last executing test programs: 9.075181525s ago: executing program 0 (id=409): connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x1400}}, 0x3c}}, 0x0) 8.715887626s ago: executing program 0 (id=413): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x102020, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) unlink(0x0) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000240)="4ef6937098aff422daa2f9624875d771", 0x10) connect$inet6(r6, 0x0, 0x0) 6.499519236s ago: executing program 2 (id=417): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xc, 0x43, 0x7, 0xfffffffd}, 0x10) write(r1, &(0x7f0000000100)="1c0000001a007f0214f9f4070009040f03000000000000000002000008", 0x1d) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000076000d0b0000affe00c8dd479f0a00000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20040040) socket$inet6(0xa, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000200)=0xfe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x371, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = io_uring_setup(0x754d, &(0x7f0000000140)={0x0, 0x826e, 0x400, 0x8, 0x118}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) 4.126589551s ago: executing program 2 (id=424): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") 4.032703093s ago: executing program 1 (id=426): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.868005478s ago: executing program 3 (id=427): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000c40)='./bus\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@mblk_io_submit}]}, 0x28, 0x52c, &(0x7f0000000640)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)={0x14, r1, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000400)={0x0, 0x1, 0xfffffffffffffff3, 0x80000001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000080)={[{@nr_inodes={'nr_inodes', 0x3d, [0x54]}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x8}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) fallocate(r5, 0x20, 0x4000, 0x3000000) 3.211625729s ago: executing program 0 (id=428): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0xc2f, 0x5, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x20000880) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) unshare(0xe0010f00) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000000206050006adffe51d8ba24b42000000050005a50007aeb6c2528eaf6032a19ac800000005000400000000000900020073797a08000140e000000108000800000000002b000640000000010547c459729633d83cebeef822d589"], 0x60}, 0x1, 0x0, 0x0, 0x4810}, 0x4000000) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x20004015) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4001, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'veth1\x00', 0x10}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x21, 0x7, 0x7fffffff}]}) getpeername(r9, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2202, 0x0) close(r10) 2.997298686s ago: executing program 2 (id=429): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) syslog(0x9, 0x0, 0x0) r0 = socket(0xa, 0x4, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) shmget(0x1, 0x4000, 0x80, &(0x7f0000ffb000/0x4000)=nil) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2826c41, 0x0, 0x0, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x8040) socket$packet(0x11, 0x3, 0x300) 2.442335343s ago: executing program 3 (id=431): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f00000001c0)={@any, 0x40}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f00000000c0)=0xfff) 2.054017546s ago: executing program 0 (id=433): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) unshare(0x26020480) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r1, 0x0, 0x0, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r2, 0x5608, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r5, &(0x7f0000000040)='.\x00', 0x0) setuid(r4) setresuid(r3, r4, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') openat$cgroup_ro(r6, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x9}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff020100bfa30000000000000703000018feffff720aa9fff8ffffff71a4a9ff0000000072030200000000131d400500000000004704000001ed00006b030000000000001d440000000000007a0a00fe00ffffffc303000051000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7109000000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e50002a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de5c028d6112a0c2d21b2dc98814106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c53218294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb118888876b617398d00a7526103ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e08b7ab6cd9c65ba55f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddc42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293d364b9effa9a9406ac2683e231d4774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479517dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a79e59e1712c8c546768e5722da19fcdb4c2890cda1f96b952511e3a49d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767987d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c32040098e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1be62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070f66b2b388f0f744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028a3a981463f25c068d4410dad0c74e2a9478fa3be18a1a27bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab07001b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe293308b2a146f12a4c205235924cee765d94b1cc06641247c773ab8d1abbeb03ea68"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.467648274s ago: executing program 3 (id=436): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000080000850000002200000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x8, 0x8, &(0x7f00000002c0)="0000000061be00bb", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.405492526s ago: executing program 1 (id=437): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50550, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x1, 0xaad2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x51, 0x0, 0x6, 0x0, 0x6e5, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.404972916s ago: executing program 3 (id=438): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/asound/timers\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x4004000) socket$nl_audit(0x10, 0x3, 0x9) socket$rxrpc(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10d4c9, 0x0, 0x3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xffffff7f}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0xffffffff}, &(0x7f0000000100)=0x8) gettid() timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) read$watch_queue(r1, &(0x7f0000000940)=""/211, 0xd3) socket$nl_route(0x10, 0x3, 0x0) 1.404269126s ago: executing program 1 (id=439): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESDEC], 0x1, 0x285, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x6, 0x6, 0x301, 0x0, 0x0, {0x8, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, 0x0, &(0x7f0000000f80), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT=0x0]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x610, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x4}, 0x11feb0, 0x8, 0x20da, 0x7, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x27, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="f0391f00"]}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x8}}, @TCA_CT_MARK={0x8, 0x10, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a01040000000000000000020c000018000480140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a32000000000500"], 0x74}}, 0x0) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x800007}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) shmat(0x0, &(0x7f0000f0e000/0x2000)=nil, 0x4000) shmdt(r6) shmdt(r6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) 1.227542622s ago: executing program 3 (id=441): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'vlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (fail_nth: 3) 1.187586613s ago: executing program 1 (id=442): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) 1.050299137s ago: executing program 0 (id=443): perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r1, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40ffff, 0x0, @perf_bp={0x0, 0x1}, 0x10d92, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="88840200080000001800128008000100677470000c00028008000200", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="df75646f379e36a510c4ea3d94c07f8d04d4273aee2286bc059b72f6cabb98f3d16ae84ffd5e58074081e26f80652e2504ab48fddcd435a701dd7ecda2639f9e3da9142e721383805bf7d079877e59dfd06ff6f67365b3337a"], 0x40}, 0x1, 0x0, 0x0, 0x2404c880}, 0x4054) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a0000020000002400018014000180080001"], 0xa8}}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000280)="1c0000001a009b8a3c90f4ae0009042400000000ff02000000000000", 0x1c) recvmmsg$unix(r7, &(0x7f0000006440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81ff}}], 0x11, 0x10002, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="010028bd700036db03250b000000180001801400020064756d6d793000"/38], 0x2c}}, 0x200488c0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 1.045489757s ago: executing program 1 (id=444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r1 = fsopen(&(0x7f0000000240)='debugfs\x00', 0x0) syz_open_dev$evdev(0x0, 0x1, 0x2002) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x58000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) socket$rds(0x15, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000002800)={0x5811, 0x0, 0x7}, 0xd) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x8014) 1.030292078s ago: executing program 3 (id=445): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) set_mempolicy(0x3, &(0x7f0000000380)=0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000140), 0xca, r1}, 0x38) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x0, 0x4, 0x54, 0x0, 0x6}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a000400"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xffff7ffc, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1004, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0xffffffffffffc, 0x9}, 0x102270, 0xfffd, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000820000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 709.508708ms ago: executing program 1 (id=447): r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x800, 0x44, 0x246}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000001a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x24, &(0x7f0000000000), 0x0) 621.999011ms ago: executing program 0 (id=449): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0xfffc, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x820000, &(0x7f0000000100)={[{@stripe}, {@nobh}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@sysvgroups}, {@orlov}, {@oldalloc}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f00000010c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11e210, 0x10004, 0x20da, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000004000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 620.779551ms ago: executing program 2 (id=450): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50550, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x1, 0xaad2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x51, 0x0, 0x6, 0x0, 0x6e5, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 620.199351ms ago: executing program 4 (id=451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67c, 0x0, @perf_config_ext={0x10001}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x400, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() r1 = gettid() ptrace$setopts(0x4206, r1, 0xfffffffffffffcab, 0x3f) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000500)={0x0, 0x200, 0x0, 'queue0\x00', 0x1fd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x1, 0x2, 0x0, 0x1, 0x1}, 0x801}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) open$dir(&(0x7f00000002c0)='./file0\x00', 0x440600, 0x0) syz_clone(0x171a0d00, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 423.900977ms ago: executing program 2 (id=452): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x3c280e8c2a77ba7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(0x0, 0x0, 0x60040) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd0000050005"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x20000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x11, 0xffffffffffffffff, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x73, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x5, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x20040000) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) symlink(0x0, 0x0) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f0000000080)=0x1, 0x7, 0x0, 0x0, 0x0, 0x2) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000007000000000000000080001f850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 377.817349ms ago: executing program 4 (id=453): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000040)=0x7, 0x12) ioctl$FS_IOC_RESVSP(r0, 0x40305829, 0x0) socket$l2tp6(0xa, 0x2, 0x73) symlinkat(&(0x7f0000000240)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') 337.911839ms ago: executing program 4 (id=454): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) 291.401111ms ago: executing program 4 (id=455): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1400c, &(0x7f0000000b80)={[{@nomblk_io_submit}, {@lazytime}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000180)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") (async) r2 = open(0x0, 0x20000, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r3 = getpid() (rerun: 64) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pread64(r7, &(0x7f0000001340)=""/4096, 0x1000, 0x3) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) statx(r1, &(0x7f0000000c00)='./bus\x00', 0x400, 0x400, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x80000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="74725e9aa970f076616e733d66642c7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',cachetag=ext4\x00,subj_role=%,euid<', @ANYRESDEC=r8, @ANYBLOB=',audit,smackfstransmute=/,dont_hash,\x00']) r9 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x47e, &(0x7f0000000640)="$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") (async, rerun: 64) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) (async, rerun: 64) shmat(r9, &(0x7f0000be5000/0x7000)=nil, 0x3000) (async) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) (async) getdents64(r2, 0x0, 0x0) (async) close(r0) (async, rerun: 32) r10 = socket$inet6(0xa, 0x4, 0x8) (rerun: 32) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000080)=0xf2a, 0x4) 26.900449ms ago: executing program 4 (id=456): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private2, 0xae3e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0xf5ff) 2.34732ms ago: executing program 4 (id=457): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, &(0x7f0000001100)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r7, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 0s ago: executing program 2 (id=458): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x102020, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) unlink(&(0x7f0000000100)='./file0/file1\x00') r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, 0x0, 0x0) connect$inet6(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 20.523214][ T28] audit: type=1400 audit(1779780169.257:119): avc: denied { write } for pid=3250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.546441][ T28] audit: type=1400 audit(1779780169.257:120): avc: denied { write } for pid=3261 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.704008][ T28] audit: type=1400 audit(1779780169.437:121): avc: denied { write } for pid=3264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.727028][ T28] audit: type=1400 audit(1779780169.447:122): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 27.497745][ T28] audit: type=1400 audit(1779780176.227:123): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.521628][ T28] audit: type=1400 audit(1779780176.257:124): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.522386][ T3287] cgroup: Unknown subsys name 'net' [ 27.549593][ T28] audit: type=1400 audit(1779780176.277:125): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.662029][ T3287] cgroup: Unknown subsys name 'cpuset' [ 27.668205][ T3287] cgroup: Unknown subsys name 'rlimit' [ 27.777862][ T28] audit: type=1400 audit(1779780176.507:126): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.807719][ T28] audit: type=1400 audit(1779780176.507:127): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.814271][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.828461][ T28] audit: type=1400 audit(1779780176.507:128): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.857906][ T28] audit: type=1400 audit(1779780176.507:129): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.878755][ T28] audit: type=1400 audit(1779780176.517:130): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.903949][ T28] audit: type=1400 audit(1779780176.517:131): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.927636][ T28] audit: type=1400 audit(1779780176.537:132): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.949435][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.148837][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.156128][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.163524][ T3305] bridge_slave_0: entered allmulticast mode [ 30.169893][ T3305] bridge_slave_0: entered promiscuous mode [ 30.187994][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.195209][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.202449][ T3305] bridge_slave_1: entered allmulticast mode [ 30.208850][ T3305] bridge_slave_1: entered promiscuous mode [ 30.265000][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.277343][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.284693][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.291940][ T3298] bridge_slave_0: entered allmulticast mode [ 30.298360][ T3298] bridge_slave_0: entered promiscuous mode [ 30.311536][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.324960][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.332090][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.339318][ T3298] bridge_slave_1: entered allmulticast mode [ 30.345798][ T3298] bridge_slave_1: entered promiscuous mode [ 30.354672][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.361905][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.369124][ T3303] bridge_slave_0: entered allmulticast mode [ 30.375538][ T3303] bridge_slave_0: entered promiscuous mode [ 30.396069][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.403317][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.410502][ T3303] bridge_slave_1: entered allmulticast mode [ 30.417012][ T3303] bridge_slave_1: entered promiscuous mode [ 30.427351][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.434493][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.441883][ T3299] bridge_slave_0: entered allmulticast mode [ 30.448375][ T3299] bridge_slave_0: entered promiscuous mode [ 30.469588][ T3305] team0: Port device team_slave_0 added [ 30.475330][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.482887][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.490254][ T3299] bridge_slave_1: entered allmulticast mode [ 30.496650][ T3299] bridge_slave_1: entered promiscuous mode [ 30.503931][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.522029][ T3305] team0: Port device team_slave_1 added [ 30.536953][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.546265][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.553507][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.560747][ T3306] bridge_slave_0: entered allmulticast mode [ 30.567245][ T3306] bridge_slave_0: entered promiscuous mode [ 30.575659][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.597814][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.605136][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.612340][ T3306] bridge_slave_1: entered allmulticast mode [ 30.618865][ T3306] bridge_slave_1: entered promiscuous mode [ 30.626523][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.640722][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.647863][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.673887][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.686005][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.708238][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.715302][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.741395][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.755755][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.765718][ T3298] team0: Port device team_slave_0 added [ 30.776397][ T3303] team0: Port device team_slave_0 added [ 30.783416][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.794388][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.808595][ T3298] team0: Port device team_slave_1 added [ 30.820127][ T3303] team0: Port device team_slave_1 added [ 30.855553][ T3299] team0: Port device team_slave_0 added [ 30.861505][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.868508][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.894624][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.909574][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.916620][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.943216][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.955248][ T3306] team0: Port device team_slave_0 added [ 30.961530][ T3299] team0: Port device team_slave_1 added [ 30.972203][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.979172][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.006045][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.021896][ T3305] hsr_slave_0: entered promiscuous mode [ 31.028234][ T3305] hsr_slave_1: entered promiscuous mode [ 31.034790][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.041913][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.068194][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.079586][ T3306] team0: Port device team_slave_1 added [ 31.113373][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.120547][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.146880][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.158114][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.165156][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.191156][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.208943][ T3298] hsr_slave_0: entered promiscuous mode [ 31.215144][ T3298] hsr_slave_1: entered promiscuous mode [ 31.221413][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 31.227155][ T3298] Cannot create hsr debugfs directory [ 31.233042][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.240251][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.266613][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.296156][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.303284][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.329495][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.352840][ T3303] hsr_slave_0: entered promiscuous mode [ 31.358887][ T3303] hsr_slave_1: entered promiscuous mode [ 31.364774][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 31.370516][ T3303] Cannot create hsr debugfs directory [ 31.417813][ T3299] hsr_slave_0: entered promiscuous mode [ 31.423987][ T3299] hsr_slave_1: entered promiscuous mode [ 31.429867][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 31.435704][ T3299] Cannot create hsr debugfs directory [ 31.445655][ T3306] hsr_slave_0: entered promiscuous mode [ 31.452160][ T3306] hsr_slave_1: entered promiscuous mode [ 31.458102][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 31.463933][ T3306] Cannot create hsr debugfs directory [ 31.635406][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.644251][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.652155][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.661033][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.668914][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.677795][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.685377][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.693922][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.719833][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.728986][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.736729][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.745981][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.754191][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.762990][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.770710][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.779307][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.809608][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.818599][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.826432][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.835477][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.843842][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.852600][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.860975][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.869694][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.907284][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.915990][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.924268][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.933580][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.941674][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.950733][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.958585][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.967422][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.996190][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.025783][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.034245][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.042580][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.053572][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.063142][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.073513][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.080625][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.089787][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.099283][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.107149][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.115779][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.141494][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.148818][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.168800][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.187974][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.197948][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.205147][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.220952][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.228745][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.242547][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.265076][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.284870][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.303378][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.310499][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.319526][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.326803][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.357088][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.371174][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.387461][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.394572][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.407804][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.415013][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.440493][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.482893][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.490148][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.500220][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.507439][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.530494][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.671236][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.719694][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.745249][ T3305] veth0_vlan: entered promiscuous mode [ 32.767660][ T3305] veth1_vlan: entered promiscuous mode [ 32.780395][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.825394][ T3305] veth0_macvtap: entered promiscuous mode [ 32.842163][ T3305] veth1_macvtap: entered promiscuous mode [ 32.851301][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.877736][ T3299] veth0_vlan: entered promiscuous mode [ 32.911719][ T3298] veth0_vlan: entered promiscuous mode [ 32.920070][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.929204][ T3299] veth1_vlan: entered promiscuous mode [ 32.938829][ T3298] veth1_vlan: entered promiscuous mode [ 32.952439][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.975465][ T1351] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.984747][ T1351] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.997206][ T1351] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.006039][ T1351] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.022064][ T3303] veth0_vlan: entered promiscuous mode [ 33.039335][ T3299] veth0_macvtap: entered promiscuous mode [ 33.047995][ T3303] veth1_vlan: entered promiscuous mode [ 33.057257][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 33.057274][ T28] audit: type=1400 audit(1779780181.787:143): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.8AouJN/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.060332][ T3299] veth1_macvtap: entered promiscuous mode [ 33.068387][ T28] audit: type=1400 audit(1779780181.797:144): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.089975][ T3298] veth0_macvtap: entered promiscuous mode [ 33.124132][ T28] audit: type=1400 audit(1779780181.797:145): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.8AouJN/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.133572][ T3298] veth1_macvtap: entered promiscuous mode [ 33.160775][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.164816][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.184684][ T28] audit: type=1400 audit(1779780181.797:146): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.214644][ T3303] veth0_macvtap: entered promiscuous mode [ 33.224856][ T28] audit: type=1400 audit(1779780181.797:147): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.8AouJN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.225910][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.255643][ T28] audit: type=1400 audit(1779780181.797:148): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.8AouJN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.273167][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.294882][ T28] audit: type=1400 audit(1779780181.797:149): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.303474][ T3303] veth1_macvtap: entered promiscuous mode [ 33.320410][ T28] audit: type=1400 audit(1779780181.857:150): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.345078][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.354363][ T28] audit: type=1400 audit(1779780181.857:151): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=3680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.377103][ T28] audit: type=1400 audit(1779780181.957:152): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.407530][ T827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.432267][ T827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.450540][ T3306] veth0_vlan: entered promiscuous mode [ 33.456561][ T827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.466991][ T827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.479818][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.490923][ T3306] veth1_vlan: entered promiscuous mode [ 33.497869][ T827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.527788][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.544114][ T827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.556460][ T827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.577630][ T827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.604643][ T827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.642966][ T827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.663944][ T827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.664075][ T3511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.673378][ T827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.727801][ T3514] loop1: detected capacity change from 0 to 1024 [ 33.734816][ T3515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.761786][ T3511] team1: entered promiscuous mode [ 33.766944][ T3514] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 33.781764][ T3511] team1: entered allmulticast mode [ 33.787142][ T3511] 8021q: adding VLAN 0 to HW filter on device team1 [ 33.794575][ T3514] EXT4-fs (loop1): mount failed [ 33.805519][ T3306] veth0_macvtap: entered promiscuous mode [ 33.824263][ T3515] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 33.854707][ T3515] team2: entered promiscuous mode [ 33.860924][ T3515] team2: entered allmulticast mode [ 33.868190][ T3515] 8021q: adding VLAN 0 to HW filter on device team2 [ 33.876778][ T3515] Zero length message leads to an empty skb [ 33.890217][ T3306] veth1_macvtap: entered promiscuous mode [ 33.923817][ T3520] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 33.939549][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.969480][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.999566][ T287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.010185][ T3528] loop0: detected capacity change from 0 to 256 [ 34.022782][ T287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.032760][ T3528] msdos: Bad value for 'uid' [ 34.037511][ T3528] msdos: Bad value for 'uid' [ 34.043709][ T3525] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8'. [ 34.058624][ T3528] 9p: Bad value for 'rfdno' [ 34.128775][ T3533] loop2: detected capacity change from 0 to 136 [ 34.157817][ T3533] Attempt to read inode for relocated directory [ 34.167678][ T3524] batadv_slave_1: entered promiscuous mode [ 34.208138][ T287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.226865][ T3533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.236051][ T3533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.244591][ T3522] batadv_slave_1: left promiscuous mode [ 34.250614][ T287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.935622][ T3543] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 35.309288][ T3552] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 35.330615][ T3552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.559659][ T3571] loop2: detected capacity change from 0 to 2048 [ 35.583643][ T3574] netlink: 104 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.584609][ T3571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.625620][ T3577] loop3: detected capacity change from 0 to 128 [ 35.666369][ T3577] loop3: detected capacity change from 0 to 256 [ 35.682710][ T3577] vfat: Unknown parameter '•' [ 35.749656][ T3580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 35.810762][ T3552] syz.1.14 (3552) used greatest stack depth: 10504 bytes left [ 35.940685][ T3588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 35.948096][ T3588] IPv6: NLM_F_CREATE should be set when creating new route [ 35.955412][ T3588] IPv6: NLM_F_CREATE should be set when creating new route [ 35.962642][ T3588] IPv6: NLM_F_CREATE should be set when creating new route [ 35.988522][ T3589] loop3: detected capacity change from 0 to 2048 [ 36.125279][ T3593] loop1: detected capacity change from 0 to 2048 [ 36.185564][ T3589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.225173][ T3593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.524138][ T3517] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 37.569506][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.531146][ T3517] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 38.565035][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 38.565053][ T28] audit: type=1400 audit(1779780187.297:216): avc: denied { setopt } for pid=3598 comm="syz.0.29" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.881220][ T28] audit: type=1400 audit(1779780187.537:217): avc: denied { write } for pid=3586 comm="syz.3.27" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.555335][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.650201][ T28] audit: type=1400 audit(1779780188.257:218): avc: denied { write } for pid=3598 comm="syz.0.29" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.801265][ T28] audit: type=1400 audit(1779780188.527:219): avc: denied { write } for pid=3619 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.826825][ T3626] netlink: 96 bytes leftover after parsing attributes in process `syz.2.31'. [ 39.945776][ T3632] loop1: detected capacity change from 0 to 512 [ 39.986514][ T3632] netlink: 'syz.1.35': attribute type 1 has an invalid length. [ 40.049207][ T3632] loop1: detected capacity change from 0 to 1024 [ 40.068019][ T28] audit: type=1400 audit(1779780188.797:220): avc: denied { bind } for pid=3635 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.116807][ T3632] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=1 [ 40.143633][ T3636] loop2: detected capacity change from 0 to 1764 [ 40.158366][ T3632] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 40.178554][ T3636] ======================================================= [ 40.178554][ T3636] WARNING: The mand mount option has been deprecated and [ 40.178554][ T3636] and is ignored by this kernel. Remove the mand [ 40.178554][ T3636] option from the mount to silence this warning. [ 40.178554][ T3636] ======================================================= [ 40.219534][ T28] audit: type=1400 audit(1779780188.797:221): avc: denied { name_bind } for pid=3635 comm="syz.2.37" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 40.265467][ T3632] EXT4-fs (loop1): mount failed [ 40.287497][ T28] audit: type=1400 audit(1779780188.797:222): avc: denied { node_bind } for pid=3635 comm="syz.2.37" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 40.329748][ T3636] iso9660: Bad value for 'uid' [ 40.339681][ T3636] iso9660: Bad value for 'uid' [ 40.346362][ T28] audit: type=1400 audit(1779780188.817:223): avc: denied { setopt } for pid=3635 comm="syz.2.37" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.388881][ T3636] IPVS: set_ctl: invalid protocol: 51 172.20.20.28:20002 [ 40.421709][ T28] audit: type=1400 audit(1779780188.817:224): avc: denied { write } for pid=3635 comm="syz.2.37" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.452779][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.486148][ T3639] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3639 comm=syz.1.35 [ 40.629078][ T3642] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 40.651770][ T3646] netlink: 104 bytes leftover after parsing attributes in process `syz.3.38'. [ 40.734268][ T3649] loop4: detected capacity change from 0 to 1024 [ 40.815223][ T3649] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 40.842009][ T3649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.146077][ T3648] netlink: 112 bytes leftover after parsing attributes in process `syz.1.41'. [ 41.216677][ T3648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'. [ 41.285692][ T3648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 41.675003][ T3648] syz.1.41 (3648) used greatest stack depth: 10304 bytes left [ 41.972839][ T3650] syz.1.41 (3650) used greatest stack depth: 10168 bytes left [ 42.459356][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.733311][ T3663] loop1: detected capacity change from 0 to 2048 [ 42.762985][ T3663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.898208][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 43.898257][ T28] audit: type=1400 audit(1779780192.617:237): avc: denied { write } for pid=3662 comm="syz.1.43" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.311383][ T28] audit: type=1400 audit(1779780193.027:238): avc: denied { create } for pid=3674 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.432391][ T3676] loop2: detected capacity change from 0 to 1764 [ 44.464283][ T3676] iso9660: Bad value for 'uid' [ 44.496488][ T3676] iso9660: Bad value for 'uid' [ 44.545715][ T3676] IPVS: set_ctl: invalid protocol: 51 172.20.20.28:20002 [ 44.618881][ T3682] loop3: detected capacity change from 0 to 8192 [ 44.712439][ T28] audit: type=1400 audit(1779780193.447:239): avc: denied { relabelfrom } for pid=3681 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 44.788860][ T28] audit: type=1400 audit(1779780193.467:240): avc: denied { relabelto } for pid=3681 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 44.866009][ T28] audit: type=1400 audit(1779780193.467:241): avc: denied { append } for pid=3681 comm="syz.3.49" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.174656][ T3682] loop3: p1 p2 p4[DM] [ 45.191176][ T3682] loop3: p1 size 67898881 extends beyond EOD, truncated [ 45.226932][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.236608][ T3682] loop3: p4 size 262144 extends beyond EOD, truncated [ 45.245957][ T3686] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET) [ 45.259320][ T28] audit: type=1400 audit(1779780193.977:242): avc: denied { read write } for pid=3685 comm="syz.2.50" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.388468][ T28] audit: type=1400 audit(1779780193.977:243): avc: denied { open } for pid=3685 comm="syz.2.50" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.447282][ T28] audit: type=1400 audit(1779780193.977:244): avc: denied { ioctl } for pid=3685 comm="syz.2.50" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.522100][ T3691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.53'. [ 45.551401][ T28] audit: type=1400 audit(1779780194.107:245): avc: denied { connect } for pid=3688 comm="syz.1.51" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.581478][ T3694] loop1: detected capacity change from 0 to 2048 [ 45.597276][ T28] audit: type=1400 audit(1779780194.177:246): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 45.822543][ T3694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.879206][ T3701] netlink: 112 bytes leftover after parsing attributes in process `syz.2.53'. [ 46.046242][ T3701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'. [ 46.598863][ T3701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 47.641658][ T3699] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 48.684007][ T3691] syz.2.53 (3691) used greatest stack depth: 10112 bytes left [ 49.013099][ T3711] netlink: 104 bytes leftover after parsing attributes in process `syz.3.56'. [ 49.058649][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.138003][ T3715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.58'. [ 49.157104][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 49.157147][ T28] audit: type=1400 audit(1779780197.887:248): avc: denied { read write } for pid=3713 comm="syz.1.57" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 49.178495][ T3714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.57'. [ 49.214526][ T3715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.58'. [ 49.226924][ T3714] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 49.246631][ T28] audit: type=1400 audit(1779780197.887:249): avc: denied { open } for pid=3713 comm="syz.1.57" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 49.249355][ T3715] netlink: 112 bytes leftover after parsing attributes in process `syz.2.58'. [ 49.310176][ T3715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 49.333145][ T28] audit: type=1400 audit(1779780198.067:250): avc: denied { read } for pid=3713 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.333273][ T3718] netlink: 'syz.1.57': attribute type 12 has an invalid length. [ 49.901704][ T3732] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 49.901704][ T3732] The task syz.3.62 (3732) triggered the difference, watch for misbehavior. [ 49.992581][ T3734] loop1: detected capacity change from 0 to 128 [ 50.002656][ T28] audit: type=1400 audit(1779780198.727:251): avc: denied { create } for pid=3729 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.050708][ T28] audit: type=1400 audit(1779780198.757:252): avc: denied { ioctl } for pid=3729 comm="syz.3.62" path="socket:[6170]" dev="sockfs" ino=6170 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.102817][ T28] audit: type=1400 audit(1779780198.767:253): avc: denied { create } for pid=3736 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.155586][ T28] audit: type=1400 audit(1779780198.777:254): avc: denied { mount } for pid=3733 comm="syz.1.63" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.177705][ T28] audit: type=1400 audit(1779780198.827:255): avc: denied { connect } for pid=3736 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.813554][ T28] audit: type=1326 audit(1779780199.537:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.1.63" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b910ece59 code=0x7fc00000 [ 52.213799][ T28] audit: type=1326 audit(1779780199.547:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.1.63" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b910e6bd7 code=0x7fc00000 [ 53.321498][ T3756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3756 comm=syz.3.67 [ 53.555065][ T3762] loop1: detected capacity change from 0 to 512 [ 53.573335][ T3762] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.623849][ T3762] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.69: Failed to acquire dquot type 1 [ 53.698794][ T3762] loop1: lost filesystem error report for type 5 error -5 [ 53.699263][ T3762] EXT4-fs (loop1): 1 truncate cleaned up [ 53.706542][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 53.706561][ C1] EXT4-fs (loop1): last error at time 1779780202: ext4_acquire_dquot:7034 [ 53.731940][ T3769] __nla_validate_parse: 1 callbacks suppressed [ 53.731958][ T3769] netlink: 104 bytes leftover after parsing attributes in process `syz.3.72'. [ 53.777358][ T3762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.782988][ T3771] process 'syz.2.73' launched '/dev/fd/6' with NULL argv: empty string added [ 53.825568][ T3762] loop6: detected capacity change from 0 to 7 [ 53.845677][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.855599][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.864776][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.874524][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.883907][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.892652][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.901881][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.910491][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.919679][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.931545][ T3762] loop6: unable to read partition table [ 53.931538][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.931572][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.945649][ T3762] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 53.947982][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 53.976710][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.984923][ T3773] Invalid ELF header magic: != ELF [ 53.991262][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.000511][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 54.009553][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.018747][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 54.027601][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.036769][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 54.044963][ T3772] loop6: unable to read partition table [ 54.076462][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.122977][ T3775] loop4: detected capacity change from 0 to 2048 [ 54.230409][ T3775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.257588][ T3789] netlink: 'syz.0.76': attribute type 4 has an invalid length. [ 55.433010][ T3789] netlink: 152 bytes leftover after parsing attributes in process `syz.0.76'. [ 56.215571][ T3782] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 56.259599][ T3789] .`: renamed from bond0 (while UP) [ 57.261412][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 57.261433][ T28] audit: type=1400 audit(1779780205.357:268): avc: denied { write } for pid=3774 comm="syz.4.75" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.504858][ T3794] loop1: detected capacity change from 0 to 4096 [ 57.547263][ T3794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.548183][ T3804] netlink: 32 bytes leftover after parsing attributes in process `syz.3.82'. [ 57.725671][ T3810] netlink: 112 bytes leftover after parsing attributes in process `syz.3.82'. [ 57.745053][ T3810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 57.761472][ T3810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 57.784290][ T28] audit: type=1400 audit(1779780206.507:269): avc: denied { write } for pid=3793 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 57.936800][ T28] audit: type=1400 audit(1779780206.667:270): avc: denied { write } for pid=3793 comm="syz.1.79" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.982776][ T28] audit: type=1400 audit(1779780206.687:271): avc: denied { add_name } for pid=3793 comm="syz.1.79" name="devices.list" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.027214][ T28] audit: type=1400 audit(1779780206.687:272): avc: denied { create } for pid=3793 comm="syz.1.79" name="devices.list" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.071352][ T28] audit: type=1400 audit(1779780206.697:273): avc: denied { append open } for pid=3793 comm="syz.1.79" path="/19/file0/devices.list" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.272138][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.284103][ T28] audit: type=1400 audit(1779780207.017:274): avc: denied { write } for pid=3814 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.359085][ T3819] loop3: detected capacity change from 0 to 512 [ 58.377817][ T3819] EXT4-fs: Ignoring removed orlov option [ 58.391423][ T3819] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.401906][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.427116][ T3819] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.86: corrupted in-inode xattr: e_value size too large [ 58.472821][ T3819] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.478207][ T3819] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.86: couldn't read orphan inode 15 (err -117) [ 58.485065][ T3826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.90'. [ 58.494591][ T3828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.90'. [ 58.499117][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 58.523252][ C0] EXT4-fs (loop3): initial error at time 1779780207: ext4_iget_extra_inode:5128: inode 15 [ 58.533237][ C0] EXT4-fs (loop3): last error at time 1779780207: ext4_iget_extra_inode:5128: inode 15 [ 58.543321][ T3819] loop3: lost filesystem error report for type 5 error -117 [ 58.548811][ T3819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.569247][ T3827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.89'. [ 58.583289][ T28] audit: type=1400 audit(1779780207.317:275): avc: denied { write } for pid=3829 comm="syz.1.88" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.643387][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.660688][ T28] audit: type=1400 audit(1779780207.367:276): avc: denied { setattr } for pid=3817 comm="syz.3.86" path="/24/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.687342][ T3832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 58.695049][ T28] audit: type=1400 audit(1779780207.387:277): avc: denied { ioctl } for pid=3825 comm="syz.4.90" path="socket:[6333]" dev="sockfs" ino=6333 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.849197][ T3842] __nla_validate_parse: 3 callbacks suppressed [ 58.849214][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 58.931931][ T3842] loop2: detected capacity change from 0 to 512 [ 59.003383][ T3842] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.031108][ T3842] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.94: inode has both inline data and extents flags [ 59.044380][ T3842] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 59.051326][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 59.067241][ C0] EXT4-fs (loop2): initial error at time 1779780207: ext4_orphan_get:1397: inode 17 [ 59.076697][ C0] EXT4-fs (loop2): last error at time 1779780207: ext4_orphan_get:1397: inode 17 [ 59.086070][ T3842] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.94: couldn't read orphan inode 17 (err -117) [ 59.097844][ T3842] loop2: lost filesystem error report for type 5 error -117 [ 59.099918][ T3842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.159960][ T3859] netlink: 104 bytes leftover after parsing attributes in process `syz.3.101'. [ 59.176630][ T3861] netlink: 104 bytes leftover after parsing attributes in process `syz.1.102'. [ 59.188049][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.337375][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'. [ 59.680332][ T3879] Process accounting resumed [ 59.894701][ T3891] loop4: detected capacity change from 0 to 512 [ 60.080657][ T3891] bridge_slave_0: left allmulticast mode [ 60.093039][ T3891] bridge_slave_0: left promiscuous mode [ 60.105057][ T3891] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.134377][ T3891] bridge_slave_1: left allmulticast mode [ 60.149880][ T3891] bridge_slave_1: left promiscuous mode [ 60.162060][ T3891] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.270744][ T3906] loop3: detected capacity change from 0 to 1024 [ 60.289405][ T3891] bond0: (slave bond_slave_0): Releasing backup interface [ 60.303384][ T3906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.336194][ T3891] bond0: (slave bond_slave_1): Releasing backup interface [ 60.632387][ T3891] team0: Port device team_slave_0 removed [ 61.577423][ T3891] team0: Port device team_slave_1 removed [ 61.652125][ T3891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.659790][ T3891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.686838][ T3891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.716269][ T3916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 61.741473][ T3891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.758267][ T3891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 61.777516][ T3919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.792035][ T3893] team0: Mode changed to "loadbalance" [ 61.798061][ T3919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.838348][ T3918] vlan2: entered promiscuous mode [ 61.844483][ T3918] bridge0: entered promiscuous mode [ 62.065589][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.081586][ T3921] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 62.170837][ T3406] IPVS: starting estimator thread 0... [ 62.195492][ T3927] netlink: 104 bytes leftover after parsing attributes in process `syz.0.123'. [ 62.223727][ T3924] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 62.271347][ T3924] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 62.271717][ T3925] IPVS: using max 2544 ests per chain, 127200 per kthread [ 62.355438][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 62.355464][ T28] audit: type=1400 audit(1779780211.087:321): avc: denied { write } for pid=3932 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.383378][ T28] audit: type=1400 audit(1779780211.117:322): avc: denied { write } for pid=3932 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.452520][ T3891] syz.4.113 (3891) used greatest stack depth: 9664 bytes left [ 62.500657][ T3942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3942 comm=syz.1.126 [ 62.517811][ T3943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.127'. [ 62.599218][ T3946] loop4: detected capacity change from 0 to 512 [ 62.613285][ T3946] EXT4-fs: Ignoring removed i_version option [ 62.675653][ T3946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.698680][ T3946] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.726723][ T28] audit: type=1400 audit(1779780211.457:323): avc: denied { map } for pid=3945 comm="syz.4.129" path="socket:[6579]" dev="sockfs" ino=6579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.753797][ T28] audit: type=1400 audit(1779780211.457:324): avc: denied { read write accept } for pid=3945 comm="syz.4.129" path="socket:[6579]" dev="sockfs" ino=6579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.784838][ T3958] netlink: 104 bytes leftover after parsing attributes in process `syz.0.132'. [ 62.802971][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.946098][ T3970] netlink: 72 bytes leftover after parsing attributes in process `syz.4.138'. [ 63.324998][ T3983] netlink: 'syz.2.142': attribute type 4 has an invalid length. [ 63.419459][ T3983] netlink: 'syz.2.142': attribute type 4 has an invalid length. [ 63.561875][ T3982] netlink: 104 bytes leftover after parsing attributes in process `syz.4.143'. [ 63.784606][ T28] audit: type=1400 audit(1779780213.500:325): avc: denied { ioctl } for pid=3985 comm="syz.3.144" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=5777 ioctlcmd=0x5345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.929050][ T3983] syz.2.142 (3983) used greatest stack depth: 9088 bytes left [ 64.076226][ T28] audit: type=1400 audit(1779780213.800:326): avc: denied { create } for pid=3989 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.142525][ T28] audit: type=1400 audit(1779780213.800:327): avc: denied { bind } for pid=3989 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.225036][ T28] audit: type=1400 audit(1779780213.800:328): avc: denied { write } for pid=3989 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.263626][ T3964] loop1: detected capacity change from 0 to 128 [ 64.518274][ T3992] mmap: syz.3.145 (3992) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.594449][ T28] audit: type=1400 audit(1779780214.320:329): avc: denied { execute } for pid=3987 comm="syz.3.145" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 66.972876][ T3964] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.094953][ T4004] loop0: detected capacity change from 0 to 512 [ 67.994268][ T3964] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.102705][ T4004] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.118144][ T4004] EXT4-fs (loop0): blocks per group (16) and clusters per group (32768) inconsistent [ 68.579843][ T4010] loop2: detected capacity change from 0 to 1024 [ 68.611392][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.618641][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.660778][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.669873][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.716382][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.780808][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.794808][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.806577][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.824106][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.118141][ T4018] netlink: 'syz.3.155': attribute type 36 has an invalid length. [ 69.148983][ T4020] netlink: 104 bytes leftover after parsing attributes in process `syz.0.156'. [ 69.172629][ T4018] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 69.183746][ T4021] loop2: detected capacity change from 0 to 512 [ 69.204488][ T4018] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 69.222370][ T4021] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.244358][ T28] audit: type=1400 audit(1779780218.930:330): avc: denied { map } for pid=4017 comm="syz.3.155" path="socket:[6702]" dev="sockfs" ino=6702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.294648][ T4021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.319076][ T28] audit: type=1400 audit(1779780218.930:331): avc: denied { read } for pid=4017 comm="syz.3.155" path="socket:[6702]" dev="sockfs" ino=6702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.347180][ T4021] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.425460][ T28] audit: type=1400 audit(1779780219.150:332): avc: denied { bind } for pid=4009 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.519627][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.256930][ T4015] netlink: 9 bytes leftover after parsing attributes in process `syz.4.154'. [ 70.277575][ T28] audit: type=1400 audit(1779780219.910:333): avc: denied { name_connect } for pid=4013 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 70.306736][ T4031] netlink: 5 bytes leftover after parsing attributes in process `syz.4.154'. [ 70.323834][ T4015] gretap0: entered promiscuous mode [ 70.382496][ T4034] loop4: detected capacity change from 0 to 1024 [ 70.413910][ T4031] 0ªî{X¹¦: renamed from gretap0 [ 70.422995][ T4034] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 70.431216][ T4034] System zones: 0-1, 3-36 [ 70.436174][ T4034] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.154: bad orphan inode 134217728 [ 70.446876][ T4034] loop4: lost filesystem error report for type 5 error -117 [ 70.447405][ T4034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.484777][ T4031] 0ªî{X¹¦: left promiscuous mode [ 70.489868][ T4031] 0ªî{X¹¦: entered allmulticast mode [ 70.496873][ T4031] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 70.597945][ T4041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4041 comm=syz.1.153 [ 70.629604][ T28] audit: type=1400 audit(1779780219.960:334): avc: denied { listen } for pid=4013 comm="syz.4.154" lport=41237 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.735510][ T28] audit: type=1400 audit(1779780219.960:335): avc: denied { accept } for pid=4013 comm="syz.4.154" lport=41237 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.841706][ T28] audit: type=1400 audit(1779780219.960:336): avc: denied { write } for pid=4013 comm="syz.4.154" path="socket:[6733]" dev="sockfs" ino=6733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 70.895179][ T4042] loop2: detected capacity change from 0 to 512 [ 70.919074][ T4042] msdos: Unknown parameter 'ÿ' [ 70.955213][ T28] audit: type=1400 audit(1779780219.970:337): avc: denied { setopt } for pid=4013 comm="syz.4.154" lport=41237 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 71.068814][ T28] audit: type=1400 audit(1779780220.260:338): avc: denied { connect } for pid=4036 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.116455][ T28] audit: type=1400 audit(1779780220.260:339): avc: denied { ioctl } for pid=4036 comm="syz.1.153" path="socket:[6740]" dev="sockfs" ino=6740 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.153290][ T4042] futex_wake_op: syz.2.160 tries to shift op by -9; fix this program [ 71.301202][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.461282][ T4057] --map-set only usable from mangle table [ 71.628547][ T4056] netlink: 276 bytes leftover after parsing attributes in process `syz.0.166'. [ 71.925647][ T4056] netlink: 276 bytes leftover after parsing attributes in process `syz.0.166'. [ 71.941853][ T4067] netlink: 72 bytes leftover after parsing attributes in process `syz.4.163'. [ 72.019589][ T4071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.169'. [ 72.041518][ T4072] netlink: 32 bytes leftover after parsing attributes in process `syz.4.169'. [ 72.078338][ T4076] loop3: detected capacity change from 0 to 512 [ 72.097663][ T4076] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 72.105878][ T4076] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.171: corrupted in-inode xattr: e_value size too large [ 72.120522][ T4076] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.121319][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 72.137458][ C1] EXT4-fs (loop3): initial error at time 1779780221: ext4_iget_extra_inode:5128: inode 15 [ 72.147527][ C1] EXT4-fs (loop3): last error at time 1779780221: ext4_iget_extra_inode:5128: inode 15 [ 72.151252][ T4076] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.171: couldn't read orphan inode 15 (err -117) [ 72.187205][ T4076] loop3: lost filesystem error report for type 5 error -117 [ 72.187939][ T4076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.238972][ T4084] loop4: detected capacity change from 0 to 1764 [ 72.394073][ T4087] netlink: 104 bytes leftover after parsing attributes in process `syz.2.174'. [ 74.504809][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.663725][ T4098] netlink: 'syz.4.177': attribute type 2 has an invalid length. [ 74.673696][ T4098] loop4: detected capacity change from 0 to 128 [ 74.687197][ T4098] FAT-fs (loop4): bogus number of reserved sectors [ 74.765523][ T4098] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 74.816900][ T4107] loop0: detected capacity change from 0 to 1764 [ 75.265668][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 75.266084][ T28] audit: type=1400 audit(1779780224.600:353): avc: denied { kexec_image_load } for pid=4092 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 75.329070][ T4098] FAT-fs (loop4): Can't find a valid FAT filesystem [ 76.296125][ T28] audit: type=1400 audit(1779780226.020:354): avc: denied { mounton } for pid=4097 comm="syz.4.177" path="/27/bus" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.321974][ T4099] xt_hl: Unknown TTL match mode: 255 [ 76.674635][ T4111] capability: warning: `syz.4.177' uses deprecated v2 capabilities in a way that may be insecure [ 76.757847][ T4113] loop2: detected capacity change from 0 to 8192 [ 77.166594][ T4124] netlink: 32 bytes leftover after parsing attributes in process `syz.0.182'. [ 77.211086][ T4124] netlink: 112 bytes leftover after parsing attributes in process `syz.0.182'. [ 77.227592][ T4125] loop3: detected capacity change from 0 to 2048 [ 77.249127][ T4124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 77.258578][ T4124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 77.542994][ T4139] loop2: detected capacity change from 0 to 2048 [ 77.565260][ T4139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.756385][ T4148] macvtap1: entered promiscuous mode [ 77.762706][ T4148] macvtap1: entered allmulticast mode [ 77.768689][ T4148] veth1_vlan: entered allmulticast mode [ 79.029126][ T28] audit: type=1400 audit(1779780228.750:355): avc: denied { write } for pid=4138 comm="syz.2.187" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.346892][ T4160] loop1: detected capacity change from 0 to 4096 [ 79.360033][ T4160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.393195][ T28] audit: type=1400 audit(1779780229.120:356): avc: denied { write } for pid=4159 comm="syz.1.193" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.466418][ T4160] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.651411][ T4144] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 79.853434][ T28] audit: type=1326 audit(1779780229.580:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.4.195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89231ace59 code=0x0 [ 79.909938][ T4167] netlink: 4684 bytes leftover after parsing attributes in process `syz.1.194'. [ 80.033071][ T28] audit: type=1400 audit(1779780229.760:358): avc: denied { connect } for pid=4168 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.117825][ T4180] loop4: detected capacity change from 0 to 512 [ 80.149821][ T4180] EXT4-fs: Ignoring removed nobh option [ 80.182071][ T4180] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.212603][ T4180] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.244924][ T4180] EXT4-fs (loop4): 1 truncate cleaned up [ 80.259866][ T4180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.295572][ T28] audit: type=1400 audit(1779780230.020:359): avc: denied { write } for pid=4168 comm="syz.4.195" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.353195][ T4180] syz.4.195(4180): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 80.376002][ T4189] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.387054][ T28] audit: type=1400 audit(1779780230.100:360): avc: denied { setopt } for pid=4188 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.413087][ T4189] SELinux: Context system_u:object_r:devicekit_var_lib_t:s0 is not valid (left unmapped). [ 80.420236][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.423624][ T28] audit: type=1400 audit(1779780230.100:361): avc: denied { shutdown } for pid=4188 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.452547][ T4192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.204'. [ 80.453643][ T28] audit: type=1400 audit(1779780230.140:362): avc: denied { relabelfrom } for pid=4188 comm="syz.3.203" name="NETLINK" dev="sockfs" ino=7181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.485463][ T4192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 80.500068][ T28] audit: type=1400 audit(1779780230.140:363): avc: denied { mac_admin } for pid=4188 comm="syz.3.203" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.522654][ T28] audit: type=1400 audit(1779780230.180:364): avc: denied { relabelto } for pid=4188 comm="syz.3.203" name="NETLINK" dev="sockfs" ino=7181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_xfrm_socket permissive=1 trawcon="system_u:object_r:devicekit_var_lib_t:s0" [ 80.552527][ T4199] loop0: detected capacity change from 0 to 256 [ 80.568240][ T4199] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.597660][ T28] audit: type=1400 audit(1779780230.320:365): avc: denied { write } for pid=4203 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.676833][ T4187] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.687044][ T4187] block device autoloading is deprecated and will be removed. [ 80.705630][ T4209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=4209 comm=syz.2.205 [ 80.724404][ T28] audit: type=1400 audit(1779780230.450:366): avc: denied { append } for pid=4198 comm="syz.0.206" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.782693][ T28] audit: type=1400 audit(1779780230.460:367): avc: denied { ioctl } for pid=4203 comm="syz.2.205" path="socket:[7252]" dev="sockfs" ino=7252 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.823905][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.833003][ T28] audit: type=1400 audit(1779780230.470:368): avc: denied { ioctl } for pid=4198 comm="syz.0.206" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.838310][ T4211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.208'. [ 81.016071][ T4227] netlink: 32 bytes leftover after parsing attributes in process `syz.4.214'. [ 81.029314][ T4227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'. [ 81.045336][ T4211] veth3: entered promiscuous mode [ 81.050851][ T4211] veth3: entered allmulticast mode [ 81.130794][ T4235] loop4: detected capacity change from 0 to 512 [ 81.146485][ T4235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.161632][ T4235] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.189722][ T4240] loop1: detected capacity change from 0 to 512 [ 81.261867][ T4240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.288934][ T4240] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.324156][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.400112][ T4288] __nla_validate_parse: 6 callbacks suppressed [ 82.400130][ T4288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.233'. [ 82.482893][ T4290] loop0: detected capacity change from 0 to 1024 [ 82.499750][ T4290] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 82.544210][ T4290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.566161][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.710026][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.088593][ T4304] loop0: detected capacity change from 0 to 512 [ 83.337368][ T4304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.390982][ T4304] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.476486][ T4304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.583293][ T4300] loop2: detected capacity change from 0 to 8192 [ 83.611887][ T4326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.245'. [ 83.652165][ T4300] loop2: p1 < > p2 p4 < p5 > [ 83.668618][ T4300] loop2: partition table partially beyond EOD, truncated [ 83.691562][ T4300] loop2: p1 start 134217728 is beyond EOD, truncated [ 83.715767][ T4300] loop2: p2 size 591360 extends beyond EOD, truncated [ 83.740605][ T4300] loop2: p5 size 591360 extends beyond EOD, truncated [ 83.852810][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 83.865538][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 83.876523][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 83.983329][ T4350] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.984960][ T4354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.257'. [ 84.628774][ T4360] loop2: detected capacity change from 0 to 256 [ 84.652460][ T4360] FAT-fs (loop2): Directory bread(block 1285) failed [ 84.678348][ T4369] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 84.691044][ T4360] FAT-fs (loop2): Directory bread(block 1286) failed [ 84.704537][ T4360] FAT-fs (loop2): Directory bread(block 1287) failed [ 84.717834][ T4360] FAT-fs (loop2): Directory bread(block 1288) failed [ 84.729504][ T4360] FAT-fs (loop2): Directory bread(block 1285) failed [ 84.767592][ T4360] FAT-fs (loop2): Directory bread(block 1286) failed [ 84.789145][ T4360] FAT-fs (loop2): Directory bread(block 1287) failed [ 84.804199][ T4360] FAT-fs (loop2): Directory bread(block 1288) failed [ 84.834100][ T4360] FAT-fs (loop2): Directory bread(block 1285) failed [ 84.841006][ T4360] FAT-fs (loop2): Directory bread(block 1286) failed [ 85.310957][ T4379] loop2: detected capacity change from 0 to 128 [ 85.385101][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 85.385119][ T28] audit: type=1400 audit(1779780235.110:401): avc: denied { append } for pid=4376 comm="syz.4.264" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.397238][ T4379] syz.2.265: attempt to access beyond end of device [ 85.397238][ T4379] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 85.465211][ T4377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 85.510089][ T28] audit: type=1400 audit(1779780235.230:402): avc: denied { read } for pid=4380 comm="syz.0.266" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.533718][ T28] audit: type=1400 audit(1779780235.230:403): avc: denied { open } for pid=4380 comm="syz.0.266" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.569393][ T56] kworker/u8:4: attempt to access beyond end of device [ 85.569393][ T56] loop2: rw=1, sector=137, nr_sectors = 904 limit=128 [ 85.726103][ T28] audit: type=1400 audit(1779780235.450:404): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 85.761782][ T4395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.270'. [ 85.773101][ T28] audit: type=1400 audit(1779780235.450:405): avc: denied { mount } for pid=4387 comm="syz.2.267" name="/" dev="ramfs" ino=7554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 85.797608][ T28] audit: type=1400 audit(1779780235.480:406): avc: denied { getopt } for pid=4387 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.871143][ T28] audit: type=1400 audit(1779780235.590:407): avc: denied { setopt } for pid=4400 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.911088][ T28] audit: type=1400 audit(1779780235.630:408): avc: denied { create } for pid=4398 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 85.951085][ T28] audit: type=1400 audit(1779780235.630:409): avc: denied { connect } for pid=4398 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 87.432796][ T4422] netlink: 112 bytes leftover after parsing attributes in process `syz.2.278'. [ 87.442006][ T4422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 87.450913][ T4422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 87.583618][ T4363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.651777][ T4427] netlink: 104 bytes leftover after parsing attributes in process `syz.4.279'. [ 87.677424][ T4429] sctp: [Deprecated]: syz.0.281 (pid 4429) Use of int in maxseg socket option. [ 87.677424][ T4429] Use struct sctp_assoc_value instead [ 87.715931][ T4434] netlink: 132 bytes leftover after parsing attributes in process `syz.2.284'. [ 87.769869][ T4443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.285'. [ 87.780003][ T4443] netlink: 56 bytes leftover after parsing attributes in process `syz.4.285'. [ 88.860326][ T28] audit: type=1400 audit(1779780238.580:410): avc: denied { read } for pid=4457 comm="syz.4.291" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 88.904345][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.911611][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.009389][ T4463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.289'. [ 89.565514][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.632584][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.729398][ T4467] loop2: detected capacity change from 0 to 1024 [ 89.841775][ T4471] netlink: 32 bytes leftover after parsing attributes in process `syz.4.293'. [ 89.852201][ T4467] EXT4-fs: Mount option(s) incompatible with ext3 [ 89.916361][ T4471] netlink: 112 bytes leftover after parsing attributes in process `syz.4.293'. [ 89.933812][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.955048][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.968979][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.988232][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.084681][ T4484] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 90.132124][ T4484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.156792][ T4467] loop2: detected capacity change from 0 to 512 [ 90.165656][ T4467] EXT4-fs: test_dummy_encryption option not supported [ 90.407835][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 90.407851][ T28] audit: type=1400 audit(1779780240.130:420): avc: denied { getopt } for pid=4496 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.989710][ T4521] loop1: detected capacity change from 0 to 1024 [ 91.007500][ T4521] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.223451][ T4521] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 91.280530][ T4521] EXT4-fs (loop1): orphan cleanup on readonly fs [ 91.330644][ T4521] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.313: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.382132][ T4535] vlan2: entered promiscuous mode [ 91.408401][ T4535] bridge0: entered promiscuous mode [ 91.436704][ T4521] loop1: lost filesystem error report for type 5 error -117 [ 91.438928][ T4521] EXT4-fs (loop1): 1 orphan inode deleted [ 91.446462][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 91.446498][ C1] EXT4-fs (loop1): initial error at time 1779780241: ext4_free_blocks:6718 [ 91.446538][ C1] EXT4-fs (loop1): last error at time 1779780241: ext4_free_blocks:6718 [ 91.561896][ T4530] netlink: 'syz.3.317': attribute type 1 has an invalid length. [ 91.671975][ T4521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.725354][ T28] audit: type=1400 audit(1779780241.370:421): avc: denied { ioctl } for pid=4527 comm="syz.3.317" path="socket:[7776]" dev="sockfs" ino=7776 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 91.785791][ T4521] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.313: bg 0: block 10: padding at end of block bitmap is not set [ 92.042630][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.036459][ T4553] loop3: detected capacity change from 0 to 512 [ 93.064860][ T4553] msdos: Unknown parameter '18446744073709551615' [ 93.431030][ T4553] loop3: detected capacity change from 0 to 2048 [ 93.443913][ T28] audit: type=1400 audit(1779780243.160:422): avc: denied { write } for pid=4552 comm="syz.3.324" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.550611][ T28] audit: type=1400 audit(1779780243.160:423): avc: denied { open } for pid=4552 comm="syz.3.324" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.599618][ T4553] Alternate GPT is invalid, using primary GPT. [ 93.623046][ T4553] loop3: p2 p3 p7 [ 93.675434][ T28] audit: type=1400 audit(1779780243.220:424): avc: denied { ioctl } for pid=4552 comm="syz.3.324" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.739323][ T4578] __nla_validate_parse: 9 callbacks suppressed [ 93.739338][ T4578] netlink: 32 bytes leftover after parsing attributes in process `syz.2.328'. [ 93.807974][ T28] audit: type=1400 audit(1779780243.270:425): avc: denied { name_bind } for pid=4572 comm="syz.1.329" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 93.868101][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 93.883832][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 93.885556][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 93.952406][ T4578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.328'. [ 93.964949][ T28] audit: type=1400 audit(1779780243.370:426): avc: denied { setopt } for pid=4574 comm="syz.4.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.008643][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 94.020520][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 94.035877][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 94.069468][ T28] audit: type=1400 audit(1779780243.380:427): avc: denied { write } for pid=4574 comm="syz.4.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.383039][ T28] audit: type=1400 audit(1779780244.110:428): avc: denied { ioctl } for pid=4591 comm="syz.2.335" path="socket:[8801]" dev="sockfs" ino=8801 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.410453][ T4593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 94.767982][ T4604] loop2: detected capacity change from 0 to 512 [ 94.934604][ T28] audit: type=1400 audit(1779780244.320:429): avc: denied { create } for pid=4599 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 95.095160][ T4604] ------------[ cut here ]------------ [ 95.101139][ T4604] EA inode 11 i_nlink=2 [ 95.101321][ T4604] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.2.338/4604 [ 95.118097][ T4604] Modules linked in: [ 95.124079][ T4604] CPU: 0 UID: 0 PID: 4604 Comm: syz.2.338 Not tainted syzkaller #0 PREEMPT(full) [ 95.138578][ T4604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.149918][ T4604] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 95.157299][ T4604] Code: 04 55 98 ff 4c 8d 2d 4d 63 5c 05 49 8d 7e 40 e8 e4 17 b6 ff 49 8b 6e 40 4c 89 e7 e8 18 13 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 8f 28 d8 03 66 66 66 66 66 66 2e [ 95.188347][ T4604] RSP: 0018:ffffc9000216f778 EFLAGS: 00010246 [ 95.201529][ T4604] RAX: ffff88810266f100 RBX: ffff8881079f4598 RCX: ffffffff81c0deb8 [ 95.209698][ T4604] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d41f0 [ 95.218527][ T4604] RBP: 000000000000000b R08: 00018881079f454b R09: 0000000000000000 [ 95.227769][ T4604] R10: ffffc9000216f6a8 R11: 0001c9000216f6a8 R12: ffff8881079f4548 [ 95.238046][ T4604] R13: ffffffff871d41f0 R14: ffff8881079f4500 R15: 0000000000000001 [ 95.246958][ T4604] FS: 00007f2ba92656c0(0000) GS:ffff8882ae8f8000(0000) knlGS:0000000000000000 [ 95.257344][ T4604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.264968][ T4604] CR2: 0000000034747865 CR3: 000000011c090000 CR4: 00000000003506f0 [ 95.281976][ T4604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.290696][ T4604] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 95.299949][ T4604] Call Trace: [ 95.304077][ T4604] [ 95.308186][ T4604] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 95.315258][ T4604] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 95.322949][ T4604] ? ext4_truncate+0x89f/0xa10 [ 95.329149][ T4604] ext4_evict_inode+0xb16/0xe30 [ 95.335996][ T4604] ? __pfx_ext4_evict_inode+0x10/0x10 [ 95.342878][ T4604] evict+0x2af/0x510 [ 95.347910][ T4604] ? __dquot_initialize+0x146/0x7c0 [ 95.354798][ T4604] iput+0x41a/0x580 [ 95.359359][ T4604] ext4_process_orphan+0x1a9/0x1c0 [ 95.366794][ T4604] ext4_orphan_cleanup+0x69c/0x9f0 [ 95.373436][ T4604] ext4_fill_super+0x3408/0x37c0 [ 95.379899][ T4604] ? set_blocksize+0x14c/0x270 [ 95.386159][ T4604] ? setup_bdev_super+0x30e/0x370 [ 95.392356][ T4604] ? __pfx_ext4_fill_super+0x10/0x10 [ 95.398897][ T4604] get_tree_bdev_flags+0x291/0x300 [ 95.404708][ T4604] ? __pfx_ext4_fill_super+0x10/0x10 [ 95.410938][ T4604] get_tree_bdev+0x1f/0x30 [ 95.415736][ T4604] ext4_get_tree+0x1c/0x30 [ 95.421028][ T4604] vfs_get_tree+0x57/0x1d0 [ 95.426597][ T4604] do_new_mount+0x288/0x8d0 [ 95.432109][ T4604] path_mount+0x4d0/0xbc0 [ 95.438279][ T4604] __se_sys_mount+0x28c/0x2e0 [ 95.444507][ T4604] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 95.451818][ T4604] __x64_sys_mount+0x67/0x80 [ 95.457023][ T4604] x64_sys_call+0x2d61/0x3020 [ 95.462348][ T4604] do_syscall_64+0x12c/0x3b0 [ 95.468407][ T4604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.475686][ T4604] RIP: 0033:0x7f2baa84e0ca [ 95.480887][ T4604] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.501321][ T4604] RSP: 002b:00007f2ba9264e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.510567][ T4604] RAX: ffffffffffffffda RBX: 00007f2ba9264ee0 RCX: 00007f2baa84e0ca [ 95.519339][ T4604] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f2ba9264ea0 [ 95.528687][ T4604] RBP: 00002000000009c0 R08: 00007f2ba9264ee0 R09: 0000000000800718 [ 95.538407][ T4604] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 95.547918][ T4604] R13: 00007f2ba9264ea0 R14: 000000000000048d R15: 0000200000000700 [ 95.557494][ T4604] [ 95.561219][ T4604] ---[ end trace 0000000000000000 ]--- [ 95.639720][ T4604] EXT4-fs (loop2): 1 orphan inode deleted [ 95.674603][ T4604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.137093][ T4601] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 96.198828][ T4616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.342'. [ 96.222394][ T28] audit: type=1400 audit(1779780245.940:430): avc: denied { create } for pid=4615 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 97.530162][ T4620] netlink: 'syz.3.343': attribute type 4 has an invalid length. [ 97.571110][ T4620] netlink: 'syz.3.343': attribute type 4 has an invalid length. [ 97.794974][ T4626] netlink: 112 bytes leftover after parsing attributes in process `syz.1.346'. [ 97.821696][ T28] audit: type=1400 audit(1779780247.510:431): avc: denied { create } for pid=4625 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 98.121821][ T4655] loop1: detected capacity change from 0 to 512 [ 98.130505][ T4655] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.147370][ T4655] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.352: bg 0: block 393: padding at end of block bitmap is not set [ 98.162584][ T4655] loop1: lost filesystem error report for type 5 error -117 [ 98.162764][ T4655] EXT4-fs (loop1): Remounting filesystem read-only [ 98.176677][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 98.176699][ C1] EXT4-fs (loop1): initial error at time 1779780247: ext4_validate_block_bitmap:441 [ 98.176720][ C1] EXT4-fs (loop1): last error at time 1779780247: ext4_validate_block_bitmap:441 [ 98.203637][ T4655] EXT4-fs (loop1): 2 truncates cleaned up [ 98.209874][ T4655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.228164][ T28] audit: type=1400 audit(1779780247.950:432): avc: denied { write } for pid=4651 comm="syz.1.352" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.250860][ T4655] program syz.1.352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.575948][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.942226][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.027188][ T4674] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 99.206072][ T4674] bond1: entered promiscuous mode [ 99.233292][ T4674] bond1: entered allmulticast mode [ 99.345204][ T4682] bridge2: entered promiscuous mode [ 99.423967][ T4682] bridge2: entered allmulticast mode [ 99.480855][ T28] audit: type=1400 audit(1779780249.200:433): avc: denied { create } for pid=4685 comm="syz.4.363" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.711829][ T4682] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 100.684734][ T4674] bridge3: entered promiscuous mode [ 100.690144][ T4674] bridge3: entered allmulticast mode [ 100.696105][ T4674] bond1: (slave bridge3): Enslaving as a backup interface with a down link [ 100.785976][ T28] audit: type=1400 audit(1779780250.460:434): avc: denied { write } for pid=4689 comm="syz.1.364" path="socket:[8014]" dev="sockfs" ino=8014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.811310][ T28] audit: type=1400 audit(1779780250.470:435): avc: denied { create } for pid=4689 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 101.194850][ T4704] loop4: detected capacity change from 0 to 512 [ 101.207054][ T4704] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.246251][ T4704] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.368: bg 0: block 393: padding at end of block bitmap is not set [ 101.265399][ T4704] loop4: lost filesystem error report for type 5 error -117 [ 101.265635][ T4704] EXT4-fs (loop4): Remounting filesystem read-only [ 101.273006][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 101.273034][ C0] EXT4-fs (loop4): initial error at time 1779780250: ext4_validate_block_bitmap:441 [ 101.273056][ C0] EXT4-fs (loop4): last error at time 1779780250: ext4_validate_block_bitmap:441 [ 101.305312][ T4704] EXT4-fs (loop4): 2 truncates cleaned up [ 101.312865][ T4704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.339780][ T28] audit: type=1400 audit(1779780251.060:436): avc: denied { write } for pid=4702 comm="syz.4.368" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.376476][ T4709] loop1: detected capacity change from 0 to 256 [ 101.383323][ T4710] program syz.4.368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.413423][ T28] audit: type=1400 audit(1779780251.140:437): avc: denied { create } for pid=4706 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.495110][ T28] audit: type=1400 audit(1779780251.170:438): avc: denied { setopt } for pid=4706 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.556728][ T28] audit: type=1400 audit(1779780251.170:439): avc: denied { write } for pid=4706 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.577148][ T28] audit: type=1400 audit(1779780251.250:440): avc: denied { allowed } for pid=4711 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.667066][ T4723] loop1: detected capacity change from 0 to 2048 [ 101.724625][ T4723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.900575][ T28] audit: type=1400 audit(1779780251.620:441): avc: denied { ioctl } for pid=4727 comm="syz.3.376" path="socket:[8071]" dev="sockfs" ino=8071 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.946912][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.071575][ T28] audit: type=1400 audit(1779780251.750:442): avc: denied { write } for pid=4722 comm="syz.1.374" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.249500][ T4740] loop3: detected capacity change from 0 to 2048 [ 102.895547][ T4740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.904969][ T4657] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 102.931923][ T4740] EXT4-fs (loop3): invalid inodes per group: 234881056 [ 102.931923][ T4740] [ 103.079462][ T28] audit: type=1400 audit(1779780251.750:443): avc: denied { remove_name } for pid=4722 comm="syz.1.374" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.125602][ T28] audit: type=1400 audit(1779780252.840:444): avc: denied { map } for pid=4738 comm="syz.3.377" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.944650][ T4740] syz.3.377 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 104.445902][ T4748] netlink: 104 bytes leftover after parsing attributes in process `syz.3.381'. [ 104.546964][ T28] audit: type=1400 audit(1779780252.840:445): avc: denied { read write } for pid=4738 comm="syz.3.377" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.577637][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.659069][ T4752] 9p: Could not find request transport: fE [ 104.680197][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 107.334544][ T4789] loop4: detected capacity change from 0 to 128 [ 107.372366][ T4789] vfat: Unknown parameter '' [ 107.385054][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 107.385069][ T28] audit: type=1400 audit(1779780257.100:487): avc: denied { setopt } for pid=4787 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.488003][ T4783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 107.667471][ T4805] loop1: detected capacity change from 0 to 1764 [ 107.688220][ T4805] iso9660: Bad value for 'uid' [ 107.711350][ T4805] iso9660: Bad value for 'uid' [ 108.776209][ T4823] loop3: detected capacity change from 0 to 128 [ 108.824573][ T4823] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.843647][ T4823] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.894309][ T28] audit: type=1400 audit(1779780258.620:488): avc: denied { write } for pid=4822 comm="syz.3.405" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.013940][ T4833] netlink: 'syz.4.406': attribute type 1 has an invalid length. [ 109.039504][ T4833] netlink: 224 bytes leftover after parsing attributes in process `syz.4.406'. [ 109.086810][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.414982][ T28] audit: type=1400 audit(1779780259.140:489): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.450774][ T4840] netlink: 104 bytes leftover after parsing attributes in process `syz.3.408'. [ 109.524875][ T28] audit: type=1400 audit(1779780259.250:490): avc: denied { mount } for pid=4841 comm="syz.4.410" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 109.617085][ T4844] loop3: detected capacity change from 0 to 2048 [ 109.632620][ T28] audit: type=1400 audit(1779780259.270:491): avc: denied { search } for pid=4841 comm="syz.4.410" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.675748][ T4846] loop4: detected capacity change from 0 to 2048 [ 109.687436][ T4844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.725977][ T4846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.081258][ T4862] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 111.717612][ T28] audit: type=1400 audit(1779780261.250:492): avc: denied { write } for pid=4843 comm="syz.3.411" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.746448][ T4862] netlink: 'syz.1.416': attribute type 2 has an invalid length. [ 112.083058][ T4862] loop1: detected capacity change from 0 to 512 [ 113.111489][ T4831] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 113.126141][ T28] audit: type=1400 audit(1779780262.810:493): avc: denied { write } for pid=4867 comm="syz.2.417" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.104848][ T4831] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 114.142570][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.343084][ T28] audit: type=1400 audit(1779780264.070:494): avc: denied { setopt } for pid=4877 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.363550][ T28] audit: type=1400 audit(1779780264.090:495): avc: denied { setattr } for pid=4877 comm="syz.1.422" name="RXRPC" dev="sockfs" ino=9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.392828][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.480400][ T4887] loop2: detected capacity change from 0 to 512 [ 114.518355][ T4887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.683237][ T4887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 115.126741][ T4887] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.157761][ T4903] loop3: detected capacity change from 0 to 512 [ 115.336555][ T4903] EXT4-fs: Ignoring removed bh option [ 115.342290][ T4903] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.417634][ T4903] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.525692][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 115.565638][ T4903] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 115.659171][ T4903] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 115.705255][ T4912] netlink: 68 bytes leftover after parsing attributes in process `syz.0.428'. [ 115.733747][ T4908] loop4: detected capacity change from 0 to 4096 [ 115.751727][ T4903] System zones: 0-2, 18-18, 34-35 [ 115.800934][ T4903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.845767][ T4908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.913644][ T28] audit: type=1400 audit(1779780265.640:496): avc: denied { write } for pid=4907 comm="syz.4.421" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.024072][ T4911] loop2: detected capacity change from 0 to 128 [ 116.087289][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.157691][ T28] audit: type=1400 audit(1779780265.720:497): avc: denied { write } for pid=4902 comm="syz.3.427" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.278286][ T28] audit: type=1400 audit(1779780265.730:498): avc: denied { map } for pid=4902 comm="syz.3.427" path="/86/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.308146][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.412840][ T28] audit: type=1400 audit(1779780265.760:499): avc: denied { append } for pid=4902 comm="syz.3.427" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.570861][ T4921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.432'. [ 116.605030][ T4921] bond2: entered promiscuous mode [ 116.617303][ T4921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.674367][ T4921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.698602][ T4921] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 116.725328][ T4921] bond2: (slave sit1): Error -95 calling set_mac_address [ 116.742510][ T4911] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.801787][ T4911] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.010094][ T4931] netlink: 104 bytes leftover after parsing attributes in process `syz.4.435'. [ 117.059816][ T28] audit: type=1400 audit(1779780266.770:500): avc: denied { write } for pid=4910 comm="syz.2.429" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.173353][ T28] audit: type=1400 audit(1779780266.880:501): avc: denied { create } for pid=4910 comm="syz.2.429" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 117.231237][ T4940] loop1: detected capacity change from 0 to 256 [ 117.240003][ T4940] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.357884][ T4941] loop4: detected capacity change from 0 to 8192 [ 117.394217][ T4945] FAULT_INJECTION: forcing a failure. [ 117.394217][ T4945] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.421941][ T28] audit: type=1400 audit(1779780267.140:502): avc: denied { mounton } for pid=4938 comm="syz.4.440" path=2F2E02 dev="ramfs" ino=9157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 117.426563][ T4945] CPU: 0 UID: 0 PID: 4945 Comm: syz.3.441 Tainted: G W syzkaller #0 PREEMPT(full) [ 117.426596][ T4945] Tainted: [W]=WARN [ 117.426603][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.426615][ T4945] Call Trace: [ 117.426622][ T4945] [ 117.426631][ T4945] __dump_stack+0x1d/0x30 [ 117.426655][ T4945] dump_stack_lvl+0x95/0xd0 [ 117.426708][ T4945] dump_stack+0x15/0x1b [ 117.426727][ T4945] should_fail_ex+0x263/0x280 [ 117.426755][ T4945] should_fail+0xb/0x20 [ 117.426816][ T4945] should_fail_usercopy+0x1a/0x20 [ 117.426844][ T4945] _copy_from_user+0x1c/0xb0 [ 117.426873][ T4945] kstrtouint_from_user+0x69/0xf0 [ 117.426942][ T4945] ? 0xffffffff81000000 [ 117.426956][ T4945] ? selinux_file_permission+0x1e1/0x320 [ 117.427000][ T4945] proc_fail_nth_write+0x50/0x160 [ 117.427083][ T4945] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 117.427172][ T4945] vfs_write+0x269/0x9f0 [ 117.427198][ T4945] ? __rcu_read_unlock+0x4e/0x70 [ 117.427219][ T4945] ? __fget_files+0x184/0x1c0 [ 117.427239][ T4945] ? mutex_lock+0x57/0x90 [ 117.427314][ T4945] ksys_write+0xdc/0x1a0 [ 117.427342][ T4945] __x64_sys_write+0x40/0x50 [ 117.427378][ T4945] x64_sys_call+0x27e1/0x3020 [ 117.427401][ T4945] do_syscall_64+0x12c/0x3b0 [ 117.427432][ T4945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.427518][ T4945] RIP: 0033:0x7f87dbeed68e [ 117.427533][ T4945] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 117.427557][ T4945] RSP: 002b:00007f87da986fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.427579][ T4945] RAX: ffffffffffffffda RBX: 00007f87da9876c0 RCX: 00007f87dbeed68e [ 117.427593][ T4945] RDX: 0000000000000001 RSI: 00007f87da9870a0 RDI: 0000000000000004 [ 117.427606][ T4945] RBP: 00007f87da987090 R08: 0000000000000000 R09: 0000000000000000 [ 117.427673][ T4945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.427685][ T4945] R13: 00007f87dc1a6038 R14: 00007f87dc1a5fa0 R15: 00007ffdfa6e1028 [ 117.427704][ T4945] [ 117.655351][ T4958] netlink: 32 bytes leftover after parsing attributes in process `syz.0.443'. [ 117.833285][ T4961] netlink: 112 bytes leftover after parsing attributes in process `syz.0.443'. [ 117.842845][ T4961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 117.861372][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 117.941205][ T4962] loop3: detected capacity change from 0 to 1764 [ 117.982409][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.001326][ T4971] bridge_slave_0: left allmulticast mode [ 118.017401][ T4971] bridge_slave_0: left promiscuous mode [ 118.056303][ T4971] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.125795][ T4971] bridge_slave_1: left allmulticast mode [ 118.132441][ T4971] bridge_slave_1: left promiscuous mode [ 118.139968][ T4971] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.168791][ T4971] .`: (slave bond_slave_0): Releasing backup interface [ 118.207904][ T4971] .`: (slave bond_slave_1): Releasing backup interface [ 118.227322][ T4971] team0: Port device team_slave_0 removed [ 118.259325][ T4971] team0: Port device team_slave_1 removed [ 118.269498][ T4971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.294260][ T4971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.316819][ T4971] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.354514][ T4977] team0: Mode changed to "loadbalance" [ 118.361625][ T4987] loop4: detected capacity change from 0 to 512 [ 118.518914][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 118.518930][ T28] audit: type=1400 audit(1779780268.240:509): avc: denied { connect } for pid=4992 comm="syz.4.456" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.583462][ T28] audit: type=1400 audit(1779780268.240:508): avc: denied { getopt } for pid=4980 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 118.608677][ T4997] loop2: detected capacity change from 0 to 2048 [ 118.631518][ T287] ================================================================== [ 118.639663][ T287] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 118.646977][ T287] [ 118.649310][ T287] read to 0xffff88811bf28398 of 4 bytes by task 30 on cpu 0: [ 118.656682][ T287] atime_needs_update+0x25f/0x3e0 [ 118.661723][ T287] touch_atime+0x4a/0x330 [ 118.666076][ T287] shmem_file_read_iter+0x3f4/0x4b0 [ 118.671290][ T287] lo_rw_aio+0x67d/0x730 [ 118.675551][ T287] loop_process_work+0x56c/0xac0 [ 118.680509][ T287] loop_rootcg_workfn+0x22/0x30 [ 118.685391][ T287] process_scheduled_works+0x4f0/0x9c0 [ 118.690871][ T287] worker_thread+0x58a/0x780 [ 118.695484][ T287] kthread+0x22a/0x280 [ 118.699561][ T287] ret_from_fork+0x146/0x330 [ 118.704218][ T287] ret_from_fork_asm+0x1a/0x30 [ 118.709002][ T287] [ 118.711336][ T287] write to 0xffff88811bf28398 of 4 bytes by task 287 on cpu 1: [ 118.718904][ T287] touch_atime+0x1d7/0x330 [ 118.723356][ T287] shmem_file_read_iter+0x3f4/0x4b0 [ 118.728571][ T287] lo_rw_aio+0x67d/0x730 [ 118.732825][ T287] loop_process_work+0x56c/0xac0 [ 118.737775][ T287] loop_workfn+0x31/0x40 [ 118.742031][ T287] process_scheduled_works+0x4f0/0x9c0 [ 118.747504][ T287] worker_thread+0x58a/0x780 [ 118.752113][ T287] kthread+0x22a/0x280 [ 118.756191][ T287] ret_from_fork+0x146/0x330 [ 118.760810][ T287] ret_from_fork_asm+0x1a/0x30 [ 118.765597][ T287] [ 118.767935][ T287] value changed: 0x14e74d66 -> 0x157fe3e6 [ 118.773655][ T287] [ 118.775983][ T287] Reported by Kernel Concurrency Sanitizer on: [ 118.782151][ T287] CPU: 1 UID: 0 PID: 287 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT(full) [ 118.793100][ T287] Tainted: [W]=WARN [ 118.796913][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.806996][ T287] Workqueue: loop2 loop_workfn [ 118.811778][ T287] ================================================================== [ 118.845388][ T4997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.174979][ T28] audit: type=1400 audit(1779780268.850:510): avc: denied { write } for pid=4996 comm="syz.2.458" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.997793][ T827] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.008876][ T827] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.027526][ T827] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.046935][ T827] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.946578][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.