 69.403603][ T6499] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.946: invalid indirect mapped block 1819239214 (level 0) [ 69.441247][ T6511] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.456398][ T6499] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.946: invalid indirect mapped block 1819239214 (level 1) [ 69.458975][ T6511] EXT4-fs (loop2): 1 truncate cleaned up [ 69.476242][ T6511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.502025][ T6499] EXT4-fs (loop3): 1 truncate cleaned up [ 69.521067][ T6499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.582361][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.599195][ T5896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.601572][ T5876] udevd[5876]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 69.609188][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 69.609199][ T29] audit: type=1400 audit(1721122859.198:427): avc: denied { write } for pid=6516 comm="syz.4.954" name="fdinfo" dev="proc" ino=17195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 69.624613][ T3903] udevd[3903]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 69.625604][ T29] audit: type=1400 audit(1721122859.198:428): avc: denied { add_name } for pid=6516 comm="syz.4.954" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 69.649327][ T5879] udevd[5879]: inotify_add_watch(7, /dev/loop4p10, 10) failed: No such file or directory [ 69.660286][ T3074] udevd[3074]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory [ 69.699166][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory [ 69.710442][ T3326] udevd[3326]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 69.718970][ T3072] udevd[3072]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 69.733049][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 69.745843][ T6518] udevd[6518]: inotify_add_watch(7, /dev/loop4p12, 10) failed: No such file or directory [ 69.745866][ T5878] udevd[5878]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory [ 69.774562][ T29] audit: type=1400 audit(1721122859.328:429): avc: denied { create } for pid=6516 comm="syz.4.954" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 69.796476][ T29] audit: type=1400 audit(1721122859.328:430): avc: denied { associate } for pid=6516 comm="syz.4.954" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.988048][ T29] audit: type=1400 audit(1721122859.578:431): avc: denied { read } for pid=6536 comm="syz.2.962" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 70.011454][ T29] audit: type=1400 audit(1721122859.578:432): avc: denied { open } for pid=6536 comm="syz.2.962" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 70.086938][ T6543] loop2: detected capacity change from 0 to 512 [ 70.101089][ T29] audit: type=1400 audit(1721122859.598:433): avc: denied { read } for pid=6536 comm="syz.2.962" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.126521][ T29] audit: type=1400 audit(1721122859.598:434): avc: denied { open } for pid=6536 comm="syz.2.962" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.151427][ T29] audit: type=1400 audit(1721122859.598:435): avc: denied { ioctl } for pid=6536 comm="syz.2.962" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.222660][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 70.246833][ T6543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.261300][ T6543] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.304796][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.331260][ T6554] loop3: detected capacity change from 0 to 128 [ 70.351046][ T6554] FAT-fs (loop3): bogus logical sector size 0 [ 70.357298][ T6554] FAT-fs (loop3): Can't find a valid FAT filesystem [ 70.399179][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 70.409268][ T29] audit: type=1400 audit(1721122859.998:436): avc: denied { write } for pid=6553 comm="syz.3.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.473716][ T6558] loop2: detected capacity change from 0 to 512 [ 70.500513][ T6558] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.970: attempt to clear invalid blocks 1 len 1 [ 70.528785][ T6558] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.970: bg 0: block 343: padding at end of block bitmap is not set [ 70.556161][ T6565] loop3: detected capacity change from 0 to 128 [ 70.562670][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 70.562851][ T6558] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 70.581597][ T6558] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.970: invalid indirect mapped block 1819239214 (level 0) [ 70.595691][ T6558] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.970: invalid indirect mapped block 1819239214 (level 1) [ 70.615746][ T6558] EXT4-fs (loop2): 1 truncate cleaned up [ 70.646277][ T6558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.679376][ T6569] batman_adv: batadv0: Adding interface: ipvlan2 [ 70.685751][ T6569] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.731677][ T6569] batman_adv: batadv0: Interface activated: ipvlan2 [ 70.813483][ T6583] loop3: detected capacity change from 0 to 512 [ 70.838980][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.902073][ T6583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.910922][ T6596] loop0: detected capacity change from 0 to 128 [ 70.920995][ T6583] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.941992][ T6588] loop2: detected capacity change from 0 to 128 [ 70.948783][ T6588] FAT-fs (loop2): bogus logical sector size 0 [ 70.954905][ T6588] FAT-fs (loop2): Can't find a valid FAT filesystem [ 70.969634][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'. [ 71.007428][ T5896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.042552][ T6599] loop2: detected capacity change from 0 to 764 [ 71.093062][ T6603] SELinux: Context system_u:object_r is not valid (left unmapped). [ 71.163488][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 71.173556][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.194056][ T6609] batman_adv: batadv0: Adding interface: ipvlan2 [ 71.200627][ T6609] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.228516][ T6609] batman_adv: batadv0: Interface activated: ipvlan2 [ 71.638499][ T6620] netlink: 48 bytes leftover after parsing attributes in process `syz.4.995'. [ 71.703001][ T6624] loop4: detected capacity change from 0 to 1024 [ 71.720008][ T6624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.757986][ T6624] loop4: detected capacity change from 1024 to 0 [ 71.764821][ T6624] syz.4.997: attempt to access beyond end of device [ 71.764821][ T6624] loop4: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 71.778662][ T6624] EXT4-fs error (device loop4): __ext4_find_entry:1640: inode #2: comm syz.4.997: reading directory lblock 0 [ 71.790480][ T6624] syz.4.997: attempt to access beyond end of device [ 71.790480][ T6624] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 71.803656][ T6628] loop1: detected capacity change from 0 to 256 [ 71.804178][ T6628] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.809946][ T6624] buffer_io_error: 41 callbacks suppressed [ 71.809959][ T6624] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 71.826405][ T6629] syz.4.997: attempt to access beyond end of device [ 71.826405][ T6629] loop4: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 71.829349][ T6624] EXT4-fs (loop4): I/O error while writing superblock [ 71.836619][ T6629] EXT4-fs error (device loop4): __ext4_find_entry:1640: inode #2: comm syz.4.997: reading directory lblock 0 [ 71.867868][ T6629] syz.4.997: attempt to access beyond end of device [ 71.867868][ T6629] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 71.881069][ T6629] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 71.889446][ T6629] EXT4-fs (loop4): I/O error while writing superblock [ 71.896325][ T6624] syz.4.997: attempt to access beyond end of device [ 71.896325][ T6624] loop4: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 71.916428][ T6624] EXT4-fs error (device loop4): __ext4_find_entry:1640: inode #2: comm syz.4.997: reading directory lblock 0 [ 71.934350][ T6624] syz.4.997: attempt to access beyond end of device [ 71.934350][ T6624] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 71.948646][ T6624] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 71.958350][ T6624] EXT4-fs (loop4): I/O error while writing superblock [ 71.976210][ T6624] syz.4.997: attempt to access beyond end of device [ 71.976210][ T6624] loop4: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 71.991806][ T6639] loop3: detected capacity change from 0 to 512 [ 71.997228][ T6624] EXT4-fs error (device loop4): __ext4_find_entry:1640: inode #2: comm syz.4.997: reading directory lblock 0 [ 72.018333][ T6624] syz.4.997: attempt to access beyond end of device [ 72.018333][ T6624] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 72.027561][ T6644] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1005'. [ 72.031680][ T6624] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 72.051458][ T6639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.072834][ T6646] loop1: detected capacity change from 0 to 256 [ 72.079738][ T6624] EXT4-fs (loop4): I/O error while writing superblock [ 72.089699][ T6629] syz.4.997: attempt to access beyond end of device [ 72.089699][ T6629] loop4: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 72.096259][ T6639] EXT4-fs warning (device loop3): dx_probe:868: inode #2: comm syz.3.1003: Unimplemented hash flags: 0x0001 [ 72.105990][ T6629] syz.4.997: attempt to access beyond end of device [ 72.105990][ T6629] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 72.114443][ T6639] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.1003: Corrupt directory, running e2fsck is recommended [ 72.128492][ T6629] EXT4-fs error (device loop4): ext4_get_inode_loc:4495: inode #2: block 5: comm syz.4.997: unable to read itable block [ 72.163289][ T6629] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 72.173190][ T6629] EXT4-fs (loop4): I/O error while writing superblock [ 72.180200][ T6629] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: IO failure [ 72.190688][ T6629] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 72.193323][ T6639] EXT4-fs warning (device loop3): dx_probe:868: inode #2: comm syz.3.1003: Unimplemented hash flags: 0x0001 [ 72.199678][ T6629] EXT4-fs (loop4): I/O error while writing superblock [ 72.210946][ T6639] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.1003: Corrupt directory, running e2fsck is recommended [ 72.217666][ T6629] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.997: mark_inode_dirty error [ 72.239816][ T6639] EXT4-fs warning (device loop3): dx_probe:868: inode #2: comm syz.3.1003: Unimplemented hash flags: 0x0001 [ 72.253425][ T6639] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.1003: Corrupt directory, running e2fsck is recommended [ 72.256764][ T6629] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 72.275658][ T6629] EXT4-fs (loop4): I/O error while writing superblock [ 72.287822][ T6624] EXT4-fs error (device loop4): __ext4_find_entry:1640: inode #2: comm syz.4.997: reading directory lblock 0 [ 72.289855][ T6639] EXT4-fs warning (device loop3): dx_probe:868: inode #2: comm syz.3.1003: Unimplemented hash flags: 0x0001 [ 72.310959][ T6639] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.1003: Corrupt directory, running e2fsck is recommended [ 72.318496][ T6624] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 72.334415][ T6624] EXT4-fs (loop4): I/O error while writing superblock [ 72.338741][ T6639] EXT4-fs warning (device loop3): dx_probe:868: inode #2: comm syz.3.1003: Unimplemented hash flags: 0x0001 [ 72.346521][ T6655] EXT4-fs error (device loop4): __ext4_find_entry:1640: inode #2: comm syz.4.997: reading directory lblock 0 [ 72.352745][ T6639] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.1003: Corrupt directory, running e2fsck is recommended [ 72.364715][ T6655] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 72.386663][ T6655] EXT4-fs (loop4): I/O error while writing superblock [ 72.413875][ T5532] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4480: inode #2: block 5: comm kworker/u8:11: unable to read itable block [ 72.428538][ T5896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.428972][ T5532] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 72.725116][ T5532] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.783649][ T5532] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.841293][ T5532] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.901573][ T5532] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.939113][ T6682] loop2: detected capacity change from 0 to 2048 [ 72.980213][ T6682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.028965][ T5532] bridge_slave_1: left allmulticast mode [ 73.035368][ T5532] bridge_slave_1: left promiscuous mode [ 73.041433][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.050762][ T5532] bridge_slave_0: left allmulticast mode [ 73.056719][ T5532] bridge_slave_0: left promiscuous mode [ 73.062562][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.174459][ T6689] loop0: detected capacity change from 0 to 256 [ 73.182239][ T5532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.196579][ T5532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.211190][ T5532] bond0 (unregistering): Released all slaves [ 73.227367][ T5532] bond1 (unregistering): Released all slaves [ 73.236141][ T5532] bond2 (unregistering): Released all slaves [ 73.263313][ T6672] chnl_net:caif_netlink_parms(): no params data found [ 73.289444][ T5532] tipc: Disabling bearer [ 73.297144][ T5532] tipc: Left network mode [ 73.452349][ T5532] hsr_slave_0: left promiscuous mode [ 73.462844][ T6722] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1025'. [ 73.484219][ T6721] loop1: detected capacity change from 0 to 512 [ 73.492953][ T5532] hsr_slave_1: left promiscuous mode [ 73.526427][ T5532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.533888][ T5532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.551093][ T5532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.558526][ T5532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.572364][ T5532] veth1_macvtap: left promiscuous mode [ 73.577946][ T5532] veth0_macvtap: left promiscuous mode [ 73.583585][ T5532] veth1_vlan: left promiscuous mode [ 73.588994][ T5532] veth0_vlan: left promiscuous mode [ 73.614603][ T6721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.670608][ T6721] EXT4-fs warning (device loop1): dx_probe:868: inode #2: comm syz.1.1024: Unimplemented hash flags: 0x0001 [ 73.682182][ T6721] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.1024: Corrupt directory, running e2fsck is recommended [ 73.724484][ T6721] EXT4-fs warning (device loop1): dx_probe:868: inode #2: comm syz.1.1024: Unimplemented hash flags: 0x0001 [ 73.736096][ T6721] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.1024: Corrupt directory, running e2fsck is recommended [ 73.755177][ T6721] EXT4-fs warning (device loop1): dx_probe:868: inode #2: comm syz.1.1024: Unimplemented hash flags: 0x0001 [ 73.766928][ T6721] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.1024: Corrupt directory, running e2fsck is recommended [ 73.791239][ T6721] EXT4-fs warning (device loop1): dx_probe:868: inode #2: comm syz.1.1024: Unimplemented hash flags: 0x0001 [ 73.802772][ T6721] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.1024: Corrupt directory, running e2fsck is recommended [ 73.818040][ T6721] EXT4-fs warning (device loop1): dx_probe:868: inode #2: comm syz.1.1024: Unimplemented hash flags: 0x0001 [ 73.829640][ T6721] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.1024: Corrupt directory, running e2fsck is recommended [ 73.857708][ T4939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.887617][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.908463][ T6730] usb usb9: usbfs: process 6730 (syz.0.1026) did not claim interface 0 before use [ 73.924531][ T6730] usb usb9: selecting invalid altsetting 21783 [ 74.117277][ T5532] team0 (unregistering): Port device team_slave_1 removed [ 74.179493][ T5532] team0 (unregistering): Port device team_slave_0 removed [ 74.211211][ T6742] loop2: detected capacity change from 0 to 2048 [ 74.249652][ T6742] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.1033: bad orphan inode 8192 [ 74.260632][ T6672] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.260845][ T6742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.267782][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.286771][ T6672] bridge_slave_0: entered allmulticast mode [ 74.294051][ T6672] bridge_slave_0: entered promiscuous mode [ 74.326759][ T6672] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.334052][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.341334][ T6672] bridge_slave_1: entered allmulticast mode [ 74.348154][ T6672] bridge_slave_1: entered promiscuous mode [ 74.349958][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.370786][ T6672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.389072][ T6753] loop0: detected capacity change from 0 to 512 [ 74.401823][ T6672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.408819][ T6753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.463006][ T6753] EXT4-fs warning (device loop0): dx_probe:868: inode #2: comm syz.0.1037: Unimplemented hash flags: 0x0001 [ 74.474771][ T6753] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.1037: Corrupt directory, running e2fsck is recommended [ 74.490264][ T6672] team0: Port device team_slave_0 added [ 74.496844][ T6672] team0: Port device team_slave_1 added [ 74.498981][ T6753] EXT4-fs warning (device loop0): dx_probe:868: inode #2: comm syz.0.1037: Unimplemented hash flags: 0x0001 [ 74.514499][ T6753] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.1037: Corrupt directory, running e2fsck is recommended [ 74.620464][ T6753] EXT4-fs warning (device loop0): dx_probe:868: inode #2: comm syz.0.1037: Unimplemented hash flags: 0x0001 [ 74.632113][ T6753] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.1037: Corrupt directory, running e2fsck is recommended [ 74.649670][ T6753] EXT4-fs warning (device loop0): dx_probe:868: inode #2: comm syz.0.1037: Unimplemented hash flags: 0x0001 [ 74.661261][ T6753] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.1037: Corrupt directory, running e2fsck is recommended [ 74.678516][ T6672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.685542][ T6672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.711550][ T6672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.744261][ T6766] loop2: detected capacity change from 0 to 512 [ 74.765421][ T6766] EXT4-fs: Mount option(s) incompatible with ext3 [ 74.784433][ T6786] sch_tbf: peakrate 6 is lower than or equals to rate 7694164503644904053 ! [ 74.807242][ T6753] EXT4-fs warning (device loop0): dx_probe:868: inode #2: comm syz.0.1037: Unimplemented hash flags: 0x0001 [ 74.818871][ T6753] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.1037: Corrupt directory, running e2fsck is recommended [ 74.845252][ T6672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.852327][ T6672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.878758][ T6672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.923141][ T5414] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.030530][ T6791] loop3: detected capacity change from 0 to 4096 [ 75.105175][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 75.105190][ T29] audit: type=1400 audit(1721122864.698:457): avc: denied { ioctl } for pid=6790 comm="syz.3.1045" path="socket:[18749]" dev="sockfs" ino=18749 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.152728][ T6672] hsr_slave_0: entered promiscuous mode [ 75.180758][ T6672] hsr_slave_1: entered promiscuous mode [ 75.198648][ T6798] loop3: detected capacity change from 0 to 128 [ 75.206189][ T6672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.225451][ T6672] Cannot create hsr debugfs directory [ 75.231864][ T6798] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 75.337882][ T6796] usb usb9: usbfs: process 6796 (syz.0.1046) did not claim interface 0 before use [ 75.423720][ T6796] usb usb9: selecting invalid altsetting 21783 [ 75.509139][ T29] audit: type=1400 audit(1721122865.098:458): avc: denied { read } for pid=6813 comm="syz.1.1050" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 75.509523][ T6814] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.536170][ T29] audit: type=1400 audit(1721122865.098:459): avc: denied { open } for pid=6813 comm="syz.1.1050" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 75.764952][ T6841] loop0: detected capacity change from 0 to 1024 [ 75.799643][ T6841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.824883][ T6672] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.850827][ T6672] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.875845][ T6672] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.891848][ T6672] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.941470][ T6672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.948324][ T5414] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.969347][ T6672] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.990547][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.997647][ T5045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.024072][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.031176][ T5045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.173727][ T6876] loop1: detected capacity change from 0 to 512 [ 76.180474][ T29] audit: type=1400 audit(1721122865.768:460): avc: denied { shutdown } for pid=6874 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.246544][ T6879] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1056'. [ 76.264357][ T6876] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1059: invalid indirect mapped block 256 (level 2) [ 76.323410][ T6876] EXT4-fs (loop1): 2 truncates cleaned up [ 76.349568][ T6865] loop2: detected capacity change from 0 to 128 [ 76.361463][ T6876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.441453][ T6672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.593602][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. [ 76.715715][ T5532] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 76.974407][ T4939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.025388][ T6927] loop2: detected capacity change from 0 to 512 [ 77.066383][ T6927] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.1067: casefold flag without casefold feature [ 77.085167][ T6927] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1067: couldn't read orphan inode 15 (err -117) [ 77.114323][ T6672] veth0_vlan: entered promiscuous mode [ 77.114750][ T6927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.122596][ T6672] veth1_vlan: entered promiscuous mode [ 77.150135][ T6672] veth0_macvtap: entered promiscuous mode [ 77.157218][ T6927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.167584][ T6672] veth1_macvtap: entered promiscuous mode [ 77.184001][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.195033][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.204886][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.215406][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.225233][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.235666][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.245497][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.255927][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.280917][ T6672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.297152][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.307716][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.317599][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.328159][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.338174][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.348616][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.358445][ T6672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.368890][ T6672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.381372][ T6672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.391032][ T6672] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.399791][ T6672] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.408620][ T6672] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.417411][ T6672] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.591034][ T29] audit: type=1326 audit(1721122867.188:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.1.1073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7cf856bd9 code=0x0 [ 77.618854][ T7004] loop2: detected capacity change from 0 to 2048 [ 77.639445][ T7004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.509802][ T29] audit: type=1400 audit(1721122868.108:462): avc: denied { create } for pid=7045 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.553457][ T7046] netlink: 'syz.1.1079': attribute type 21 has an invalid length. [ 78.575631][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.587009][ T29] audit: type=1400 audit(1721122868.148:463): avc: denied { connect } for pid=7045 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.608887][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 78.673922][ T29] audit: type=1400 audit(1721122868.258:464): avc: denied { ioctl } for pid=7045 comm="syz.1.1079" path="socket:[19142]" dev="sockfs" ino=19142 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.778967][ T7050] mmap: syz.0.1077 (7050) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.788863][ T7054] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.840513][ T29] audit: type=1400 audit(1721122868.438:465): avc: denied { listen } for pid=7040 comm="syz.0.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.877139][ T7064] syzkaller1: entered promiscuous mode [ 78.882695][ T7064] syzkaller1: entered allmulticast mode [ 78.889565][ T29] audit: type=1400 audit(1721122868.468:466): avc: denied { bind } for pid=7063 comm="syz.3.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.972343][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 79.050771][ T7096] loop3: detected capacity change from 0 to 1024 [ 79.079702][ T7096] EXT4-fs: Ignoring removed orlov option [ 79.085501][ T7096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.122444][ T7096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.159561][ T5896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.166368][ T7116] loop2: detected capacity change from 0 to 128 [ 79.188888][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 79.191089][ T7121] netlink: 'syz.0.1102': attribute type 21 has an invalid length. [ 79.210086][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 79.277080][ T7131] gre0: entered promiscuous mode [ 79.286619][ T7131] vlan2: entered promiscuous mode [ 79.293461][ T7131] gre0: left promiscuous mode [ 79.346315][ T7146] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.444562][ T7157] loop2: detected capacity change from 0 to 1024 [ 79.478750][ T7157] EXT4-fs: Ignoring removed orlov option [ 79.484463][ T7157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.531551][ T7157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.594580][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.672347][ T7189] loop0: detected capacity change from 0 to 1024 [ 79.679022][ T7189] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 79.728842][ T7189] loop0: detected capacity change from 0 to 8192 [ 79.768162][ T7189] loop0: p1 p2[DM] p4 [ 79.772297][ T7189] loop0: p1 size 196608 extends beyond EOD, truncated [ 79.779975][ T7189] loop0: p2 size 150994946 extends beyond EOD, truncated [ 79.787665][ T7189] loop0: p4 size 50331648 extends beyond EOD, truncated [ 79.796423][ T7189] SELinux: Context system_u:object_r:policy_config_t:s0 is not valid (left unmapped). [ 79.821471][ T7201] loop3: detected capacity change from 0 to 2048 [ 79.826862][ T6520] udevd[6520]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 79.829312][ T7195] gre0: entered promiscuous mode [ 79.840809][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 79.842554][ T7195] vlan2: entered promiscuous mode [ 79.854523][ T6518] udevd[6518]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 79.867163][ T7195] gre0: left promiscuous mode [ 79.878585][ T7201] loop3: p2 < > [ 79.884785][ T2784] loop3: p2 < > [ 79.895591][ T7203] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.953870][ T7216] netlink: 'syz.0.1129': attribute type 5 has an invalid length. [ 79.961750][ T7216] netlink: 'syz.0.1129': attribute type 11 has an invalid length. [ 79.986886][ T7219] loop3: detected capacity change from 0 to 512 [ 79.999553][ T7219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.012119][ T7219] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.757553][ T7207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.799853][ T5896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.906345][ T7243] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.919487][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 80.919505][ T29] audit: type=1400 audit(1721122870.518:480): avc: denied { map } for pid=7235 comm="syz.3.1133" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.951106][ T29] audit: type=1400 audit(1721122870.518:481): avc: denied { execute } for pid=7235 comm="syz.3.1133" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.002851][ T7251] bridge0: port 3(vlan2) entered blocking state [ 81.009431][ T7251] bridge0: port 3(vlan2) entered disabled state [ 81.015992][ T7251] vlan2: entered allmulticast mode [ 81.021544][ T7251] gretap0: entered allmulticast mode [ 81.027585][ T7251] vlan2: entered promiscuous mode [ 81.032823][ T7251] gretap0: entered promiscuous mode [ 81.038838][ T7251] bridge0: port 3(vlan2) entered blocking state [ 81.045677][ T7251] bridge0: port 3(vlan2) entered forwarding state [ 81.053998][ T7232] loop2: detected capacity change from 0 to 164 [ 81.073269][ T7232] isofs_fill_super: get root inode failed [ 81.115655][ T7257] loop1: detected capacity change from 0 to 128 [ 81.211393][ T7264] loop1: detected capacity change from 0 to 512 [ 81.253280][ T7264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.268730][ T7264] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.724278][ T29] audit: type=1326 audit(1721122871.318:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.3.1149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e8e4afbd9 code=0x0 [ 81.830354][ T29] audit: type=1400 audit(1721122871.428:483): avc: denied { execute } for pid=7277 comm="syz.3.1149" path="/dev/bsg/blkio.throttle.io_service_bytes_recursive" dev="devtmpfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 81.978457][ T7259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.002440][ T4939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.052290][ T7290] mmap: syz.1.1151 (7290): VmData 167489536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 82.065882][ T7292] loop0: detected capacity change from 0 to 128 [ 82.078827][ T7292] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 82.125478][ T29] audit: type=1400 audit(1721122871.718:484): avc: denied { sys_module } for pid=7283 comm="syz.2.1152" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.182207][ T29] audit: type=1400 audit(1721122871.768:485): avc: denied { connect } for pid=7293 comm="syz.1.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.202342][ T29] audit: type=1400 audit(1721122871.768:486): avc: denied { write } for pid=7293 comm="syz.1.1156" path="socket:[20529]" dev="sockfs" ino=20529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.280945][ T7301] bio_check_eod: 28 callbacks suppressed [ 82.280960][ T7301] syz.0.1155: attempt to access beyond end of device [ 82.280960][ T7301] loop0: rw=524288, sector=353, nr_sectors = 256 limit=128 [ 82.372321][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1161'. [ 82.483103][ T7304] loop2: detected capacity change from 0 to 164 [ 82.499944][ T7304] isofs_fill_super: get root inode failed [ 82.501983][ T7322] loop4: detected capacity change from 0 to 512 [ 82.542166][ T7322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.568797][ T7322] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.690622][ T7330] ALSA: seq fatal error: cannot create timer (-19) [ 82.825049][ T7335] loop1: detected capacity change from 0 to 512 [ 82.837097][ T7335] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.1167: corrupted in-inode xattr: invalid ea_ino [ 82.856223][ T7335] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1167: couldn't read orphan inode 15 (err -117) [ 82.870181][ T7335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.887772][ T29] audit: type=1400 audit(1721122872.478:487): avc: denied { link } for pid=7334 comm="syz.1.1167" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.888521][ T7335] EXT4-fs warning (device loop1): ext4_rename_delete:3690: inode #2: comm syz.1.1167: Deleting old file: nlink 4, error=-2 [ 82.930545][ T29] audit: type=1400 audit(1721122872.478:488): avc: denied { rename } for pid=7334 comm="syz.1.1167" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.987405][ T4939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.074297][ T5414] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 83.085227][ T5414] CPU: 0 PID: 5414 Comm: syz-executor Tainted: G W 6.10.0-syzkaller-01155-gd67978318827 #0 [ 83.096896][ T5414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.106939][ T5414] Call Trace: [ 83.110206][ T5414] [ 83.113157][ T5414] dump_stack_lvl+0xf2/0x150 [ 83.117846][ T5414] dump_stack+0x15/0x20 [ 83.121987][ T5414] dump_header+0x83/0x2d0 [ 83.126310][ T5414] oom_kill_process+0x33e/0x4c0 [ 83.131154][ T5414] out_of_memory+0x9af/0xbe0 [ 83.135740][ T5414] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 83.141814][ T5414] mem_cgroup_out_of_memory+0x13e/0x190 [ 83.147364][ T5414] try_charge_memcg+0x745/0xcd0 [ 83.152314][ T5414] ? _raw_spin_unlock+0x26/0x50 [ 83.157153][ T5414] ? radix_tree_lookup+0xf9/0x150 [ 83.162169][ T5414] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 83.168379][ T5414] __read_swap_cache_async+0x2b9/0x520 [ 83.173829][ T5414] swap_cluster_readahead+0x276/0x3f0 [ 83.179261][ T5414] swapin_readahead+0xe2/0x7a0 [ 83.184059][ T5414] ? __filemap_get_folio+0x420/0x5b0 [ 83.189369][ T5414] ? perf_trace_tlb_flush+0x181/0x1b0 [ 83.194738][ T5414] ? swap_cache_get_folio+0x6e/0x210 [ 83.200123][ T5414] do_swap_page+0x3bc/0x1840 [ 83.204780][ T5414] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 83.210272][ T5414] ? __rcu_read_lock+0x36/0x50 [ 83.215092][ T5414] handle_mm_fault+0x8b9/0x2ac0 [ 83.219935][ T5414] exc_page_fault+0x3b9/0x650 [ 83.224609][ T5414] asm_exc_page_fault+0x26/0x30 [ 83.229510][ T5414] RIP: 0033:0x7f56dddf5b85 [ 83.233945][ T5414] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d be d9 12 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 83.253685][ T5414] RSP: 002b:00007ffefcad7ce8 EFLAGS: 00010246 [ 83.259803][ T5414] RAX: 0000000000000000 RBX: 0000000000000116 RCX: 00007f56dddf5b83 [ 83.267836][ T5414] RDX: 00007ffefcad7d00 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.275793][ T5414] RBP: 00007ffefcad7d7c R08: 00000000017c9618 R09: 7fffffffffffffff [ 83.283766][ T5414] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 83.291774][ T5414] R13: 0000000000000bb8 R14: 000000000001442c R15: 0000000000014078 [ 83.300367][ T5414] [ 83.303695][ T5414] memory: usage 307200kB, limit 307200kB, failcnt 245 [ 83.310628][ T5414] memory+swap: usage 307592kB, limit 9007199254740988kB, failcnt 0 [ 83.318594][ T5414] kmem: usage 307028kB, limit 9007199254740988kB, failcnt 0 [ 83.324162][ T7317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.325860][ T5414] Memory cgroup stats for /syz0: [ 83.327148][ T5414] cache 176128 [ 83.343264][ T5414] rss 0 [ 83.346027][ T5414] shmem 0 [ 83.348796][ T7342] tipc: Enabling of bearer rejected, media not registered [ 83.349063][ T5414] mapped_file 167936 [ 83.361058][ T5414] dirty 176128 [ 83.364568][ T5414] writeback 0 [ 83.368000][ T5414] workingset_refault_anon 89 [ 83.373253][ T5414] workingset_refault_file 200 [ 83.377958][ T5414] swap 401408 [ 83.380269][ T7345] loop3: detected capacity change from 0 to 1024 [ 83.381245][ T5414] swapcached 0 [ 83.390952][ T5414] pgpgin 42667 [ 83.394397][ T5414] pgpgout 42624 [ 83.397937][ T5414] pgfault 59309 [ 83.401395][ T5414] pgmajfault 47 [ 83.404982][ T5414] inactive_anon 0 [ 83.408639][ T5414] active_anon 0 [ 83.412235][ T5414] inactive_file 176128 [ 83.416512][ T5414] active_file 0 [ 83.420040][ T5414] unevictable 0 [ 83.423574][ T5414] hierarchical_memory_limit 314572800 [ 83.425417][ T7345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.429009][ T5414] hierarchical_memsw_limit 9223372036854771712 [ 83.447229][ T5414] total_cache 176128 [ 83.451166][ T5414] total_rss 0 [ 83.454452][ T5414] total_shmem 0 [ 83.457920][ T5414] total_mapped_file 167936 [ 83.462315][ T5414] total_dirty 176128 [ 83.466230][ T5414] total_writeback 0 [ 83.470131][ T5414] total_workingset_refault_anon 89 [ 83.475229][ T5414] total_workingset_refault_file 200 [ 83.480445][ T5414] total_swap 401408 [ 83.484237][ T5414] total_swapcached 0 [ 83.488281][ T5414] total_pgpgin 42667 [ 83.492189][ T5414] total_pgpgout 42624 [ 83.496199][ T5414] total_pgfault 59309 [ 83.500502][ T5414] total_pgmajfault 47 [ 83.504473][ T5414] total_inactive_anon 0 [ 83.508890][ T5414] total_active_anon 0 [ 83.512933][ T5414] total_inactive_file 176128 [ 83.517530][ T5414] total_active_file 0 [ 83.521555][ T5414] total_unevictable 0 [ 83.525521][ T5414] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1155,pid=7291,uid=0 [ 83.540380][ T5414] Memory cgroup out of memory: Killed process 7291 (syz.0.1155) total-vm:82800kB, anon-rss:452kB, file-rss:10196kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 83.560859][ T6672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.578020][ T5896] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /79/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 83.645517][ T5896] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 83.671746][ T29] audit: type=1326 audit(1721122873.268:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.2.1175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9731094bd9 code=0x0 [ 83.697366][ T5896] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /79/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 83.734298][ T5896] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 83.783189][ T5896] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /79/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 83.813129][ T7360] loop4: detected capacity change from 0 to 8192 [ 83.820973][ T5896] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 83.844130][ T7360] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.866417][ T5896] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /79/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 83.901438][ T5896] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 83.948128][ T5896] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /79/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 83.971455][ T5896] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 84.008055][ T7364] loop1: detected capacity change from 0 to 8192 [ 84.024160][ T7370] ALSA: seq fatal error: cannot create timer (-19) [ 84.067022][ T3203] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 84.170890][ T5896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.183925][ T7388] loop0: detected capacity change from 0 to 512 [ 84.199709][ T5532] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.219762][ T7388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.232716][ T7388] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.291419][ T5532] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.325249][ T7406] loop4: detected capacity change from 0 to 512 [ 84.334221][ T7406] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.343688][ T5532] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.349866][ T7406] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.1193: casefold flag without casefold feature [ 84.366861][ T7406] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1193: couldn't read orphan inode 15 (err -117) [ 84.380596][ T7406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.409957][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 84.420475][ T6672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.434471][ T5532] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.549659][ T5532] bridge_slave_1: left allmulticast mode [ 84.555338][ T5532] bridge_slave_1: left promiscuous mode [ 84.561076][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.581706][ T7424] loop1: detected capacity change from 0 to 8192 [ 84.589561][ T5532] bridge_slave_0: left allmulticast mode [ 84.593908][ T7437] loop4: detected capacity change from 0 to 128 [ 84.595281][ T5532] bridge_slave_0: left promiscuous mode [ 84.607241][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.713148][ T7445] loop4: detected capacity change from 0 to 512 [ 84.722365][ T7445] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.732195][ T5532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.744037][ T5532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.754819][ T7445] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.1205: casefold flag without casefold feature [ 84.760928][ T5532] bond0 (unregistering): Released all slaves [ 84.777693][ T7399] chnl_net:caif_netlink_parms(): no params data found [ 84.779204][ T7445] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1205: couldn't read orphan inode 15 (err -117) [ 84.802759][ T7445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.843691][ T6672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.870341][ T5532] hsr_slave_0: left promiscuous mode [ 84.882235][ T5532] hsr_slave_1: left promiscuous mode [ 84.891089][ T5532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.898565][ T5532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.906602][ T5532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.914116][ T5532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.925479][ T5532] veth1_macvtap: left promiscuous mode [ 84.931059][ T5532] veth0_macvtap: left promiscuous mode [ 84.936604][ T5532] veth1_vlan: left promiscuous mode [ 84.942060][ T5532] veth0_vlan: left promiscuous mode [ 84.947927][ T7377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.970517][ T5414] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.015356][ T7472] loop2: detected capacity change from 0 to 128 [ 85.065348][ T5532] team0 (unregistering): Port device team_slave_1 removed [ 85.075933][ T5532] team0 (unregistering): Port device team_slave_0 removed [ 85.119124][ T7399] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.126223][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.134438][ T7399] bridge_slave_0: entered allmulticast mode [ 85.143196][ T7399] bridge_slave_0: entered promiscuous mode [ 85.150092][ T7399] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.157284][ T7399] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.166332][ T7399] bridge_slave_1: entered allmulticast mode [ 85.172899][ T7399] bridge_slave_1: entered promiscuous mode [ 85.203884][ T7487] loop0: detected capacity change from 0 to 512 [ 85.236169][ T7399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.248452][ T7487] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.264171][ T7496] loop1: detected capacity change from 0 to 512 [ 85.269036][ T7399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.293944][ T7496] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.306711][ T7487] EXT4-fs (loop0): 1 truncate cleaned up [ 85.311100][ T7496] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 85.318433][ T7487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.333780][ T7496] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 85.350465][ T7399] team0: Port device team_slave_0 added [ 85.363825][ T7399] team0: Port device team_slave_1 added [ 85.369683][ T7496] System zones: 0-2, 18-18, 34-34 [ 85.370879][ T5414] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.377870][ T7496] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz.1.1225: bad orphan inode 15 [ 85.396194][ T7496] ext4_test_bit(bit=14, block=18) = 1 [ 85.401613][ T7496] is_bad_inode(inode)=0 [ 85.405842][ T7496] NEXT_ORPHAN(inode)=2264924160 [ 85.410773][ T7496] max_ino=32 [ 85.413968][ T7496] i_nlink=0 [ 85.420779][ T7496] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 85.441668][ T7399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.448673][ T7399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.474805][ T7399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.487309][ T7496] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1225: bg 0: block 80: padding at end of block bitmap is not set [ 85.500490][ T7514] loop0: detected capacity change from 0 to 512 [ 85.509481][ T7496] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 85.510748][ T7399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.525294][ T7399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.551301][ T7399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.551816][ T7496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.596081][ T7399] hsr_slave_0: entered promiscuous mode [ 85.605069][ T7399] hsr_slave_1: entered promiscuous mode [ 85.613001][ T7399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.613322][ T7514] EXT4-fs (loop0): 1 truncate cleaned up [ 85.626376][ T7399] Cannot create hsr debugfs directory [ 85.628851][ T7514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.714695][ T7528] loop2: detected capacity change from 0 to 2048 [ 85.740259][ T7528] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 85.764639][ T4939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.863393][ T7549] loop4: detected capacity change from 0 to 512 [ 85.871304][ T7551] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1238'. [ 85.881653][ T7551] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1238'. [ 85.892401][ T7549] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.917209][ T7549] EXT4-fs (loop4): 1 truncate cleaned up [ 85.937585][ T7549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.990369][ T7562] loop2: detected capacity change from 0 to 512 [ 86.005895][ T5414] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.012471][ T7562] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.017935][ T7564] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1243'. [ 86.034204][ T6672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.043554][ T7562] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 86.063611][ T7562] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 86.084525][ T7562] System zones: 0-2, 18-18, 34-34 [ 86.091890][ T7399] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.097048][ T7562] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.1242: bad orphan inode 15 [ 86.112072][ T7562] ext4_test_bit(bit=14, block=18) = 1 [ 86.117466][ T7562] is_bad_inode(inode)=0 [ 86.121701][ T7562] NEXT_ORPHAN(inode)=2264924160 [ 86.126595][ T7562] max_ino=32 [ 86.130069][ T7562] i_nlink=0 [ 86.133414][ T7562] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 86.134665][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 86.170156][ T7399] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.174870][ T7573] loop4: detected capacity change from 0 to 2364 [ 86.178235][ T7562] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1242: bg 0: block 80: padding at end of block bitmap is not set [ 86.194824][ T7583] loop1: detected capacity change from 0 to 512 [ 86.208037][ T7399] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.214900][ T7562] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 86.219212][ T7583] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.237792][ T7399] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.244294][ T7583] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.1247: casefold flag without casefold feature [ 86.257590][ T7583] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1247: couldn't read orphan inode 15 (err -117) [ 86.262253][ T7562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.296162][ T7583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.336889][ T7562] blktrace: Concurrent blktraces are not allowed on loop0 [ 86.394885][ T7399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.413930][ T7399] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.444845][ T7606] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1254'. [ 86.465838][ T7603] loop2: detected capacity change from 0 to 512 [ 86.479175][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.486260][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.504888][ T7603] EXT4-fs (loop2): 1 truncate cleaned up [ 86.531564][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.539491][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.551571][ T7628] loop0: detected capacity change from 0 to 128 [ 86.596779][ T7399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.608065][ T7399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.623682][ T7628] syz.0.1259: attempt to access beyond end of device [ 86.623682][ T7628] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 86.659421][ T7628] syz.0.1259: attempt to access beyond end of device [ 86.659421][ T7628] loop0: rw=0, sector=177, nr_sectors = 1 limit=128 [ 86.664581][ T7622] tun0: tun_chr_ioctl cmd 1074025692 [ 86.677356][ T7625] syz.0.1259: attempt to access beyond end of device [ 86.677356][ T7625] loop0: rw=0, sector=177, nr_sectors = 1 limit=128 [ 86.691696][ T7625] buffer_io_error: 2 callbacks suppressed [ 86.691705][ T7625] Buffer I/O error on dev loop0, logical block 177, async page read [ 86.714520][ T7625] syz.0.1259: attempt to access beyond end of device [ 86.714520][ T7625] loop0: rw=0, sector=178, nr_sectors = 1 limit=128 [ 86.727885][ T7625] Buffer I/O error on dev loop0, logical block 178, async page read [ 86.736794][ T7625] syz.0.1259: attempt to access beyond end of device [ 86.736794][ T7625] loop0: rw=0, sector=179, nr_sectors = 1 limit=128 [ 86.750130][ T7625] Buffer I/O error on dev loop0, logical block 179, async page read [ 86.760749][ T7625] syz.0.1259: attempt to access beyond end of device [ 86.760749][ T7625] loop0: rw=0, sector=180, nr_sectors = 1 limit=128 [ 86.773013][ T7633] loop1: detected capacity change from 0 to 8192 [ 86.773900][ T7625] Buffer I/O error on dev loop0, logical block 180, async page read [ 86.789245][ T7625] syz.0.1259: attempt to access beyond end of device [ 86.789245][ T7625] loop0: rw=0, sector=181, nr_sectors = 1 limit=128 [ 86.789267][ T7625] Buffer I/O error on dev loop0, logical block 181, async page read [ 86.789281][ T7625] syz.0.1259: attempt to access beyond end of device [ 86.789281][ T7625] loop0: rw=0, sector=182, nr_sectors = 1 limit=128 [ 86.789297][ T7625] Buffer I/O error on dev loop0, logical block 182, async page read [ 86.789309][ T7625] syz.0.1259: attempt to access beyond end of device [ 86.789309][ T7625] loop0: rw=0, sector=183, nr_sectors = 1 limit=128 [ 86.789387][ T7625] Buffer I/O error on dev loop0, logical block 183, async page read [ 86.789402][ T7625] Buffer I/O error on dev loop0, logical block 184, async page read [ 86.789447][ T7625] Buffer I/O error on dev loop0, logical block 177, async page read [ 86.789463][ T7625] Buffer I/O error on dev loop0, logical block 178, async page read [ 86.837977][ T7399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.953188][ T7399] veth0_vlan: entered promiscuous mode [ 86.955845][ T7399] veth1_vlan: entered promiscuous mode [ 86.975460][ T7648] loop4: detected capacity change from 0 to 2364 [ 86.977425][ T7399] veth0_macvtap: entered promiscuous mode [ 86.984571][ T7399] veth1_macvtap: entered promiscuous mode [ 86.989470][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.989536][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.989545][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.989554][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.989562][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.989587][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.989608][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.989694][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.990642][ T7399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.993426][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.993442][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.993505][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.993515][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.993529][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.993540][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.993551][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.993561][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.994152][ T7399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.006089][ T7399] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.006125][ T7399] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.006154][ T7399] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.006230][ T7399] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.071361][ T7662] loop4: detected capacity change from 0 to 512 [ 87.202117][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'. [ 87.397993][ T7662] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 87.426974][ T7662] EXT4-fs (loop4): invalid journal inode [ 87.514190][ T7674] loop1: detected capacity change from 0 to 128 [ 87.652908][ T7673] loop3: detected capacity change from 0 to 8192 [ 87.661403][ T7673] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.681083][ T7676] tun0: tun_chr_ioctl cmd 1074025692 [ 87.681132][ T7674] bio_check_eod: 217 callbacks suppressed [ 87.681143][ T7674] syz.1.1270: attempt to access beyond end of device [ 87.681143][ T7674] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 87.727628][ T7674] syz.1.1270: attempt to access beyond end of device [ 87.727628][ T7674] loop1: rw=0, sector=177, nr_sectors = 1 limit=128 [ 87.730312][ T7678] vhci_hcd: invalid port number 224 [ 87.741690][ T7672] syz.1.1270: attempt to access beyond end of device [ 87.741690][ T7672] loop1: rw=0, sector=177, nr_sectors = 1 limit=128 [ 87.766098][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 87.766112][ T29] audit: type=1400 audit(1721122877.358:496): avc: denied { accept } for pid=7679 comm="syz.3.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.773155][ T7672] syz.1.1270: attempt to access beyond end of device [ 87.773155][ T7672] loop1: rw=0, sector=178, nr_sectors = 1 limit=128 [ 87.797605][ T29] audit: type=1400 audit(1721122877.398:497): avc: denied { read } for pid=7679 comm="syz.3.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.822081][ T7672] syz.1.1270: attempt to access beyond end of device [ 87.822081][ T7672] loop1: rw=0, sector=179, nr_sectors = 1 limit=128 [ 87.858026][ T7672] syz.1.1270: attempt to access beyond end of device [ 87.858026][ T7672] loop1: rw=0, sector=180, nr_sectors = 1 limit=128 [ 87.876874][ T7688] netlink: 'syz.4.1279': attribute type 33 has an invalid length. [ 87.885495][ T7672] syz.1.1270: attempt to access beyond end of device [ 87.885495][ T7672] loop1: rw=0, sector=181, nr_sectors = 1 limit=128 [ 87.900656][ T7672] syz.1.1270: attempt to access beyond end of device [ 87.900656][ T7672] loop1: rw=0, sector=182, nr_sectors = 1 limit=128 [ 87.901081][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'. [ 87.937948][ T7672] syz.1.1270: attempt to access beyond end of device [ 87.937948][ T7672] loop1: rw=0, sector=183, nr_sectors = 1 limit=128 [ 87.980127][ T7672] syz.1.1270: attempt to access beyond end of device [ 87.980127][ T7672] loop1: rw=0, sector=184, nr_sectors = 1 limit=128 [ 88.013950][ T29] audit: type=1400 audit(1721122877.608:498): avc: denied { lock } for pid=7705 comm="syz.4.1287" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.014609][ T7707] tun0: tun_chr_ioctl cmd 1074025692 [ 88.051344][ T7704] loop0: detected capacity change from 0 to 2364 [ 88.072444][ T29] audit: type=1326 audit(1721122877.668:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7709 comm="syz.2.1288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9731094bd9 code=0x0 [ 88.124533][ T7712] cgroup2: Unknown parameter 'cpuset' [ 88.183152][ T7725] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1295'. [ 88.192406][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'. [ 88.234544][ T7732] loop1: detected capacity change from 0 to 512 [ 88.263432][ T7732] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.277631][ T7732] EXT4-fs (loop1): 1 truncate cleaned up [ 88.369594][ T7754] vhci_hcd: invalid port number 224 [ 88.374619][ T7760] netlink: 'syz.4.1306': attribute type 33 has an invalid length. [ 88.415976][ T7764] loop4: detected capacity change from 0 to 1024 [ 88.424606][ T7764] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.437491][ T7764] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 88.446217][ T7764] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.453336][ T7764] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.1308: Freeing blocks not in datazone - block = 0, count = 4096 [ 88.469467][ T7764] EXT4-fs (loop4): 1 orphan inode deleted [ 88.491534][ T29] audit: type=1400 audit(1721122878.088:500): avc: denied { create } for pid=7772 comm="syz.4.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 88.526571][ T29] audit: type=1400 audit(1721122878.108:501): avc: denied { bind } for pid=7772 comm="syz.4.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 88.556990][ T7779] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 88.566260][ T7779] team0: Device ipvlan2 failed to register rx_handler [ 88.681805][ T24] IPVS: starting estimator thread 0... [ 88.767824][ T7796] IPVS: using max 2784 ests per chain, 139200 per kthread [ 88.806792][ T29] audit: type=1326 audit(1721122878.398:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.3.1324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a68f8bbd9 code=0x0 [ 88.920881][ T7812] loop4: detected capacity change from 0 to 512 [ 88.928123][ T7812] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.939052][ T7812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 88.947034][ T7812] System zones: 1-12 [ 88.951548][ T7812] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 88.964780][ T7812] EXT4-fs (loop4): 1 truncate cleaned up [ 89.039695][ T5045] IPVS: starting estimator thread 0... [ 89.102351][ T7837] loop4: detected capacity change from 0 to 1024 [ 89.111238][ T7837] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.122853][ T7837] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 89.131378][ T7837] EXT4-fs (loop4): orphan cleanup on readonly fs [ 89.137910][ T7837] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.1336: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.138576][ T7826] IPVS: using max 2880 ests per chain, 144000 per kthread [ 89.152577][ T7837] EXT4-fs (loop4): 1 orphan inode deleted [ 89.186896][ T7844] loop0: detected capacity change from 0 to 512 [ 89.194395][ T29] audit: type=1400 audit(1721122878.788:503): avc: denied { read append } for pid=7845 comm="syz.4.1340" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 89.196459][ T7844] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.234137][ T29] audit: type=1400 audit(1721122878.818:504): avc: denied { open } for pid=7845 comm="syz.4.1340" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 89.260501][ T7844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 89.280139][ T29] audit: type=1400 audit(1721122878.868:505): avc: denied { ioctl } for pid=7845 comm="syz.4.1340" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 89.284865][ T7844] System zones: 1-12 [ 89.314508][ T7844] EXT4-fs (loop0): 1 truncate cleaned up [ 89.353589][ T7860] loop2: detected capacity change from 0 to 512 [ 89.362531][ T7862] loop4: detected capacity change from 0 to 256 [ 89.375812][ T7862] FAT-fs (loop4): Directory bread(block 64) failed [ 89.382498][ T7862] FAT-fs (loop4): Directory bread(block 65) failed [ 89.383915][ T7860] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.391203][ T7862] FAT-fs (loop4): Directory bread(block 66) failed [ 89.406077][ T7862] FAT-fs (loop4): Directory bread(block 67) failed [ 89.412818][ T7862] FAT-fs (loop4): Directory bread(block 68) failed [ 89.421231][ T7862] FAT-fs (loop4): Directory bread(block 69) failed [ 89.428597][ T7862] FAT-fs (loop4): Directory bread(block 70) failed [ 89.443531][ T7862] FAT-fs (loop4): Directory bread(block 71) failed [ 89.459013][ T7862] FAT-fs (loop4): Directory bread(block 72) failed [ 89.465623][ T7862] FAT-fs (loop4): Directory bread(block 73) failed [ 89.484195][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'. [ 89.512058][ T7878] loop4: detected capacity change from 0 to 128 [ 89.521801][ T7878] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 89.537478][ T2749] IPVS: starting estimator thread 0... [ 89.593084][ T7885] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 89.611846][ T7885] team0: Device ipvlan2 failed to register rx_handler [ 89.628459][ T7881] IPVS: using max 3360 ests per chain, 168000 per kthread [ 89.666126][ T7902] loop3: detected capacity change from 0 to 128 [ 89.674070][ T7902] EXT4-fs: Ignoring removed nobh option [ 89.680541][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1366'. [ 89.692166][ T7902] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.726447][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1367'. [ 89.735453][ T7909] netlink: 'syz.4.1367': attribute type 18 has an invalid length. [ 89.760499][ T7909] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.769951][ T7909] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.779591][ T7909] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.788441][ T7909] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.797882][ T7909] vxlan0: entered promiscuous mode [ 89.801664][ T7920] syz.3.1373 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 89.912617][ T7934] loop2: detected capacity change from 0 to 512 [ 89.939965][ T7934] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.667394][ T7975] loop0: detected capacity change from 0 to 1024 [ 90.675272][ T7975] EXT4-fs: Ignoring removed oldalloc option [ 90.690014][ T7975] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 90.753156][ T7984] loop3: detected capacity change from 0 to 512 [ 90.800613][ T7984] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.804383][ T7992] loop4: detected capacity change from 0 to 512 [ 90.822023][ T7992] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.1395: corrupted in-inode xattr: bad e_name length [ 90.837393][ T7992] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1395: couldn't read orphan inode 15 (err -117) [ 90.853232][ T7984] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 90.866215][ T7984] System zones: 1-12 [ 90.869619][ T7984] EXT4-fs (loop3): 1 truncate cleaned up [ 90.874024][ T7999] loop2: detected capacity change from 0 to 512 [ 90.901538][ T7999] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.951386][ T8007] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 91.022398][ T8021] debugfs: Invalid gid '0x00000000ffffffff' [ 91.090372][ T8031] loop4: detected capacity change from 0 to 512 [ 91.110354][ T8031] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.197128][ T8044] loop4: detected capacity change from 0 to 512 [ 91.209092][ T8044] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.1413: corrupted in-inode xattr: bad e_name length [ 91.223887][ T8044] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1413: couldn't read orphan inode 15 (err -117) [ 91.331470][ T8052] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 91.355337][ T8054] debugfs: Invalid gid '0x00000000ffffffff' [ 91.363074][ T8056] loop4: detected capacity change from 0 to 1024 [ 91.485757][ T8062] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 91.493683][ T8062] team0: Device ipvlan2 failed to register rx_handler [ 91.618444][ T8081] loop4: detected capacity change from 0 to 512 [ 91.626984][ T8081] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.1428: corrupted in-inode xattr: bad e_name length [ 91.640957][ T8081] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1428: couldn't read orphan inode 15 (err -117) [ 91.761245][ T8087] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 91.783552][ T8089] loop1: detected capacity change from 0 to 128 [ 91.869180][ T8102] loop0: detected capacity change from 0 to 128 [ 91.913537][ T8107] loop1: detected capacity change from 0 to 256 [ 91.918883][ T8108] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1440'. [ 91.923481][ T8107] vfat: Bad value for 'fmask' [ 92.007869][ C0] syz_tun: tun_net_xmit 58 [ 92.144592][ T8135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1452'. [ 92.210067][ T8145] loop1: detected capacity change from 0 to 512 [ 92.220181][ T8145] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.339812][ T8156] loop1: detected capacity change from 0 to 2048 [ 92.346762][ T8156] EXT4-fs (loop1): cluster size (2048) smaller than block size (4096) [ 92.362325][ T8156] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [F.]L3 index 0 [ 92.418571][ T9] syz_tun: tun_net_xmit 90 [ 92.577861][ C0] syz_tun: tun_net_xmit 58 [ 92.689046][ T8168] debugfs: Invalid gid '0x00000000ffffffff' [ 92.750838][ T8180] loop3: detected capacity change from 0 to 512 [ 92.770610][ T8180] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.800520][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 92.800533][ T29] audit: type=1400 audit(1721122882.398:520): avc: denied { setattr } for pid=8185 comm="syz.3.1473" name="SCTPv6" dev="sockfs" ino=22991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.898465][ T3161] syz_tun: tun_net_xmit 90 [ 93.031296][ T8213] loop2: detected capacity change from 0 to 128 [ 93.070417][ T29] audit: type=1400 audit(1721122882.658:521): avc: denied { nlmsg_read } for pid=8220 comm="syz.0.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.124697][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.178239][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 93.198354][ T8226] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1485'. [ 93.263516][ T8228] loop2: detected capacity change from 0 to 128 [ 94.351744][ T8263] loop3: detected capacity change from 0 to 764 [ 94.359196][ T8263] rock: directory entry would overflow storage [ 94.365714][ T8263] rock: sig=0x4654, size=5, remaining=4 [ 94.415986][ T8260] loop0: detected capacity change from 0 to 2048 [ 94.424985][ T8260] EXT4-fs (loop0): cluster size (2048) smaller than block size (4096) [ 94.868629][ T29] audit: type=1400 audit(1721122884.468:522): avc: denied { read } for pid=8284 comm="syz.3.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.108920][ T8295] loop1: detected capacity change from 0 to 128 [ 95.131317][ T8295] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 95.319709][ T8302] loop1: detected capacity change from 0 to 128 [ 95.350508][ T29] audit: type=1400 audit(1721122884.948:523): avc: denied { audit_write } for pid=8306 comm="syz.3.1522" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.371640][ T29] audit: type=1107 audit(1721122884.948:524): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 95.393109][ T8302] EXT4-fs mount: 40 callbacks suppressed [ 95.393121][ T8302] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.452412][ T8302] ext4 filesystem being mounted at /233/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.563635][ T29] audit: type=1400 audit(1721122885.158:525): avc: denied { name_bind } for pid=8321 comm="syz.0.1530" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 95.626131][ T8328] loop4: detected capacity change from 0 to 128 [ 95.659295][ T8328] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 95.687061][ T8333] pim6reg1: entered promiscuous mode [ 95.693122][ T8333] pim6reg1: entered allmulticast mode [ 95.788159][ T8342] pim6reg1: entered promiscuous mode [ 95.886893][ T8352] loop4: detected capacity change from 0 to 128 [ 95.949022][ T29] audit: type=1400 audit(1721122885.538:526): avc: denied { ioctl } for pid=8350 comm="syz.2.1543" path="socket:[23643]" dev="sockfs" ino=23643 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.990889][ T8361] loop0: detected capacity change from 0 to 764 [ 95.999281][ T8361] rock: directory entry would overflow storage [ 96.005466][ T8361] rock: sig=0x4654, size=5, remaining=4 [ 96.042985][ T29] audit: type=1400 audit(1721122885.638:527): avc: denied { connect } for pid=8365 comm="syz.0.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 96.062562][ T29] audit: type=1400 audit(1721122885.638:528): avc: denied { name_connect } for pid=8365 comm="syz.0.1549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 96.094215][ T29] audit: type=1400 audit(1721122885.688:529): avc: denied { write } for pid=8365 comm="syz.0.1549" path="socket:[23670]" dev="sockfs" ino=23670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 96.160165][ T4939] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.530719][ T8383] program syz.1.1555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.564717][ T8385] ipt_rpfilter: unknown options [ 96.685945][ T8391] loop1: detected capacity change from 0 to 256 [ 96.714118][ T8395] loop4: detected capacity change from 0 to 1024 [ 96.966555][ T8412] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.012178][ T8405] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.021639][ T8414] program syz.0.1568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.191894][ T8423] loop0: detected capacity change from 0 to 256 [ 97.398520][ T8447] loop3: detected capacity change from 0 to 1024 [ 97.417789][ T8447] EXT4-fs: Ignoring removed oldalloc option [ 97.436959][ T8447] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 97.478826][ T8447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.549488][ T7399] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.859689][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 97.912739][ T8461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1585'. [ 98.019306][ T8476] pim6reg1: entered promiscuous mode [ 98.081694][ T8486] loop4: detected capacity change from 0 to 1024 [ 98.133093][ T8494] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1602'. [ 98.201994][ T8507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1608'. [ 98.219030][ T8502] loop0: detected capacity change from 0 to 128 [ 98.331775][ T8522] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1615'. [ 98.458884][ T8529] syz_tun: tun_net_xmit 86 [ 98.859383][ T8539] loop2: detected capacity change from 0 to 1024 [ 98.872599][ T8539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.905486][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.939341][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 98.939353][ T29] audit: type=1400 audit(1721122888.355:531): avc: denied { bind } for pid=8544 comm="syz.2.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 99.093950][ T8549] loop2: detected capacity change from 0 to 128 [ 99.569186][ C0] syz_tun: tun_net_xmit 86 [ 99.617928][ T8574] ipt_rpfilter: unknown options [ 99.683081][ T8580] loop0: detected capacity change from 0 to 1024 [ 99.694165][ T8578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1635'. [ 99.745128][ T8580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.807080][ T5414] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.917034][ T8592] loop2: detected capacity change from 0 to 128 [ 99.954037][ T8592] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.986888][ T8592] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.277839][ T6518] printk: udevd: 496 output lines suppressed due to ratelimiting [ 100.290685][ T8607] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1647'. [ 100.358359][ T8614] loop3: detected capacity change from 0 to 1024 [ 100.376865][ T8614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.404884][ T7399] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.415016][ T8627] loop0: detected capacity change from 0 to 128 [ 100.447841][ T8631] Process accounting resumed [ 100.466131][ T8636] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1660'. [ 100.527644][ T8649] loop0: detected capacity change from 0 to 1024 [ 100.538019][ T8649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.567118][ T5414] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.594987][ T8660] loop3: detected capacity change from 0 to 128 [ 100.659156][ T8658] Process accounting resumed [ 100.695385][ C0] syz_tun: tun_net_xmit 86 [ 100.823378][ T5848] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.880693][ T8681] loop0: detected capacity change from 0 to 512 [ 100.922596][ T8681] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.952045][ T8681] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 100.977853][ T8681] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1680: inode #15: comm syz.0.1680: iget: illegal inode # [ 100.993965][ T8681] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.1680: couldn't read orphan inode 15 (err -117) [ 101.006694][ T8681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.032492][ T8681] EXT4-fs error (device loop0): ext4_lookup:1810: comm syz.0.1680: inode #15: comm syz.0.1680: iget: illegal inode # [ 101.076735][ T5414] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.092584][ T29] audit: type=1400 audit(1721122890.343:532): avc: denied { bind } for pid=8697 comm="syz.3.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.142562][ T29] audit: type=1400 audit(1721122890.343:533): avc: denied { read } for pid=8697 comm="syz.3.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.167090][ T8703] loop0: detected capacity change from 0 to 128 [ 101.302110][ T9] syz_tun: tun_net_xmit 110 [ 101.306823][ T8710] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 101.325027][ T8711] 9pnet: Unknown protocol version 9p20\++} [ 101.336294][ T8714] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.352446][ T8711] loop2: detected capacity change from 0 to 256 [ 101.370318][ T8711] FAT-fs (loop2): Directory bread(block 64) failed [ 101.377024][ T8711] FAT-fs (loop2): Directory bread(block 65) failed [ 101.384573][ T8711] FAT-fs (loop2): Directory bread(block 66) failed [ 101.391691][ T8711] FAT-fs (loop2): Directory bread(block 67) failed [ 101.404213][ T8711] FAT-fs (loop2): Directory bread(block 68) failed [ 101.430133][ T8711] FAT-fs (loop2): Directory bread(block 69) failed [ 101.436984][ T8711] FAT-fs (loop2): Directory bread(block 70) failed [ 101.461137][ T8711] FAT-fs (loop2): Directory bread(block 71) failed [ 101.470116][ T8711] FAT-fs (loop2): Directory bread(block 72) failed [ 101.477369][ T8711] FAT-fs (loop2): Directory bread(block 73) failed [ 101.540490][ T8722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8722 comm=syz.1.1693 [ 101.754553][ T8732] loop2: detected capacity change from 0 to 128 [ 101.806623][ T8738] loop1: detected capacity change from 0 to 512 [ 101.818457][ T8730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1699'. [ 101.832239][ T8738] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.845989][ T8738] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.1703: iget: bad extended attribute block 19 [ 101.858875][ T2749] syz_tun: tun_net_xmit 110 [ 101.871607][ T8738] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1703: couldn't read orphan inode 15 (err -117) [ 101.887796][ T8738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.939849][ T8738] EXT4-fs warning (device loop1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 101.972428][ T4939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.188854][ T8757] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 102.207113][ T35] syz_tun: tun_net_xmit 110 [ 102.229621][ T8757] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.331764][ T35] syz_tun: tun_net_xmit 110 [ 102.349689][ T8766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8766 comm=syz.1.1711 [ 102.411603][ T8774] loop4: detected capacity change from 0 to 512 [ 102.418737][ T8774] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.430483][ T8774] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.1717: iget: bad extended attribute block 19 [ 102.443367][ T8774] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1717: couldn't read orphan inode 15 (err -117) [ 102.456924][ T8774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.473477][ T8774] EXT4-fs warning (device loop4): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 102.480387][ T8778] loop1: detected capacity change from 0 to 512 [ 102.494669][ T6672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.494834][ T8778] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.513459][ T8778] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 102.526037][ T8778] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1718: inode #15: comm syz.1.1718: iget: illegal inode # [ 102.539913][ T8778] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1718: couldn't read orphan inode 15 (err -117) [ 102.553163][ T8778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.576076][ T8778] EXT4-fs error (device loop1): ext4_lookup:1810: comm syz.1.1718: inode #15: comm syz.1.1718: iget: illegal inode # [ 102.611227][ T4939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.634249][ T8785] loop3: detected capacity change from 0 to 512 [ 102.644739][ T8785] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.658711][ T8785] EXT4-fs (loop3): 1 truncate cleaned up [ 102.670609][ T8785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.686030][ T8798] 9pnet_fd: Insufficient options for proto=fd [ 102.893641][ T7399] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.908783][ T8823] loop1: detected capacity change from 0 to 512 [ 102.923051][ T8823] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.945705][ T8823] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.1729: iget: bad extended attribute block 19 [ 102.960293][ T8823] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1729: couldn't read orphan inode 15 (err -117) [ 102.973155][ T8823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.998657][ T8823] EXT4-fs warning (device loop1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 103.031937][ T8793] loop4: detected capacity change from 0 to 65536 [ 103.113272][ T4939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.159200][ T8793] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.159888][ T9] kernel write not supported for file /ppp (pid: 9 comm: kworker/0:1) [ 103.166836][ T8793] vhci_hcd: invalid port number 23 [ 103.197593][ T8832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1732'. [ 103.206997][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1725'. [ 103.246812][ T8849] netlink: 560 bytes leftover after parsing attributes in process `syz.4.1740'. [ 103.260416][ T8849] loop4: detected capacity change from 0 to 512 [ 103.268105][ T8849] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 103.311412][ T8849] EXT4-fs (loop4): orphan cleanup on readonly fs [ 103.330246][ T8849] EXT4-fs warning (device loop4): ext4_enable_quotas:7062: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 103.359526][ T8854] loop1: detected capacity change from 0 to 512 [ 103.370918][ T8849] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 103.377589][ T8854] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.389526][ T8849] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1740: bg 0: block 40: padding at end of block bitmap is not set [ 103.405862][ T8854] EXT4-fs (loop1): 1 truncate cleaned up [ 103.406075][ T8849] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 103.420839][ T8849] EXT4-fs (loop4): 1 truncate cleaned up [ 103.425442][ T8854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.427802][ T8849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.478092][ T6672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.575985][ T8884] loop3: detected capacity change from 0 to 2048 [ 103.585664][ T8884] ext3: Unknown parameter 'pcr' [ 103.598700][ T8884] loop3: detected capacity change from 0 to 512 [ 103.605206][ T8884] EXT4-fs: dax option not supported [ 103.650076][ T8884] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.676643][ T4939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.705777][ T8897] loop3: detected capacity change from 0 to 128 [ 103.729949][ T7399] VFS: Lookup of '. ' in vfat loop3 would have caused loop [ 103.737546][ T7399] VFS: Lookup of '. ' in vfat loop3 would have caused loop [ 103.776371][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1752'. [ 103.785403][ T8901] netlink: 'syz.1.1752': attribute type 30 has an invalid length. [ 103.915400][ T8886] loop0: detected capacity change from 0 to 65536 [ 104.020455][ T8886] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.027935][ T8886] vhci_hcd: invalid port number 23 [ 104.040500][ T5532] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.055999][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 104.098125][ T5532] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.151572][ T5532] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.198081][ T5532] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.344587][ T8908] chnl_net:caif_netlink_parms(): no params data found [ 104.391991][ T8908] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.399504][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.418440][ T8908] bridge_slave_0: entered allmulticast mode [ 104.428520][ T8908] bridge_slave_0: entered promiscuous mode [ 104.435411][ T8935] loop0: detected capacity change from 0 to 2048 [ 104.442531][ T8935] ext3: Unknown parameter 'pcr' [ 104.446968][ T8908] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.454621][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.462813][ T8908] bridge_slave_1: entered allmulticast mode [ 104.469487][ T8908] bridge_slave_1: entered promiscuous mode [ 104.472410][ T8935] loop0: detected capacity change from 0 to 512 [ 104.483152][ T8935] EXT4-fs: dax option not supported [ 104.493701][ T5532] bridge_slave_1: left allmulticast mode [ 104.499436][ T5532] bridge_slave_1: left promiscuous mode [ 104.505250][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.514266][ T5532] bridge_slave_0: left allmulticast mode [ 104.519965][ T5532] bridge_slave_0: left promiscuous mode [ 104.525603][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.542746][ T8935] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.653657][ T5532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.663679][ T5532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.674578][ T5532] bond0 (unregistering): Released all slaves [ 104.683841][ T8908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.697991][ T8908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.698023][ T8945] netlink: 560 bytes leftover after parsing attributes in process `syz.1.1766'. [ 104.733406][ T8945] loop1: detected capacity change from 0 to 512 [ 104.741068][ T8908] team0: Port device team_slave_0 added [ 104.758655][ T8908] team0: Port device team_slave_1 added [ 104.768982][ T8945] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 104.779477][ T8945] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.795808][ T5532] hsr_slave_0: left promiscuous mode [ 104.795868][ T8945] EXT4-fs warning (device loop1): ext4_enable_quotas:7062: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.816688][ T5532] hsr_slave_1: left promiscuous mode [ 104.824328][ T8945] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 104.831661][ T5532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.839216][ T5532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.850192][ T8945] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1766: bg 0: block 40: padding at end of block bitmap is not set [ 104.868875][ T5532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.876410][ T5532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.885968][ T8945] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 104.897795][ T8945] EXT4-fs (loop1): 1 truncate cleaned up [ 104.903467][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888112c1b200: rx timeout, send abort [ 104.911887][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112c1b200: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 104.934670][ T5532] veth1_macvtap: left promiscuous mode [ 104.940183][ T5532] veth0_macvtap: left promiscuous mode [ 104.945786][ T5532] veth1_vlan: left promiscuous mode [ 104.951185][ T5532] veth0_vlan: left promiscuous mode [ 104.958807][ T8945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.113750][ T5532] team0 (unregistering): Port device team_slave_1 removed [ 105.134996][ T5532] team0 (unregistering): Port device team_slave_0 removed [ 105.223827][ T8908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.230794][ T8908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.244293][ T8949] loop0: detected capacity change from 0 to 65536 [ 105.256959][ T8908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.277066][ T8908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.284095][ T8908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.284153][ T8908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.345001][ T8908] hsr_slave_0: entered promiscuous mode [ 105.345230][ T4939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.359863][ T8908] hsr_slave_1: entered promiscuous mode [ 105.376148][ T8908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.396365][ T8908] Cannot create hsr debugfs directory [ 105.411680][ T29] audit: type=1400 audit(1721122894.330:534): avc: denied { read } for pid=8964 comm="syz.4.1772" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 105.414395][ T8968] loop1: detected capacity change from 0 to 2048 [ 105.434797][ T29] audit: type=1400 audit(1721122894.330:535): avc: denied { open } for pid=8964 comm="syz.4.1772" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 105.466146][ T8968] ext3: Unknown parameter 'pcr' [ 105.480518][ T8949] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.494064][ T8968] loop1: detected capacity change from 0 to 512 [ 105.494970][ T8949] vhci_hcd: invalid port number 23 [ 105.501004][ T8968] EXT4-fs: dax option not supported [ 105.538605][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 105.546518][ T8968] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.587391][ T5532] IPVS: stop unused estimator thread 0... [ 105.714792][ T29] audit: type=1400 audit(1721122894.607:536): avc: denied { read } for pid=8990 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.821678][ T29] audit: type=1400 audit(1721122894.709:537): avc: denied { setopt } for pid=8990 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.843956][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1781'. [ 105.862690][ T8908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.875713][ T8908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.897909][ T8908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.918962][ T8908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.009442][ T8908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.052483][ T8908] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.068447][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.075839][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.094510][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.101892][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.171389][ T8908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.250288][ T8908] veth0_vlan: entered promiscuous mode [ 106.261205][ T8908] veth1_vlan: entered promiscuous mode [ 106.272494][ T9009] loop4: detected capacity change from 0 to 512 [ 106.277557][ T8908] veth0_macvtap: entered promiscuous mode [ 106.286575][ T8908] veth1_macvtap: entered promiscuous mode [ 106.298192][ T9009] EXT4-fs: Ignoring removed bh option [ 106.298396][ T8908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.314100][ T8908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.324001][ T8908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.335597][ T8908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.345847][ T8908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.356472][ T8908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.366669][ T8908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.377138][ T8908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.391667][ T8908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.403024][ T8908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.414287][ T8908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.424445][ T8908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.428797][ T9009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.435137][ T8908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.448922][ T9009] ext4 filesystem being mounted at /147/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.458267][ T8908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.479679][ T9009] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.1784: corrupted inode contents [ 106.485527][ T8908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.497564][ T9009] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.1784: mark_inode_dirty error [ 106.507229][ T8908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.507244][ T8908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.543527][ T9009] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.1784: corrupted inode contents [ 106.555791][ T9009] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1784: mark_inode_dirty error [ 106.556075][ T9021] usb usb8: usbfs: process 9021 (syz.4.1784) did not claim interface 0 before use [ 106.569849][ T8908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.589418][ T8908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.598197][ T8908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.607241][ T8908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.616070][ T8908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.645606][ T6672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.679640][ T9026] loop0: detected capacity change from 0 to 2048 [ 106.679810][ T9030] 9pnet_fd: Insufficient options for proto=fd [ 106.686545][ T9026] ext3: Unknown parameter 'pcr' [ 106.713668][ T9026] loop0: detected capacity change from 0 to 512 [ 106.720899][ T9026] EXT4-fs: dax option not supported [ 106.748490][ T9026] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.116415][ T9052] loop3: detected capacity change from 0 to 1024 [ 107.123650][ T9052] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.128861][ T9056] loop0: detected capacity change from 0 to 164 [ 107.136519][ T9052] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1795: Invalid block bitmap block 0 in block_group 0 [ 107.154512][ T9052] Quota error (device loop3): write_blk: dquota write failed [ 107.160744][ T9056] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.162013][ T9052] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 107.170747][ T9056] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.170776][ T9056] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.180683][ C1] vcan0: j1939_tp_rxtimer: 0xffff888111ff3600: rx timeout, send abort [ 107.181751][ T9052] EXT4-fs error (device loop3): ext4_acquire_dquot:6844: comm syz.3.1795: Failed to acquire dquot type 0 [ 107.189493][ T9056] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.209930][ T9052] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.1795: Freeing blocks not in datazone - block = 0, count = 4096 [ 107.218241][ T9056] vxlan0: entered promiscuous mode [ 107.227172][ T9052] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1795: Invalid inode bitmap blk 0 in block_group 0 [ 107.239532][ T9056] vxlan0: entered allmulticast mode [ 107.262712][ T3203] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 107.263035][ T9052] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 107.271725][ T3203] EXT4-fs error (device loop3): ext4_release_dquot:6867: comm kworker/u8:7: Failed to release dquot type 0 [ 107.281009][ T9052] EXT4-fs (loop3): 1 orphan inode deleted [ 107.293637][ T9056] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.298414][ T9052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.306670][ T9056] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.328116][ T9056] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.337078][ T9056] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.377080][ T8908] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.407968][ T9063] netlink: 560 bytes leftover after parsing attributes in process `syz.3.1800'. [ 107.427238][ T9063] loop3: detected capacity change from 0 to 512 [ 107.438334][ T9063] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 107.446436][ T9063] EXT4-fs (loop3): orphan cleanup on readonly fs [ 107.453347][ T9063] EXT4-fs warning (device loop3): ext4_enable_quotas:7062: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 107.464164][ T9065] 9pnet_fd: Insufficient options for proto=fd [ 107.474534][ T9063] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 107.484896][ T9063] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1800: bg 0: block 40: padding at end of block bitmap is not set [ 107.503057][ T9063] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 107.512123][ T9063] EXT4-fs (loop3): 1 truncate cleaned up [ 107.518097][ T9063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.542748][ T8908] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.677902][ T29] audit: type=1400 audit(1721122896.426:538): avc: denied { setcheckreqprot } for pid=9086 comm="syz.3.1808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 107.722465][ C1] vcan0: j1939_tp_rxtimer: 0xffff888111ff3600: abort rx timeout. Force session deactivation [ 107.817760][ T29] audit: type=1400 audit(1721122896.555:539): avc: denied { watch watch_reads } for pid=9097 comm="syz.1.1811" path="/286/file0" dev="tmpfs" ino=1551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.858393][ T29] audit: type=1400 audit(1721122896.592:540): avc: denied { read } for pid=9101 comm="syz.1.1813" name="file0" dev="tmpfs" ino=1557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.858898][ T9102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1813'. [ 107.920531][ T9105] 9pnet_fd: Insufficient options for proto=fd [ 107.956510][ T9113] netlink: 'syz.1.1817': attribute type 33 has an invalid length. [ 108.052978][ T9117] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1817'. [ 108.072863][ T9117] team0 (unregistering): Port device team_slave_0 removed [ 108.099924][ T9117] team0 (unregistering): Port device team_slave_1 removed [ 108.138808][ T9125] loop4: detected capacity change from 0 to 2048 [ 108.145500][ T9125] ext3: Unknown parameter 'pcr' [ 108.158008][ T9125] loop4: detected capacity change from 0 to 512 [ 108.168041][ T9125] EXT4-fs: dax option not supported [ 108.190645][ T9125] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.376316][ T9139] block device autoloading is deprecated and will be removed. [ 108.385865][ T9139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1826'. [ 108.397919][ T9146] 9pnet_fd: Insufficient options for proto=fd [ 108.422441][ T9152] loop4: detected capacity change from 0 to 1024 [ 108.431165][ T9152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.445663][ T9152] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.1831: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 108.463392][ T9152] EXT4-fs (loop4): Remounting filesystem read-only [ 108.472566][ T9152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1831'. [ 108.488665][ T6672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.630397][ T9172] netlink: 'syz.2.1840': attribute type 5 has an invalid length. [ 108.652063][ T9175] netlink: 'syz.2.1841': attribute type 1 has an invalid length. [ 108.691883][ T9175] loop2: detected capacity change from 0 to 8192 [ 109.038802][ T9215] loop0: detected capacity change from 0 to 2048 [ 109.049566][ T9215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.066744][ T9215] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.081540][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888112a3f400: rx timeout, send abort [ 109.089868][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112a3f400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 109.116039][ T9215] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 109.128369][ T9215] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.128369][ T9215] [ 109.138102][ T9215] EXT4-fs (loop0): Total free blocks count 0 [ 109.144162][ T9215] EXT4-fs (loop0): Free/Dirty block details [ 109.150089][ T9215] EXT4-fs (loop0): free_blocks=2415919104 [ 109.153390][ T9227] netlink: 'syz.3.1863': attribute type 1 has an invalid length. [ 109.155809][ T9215] EXT4-fs (loop0): dirty_blocks=16 [ 109.155823][ T9215] EXT4-fs (loop0): Block reservation details [ 109.168972][ T9205] loop2: detected capacity change from 0 to 512 [ 109.174752][ T9215] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 109.187498][ T9225] veth1_macvtap: left promiscuous mode [ 109.228567][ T9229] veth1_macvtap: entered promiscuous mode [ 109.234407][ T9229] macsec0: entered promiscuous mode [ 109.239841][ T9229] macsec0: entered allmulticast mode [ 109.245164][ T9229] veth1_macvtap: entered allmulticast mode [ 109.252318][ T9205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.257139][ T9227] loop3: detected capacity change from 0 to 8192 [ 109.266810][ T5414] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.287886][ T9205] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.333046][ T9205] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.1855: corrupted inode contents [ 109.354436][ T9236] __nla_validate_parse: 1 callbacks suppressed [ 109.354452][ T9236] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1865'. [ 109.401613][ T9205] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz.2.1855: mark_inode_dirty error [ 109.403400][ T9239] No such timeout policy "syz0" [ 109.428546][ T9205] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.1855: corrupted inode contents [ 109.441436][ T9236] IPv6: sit2: Disabled Multicast RS [ 109.453328][ T9205] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1855: mark_inode_dirty error [ 109.518471][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.522052][ T9249] loop1: detected capacity change from 0 to 128 [ 109.575148][ T9254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1871'. [ 109.601139][ T9257] loop1: detected capacity change from 0 to 2048 [ 109.645474][ T9257] loop1: p2 < > [ 109.667781][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'. [ 109.698909][ T9278] No such timeout policy "syz0" [ 109.755743][ T9284] loop0: detected capacity change from 0 to 512 [ 109.763566][ T9284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 109.771504][ T9284] System zones: 1-12 [ 109.776071][ T9284] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz.0.1883: inode #0: comm syz.0.1883: iget: illegal inode # [ 109.790366][ T9284] EXT4-fs (loop0): get orphan inode failed [ 109.797322][ T9284] EXT4-fs (loop0): mount failed [ 109.819006][ T9293] netlink: 'syz.3.1888': attribute type 1 has an invalid length. [ 109.882795][ T9293] loop3: detected capacity change from 0 to 8192 [ 109.908335][ T9299] loop4: detected capacity change from 0 to 2048 [ 109.969829][ T9299] loop4: p2 < > [ 110.013035][ T9306] ================================================================== [ 110.021148][ T9306] BUG: KCSAN: data-race in mark_buffer_dirty_inode / mark_buffer_dirty_inode [ 110.030159][ T9306] [ 110.032475][ T9306] write to 0xffff8881078f99b0 of 8 bytes by task 9293 on cpu 1: [ 110.040196][ T9306] mark_buffer_dirty_inode+0x18d/0x1c0 [ 110.045647][ T9306] fat16_ent_put+0x4f/0x60 [ 110.050058][ T9306] fat_ent_write+0x66/0xe0 [ 110.054487][ T9306] fat_chain_add+0x15f/0x400 [ 110.059354][ T9306] fat_get_block+0x46b/0x5e0 [ 110.064160][ T9306] __block_write_begin_int+0x417/0xfa0 [ 110.069612][ T9306] block_write_begin+0x7b/0x170 [ 110.074607][ T9306] cont_write_begin+0x486/0x6b0 [ 110.079481][ T9306] fat_write_begin+0x61/0xf0 [ 110.084087][ T9306] generic_perform_write+0x1d5/0x410 [ 110.089417][ T9306] __generic_file_write_iter+0xa1/0x120 [ 110.095327][ T9306] generic_file_write_iter+0x7d/0x1d0 [ 110.100810][ T9306] vfs_write+0x78f/0x900 [ 110.105050][ T9306] ksys_write+0xeb/0x1b0 [ 110.109561][ T9306] __x64_sys_write+0x42/0x50 [ 110.114226][ T9306] x64_sys_call+0x27dd/0x2d60 [ 110.119014][ T9306] do_syscall_64+0xc9/0x1c0 [ 110.123552][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.129986][ T9306] [ 110.132352][ T9306] read to 0xffff8881078f99b0 of 8 bytes by task 9306 on cpu 0: [ 110.140757][ T9306] mark_buffer_dirty_inode+0x96/0x1c0 [ 110.146314][ T9306] fat16_ent_put+0x4f/0x60 [ 110.150992][ T9306] fat_alloc_clusters+0x4c9/0xa80 [ 110.156061][ T9306] fat_get_block+0x25c/0x5e0 [ 110.160745][ T9306] __block_write_begin_int+0x417/0xfa0 [ 110.166292][ T9306] block_write_begin+0x7b/0x170 [ 110.171399][ T9306] cont_write_begin+0x486/0x6b0 [ 110.176708][ T9306] fat_write_begin+0x61/0xf0 [ 110.181472][ T9306] generic_perform_write+0x1d5/0x410 [ 110.187226][ T9306] __generic_file_write_iter+0xa1/0x120 [ 110.192796][ T9306] generic_file_write_iter+0x7d/0x1d0 [ 110.198447][ T9306] iter_file_splice_write+0x5e6/0x970 [ 110.203907][ T9306] direct_splice_actor+0x16c/0x2c0 [ 110.209392][ T9306] splice_direct_to_actor+0x305/0x670 [ 110.214876][ T9306] do_splice_direct+0xd7/0x150 [ 110.219639][ T9306] do_sendfile+0x3ab/0x950 [ 110.224479][ T9306] __x64_sys_sendfile64+0xbd/0x150 [ 110.229577][ T9306] x64_sys_call+0xed5/0x2d60 [ 110.234157][ T9306] do_syscall_64+0xc9/0x1c0 [ 110.238646][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.244546][ T9306] [ 110.246853][ T9306] value changed: 0x0000000000000000 -> 0xffff888105bf7e08 [ 110.253954][ T9306] [ 110.256264][ T9306] Reported by Kernel Concurrency Sanitizer on: [ 110.262423][ T9306] CPU: 0 PID: 9306 Comm: syz.3.1888 Tainted: G W 6.10.0-syzkaller-01155-gd67978318827 #0 [ 110.273724][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 110.283950][ T9306] ================================================================== [ 110.310016][ T9308] No such timeout policy "syz0" [ 112.916488][ C1] syz_tun: tun_net_xmit 86 [ 114.042719][ C1] syz_tun: tun_net_xmit 86 [ 115.169429][ C1] syz_tun: tun_net_xmit 86