last executing test programs: 3.18351915s ago: executing program 2 (id=373): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000440)='./bus\x00', 0x14b2fe, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x6ca081, 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) 2.650523703s ago: executing program 1 (id=379): socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.581277009s ago: executing program 1 (id=380): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="0100000000000000fb7f8ade3b0f70170480"], 0x18}}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x208802) dup2(r2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@remote, @random="d311282e7263", @void, {@canfd={0xd, {{0x0, 0x0, 0x0, 0x1}, 0x35, 0x1, 0x0, 0x0, "15cb91b483712639ff6c9940562c04f3aa88a8fb388a11dc531524cf209b7779d305f549fa089c62a91c482247bade8eb00c22d3d9b3b540a3b2c8ee1e1ec77d"}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x98, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r7, 0xffffffffffffffff, 0x0) 2.384116795s ago: executing program 2 (id=383): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5d4}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000001240)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@nolazytime}, {@noinit_itable}]}, 0x8, 0x60b, &(0x7f0000001b40)="$eJzs3c9vFGUfAPDvTH/Svu/bQt6oeJAmxkCitLSAIcZEejcEf/wDlRZCKJS0NbFIQkn0aLx4MPHkQfwvlMSb8eDVgxdPhoQYw0EMkTWznSnb7e7SX9sp3c8nWTrPzHaeZ5Z++33m6TMzAXSskeyfNOJwRFxPIoZqtnVHvnFk5X0P/rx5IXslUam890cSN28ly7X7SvKvg/k3/zMUyc9pxKGu9fUuLN24MjU7OzOfl8cWr14fW1i6cfzy1alLM5dmrk28PnHm9KnTZ8ZPbOv4ehqs++arR8n4t7+eS+JsPM7blh1X/fv6tlVz9pmNRGXFw9r12ed6Zpv73iv+Gip+Tp5I6lewZ13M4zaLk+djKLpq/jeH4tN3Sm0c0FaVJIocBXScpEn8/zjZ6jdDf9vaA+yWoh9QnNs3Og9eL21zrwTYDfcnVwakVmK/JyKK+O9eGRuM/urYwMCDZM04TxIR2xuZW5HV8dMP5z7JXtFkHA5oj+XbxSh3ff5PqrE5HP3V0sCDdG38L1cqad4TyNa/u8X6R+rK4h92z/LtiHghz/+9seH4T/PYLeL/gy3WL/4BAAAAAABg59ydjIjXGs3/S1fn//Q2mP8zGBFnd6D+p//9L72XLyQ7UB1Q4/5kxJsN5/+uzvEd7spL/63OB+hJLl6enTkREf+LiGPR05eVx+v2WztD+Phnh75sVn/t/L/sldVfzAXM93Svu+5C3OmpxantHjcQcf92xIvV+b9H8jVr5/9k+T9pkP+z+L6+wToOvXLnfLNtT49/oF0qX0ccbZj/n3S3k9b35xir9gfGil7Bei99/Pl3zeoX/1CeLP8PtI7/vqT2fj0Lm9t/b0ScXOquNNu+1f5/b/J+V7H/zEdTi4vz4xG9ydvr109srs2wXxXxUMRLFv/HXm49/rfa/6+JwwMRsbzBOp97PPhbs23yP5Qni//p1vl/eG3+3/zCxJ3h75vVf35D+f9UNacfy9cY/4Na6+/HsdEALaW5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCMSyPiP5Gko6vLaTo6GjEYEf+PgXR2bmHx1YtzH16bzrZVn/+fFk/6HVopJ8Xz/4dryhN15ZMRcTAivug6UC2PXpibnS774AEAAAAAAAAAAAAAAAAAAGCPGKxe81/pq7/+P/N7V9mtA9quO/8q3qHzdG/5Oyt9O9oQYNdtPf6BZ1h2zr+J+O9pZ1uAEjSP/4ePKlW72hxgF+n/Q+faYvz7cwHsA/I/dKoNjun1t7sdQBnkfwAAAAAA2FcOHrn7SxIRy28cqL4yvfk2k/1hf0vLbgBQGnN4oXN1z5XdAqAszvGBZHXp74YX+zef/Z+0p0EAAAAAAAAAAAAAwDpHD7v+HzpV6+v/ze2H/azF9f+Ngt/tAmAfaf7oD7kf9jvn+MDTsr3r/wEAAAAAAAAAAABgD+i/cWVqdnZmfmHp2Vt4a280Y3MLy1N7ohmbWKjcimj9nsftqb0nIvbKhzC/kLVmt+oqbsFR4iGX/HsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY9W8AAAD//yF2IgQ=") r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5}]}]}, 0x44}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381"], 0xfdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800"], 0x44}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r8, 0x0, r10, 0x0, 0x4ffe2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x41009432, 0x0) setgroups(0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, r4]) stat(&(0x7f0000002180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000100), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x400, &(0x7f0000002280)={'trans=xen,', {[{@noextend}, {@cache_loose}, {@aname={'aname', 0x3d, '}:$\'!'}}, {@access_any}, {@access_uid={'access', 0x3d, r2}}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@mmap}, {@dfltgid={'dfltgid', 0x3d, r11}}, {@access_client}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x64, 0x30, 0x31, 0x37, 0x33, 0x31, 0x4], 0x2d, [0x38, 0x36, 0x66, 0x4614042df910169f], 0x2d, [0x66, 0x33, 0x65, 0x61], 0x2d, [0x38, 0x64, 0x38, 0x66], 0x2d, [0x37, 0x62, 0x32, 0x39, 0x31, 0x32, 0x99154db9a3a61a79, 0x39]}}}, {@obj_type={'obj_type', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@euid_gt={'euid>', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@measure}]}}) 1.775472545s ago: executing program 1 (id=394): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) r0 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1866, &(0x7f0000000540), 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184d, 0x0, 0x0, 0x0, 0x0) 1.756561897s ago: executing program 1 (id=395): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001200010300000000fd08000000000000000200"/46, @ANYRESOCT], 0x4c}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000200)={0xa000000a}) finit_module(r4, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYRES16=r7, @ANYBLOB="0000fe000000000008000d000000000014001680100001dbf65017430d2e7398715e314d6f07150daa7afeb109bc2774010a764cc6dfe70ab1148613aa5406849bae55c5a32f78196b128cb067230c6ad635281de2fd9e7aed1c1cba0aac3fb6f68a033ecd4d81ec038ddd7f6ca2fc7b1815aa866ccf63bce40371ecaa5bba2a41d8d2fbdd6cc23bd764ac0b0960c599c708daba66cd56903db7d09347ab3e2bb4047b85e454b757aa000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24004000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x7, 0x0, &(0x7f0000000180)) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000200)={0xffffffffffffffff}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_START_POLL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000002000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 1.531370115s ago: executing program 2 (id=396): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x400, 0x0) open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) ftruncate(r0, 0x81fd) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000580), 0x1670e68) rmdir(&(0x7f0000000180)='./file0\x00') socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002740)=ANY=[@ANYBLOB="3c02000019000100000000000000000020010000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020084011000ac"], 0x23c}}, 0x0) 1.323965792s ago: executing program 2 (id=402): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x7, &(0x7f0000000000)=[{0x73, 0x20, 0xa1, 0x5b}, {0x8, 0x3f, 0x3, 0x2}, {0x8, 0x9, 0x4, 0x2}, {0xd5c, 0x3, 0xf6, 0x200}, {0x0, 0x2, 0x0, 0x7}, {0x5, 0x5, 0x3f, 0x1}, {0x1, 0x0, 0x1f, 0x14}]}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0xfffc, 0x5, @loopback}}, 0x0, 0x0, 0x6, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f039802572c070000007692efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000080), 0x2f, 0x4fd, &(0x7f0000000100)="$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") clock_nanosleep(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "0000000000f4ffffffff00"}) r4 = syz_open_pts(0xffffffffffffffff, 0x82101) r5 = dup3(r4, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000001680)=[{&(0x7f0000001280)='7', 0x1}], 0x1) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e14060ec00000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000000}, 0x108030, 0x0, 0x0, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000640)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) getsockopt$llc_int(r6, 0x10c, 0x7, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1.161317315s ago: executing program 4 (id=405): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) r0 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1866, &(0x7f0000000540), &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184d, 0x0, 0x0, 0x0, 0x0) 1.160995365s ago: executing program 4 (id=406): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x7, &(0x7f0000000000)=[{0x73, 0x20, 0xa1, 0x5b}, {0x8, 0x3f, 0x3, 0x2}, {0x8, 0x9, 0x4, 0x2}, {0xd5c, 0x3, 0xf6, 0x200}, {0x0, 0x2, 0x0, 0x7}, {0x5, 0x5, 0x3f, 0x1}, {0x1, 0x0, 0x1f, 0x14}]}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0xfffc, 0x5, @loopback}}, 0x0, 0x0, 0x6, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f039802572c070000007692efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000080), 0x2f, 0x4fd, &(0x7f0000000100)="$eJzs3dFrW18dAPDvvW1+v3XrTKc+zIFzuEk3dGm7uq34MB2IPg3U+T5rm5XStBltuq1luA7/AEFEBUH0RV8E/4CB7E8QYaDvoqKIbvrgw/RKkpu6ZUlbXdor7ecDp/ecw7n5npM0J/fce0kCOLLORcTNiMjSLLsUEeW8Ps1TbLVTs93LF4/mmimJLLv9l5FI8rpms2b+/XzfE/luxyLiK1+M+Hrydty1jc2l2VqtupqXJxrLyass27y8uDy7UF2orkxPT12buT5zdWZyIOMci4gbn//Dd7/10y/c+MWnHvz2zp8ufqM9wLbOOAYtiZG36oYjYnU/ghWkOZ5Snr+6W+Mn+98fAAD6ax7vfzAiPh4Rl6IcQ62jOQAAAOAwyT47Gq+SiAwAAAA4tNKIGI0kreT3+45GmlYq7Xt4PxzH01p9rfHJrLx9vmAsSundxVp1Mr93YCxKSbM8ld9j2ylf6SpPR8SpiPhOeaRVrszVa/OFnvkAAACAo+NE1/r/7+X2+h8AAAA4ZMaK7gAAAACw76z/AQAA4PCz/gcAAIBD7Uu3bjVT1vn96/n7G+tL9fuX56trS5Xl9bnKXH31XmWhXl9ofWff8m6PV6vX7306VtYfTjSqa42JtY3NO8v19ZXGncXWz4EDAAAABTj1sWe/SSJi6zMjaafuvXxbisiG8vzTn/zwdDE9BPZL+t80/v3+9QM4eENFdwAozHDRHQAKUyq6A0Dh3p4H3jwy6Hvzzi93f+zkVZb9j90CAAAGaPwj29f/Wyleu/6fPC60a8A+y6//J0nRHQEOnOv/cHS5/gdHV2mnIwCLAjj00j281d/l+n+bewAAAKBoo62UpJV8HTAaaVqpRJxs/SxAKbm7WKtORsQHIuLX5dL7zfJUa8/E6QEAAAAAAAAAAAAAAAAAAAAAAAAA2KMsSyIDAAAADrWI9I9J6zzAUIyXL4x2nx94L/lHubWNiAc/uP29h7ONxupUs/6v2/WN7+f1V4o4gwEAAAB066zTO+t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABikly8ezXXSQcb9882IGOsVfziOtbbHohQRx/+WxPBr+yURMTSA+FtPIuJ0r/hJs1sxlveiO34aESMFxz8xgPhwlD1rzj+f6/X+S+Nca9v7/Tecp3fVf/5Lt+e/oT7z38k9xjjz/OcTfeM/iTgz3Hv+6cRP+sQ/v3PYUifzta9ubvZrlP04Yrzn50/yRqyJxvK9ibWNzcuLy7ML1YXqyvT01LWZ6zNXZyYn7i7WqvnfnjG+/dGn/9pp/Mf7xB/bZfwXdh7/tn8+f/jiQ13PSXTKP8qyi+d7v/6nW9ty1h2/89n3ifxzoFke7+S32vnXnf3Zr87uNP75PuPf7fW/uMfxX/ryN3+3x6YAwAFY29hcmq3VqqsyRyYzssfG2eP2/8i7Bx2JAxzgbPyfPM/503eQYx9gpshZCQAA2A//OegvuicAAAAAAAAAAAAAAAAAAABwdO32NWAxgK8T6465VcxQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB29O8AAAD//7fE3E8=") clock_nanosleep(0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "0000000000f4ffffffff00"}) r4 = syz_open_pts(r3, 0x82101) r5 = dup3(r4, r3, 0x0) writev(r5, &(0x7f0000001680)=[{&(0x7f0000001280)='7', 0x1}], 0x1) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e14060ec00000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000000}, 0x108030, 0x0, 0x0, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000640)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r7, 0xcd977000) getsockopt$llc_int(r6, 0x10c, 0x7, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r1, 0x6, 0x33, &(0x7f0000000680)=0x200, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1.095321731s ago: executing program 2 (id=408): sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x44}}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x4020400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.003067628s ago: executing program 3 (id=412): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="0100000000000000fb7f8ade3b0f70170480"], 0x18}}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x208802) dup2(r2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@remote, @random="d311282e7263", @void, {@canfd={0xd, {{0x0, 0x0, 0x0, 0x1}, 0x35, 0x1, 0x0, 0x0, "15cb91b483712639ff6c9940562c04f3aa88a8fb388a11dc531524cf209b7779d305f549fa089c62a91c482247bade8eb00c22d3d9b3b540a3b2c8ee1e1ec77d"}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000340)="6cf798") ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="880000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006000128009000100766c616e00000000500002800600010000000000040003800c00020004000000000000000c000200540a000018000000280004000000010005000000000000000c00010000000000000000000c0001007fae00000100000008000500", @ANYRES32=r7], 0x88}, 0x1, 0xba01}, 0x0) 1.002413438s ago: executing program 3 (id=413): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001200010300000000fd08000000000000000200"/46, @ANYRESOCT], 0x4c}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000200)={0xa000000a}) finit_module(r4, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYRES16=r6, @ANYBLOB="0000fe000000000008000d000000000014001680100001dbf65017430d2e7398715e314d6f07150daa7afeb109bc2774010a764cc6dfe70ab1148613aa5406849bae55c5a32f78196b128cb067230c6ad635281de2fd9e7aed1c1cba0aac3fb6f68a033ecd4d81ec038ddd7f6ca2fc7b1815aa866ccf63bce40371ecaa5bba2a41d8d2fbdd6cc23bd764ac0b0960c599c708daba66cd56903db7d09347ab3e2bb4047b85e454b757aa000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24004000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x7, 0x0, &(0x7f0000000180)) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000200)={0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_START_POLL(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000002000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 908.705716ms ago: executing program 3 (id=414): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) fsync(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000dc0), 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) 908.176016ms ago: executing program 1 (id=415): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@newlink={0x20}, 0x20}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000) 881.030888ms ago: executing program 3 (id=416): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) r0 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1866, &(0x7f0000000540), &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184d, 0x0, 0x0, 0x0, 0x0) 825.386763ms ago: executing program 3 (id=417): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000440)='./bus\x00', 0x14b2fe, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x6ca081, 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) 309.474975ms ago: executing program 4 (id=418): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x400, 0x0) open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) ftruncate(r0, 0x81fd) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000580), 0x1670e68) rmdir(&(0x7f0000000180)='./file0\x00') socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002740)=ANY=[@ANYBLOB="3c02000019000100000000000000000020010000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020084011000ac"], 0x23c}}, 0x0) 233.874291ms ago: executing program 0 (id=419): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) mount$9p_xen(0x0, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={'trans=xen,', {[], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x64, 0x30, 0x31, 0x37, 0x33, 0x31, 0x4], 0x2d, [0x38, 0x36, 0x66, 0x4614042df910169f], 0x2d, [0x66, 0x33, 0x65, 0x61], 0x2d, [0x38, 0x64, 0x38, 0x66], 0x2d, [0x37, 0x62, 0x32, 0x39, 0x31, 0x32, 0x99154db9a3a61a79, 0x39]}}}]}}) 233.525191ms ago: executing program 2 (id=420): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r2, &(0x7f0000000300)=""/150, 0x96, 0x0) 233.037051ms ago: executing program 3 (id=421): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa12, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000380), 0x45, 0x7ac, &(0x7f0000000f80)="$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") iopl(0x3) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) 202.301254ms ago: executing program 0 (id=422): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) write$evdev(r0, &(0x7f0000000540)=[{{0x0, 0xea60}, 0x5, 0x6e7, 0x4}, {{0x77359400}, 0x11, 0x401, 0x7}, {{0x77359400}, 0x12, 0x1}], 0x48) 145.180798ms ago: executing program 0 (id=423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) lstat(&(0x7f0000002240)='./bus\x00', &(0x7f0000002280)) 144.598529ms ago: executing program 0 (id=424): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="0100000000000000fb7f8ade3b0f70170480"], 0x18}}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x208802) dup2(r2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@remote, @random="d311282e7263", @void, {@canfd={0xd, {{0x0, 0x0, 0x0, 0x1}, 0x35, 0x1, 0x0, 0x0, "15cb91b483712639ff6c9940562c04f3aa88a8fb388a11dc531524cf209b7779d305f549fa089c62a91c482247bade8eb00c22d3d9b3b540a3b2c8ee1e1ec77d"}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000340)="6cf798") ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="880000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006000128009000100766c616e00000000500002800600010000000000040003800c00020004000000000000000c000200540a000018000000280004000000010005000000000000000c00010000000000000000000c0001007fae00000100000008000500", @ANYRES32=r7], 0x88}, 0x1, 0xba01}, 0x0) 141.931628ms ago: executing program 0 (id=425): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x7, &(0x7f0000000000)=[{0x73, 0x20, 0xa1, 0x5b}, {0x8, 0x3f, 0x3, 0x2}, {0x8, 0x9, 0x4, 0x2}, {0xd5c, 0x3, 0xf6, 0x200}, {0x0, 0x2, 0x0, 0x7}, {0x5, 0x5, 0x3f, 0x1}, {0x1, 0x0, 0x1f, 0x14}]}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0xfffc, 0x5, @loopback}}, 0x0, 0x0, 0x6, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f039802572c070000007692efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000080), 0x2f, 0x4fd, &(0x7f0000000100)="$eJzs3dFrW18dAPDvvW1+v3XrTKc+zIFzuEk3dGm7uq34MB2IPg3U+T5rm5XStBltuq1luA7/AEFEBUH0RV8E/4CB7E8QYaDvoqKIbvrgw/RKkpu6ZUlbXdor7ecDp/ecw7n5npM0J/fce0kCOLLORcTNiMjSLLsUEeW8Ps1TbLVTs93LF4/mmimJLLv9l5FI8rpms2b+/XzfE/luxyLiK1+M+Hrydty1jc2l2VqtupqXJxrLyass27y8uDy7UF2orkxPT12buT5zdWZyIOMci4gbn//Dd7/10y/c+MWnHvz2zp8ufqM9wLbOOAYtiZG36oYjYnU/ghWkOZ5Snr+6W+Mn+98fAAD6ax7vfzAiPh4Rl6IcQ62jOQAAAOAwyT47Gq+SiAwAAAA4tNKIGI0kreT3+45GmlYq7Xt4PxzH01p9rfHJrLx9vmAsSundxVp1Mr93YCxKSbM8ld9j2ylf6SpPR8SpiPhOeaRVrszVa/OFnvkAAACAo+NE1/r/7+X2+h8AAAA4ZMaK7gAAAACw76z/AQAA4PCz/gcAAIBD7Uu3bjVT1vn96/n7G+tL9fuX56trS5Xl9bnKXH31XmWhXl9ofWff8m6PV6vX7306VtYfTjSqa42JtY3NO8v19ZXGncXWz4EDAAAABTj1sWe/SSJi6zMjaafuvXxbisiG8vzTn/zwdDE9BPZL+t80/v3+9QM4eENFdwAozHDRHQAKUyq6A0Dh3p4H3jwy6Hvzzi93f+zkVZb9j90CAAAGaPwj29f/Wyleu/6fPC60a8A+y6//J0nRHQEOnOv/cHS5/gdHV2mnIwCLAjj00j281d/l+n+bewAAAKBoo62UpJV8HTAaaVqpRJxs/SxAKbm7WKtORsQHIuLX5dL7zfJUa8/E6QEAAAAAAAAAAAAAAAAAAAAAAAAA2KMsSyIDAAAADrWI9I9J6zzAUIyXL4x2nx94L/lHubWNiAc/uP29h7ONxupUs/6v2/WN7+f1V4o4gwEAAAB066zTO+t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABikly8ezXXSQcb9882IGOsVfziOtbbHohQRx/+WxPBr+yURMTSA+FtPIuJ0r/hJs1sxlveiO34aESMFxz8xgPhwlD1rzj+f6/X+S+Nca9v7/Tecp3fVf/5Lt+e/oT7z38k9xjjz/OcTfeM/iTgz3Hv+6cRP+sQ/v3PYUifzta9ubvZrlP04Yrzn50/yRqyJxvK9ibWNzcuLy7ML1YXqyvT01LWZ6zNXZyYn7i7WqvnfnjG+/dGn/9pp/Mf7xB/bZfwXdh7/tn8+f/jiQ13PSXTKP8qyi+d7v/6nW9ty1h2/89n3ifxzoFke7+S32vnXnf3Zr87uNP75PuPf7fW/uMfxX/ryN3+3x6YAwAFY29hcmq3VqqsyRyYzssfG2eP2/8i7Bx2JAxzgbPyfPM/503eQYx9gpshZCQAA2A//OegvuicAAAAAAAAAAAAAAAAAAABwdO32NWAxgK8T6465VcxQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB29O8AAAD//7fE3E8=") clock_nanosleep(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "0000000000f4ffffffff00"}) r4 = syz_open_pts(0xffffffffffffffff, 0x82101) r5 = dup3(r4, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000001680)=[{&(0x7f0000001280)='7', 0x1}], 0x1) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e14060ec00000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000000}, 0x108030, 0x0, 0x0, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000640)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) getsockopt$llc_int(r6, 0x10c, 0x7, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 137.916128ms ago: executing program 4 (id=426): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) fsync(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000dc0), 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) 44.745316ms ago: executing program 4 (id=427): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) r0 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1866, &(0x7f0000000540), &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184d, 0x0, 0x0, 0x0, 0x0) 2.38753ms ago: executing program 1 (id=428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x7, &(0x7f0000000000)=[{0x73, 0x20, 0xa1, 0x5b}, {0x8, 0x3f, 0x3, 0x2}, {0x8, 0x9, 0x4, 0x2}, {0xd5c, 0x3, 0xf6, 0x200}, {0x0, 0x2, 0x0, 0x7}, {0x5, 0x5, 0x3f, 0x1}, {0x1, 0x0, 0x1f, 0x14}]}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0xfffc, 0x5, @loopback}}, 0x0, 0x0, 0x6, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f039802572c070000007692efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000080), 0x2f, 0x4fd, &(0x7f0000000100)="$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") clock_nanosleep(0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "0000000000f4ffffffff00"}) r4 = syz_open_pts(r3, 0x82101) r5 = dup3(r4, r3, 0x0) writev(r5, &(0x7f0000001680)=[{&(0x7f0000001280)='7', 0x1}], 0x1) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e14060ec00000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000000}, 0x108030, 0x0, 0x0, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000640)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r7, 0xcd977000) getsockopt$llc_int(r6, 0x10c, 0x7, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r1, 0x6, 0x33, &(0x7f0000000680)=0x200, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1.51892ms ago: executing program 4 (id=429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x7, &(0x7f0000000000)=[{0x73, 0x20, 0xa1, 0x5b}, {0x8, 0x3f, 0x3, 0x2}, {0x8, 0x9, 0x4, 0x2}, {0xd5c, 0x3, 0xf6, 0x200}, {0x0, 0x2, 0x0, 0x7}, {0x5, 0x5, 0x3f, 0x1}, {0x1, 0x0, 0x1f, 0x14}]}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0xfffc, 0x5, @loopback}}, 0x0, 0x0, 0x6, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f039802572c070000007692efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000080), 0x2f, 0x4fd, &(0x7f0000000100)="$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") clock_nanosleep(0x0, 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "0000000000f4ffffffff00"}) r4 = syz_open_pts(0xffffffffffffffff, 0x82101) r5 = dup3(r4, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000001680)=[{&(0x7f0000001280)='7', 0x1}], 0x1) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e14060ec00000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000000}, 0x108030, 0x0, 0x0, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000640)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0xcd977000) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 0s ago: executing program 0 (id=430): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5d4}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000001240)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@nolazytime}, {@noinit_itable}]}, 0x8, 0x60b, &(0x7f0000001b40)="$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") r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5}]}]}, 0x44}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381"], 0xfdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800"], 0x44}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x4ffe2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x41009432, 0x0) setgroups(0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, r3]) stat(&(0x7f0000002180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000100), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x400, &(0x7f0000002280)={'trans=xen,', {[{@noextend}, {@cache_loose}, {@aname={'aname', 0x3d, '}:$\'!'}}, {@access_any}, {@access_uid={'access', 0x3d, r1}}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@mmap}, {@dfltgid={'dfltgid', 0x3d, r10}}, {@access_client}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x64, 0x30, 0x31, 0x37, 0x33, 0x31, 0x4], 0x2d, [0x38, 0x36, 0x66, 0x4614042df910169f], 0x2d, [0x66, 0x33, 0x65, 0x61], 0x2d, [0x38, 0x64, 0x38, 0x66], 0x2d, [0x37, 0x62, 0x32, 0x39, 0x31, 0x32, 0x99154db9a3a61a79, 0x39]}}}, {@obj_type={'obj_type', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@euid_gt={'euid>', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@measure}]}}) kernel console output (not intermixed with test programs): [ 16.274285][ T29] audit: type=1400 audit(1722305071.418:79): avc: denied { rlimitinh } for pid=3139 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.278098][ T29] audit: type=1400 audit(1722305071.418:80): avc: denied { siginh } for pid=3139 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.688970][ T3140] sshd (3140) used greatest stack depth: 11368 bytes left [ 18.447680][ T29] audit: type=1400 audit(1722305073.598:81): avc: denied { read } for pid=2943 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. [ 23.381945][ T29] audit: type=1400 audit(1722305078.528:82): avc: denied { mounton } for pid=3249 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.382916][ T3249] cgroup: Unknown subsys name 'net' [ 23.404730][ T29] audit: type=1400 audit(1722305078.528:83): avc: denied { mount } for pid=3249 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.432090][ T29] audit: type=1400 audit(1722305078.558:84): avc: denied { unmount } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.597384][ T3249] cgroup: Unknown subsys name 'rlimit' [ 23.689267][ T29] audit: type=1400 audit(1722305078.838:85): avc: denied { setattr } for pid=3249 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.714436][ T29] audit: type=1400 audit(1722305078.838:86): avc: denied { create } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.720350][ T3251] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.734971][ T29] audit: type=1400 audit(1722305078.838:87): avc: denied { write } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.763897][ T29] audit: type=1400 audit(1722305078.838:88): avc: denied { read } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.784148][ T29] audit: type=1400 audit(1722305078.838:89): avc: denied { mounton } for pid=3249 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.809073][ T29] audit: type=1400 audit(1722305078.838:90): avc: denied { mount } for pid=3249 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.832877][ T29] audit: type=1400 audit(1722305078.898:91): avc: denied { relabelto } for pid=3251 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.862006][ T3249] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.872539][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 24.938282][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 24.985304][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.992408][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.999943][ T3259] bridge_slave_0: entered allmulticast mode [ 25.006400][ T3259] bridge_slave_0: entered promiscuous mode [ 25.014365][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.021506][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.028920][ T3259] bridge_slave_1: entered allmulticast mode [ 25.035192][ T3259] bridge_slave_1: entered promiscuous mode [ 25.050899][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 25.071094][ T3263] chnl_net:caif_netlink_parms(): no params data found [ 25.089229][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.096318][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.103466][ T3260] bridge_slave_0: entered allmulticast mode [ 25.109911][ T3260] bridge_slave_0: entered promiscuous mode [ 25.117354][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.130239][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.145249][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 25.156706][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.163759][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.171058][ T3260] bridge_slave_1: entered allmulticast mode [ 25.177331][ T3260] bridge_slave_1: entered promiscuous mode [ 25.209148][ T3259] team0: Port device team_slave_0 added [ 25.232601][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.242337][ T3259] team0: Port device team_slave_1 added [ 25.257578][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.266722][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.273764][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.281091][ T3266] bridge_slave_0: entered allmulticast mode [ 25.287571][ T3266] bridge_slave_0: entered promiscuous mode [ 25.309765][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.316845][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.323960][ T3266] bridge_slave_1: entered allmulticast mode [ 25.330322][ T3266] bridge_slave_1: entered promiscuous mode [ 25.352128][ T3260] team0: Port device team_slave_0 added [ 25.358728][ T3260] team0: Port device team_slave_1 added [ 25.369006][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.375972][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.401873][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.426378][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.435892][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.442828][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.468728][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.479501][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.486662][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.493803][ T3263] bridge_slave_0: entered allmulticast mode [ 25.500104][ T3263] bridge_slave_0: entered promiscuous mode [ 25.516340][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.537934][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.544995][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.552225][ T3263] bridge_slave_1: entered allmulticast mode [ 25.558753][ T3263] bridge_slave_1: entered promiscuous mode [ 25.564860][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.572000][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.579272][ T3264] bridge_slave_0: entered allmulticast mode [ 25.585804][ T3264] bridge_slave_0: entered promiscuous mode [ 25.592244][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.599323][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.625221][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.637006][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.643948][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.669947][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.681136][ T3266] team0: Port device team_slave_0 added [ 25.691431][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.698580][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.705665][ T3264] bridge_slave_1: entered allmulticast mode [ 25.712098][ T3264] bridge_slave_1: entered promiscuous mode [ 25.726102][ T3266] team0: Port device team_slave_1 added [ 25.741708][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.764412][ T3259] hsr_slave_0: entered promiscuous mode [ 25.770278][ T3259] hsr_slave_1: entered promiscuous mode [ 25.781943][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.791286][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.798271][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.824241][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.835781][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.856477][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.863418][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.889339][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.900747][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.925762][ T3263] team0: Port device team_slave_0 added [ 25.932337][ T3263] team0: Port device team_slave_1 added [ 25.954311][ T3260] hsr_slave_0: entered promiscuous mode [ 25.960272][ T3260] hsr_slave_1: entered promiscuous mode [ 25.966327][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.973950][ T3260] Cannot create hsr debugfs directory [ 25.989088][ T3264] team0: Port device team_slave_0 added [ 25.994992][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.001987][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.027877][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.048719][ T3264] team0: Port device team_slave_1 added [ 26.054778][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.061720][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.087647][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.114184][ T3266] hsr_slave_0: entered promiscuous mode [ 26.120232][ T3266] hsr_slave_1: entered promiscuous mode [ 26.126232][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.133768][ T3266] Cannot create hsr debugfs directory [ 26.187930][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.194884][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.220973][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.233704][ T3263] hsr_slave_0: entered promiscuous mode [ 26.239884][ T3263] hsr_slave_1: entered promiscuous mode [ 26.245969][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.253523][ T3263] Cannot create hsr debugfs directory [ 26.271340][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.278332][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.304277][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.374080][ T3264] hsr_slave_0: entered promiscuous mode [ 26.380416][ T3264] hsr_slave_1: entered promiscuous mode [ 26.386342][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.393870][ T3264] Cannot create hsr debugfs directory [ 26.467558][ T3259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.477828][ T3259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.490209][ T3259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.500422][ T3259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.530163][ T3266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.540795][ T3266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.550879][ T3266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.561328][ T3266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.586866][ T3260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.599852][ T3260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.608395][ T3260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.621133][ T3260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.663517][ T3263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.672366][ T3263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.687192][ T3264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.697173][ T3263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.705654][ T3263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.716773][ T3264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.725274][ T3264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.733575][ T3264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.750690][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.791795][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.814665][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.831692][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.838768][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.851273][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.863271][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.870404][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.893931][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.902159][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.914745][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.925100][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.932193][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.940653][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.947722][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.967784][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.974820][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.988958][ T3263] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.003623][ T3259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.014060][ T3259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.027791][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.034844][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.044827][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.051911][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.061048][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.068123][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.097459][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.110303][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.132468][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.139555][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.148533][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.155560][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.174748][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.190948][ T3263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.230839][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.264170][ T3264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.294533][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.314866][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.328979][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.413427][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.443268][ T3266] veth0_vlan: entered promiscuous mode [ 27.455040][ T3259] veth0_vlan: entered promiscuous mode [ 27.467799][ T3259] veth1_vlan: entered promiscuous mode [ 27.494801][ T3266] veth1_vlan: entered promiscuous mode [ 27.523475][ T3259] veth0_macvtap: entered promiscuous mode [ 27.538815][ T3259] veth1_macvtap: entered promiscuous mode [ 27.550679][ T3266] veth0_macvtap: entered promiscuous mode [ 27.557719][ T3260] veth0_vlan: entered promiscuous mode [ 27.567914][ T3266] veth1_macvtap: entered promiscuous mode [ 27.590581][ T3260] veth1_vlan: entered promiscuous mode [ 27.602970][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.610490][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.621089][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.631667][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.645162][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.653640][ T3266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.662474][ T3266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.671298][ T3266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.679997][ T3266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.690752][ T3264] veth0_vlan: entered promiscuous mode [ 27.709629][ T3263] veth0_vlan: entered promiscuous mode [ 27.718130][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.728678][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.739372][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.750323][ T3260] veth0_macvtap: entered promiscuous mode [ 27.757695][ T3264] veth1_vlan: entered promiscuous mode [ 27.769524][ T3259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.778253][ T3259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.786940][ T3259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.795718][ T3259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.809122][ T3260] veth1_macvtap: entered promiscuous mode [ 27.816811][ T3263] veth1_vlan: entered promiscuous mode [ 27.842496][ T3263] veth0_macvtap: entered promiscuous mode [ 27.851158][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.861658][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.871482][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.881984][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.899284][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.917148][ T3402] loop0: detected capacity change from 0 to 512 [ 27.920605][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.933856][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.933964][ T3402] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 27.943768][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.961647][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.973347][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.987082][ T3402] netlink: 'syz.0.6': attribute type 10 has an invalid length. [ 27.996521][ T3402] team0: Port device netdevsim1 added [ 28.003828][ T3260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.012600][ T3260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.021316][ T3260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.030064][ T3260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.047670][ T3405] loop3: detected capacity change from 0 to 512 [ 28.049998][ T3264] veth0_macvtap: entered promiscuous mode [ 28.062930][ T3264] veth1_macvtap: entered promiscuous mode [ 28.072229][ T3405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 28.074459][ T3402] netlink: 'syz.0.6': attribute type 10 has an invalid length. [ 28.094890][ T3405] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.101834][ T3402] team0: Port device netdevsim1 removed [ 28.113566][ T3402] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 28.120905][ T3405] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.4: Failed to acquire dquot type 1 [ 28.145736][ T3263] veth1_macvtap: entered promiscuous mode [ 28.157309][ T3411] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7'. [ 28.168370][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.178819][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.188753][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.199254][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.209187][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.219735][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.231777][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.244864][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.246096][ T3413] loop0: detected capacity change from 0 to 512 [ 28.255324][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.271405][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.281843][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.291681][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.302108][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.312059][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.322610][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.328200][ T3413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.334714][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.356089][ T3413] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.370504][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.380951][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.389197][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 28.390754][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.390767][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.390775][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.415761][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 28.415773][ T29] audit: type=1400 audit(1722305083.548:146): avc: denied { ioctl } for pid=3412 comm="syz.0.8" path="/3/bus/memory.stat" dev="loop0" ino=18 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.419944][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.481690][ T29] audit: type=1400 audit(1722305083.628:147): avc: denied { execute } for pid=3418 comm="syz.3.9" path="/1/cgroup.stat" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.516691][ T3421] program syz.3.10 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 28.535813][ T29] audit: type=1400 audit(1722305083.658:148): avc: denied { read write } for pid=3420 comm="syz.3.10" name="uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 28.553468][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.559098][ T29] audit: type=1400 audit(1722305083.658:149): avc: denied { open } for pid=3420 comm="syz.3.10" path="/dev/uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 28.589433][ T29] audit: type=1400 audit(1722305083.668:150): avc: denied { read } for pid=3420 comm="syz.3.10" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 28.612915][ T29] audit: type=1400 audit(1722305083.668:151): avc: denied { open } for pid=3420 comm="syz.3.10" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 28.643064][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.653615][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.663591][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.674111][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.683927][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.694403][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.704237][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.714834][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.728659][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.736987][ T29] audit: type=1400 audit(1722305083.788:152): avc: denied { map_read map_write } for pid=3412 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.739096][ T3264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.756497][ T29] audit: type=1400 audit(1722305083.788:153): avc: denied { prog_run } for pid=3412 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.765176][ T3264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.765206][ T3264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.783786][ T29] audit: type=1400 audit(1722305083.788:154): avc: denied { mounton } for pid=3412 comm="syz.0.8" path="/3/bus/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.792456][ T3264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.875432][ T3263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.884429][ T3263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.893301][ T3263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.902119][ T3263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.938898][ T29] audit: type=1400 audit(1722305084.088:155): avc: denied { create } for pid=3426 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.062793][ T3440] loop4: detected capacity change from 0 to 128 [ 29.105055][ T3446] loop2: detected capacity change from 0 to 512 [ 29.118135][ T3445] loop1: detected capacity change from 0 to 512 [ 29.134171][ T3440] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.145975][ T3446] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 29.164167][ T3446] netlink: 'syz.2.15': attribute type 10 has an invalid length. [ 29.166183][ T3440] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 29.180491][ T3440] FAT-fs (loop4): Filesystem has been set read-only [ 29.207852][ T3446] team0: Port device netdevsim1 added [ 29.215235][ T3446] netlink: 'syz.2.15': attribute type 10 has an invalid length. [ 29.234377][ T3445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 29.246264][ T3440] syz.4.5: attempt to access beyond end of device [ 29.246264][ T3440] loop4: rw=0, sector=97, nr_sectors = 128 limit=128 [ 29.251828][ T3445] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.268631][ T3440] syz.4.5: attempt to access beyond end of device [ 29.268631][ T3440] loop4: rw=1, sector=225, nr_sectors = 816 limit=128 [ 29.289137][ T3446] team0: Port device netdevsim1 removed [ 29.307935][ T3446] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 29.345035][ T3445] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.16: Failed to acquire dquot type 1 [ 29.374411][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.375527][ T3452] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17'. [ 29.393809][ C0] hrtimer: interrupt took 26961 ns [ 29.397751][ T2961] udevd[2961]: worker [3253] terminated by signal 33 (Unknown signal 33) [ 29.450559][ T3464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.476609][ T3464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.481911][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 29.506852][ T3464] loop0: detected capacity change from 0 to 1024 [ 29.533611][ T3464] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.558382][ T3480] bond0: entered promiscuous mode [ 29.563512][ T3480] bond0: entered allmulticast mode [ 29.588629][ T3480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 29.600536][ T3483] loop1: detected capacity change from 0 to 1024 [ 29.611741][ T3464] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.615870][ T3483] EXT4-fs: Ignoring removed oldalloc option [ 29.635007][ T3483] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 29.651128][ C0] eth0: bad gso: type: 1, size: 1408 [ 29.677344][ T3493] loop4: detected capacity change from 0 to 512 [ 29.687301][ T3493] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 29.697804][ T3483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.726341][ T3493] netlink: 'syz.4.30': attribute type 10 has an invalid length. [ 29.748322][ T3493] team0: Port device netdevsim1 added [ 29.782289][ T3493] netlink: 'syz.4.30': attribute type 10 has an invalid length. [ 29.797929][ T3493] team0: Port device netdevsim1 removed [ 29.805944][ T3493] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 29.835576][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.849855][ T3499] loop2: detected capacity change from 0 to 512 [ 29.885123][ T3502] loop1: detected capacity change from 0 to 1024 [ 29.902688][ T3506] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 29.902873][ T3499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 29.933214][ T3502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.943136][ T3502] syz.1.33: attempt to access beyond end of device [ 29.943136][ T3502] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 29.955849][ T3499] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.956026][ T3502] EXT4-fs (loop1): unable to read superblock [ 29.976219][ T3502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.33'. [ 30.052604][ T3499] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.32: Failed to acquire dquot type 1 [ 30.122946][ T3531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 30.135901][ T3531] serio: Serial port pts0 [ 30.160375][ T3537] program syz.3.44 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 30.201905][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 30.274175][ T3543] loop1: detected capacity change from 0 to 512 [ 30.288305][ T3543] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 30.304555][ T3543] netlink: 'syz.1.46': attribute type 10 has an invalid length. [ 30.327460][ T3543] team0: Port device netdevsim1 added [ 30.343463][ T3543] netlink: 'syz.1.46': attribute type 10 has an invalid length. [ 30.353912][ T3543] team0: Port device netdevsim1 removed [ 30.367238][ T3543] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 30.407988][ T3552] loop2: detected capacity change from 0 to 512 [ 30.420469][ T3552] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.436122][ T3552] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 30.454539][ T3552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 30.472758][ T3552] System zones: 1-12 [ 30.477103][ T3552] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.48: corrupted in-inode xattr: e_value size too large [ 30.495787][ T3552] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.48: couldn't read orphan inode 15 (err -117) [ 30.516224][ T3552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.552774][ T3552] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 30.571593][ T3552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.48'. [ 30.624806][ T3566] netlink: 'syz.1.53': attribute type 27 has an invalid length. [ 30.632512][ T3566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'. [ 30.742477][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.749823][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.854588][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.869965][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 30.936529][ T3566] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.945589][ T3566] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.954626][ T3566] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.963807][ T3566] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.011169][ T3566] syz.1.53 (3566) used greatest stack depth: 11304 bytes left [ 31.078373][ T3592] loop1: detected capacity change from 0 to 1024 [ 31.088311][ T3594] FAULT_INJECTION: forcing a failure. [ 31.088311][ T3594] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.089820][ T3592] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.101415][ T3594] CPU: 0 UID: 0 PID: 3594 Comm: syz.3.55 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 31.118451][ T3594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 31.128515][ T3594] Call Trace: [ 31.131783][ T3594] [ 31.134762][ T3594] dump_stack_lvl+0xf2/0x150 [ 31.139351][ T3594] dump_stack+0x15/0x20 [ 31.143518][ T3594] should_fail_ex+0x229/0x230 [ 31.148183][ T3594] should_fail+0xb/0x10 [ 31.152409][ T3594] should_fail_usercopy+0x1a/0x20 [ 31.157349][ T3592] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 31.157541][ T3594] _copy_from_user+0x1e/0xd0 [ 31.170862][ T3594] move_addr_to_kernel+0x82/0x120 [ 31.175960][ T3594] copy_msghdr_from_user+0x271/0x2a0 [ 31.181303][ T3594] __sys_sendmsg+0x17d/0x280 [ 31.185932][ T3594] __x64_sys_sendmsg+0x46/0x50 [ 31.190714][ T3594] x64_sys_call+0x26f8/0x2e00 [ 31.195394][ T3594] do_syscall_64+0xc9/0x1c0 [ 31.199900][ T3594] ? clear_bhb_loop+0x55/0xb0 [ 31.204578][ T3594] ? clear_bhb_loop+0x55/0xb0 [ 31.209253][ T3594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.215156][ T3594] RIP: 0033:0x7f18735b7299 [ 31.219557][ T3594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.239151][ T3594] RSP: 002b:00007f1872237048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 31.248054][ T3594] RAX: ffffffffffffffda RBX: 00007f1873745f80 RCX: 00007f18735b7299 [ 31.256017][ T3594] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 31.263999][ T3594] RBP: 00007f18722370a0 R08: 0000000000000000 R09: 0000000000000000 [ 31.271968][ T3594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.280078][ T3594] R13: 000000000000000b R14: 00007f1873745f80 R15: 00007ffc255aac48 [ 31.288098][ T3594] [ 31.319676][ T3599] loop3: detected capacity change from 0 to 512 [ 31.339331][ T3603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.59'. [ 31.350213][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.351004][ T3603] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 31.368698][ T3599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 31.378801][ T3603] loop1: detected capacity change from 0 to 128 [ 31.381333][ T3599] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.394514][ T3603] vfat: Unknown parameter '' [ 31.412095][ T3610] loop2: detected capacity change from 0 to 512 [ 31.416716][ T3599] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.57: Failed to acquire dquot type 1 [ 31.430774][ T3610] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.61: casefold flag without casefold feature [ 31.443584][ T3610] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.61: couldn't read orphan inode 15 (err -117) [ 31.456132][ T3610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.480262][ T3610] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.509489][ T3613] 9pnet: Could not find request transport: xen [ 31.558241][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 31.573915][ T3623] program syz.3.65 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 31.604407][ T3625] tipc: Enabling of bearer rejected, failed to enable media [ 31.613704][ T3625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'. [ 32.249393][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.403611][ T3646] 9pnet: Could not find request transport: xen [ 32.426767][ T3649] loop4: detected capacity change from 0 to 512 [ 32.437992][ T3649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 32.464598][ T3649] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.470365][ T3654] loop3: detected capacity change from 0 to 512 [ 32.484076][ T3654] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.497184][ T3654] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.510917][ T3654] EXT4-fs (loop3): 1 orphan inode deleted [ 32.512020][ T3649] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.75: Failed to acquire dquot type 1 [ 32.516773][ T3654] EXT4-fs (loop3): 1 truncate cleaned up [ 32.517035][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 32.536190][ T3654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.574765][ T3659] FAULT_INJECTION: forcing a failure. [ 32.574765][ T3659] name failslab, interval 1, probability 0, space 0, times 0 [ 32.587438][ T3659] CPU: 1 UID: 0 PID: 3659 Comm: syz.0.77 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 32.597945][ T3659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 32.608012][ T3659] Call Trace: [ 32.611325][ T3659] [ 32.614349][ T3659] dump_stack_lvl+0xf2/0x150 [ 32.619031][ T3659] dump_stack+0x15/0x20 [ 32.623231][ T3659] should_fail_ex+0x229/0x230 [ 32.627905][ T3659] ? selinux_bpf_map_create+0x35/0xd0 [ 32.633424][ T3659] should_failslab+0x8f/0xb0 [ 32.638014][ T3659] __kmalloc_cache_noprof+0x4b/0x2a0 [ 32.643293][ T3659] selinux_bpf_map_create+0x35/0xd0 [ 32.648560][ T3659] security_bpf_map_create+0x4a/0x80 [ 32.653849][ T3659] map_create+0xac4/0xb90 [ 32.658180][ T3659] __sys_bpf+0x667/0x7a0 [ 32.662417][ T3659] __x64_sys_bpf+0x43/0x50 [ 32.666825][ T3659] x64_sys_call+0x23d5/0x2e00 [ 32.671661][ T3659] do_syscall_64+0xc9/0x1c0 [ 32.676195][ T3659] ? clear_bhb_loop+0x55/0xb0 [ 32.680923][ T3659] ? clear_bhb_loop+0x55/0xb0 [ 32.685606][ T3659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.691489][ T3659] RIP: 0033:0x7f7511c07299 [ 32.695889][ T3659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.715628][ T3659] RSP: 002b:00007f7510887048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 32.724034][ T3659] RAX: ffffffffffffffda RBX: 00007f7511d95f80 RCX: 00007f7511c07299 [ 32.732557][ T3659] RDX: 0000000000000048 RSI: 0000000020000580 RDI: 0000000000000000 [ 32.740515][ T3659] RBP: 00007f75108870a0 R08: 0000000000000000 R09: 0000000000000000 [ 32.748547][ T3659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.756504][ T3659] R13: 000000000000000b R14: 00007f7511d95f80 R15: 00007ffced74d978 [ 32.764477][ T3659] [ 32.776184][ T3654] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 32.790814][ T3654] EXT4-fs (loop3): Remounting filesystem read-only [ 32.805788][ T3654] syz.3.76 (3654) used greatest stack depth: 10200 bytes left [ 32.815035][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.829916][ T3657] loop1: detected capacity change from 0 to 1024 [ 32.838586][ T3657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.865093][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 32.908837][ T3676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.84'. [ 33.046263][ T3681] loop3: detected capacity change from 0 to 2048 [ 33.067737][ T3681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.462272][ T3681] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.85: bg 0: block 234: padding at end of block bitmap is not set [ 33.477494][ T3681] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 33.490194][ T3681] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.490194][ T3681] [ 33.513234][ T3681] syz.3.85 (3681) used greatest stack depth: 10000 bytes left [ 33.613253][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 33.626171][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.626171][ T11] [ 33.636007][ T11] EXT4-fs (loop3): Total free blocks count 0 [ 33.641982][ T11] EXT4-fs (loop3): Free/Dirty block details [ 33.647884][ T11] EXT4-fs (loop3): free_blocks=0 [ 33.652842][ T11] EXT4-fs (loop3): dirty_blocks=6144 [ 33.658148][ T11] EXT4-fs (loop3): Block reservation details [ 33.717609][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.728156][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 33.728169][ T29] audit: type=1400 audit(1722305088.878:376): avc: denied { bind } for pid=3689 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.756665][ T29] audit: type=1400 audit(1722305088.908:377): avc: denied { connect } for pid=3689 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.786727][ T3692] loop2: detected capacity change from 0 to 512 [ 33.793713][ T3692] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 33.802297][ T29] audit: type=1400 audit(1722305088.938:378): avc: denied { create } for pid=3689 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 33.822588][ T29] audit: type=1400 audit(1722305088.958:379): avc: denied { write } for pid=3689 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 33.843084][ T29] audit: type=1400 audit(1722305088.958:380): avc: denied { nlmsg_read } for pid=3689 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 33.857404][ T3696] __nla_validate_parse: 1 callbacks suppressed [ 33.857417][ T3696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.88'. [ 33.870458][ T29] audit: type=1400 audit(1722305089.018:381): avc: denied { block_suspend } for pid=3689 comm="syz.3.86" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.885045][ T3698] loop4: detected capacity change from 0 to 512 [ 33.900669][ T29] audit: type=1400 audit(1722305089.048:382): avc: denied { module_load } for pid=3689 comm="syz.3.86" path="/sys/power/wakeup_count" dev="sysfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 33.908228][ T3692] netlink: 'syz.2.89': attribute type 10 has an invalid length. [ 33.939272][ T3698] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.91: casefold flag without casefold feature [ 33.951988][ T3698] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.91: couldn't read orphan inode 15 (err -117) [ 33.964100][ T3692] bond0: (slave netdevsim1): Releasing backup interface [ 33.964979][ T3698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.985468][ T3692] team0: Port device netdevsim1 added [ 33.993446][ T3696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.88'. [ 34.000555][ T3703] 9pnet: Could not find request transport: xen [ 34.008409][ T3701] netlink: 'syz.2.89': attribute type 10 has an invalid length. [ 34.025744][ T3701] team0: Port device netdevsim1 removed [ 34.033414][ T3701] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 34.069592][ T29] audit: type=1400 audit(1722305089.218:383): avc: denied { read } for pid=3711 comm="syz.2.95" name="rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.092369][ T29] audit: type=1400 audit(1722305089.218:384): avc: denied { open } for pid=3711 comm="syz.2.95" path="/dev/rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.188492][ T29] audit: type=1326 audit(1722305089.338:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.1.98" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa8bd27299 code=0x0 [ 34.663135][ T3730] loop0: detected capacity change from 0 to 2048 [ 34.677197][ T3730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.723716][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.787587][ T3739] 9pnet: Could not find request transport: xen [ 34.808843][ T3742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.105'. [ 34.820051][ T3742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.105'. [ 34.889072][ T3748] loop3: detected capacity change from 0 to 512 [ 34.918892][ T3748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 34.936153][ T3748] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.938258][ T3730] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.101: bg 0: block 234: padding at end of block bitmap is not set [ 34.964710][ T3748] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.107: Failed to acquire dquot type 1 [ 34.974738][ T3730] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 34.988417][ T3730] EXT4-fs (loop0): This should not happen!! Data will be lost [ 34.988417][ T3730] [ 35.069558][ T3764] loop2: detected capacity change from 0 to 512 [ 35.079121][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 35.093582][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 35.096688][ T3764] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.113: casefold flag without casefold feature [ 35.106354][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 35.106354][ T11] [ 35.106370][ T11] EXT4-fs (loop0): Total free blocks count 0 [ 35.134701][ T11] EXT4-fs (loop0): Free/Dirty block details [ 35.138950][ T3769] 9pnet: Could not find request transport: xen [ 35.140626][ T11] EXT4-fs (loop0): free_blocks=0 [ 35.151682][ T11] EXT4-fs (loop0): dirty_blocks=6144 [ 35.153805][ T3764] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.113: couldn't read orphan inode 15 (err -117) [ 35.156978][ T11] EXT4-fs (loop0): Block reservation details [ 35.178437][ T3764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.199711][ T3775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.117'. [ 35.229637][ T3775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.117'. [ 35.288473][ T3789] loop1: detected capacity change from 0 to 512 [ 35.297039][ T3789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 35.310278][ T3789] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.332679][ T3789] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.122: Failed to acquire dquot type 1 [ 35.445770][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 35.902159][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.014361][ T3801] loop2: detected capacity change from 0 to 2048 [ 36.027038][ T3801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.050427][ T3805] netlink: 36 bytes leftover after parsing attributes in process `syz.4.126'. [ 36.132119][ T3817] netlink: 20 bytes leftover after parsing attributes in process `syz.4.131'. [ 36.139427][ T3815] 9pnet: Could not find request transport: xen [ 36.147147][ T3817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.131'. [ 36.232711][ T3826] loop4: detected capacity change from 0 to 512 [ 36.241922][ T3828] loop3: detected capacity change from 0 to 512 [ 36.262643][ T3828] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.135: casefold flag without casefold feature [ 36.276737][ T3828] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.135: couldn't read orphan inode 15 (err -117) [ 36.289812][ T3826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.310075][ T3801] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.125: bg 0: block 234: padding at end of block bitmap is not set [ 36.310170][ T3826] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.324614][ T3828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.350523][ T3801] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 36.357937][ T3826] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.134: Failed to acquire dquot type 1 [ 36.363138][ T3801] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.363138][ T3801] [ 36.392392][ T3836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.137'. [ 36.423991][ T3838] loop1: detected capacity change from 0 to 512 [ 36.430963][ T3838] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 36.441465][ T3838] netlink: 'syz.1.138': attribute type 10 has an invalid length. [ 36.450743][ T3838] bond0: (slave netdevsim1): Releasing backup interface [ 36.453425][ T1780] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 36.470635][ T1780] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.470635][ T1780] [ 36.480395][ T1780] EXT4-fs (loop2): Total free blocks count 0 [ 36.486438][ T1780] EXT4-fs (loop2): Free/Dirty block details [ 36.492404][ T1780] EXT4-fs (loop2): free_blocks=0 [ 36.497453][ T1780] EXT4-fs (loop2): dirty_blocks=6144 [ 36.502800][ T1780] EXT4-fs (loop2): Block reservation details [ 36.510100][ T3838] team0: Port device netdevsim1 added [ 36.516453][ T3840] netlink: 'syz.1.138': attribute type 10 has an invalid length. [ 36.536717][ T3840] team0: Port device netdevsim1 removed [ 36.543827][ T3840] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 36.547931][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 36.629682][ T3853] 9pnet: Could not find request transport: xen [ 37.072973][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.109508][ T3871] loop0: detected capacity change from 0 to 512 [ 37.116234][ T3869] loop3: detected capacity change from 0 to 2048 [ 37.127616][ T3869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.127847][ T3871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 37.152382][ T3871] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.180171][ T3871] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.150: Failed to acquire dquot type 1 [ 37.278691][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 37.300246][ T3878] loop0: detected capacity change from 0 to 512 [ 37.317315][ T3878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 37.331462][ T3878] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.356496][ T3878] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.151: Failed to acquire dquot type 1 [ 37.368169][ T3869] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.149: bg 0: block 234: padding at end of block bitmap is not set [ 37.382595][ T3869] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 37.395167][ T3869] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.395167][ T3869] [ 37.456361][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 37.472526][ T1610] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 37.485371][ T1610] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.485371][ T1610] [ 37.495196][ T1610] EXT4-fs (loop3): Total free blocks count 0 [ 37.501215][ T1610] EXT4-fs (loop3): Free/Dirty block details [ 37.506088][ T3889] loop0: detected capacity change from 0 to 512 [ 37.507235][ T1610] EXT4-fs (loop3): free_blocks=0 [ 37.518379][ T1610] EXT4-fs (loop3): dirty_blocks=6144 [ 37.518379][ T3889] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 37.531157][ T1610] EXT4-fs (loop3): Block reservation details [ 37.545124][ T3889] netlink: 'syz.0.154': attribute type 10 has an invalid length. [ 37.579823][ T3889] bond0: (slave netdevsim1): Releasing backup interface [ 37.597780][ T3889] team0: Port device netdevsim1 added [ 37.605548][ T3889] netlink: 'syz.0.154': attribute type 10 has an invalid length. [ 37.619023][ T3899] loop2: detected capacity change from 0 to 512 [ 37.620874][ T3889] team0: Port device netdevsim1 removed [ 37.634807][ T3899] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.160: casefold flag without casefold feature [ 37.635954][ T3889] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 37.649184][ T3899] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.160: couldn't read orphan inode 15 (err -117) [ 37.669367][ T3899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.695955][ T3903] 9pnet: Could not find request transport: xen [ 37.749198][ T3914] loop4: detected capacity change from 0 to 512 [ 37.767314][ T3914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 37.780074][ T3914] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.801671][ T3914] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.164: Failed to acquire dquot type 1 [ 37.895723][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 37.913626][ T3920] loop4: detected capacity change from 0 to 512 [ 37.927294][ T3920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 37.939918][ T3920] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.961588][ T3920] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.165: Failed to acquire dquot type 1 [ 38.055072][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 38.445946][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.535657][ T3940] loop1: detected capacity change from 0 to 512 [ 38.545782][ T3940] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 38.567880][ T3940] netlink: 'syz.1.173': attribute type 10 has an invalid length. [ 38.585469][ T3940] bond0: (slave netdevsim1): Releasing backup interface [ 38.595812][ T3940] team0: Port device netdevsim1 added [ 38.611003][ T3940] netlink: 'syz.1.173': attribute type 10 has an invalid length. [ 38.626371][ T3940] team0: Port device netdevsim1 removed [ 38.633858][ T3940] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 38.673895][ T3951] loop1: detected capacity change from 0 to 512 [ 38.692992][ T3951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 38.712005][ T3951] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.780868][ T3951] __quota_error: 204 callbacks suppressed [ 38.780882][ T3951] Quota error (device loop1): write_blk: dquota write failed [ 38.794050][ T3951] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 38.803994][ T3951] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.176: Failed to acquire dquot type 1 [ 38.863481][ T3970] loop3: detected capacity change from 0 to 512 [ 38.871303][ T3970] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.183: casefold flag without casefold feature [ 38.885047][ T3970] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.183: couldn't read orphan inode 15 (err -117) [ 38.901835][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 38.912095][ T3970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.930857][ T29] audit: type=1326 audit(1722305094.078:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.1.185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa8bd27299 code=0x0 [ 39.309727][ T3982] loop2: detected capacity change from 0 to 512 [ 39.316562][ T3982] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 39.325319][ T3982] netlink: 'syz.2.187': attribute type 10 has an invalid length. [ 39.335372][ T3982] bond0: (slave netdevsim1): Releasing backup interface [ 39.343767][ T3982] team0: Port device netdevsim1 added [ 39.350688][ T3982] netlink: 'syz.2.187': attribute type 10 has an invalid length. [ 39.361234][ T3982] team0: Port device netdevsim1 removed [ 39.368729][ T3982] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 39.389825][ T29] audit: type=1326 audit(1722305094.538:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9829807299 code=0x7ffc0000 [ 39.414904][ T29] audit: type=1326 audit(1722305094.538:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9829807299 code=0x7ffc0000 [ 39.438221][ T29] audit: type=1326 audit(1722305094.538:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9829807299 code=0x7ffc0000 [ 39.461567][ T29] audit: type=1326 audit(1722305094.538:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9829807299 code=0x7ffc0000 [ 39.484853][ T29] audit: type=1326 audit(1722305094.538:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9829807299 code=0x7ffc0000 [ 39.508057][ T29] audit: type=1326 audit(1722305094.538:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9829807299 code=0x7ffc0000 [ 39.531453][ T29] audit: type=1326 audit(1722305094.538:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9829807299 code=0x7ffc0000 [ 39.697545][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.734740][ T4003] __nla_validate_parse: 8 callbacks suppressed [ 39.734780][ T4003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.193'. [ 39.746877][ T4002] loop0: detected capacity change from 0 to 512 [ 39.756127][ T4003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.193'. [ 39.777524][ T4002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 39.801238][ T4002] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.836489][ T4002] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.195: Failed to acquire dquot type 1 [ 39.850471][ T4011] loop3: detected capacity change from 0 to 2048 [ 39.852591][ T4013] loop4: detected capacity change from 0 to 512 [ 39.874710][ T4013] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 39.886648][ T4011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.887412][ T4013] netlink: 'syz.4.199': attribute type 10 has an invalid length. [ 39.944528][ T4013] bond0: (slave netdevsim1): Releasing backup interface [ 39.967453][ T4013] team0: Port device netdevsim1 added [ 39.982003][ T4022] netlink: 'syz.4.199': attribute type 10 has an invalid length. [ 40.002756][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.029029][ T4022] team0: Port device netdevsim1 removed [ 40.077232][ T4022] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 40.304369][ T4044] 9pnet: Could not find request transport: xen [ 40.337853][ T4029] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.198: bg 0: block 234: padding at end of block bitmap is not set [ 40.354632][ T4029] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 40.367214][ T4029] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.367214][ T4029] [ 40.378280][ T4047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.209'. [ 40.390876][ T4047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.209'. [ 40.457892][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 40.470657][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.470657][ T11] [ 40.480308][ T11] EXT4-fs (loop3): Total free blocks count 0 [ 40.486373][ T11] EXT4-fs (loop3): Free/Dirty block details [ 40.492257][ T11] EXT4-fs (loop3): free_blocks=0 [ 40.497322][ T11] EXT4-fs (loop3): dirty_blocks=6144 [ 40.502621][ T11] EXT4-fs (loop3): Block reservation details [ 40.629331][ T4057] loop1: detected capacity change from 0 to 512 [ 40.647113][ T4057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.659905][ T4057] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.685547][ T4057] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.213: Failed to acquire dquot type 1 [ 40.758026][ T4066] loop3: detected capacity change from 0 to 512 [ 40.764842][ T4066] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 40.774405][ T4066] netlink: 'syz.3.216': attribute type 10 has an invalid length. [ 40.778069][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.794757][ T4066] team0: Port device netdevsim1 added [ 40.806292][ T4066] netlink: 'syz.3.216': attribute type 10 has an invalid length. [ 40.820731][ T4066] team0: Port device netdevsim1 removed [ 40.828483][ T4066] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 40.856994][ T4077] loop1: detected capacity change from 0 to 512 [ 40.868145][ T4077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.880851][ T4077] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.907459][ T4077] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.220: Failed to acquire dquot type 1 [ 40.946452][ T4082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.221'. [ 40.956520][ T4082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.221'. [ 41.032329][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.075229][ T4094] loop1: detected capacity change from 0 to 512 [ 41.090004][ T4094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.111777][ T4094] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.155417][ T4094] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.227: Failed to acquire dquot type 1 [ 41.223691][ T4111] loop4: detected capacity change from 0 to 512 [ 41.232645][ T4111] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 41.242641][ T4111] netlink: 'syz.4.232': attribute type 10 has an invalid length. [ 41.269343][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.292875][ T4111] bond0: (slave netdevsim1): Releasing backup interface [ 41.306520][ T4111] team0: Port device netdevsim1 added [ 41.320077][ T4117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.233'. [ 41.329256][ T4114] netlink: 'syz.4.232': attribute type 10 has an invalid length. [ 41.351054][ T4114] team0: Port device netdevsim1 removed [ 41.381284][ T4114] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 41.404316][ T4124] loop2: detected capacity change from 0 to 512 [ 41.422189][ T4124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.437887][ T4124] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.473424][ T4124] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.237: Failed to acquire dquot type 1 [ 41.552189][ T4139] loop4: detected capacity change from 0 to 512 [ 41.558693][ T4141] loop1: detected capacity change from 0 to 512 [ 41.565168][ T4139] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 41.587966][ T4141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.604245][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.613500][ T4139] netlink: 'syz.4.242': attribute type 10 has an invalid length. [ 41.629238][ T4139] bond0: (slave netdevsim1): Releasing backup interface [ 41.637718][ T4141] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.654660][ T4139] team0: Port device netdevsim1 added [ 41.663029][ T4139] netlink: 'syz.4.242': attribute type 10 has an invalid length. [ 41.682775][ T4139] team0: Port device netdevsim1 removed [ 41.700050][ T4139] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 41.709573][ T4141] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.243: Failed to acquire dquot type 1 [ 41.818704][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.858375][ T4154] netlink: 20 bytes leftover after parsing attributes in process `syz.4.248'. [ 41.956369][ T4173] loop1: detected capacity change from 0 to 512 [ 41.968767][ T4175] loop4: detected capacity change from 0 to 512 [ 41.975332][ T4177] loop3: detected capacity change from 0 to 512 [ 41.981797][ T4175] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 41.991054][ T4173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.003894][ T4173] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.011192][ T4177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.027462][ T4177] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.028806][ T4175] bond0: (slave netdevsim1): Releasing backup interface [ 42.046748][ T4175] team0: Port device netdevsim1 added [ 42.054456][ T4177] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.257: Failed to acquire dquot type 1 [ 42.054735][ T4182] team0: Port device netdevsim1 removed [ 42.074716][ T4182] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 42.100861][ T4184] netlink: 36 bytes leftover after parsing attributes in process `syz.4.258'. [ 42.118984][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.140371][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.249413][ T4194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.262'. [ 42.367010][ T4209] 9pnet: Could not find request transport: xen [ 42.378244][ T4212] loop0: detected capacity change from 0 to 512 [ 42.389942][ T4212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.391890][ T4216] loop3: detected capacity change from 0 to 512 [ 42.409463][ T4212] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.437569][ T4216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.451071][ T4216] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.476083][ T4216] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.270: Failed to acquire dquot type 1 [ 42.537304][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.558517][ T4222] loop0: detected capacity change from 0 to 512 [ 42.565434][ T4222] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 42.593229][ T4222] bond0: (slave netdevsim1): Releasing backup interface [ 42.601682][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.619482][ T4222] team0: Port device netdevsim1 added [ 42.635037][ T4222] team0: Port device netdevsim1 removed [ 42.653792][ T4222] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 42.807052][ T4243] 9pnet: Could not find request transport: xen [ 42.866270][ T4250] loop1: detected capacity change from 0 to 512 [ 42.877945][ T4250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.890875][ T4250] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.892794][ T4257] loop3: detected capacity change from 0 to 512 [ 42.914340][ T4250] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.283: Failed to acquire dquot type 1 [ 42.927886][ T4257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.940650][ T4257] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.985051][ T4267] loop4: detected capacity change from 0 to 512 [ 42.992011][ T4267] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 43.002827][ T4267] bond0: (slave netdevsim1): Releasing backup interface [ 43.011240][ T4267] team0: Port device netdevsim1 added [ 43.030631][ T4267] team0: Port device netdevsim1 removed [ 43.030802][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.038546][ T4267] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 43.058467][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.082507][ T4273] loop4: detected capacity change from 0 to 512 [ 43.089341][ T4273] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 43.097936][ T4275] 9pnet: Could not find request transport: xen [ 43.112417][ T4273] bond0: (slave netdevsim1): Releasing backup interface [ 43.124822][ T4273] team0: Port device netdevsim1 added [ 43.141442][ T4273] team0: Port device netdevsim1 removed [ 43.151120][ T4273] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 43.354619][ T4295] loop2: detected capacity change from 0 to 512 [ 43.386876][ T4295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.400880][ T4295] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.428990][ T4295] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.301: Failed to acquire dquot type 1 [ 43.533281][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.552894][ T4299] loop2: detected capacity change from 0 to 512 [ 43.569022][ T4299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.582246][ T4299] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.699600][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.729720][ T4303] loop0: detected capacity change from 0 to 512 [ 43.736710][ T4303] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 43.755629][ T4303] bond0: (slave netdevsim1): Releasing backup interface [ 43.778005][ T4303] team0: Port device netdevsim1 added [ 43.793475][ T4307] 9pnet: Could not find request transport: xen [ 43.803930][ T4303] team0: Port device netdevsim1 removed [ 43.819440][ T4303] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 43.878960][ T4316] loop2: detected capacity change from 0 to 512 [ 43.887882][ T4313] loop0: detected capacity change from 0 to 2048 [ 43.896189][ T4316] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 43.912651][ T4316] bond0: (slave netdevsim1): Releasing backup interface [ 43.921670][ T4313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.921820][ T4316] team0: Port device netdevsim1 added [ 43.953974][ T4316] team0: Port device netdevsim1 removed [ 43.974840][ T4316] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 44.113698][ T4336] loop3: detected capacity change from 0 to 512 [ 44.128913][ T4336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.142549][ T4336] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.157310][ T4342] 9pnet: Could not find request transport: xen [ 44.198764][ T4336] __quota_error: 262 callbacks suppressed [ 44.198779][ T4336] Quota error (device loop3): write_blk: dquota write failed [ 44.212080][ T4336] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 44.222051][ T4336] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.315: Failed to acquire dquot type 1 [ 44.315731][ T4313] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.307: bg 0: block 234: padding at end of block bitmap is not set [ 44.335808][ T4313] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 44.348468][ T4313] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.348468][ T4313] [ 44.368484][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.399742][ T4351] loop3: detected capacity change from 0 to 512 [ 44.417460][ T4351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.436533][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 44.449307][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.449307][ T11] [ 44.459002][ T11] EXT4-fs (loop0): Total free blocks count 0 [ 44.464996][ T11] EXT4-fs (loop0): Free/Dirty block details [ 44.470909][ T11] EXT4-fs (loop0): free_blocks=0 [ 44.476051][ T11] EXT4-fs (loop0): dirty_blocks=6144 [ 44.481334][ T11] EXT4-fs (loop0): Block reservation details [ 44.488450][ T4351] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.617726][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.640288][ T4359] loop3: detected capacity change from 0 to 512 [ 44.653176][ T4359] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 44.671265][ T4359] validate_nla: 12 callbacks suppressed [ 44.671280][ T4359] netlink: 'syz.3.323': attribute type 10 has an invalid length. [ 44.694444][ T4359] bond0: (slave netdevsim1): Releasing backup interface [ 44.703302][ T29] audit: type=1326 audit(1722305099.848:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7511c07299 code=0x0 [ 44.728740][ T4359] team0: Port device netdevsim1 added [ 44.736460][ T4359] netlink: 'syz.3.323': attribute type 10 has an invalid length. [ 44.751180][ T4359] team0: Port device netdevsim1 removed [ 44.760080][ T4359] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 44.789166][ T4365] loop3: detected capacity change from 0 to 512 [ 44.797792][ T4365] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 44.807061][ T4365] netlink: 'syz.3.326': attribute type 10 has an invalid length. [ 44.820787][ T4365] bond0: (slave netdevsim1): Releasing backup interface [ 44.829999][ T4365] team0: Port device netdevsim1 added [ 44.838515][ T4365] netlink: 'syz.3.326': attribute type 10 has an invalid length. [ 44.851120][ T4365] team0: Port device netdevsim1 removed [ 44.862431][ T4365] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 44.942116][ T4374] 9pnet: Could not find request transport: xen [ 44.943107][ T4377] __nla_validate_parse: 7 callbacks suppressed [ 44.943120][ T4377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.330'. [ 44.973611][ T4379] loop1: detected capacity change from 0 to 512 [ 44.985283][ T4381] program syz.4.332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.998746][ T4379] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.023851][ T4383] loop3: detected capacity change from 0 to 2048 [ 45.049194][ T4379] Quota error (device loop1): write_blk: dquota write failed [ 45.056629][ T4379] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 45.066459][ T4379] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.331: Failed to acquire dquot type 1 [ 45.117893][ T4390] loop2: detected capacity change from 0 to 512 [ 45.127938][ T4390] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.290777][ T4402] loop2: detected capacity change from 0 to 512 [ 45.299464][ T4402] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.337: casefold flag without casefold feature [ 45.312575][ T4402] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.337: couldn't read orphan inode 15 (err -117) [ 45.328993][ T29] audit: type=1400 audit(1722305100.478:827): avc: denied { link } for pid=4401 comm="syz.2.337" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.409770][ T4383] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.333: bg 0: block 234: padding at end of block bitmap is not set [ 45.424994][ T4383] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 45.437562][ T4383] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.437562][ T4383] [ 45.449140][ T29] audit: type=1400 audit(1722305100.598:828): avc: denied { mounton } for pid=4401 comm="syz.2.337" path="/66/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.458407][ T4406] 9pnet: Could not find request transport: xen [ 45.570735][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 45.583560][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.583560][ T11] [ 45.593283][ T11] EXT4-fs (loop3): Total free blocks count 0 [ 45.599402][ T11] EXT4-fs (loop3): Free/Dirty block details [ 45.605288][ T11] EXT4-fs (loop3): free_blocks=0 [ 45.610292][ T11] EXT4-fs (loop3): dirty_blocks=6144 [ 45.615607][ T11] EXT4-fs (loop3): Block reservation details [ 45.621622][ T11] EXT4-fs (loop3): i_reserved_data_blocks=384 [ 45.698384][ T4412] loop3: detected capacity change from 0 to 512 [ 45.705224][ T4412] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 45.714182][ T4412] netlink: 'syz.3.339': attribute type 10 has an invalid length. [ 45.725112][ T4412] bond0: (slave netdevsim1): Releasing backup interface [ 45.733835][ T4412] team0: Port device netdevsim1 added [ 45.741186][ T4412] netlink: 'syz.3.339': attribute type 10 has an invalid length. [ 45.751167][ T4412] team0: Port device netdevsim1 removed [ 45.760571][ T4412] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 45.863749][ T4422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.344'. [ 45.883196][ T29] audit: type=1326 audit(1722305101.028:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec8487299 code=0x7ffc0000 [ 45.906562][ T29] audit: type=1326 audit(1722305101.028:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec8487299 code=0x7ffc0000 [ 45.930030][ T29] audit: type=1326 audit(1722305101.028:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4ec8487299 code=0x7ffc0000 [ 45.991323][ T4431] loop4: detected capacity change from 0 to 512 [ 46.007740][ T4431] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.029652][ T4431] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.347: Failed to acquire dquot type 1 [ 46.393877][ T4445] loop0: detected capacity change from 0 to 512 [ 46.414966][ T4445] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.583174][ T4453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.355'. [ 46.774503][ T4474] loop1: detected capacity change from 0 to 512 [ 46.793631][ T4478] loop3: detected capacity change from 0 to 512 [ 46.795443][ T4474] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.814651][ T4478] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.361: casefold flag without casefold feature [ 46.828429][ T4478] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.361: couldn't read orphan inode 15 (err -117) [ 46.833760][ T4474] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.360: Failed to acquire dquot type 1 [ 46.855892][ T4455] chnl_net:caif_netlink_parms(): no params data found [ 46.881836][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.900678][ T4455] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.907792][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.914955][ T4455] bridge_slave_0: entered allmulticast mode [ 46.921354][ T4455] bridge_slave_0: entered promiscuous mode [ 46.930005][ T4485] 9pnet: Could not find request transport: xen [ 46.934209][ T4455] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.943659][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.951043][ T4455] bridge_slave_1: entered allmulticast mode [ 46.957509][ T4455] bridge_slave_1: entered promiscuous mode [ 46.966861][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.002965][ T4455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.004596][ T4492] loop2: detected capacity change from 0 to 512 [ 47.015218][ T4455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.039867][ T4492] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.053802][ T11] bond0: (slave netdevsim1): Releasing backup interface [ 47.063264][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.074120][ T4499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.366'. [ 47.083647][ T4455] team0: Port device team_slave_0 added [ 47.090424][ T4455] team0: Port device team_slave_1 added [ 47.112612][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.124975][ T4455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.132026][ T4455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.158032][ T4455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.169893][ T4455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.176866][ T4455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.202900][ T4455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.243416][ T11] bridge_slave_1: left allmulticast mode [ 47.249102][ T11] bridge_slave_1: left promiscuous mode [ 47.249539][ T4514] loop2: detected capacity change from 0 to 512 [ 47.254751][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.267690][ T4514] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.278972][ T11] bridge_slave_0: left allmulticast mode [ 47.284641][ T11] bridge_slave_0: left promiscuous mode [ 47.290426][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.292365][ T4514] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.372: Failed to acquire dquot type 1 [ 47.381460][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.392149][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.402538][ T11] bond0 (unregistering): Released all slaves [ 47.412750][ T4455] hsr_slave_0: entered promiscuous mode [ 47.420096][ T4455] hsr_slave_1: entered promiscuous mode [ 47.426702][ T4455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.434302][ T4455] Cannot create hsr debugfs directory [ 47.478883][ T11] hsr_slave_0: left promiscuous mode [ 47.484786][ T11] hsr_slave_1: left promiscuous mode [ 47.490786][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.498246][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.507379][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.514830][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.524430][ T11] veth1_macvtap: left promiscuous mode [ 47.530000][ T11] veth0_macvtap: left promiscuous mode [ 47.535580][ T11] veth1_vlan: left promiscuous mode [ 47.540830][ T11] veth0_vlan: left promiscuous mode [ 47.643569][ T11] team0 (unregistering): Port device team_slave_1 removed [ 47.655829][ T11] team0 (unregistering): Port device team_slave_0 removed [ 47.867801][ T4530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.377'. [ 47.981496][ T4455] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.989894][ T4455] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.998951][ T4455] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.007407][ T4455] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.047743][ T4455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.066878][ T4455] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.079435][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.086609][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.104322][ T4455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.114708][ T4455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.129611][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.136765][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.191320][ T4551] loop2: detected capacity change from 0 to 512 [ 48.196928][ T4455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.201885][ T4551] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.383: casefold flag without casefold feature [ 48.218833][ T4551] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.383: couldn't read orphan inode 15 (err -117) [ 48.262632][ T4455] veth0_vlan: entered promiscuous mode [ 48.272720][ T4455] veth1_vlan: entered promiscuous mode [ 48.286731][ T4455] veth0_macvtap: entered promiscuous mode [ 48.294249][ T4455] veth1_macvtap: entered promiscuous mode [ 48.302225][ T4562] 9pnet: Could not find request transport: xen [ 48.306478][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.318928][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.328753][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.339180][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.349019][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.359606][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.370538][ T4455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.380854][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.391398][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.401314][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.411819][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.421679][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.432136][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.443099][ T4455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.452904][ T4455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.461747][ T4455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.470619][ T4455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.479426][ T4455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.523231][ T4568] netlink: 36 bytes leftover after parsing attributes in process `syz.0.356'. [ 48.556261][ T4572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.387'. [ 49.054449][ T4597] loop2: detected capacity change from 0 to 512 [ 49.073512][ T4601] netlink: 36 bytes leftover after parsing attributes in process `syz.4.398'. [ 49.083815][ T4597] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.101127][ T4605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.399'. [ 49.259723][ T4612] loop2: detected capacity change from 0 to 512 [ 49.268590][ T4612] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 49.287741][ T4612] netlink: 'syz.2.402': attribute type 10 has an invalid length. [ 49.307315][ T4612] bond0: (slave netdevsim1): Releasing backup interface [ 49.325327][ T4612] team0: Port device netdevsim1 added [ 49.342030][ T4612] netlink: 'syz.2.402': attribute type 10 has an invalid length. [ 49.357812][ T4612] team0: Port device netdevsim1 removed [ 49.370076][ T4612] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 49.419049][ T4622] loop4: detected capacity change from 0 to 512 [ 49.427190][ T4622] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 49.476129][ T4627] loop0: detected capacity change from 0 to 512 [ 49.483734][ T4627] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.407: casefold flag without casefold feature [ 49.495537][ T4632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.410'. [ 49.497632][ T4627] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.407: couldn't read orphan inode 15 (err -117) [ 49.546298][ T4638] netlink: 'syz.4.406': attribute type 10 has an invalid length. [ 49.563168][ T4638] bond0: (slave netdevsim1): Releasing backup interface [ 49.571370][ T4638] team0: Port device netdevsim1 added [ 49.592323][ T4641] 9pnet: Could not find request transport: xen [ 50.265563][ T4656] loop4: detected capacity change from 0 to 512 [ 50.287750][ T4656] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.349256][ T4664] 9pnet: Could not find request transport: xen [ 50.366513][ T4660] loop3: detected capacity change from 0 to 2048 [ 50.398958][ T4673] __nla_validate_parse: 1 callbacks suppressed [ 50.398974][ T4673] netlink: 36 bytes leftover after parsing attributes in process `syz.0.424'. [ 50.433913][ T4675] loop0: detected capacity change from 0 to 512 [ 50.440895][ T4675] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 50.451237][ T4675] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 50.468176][ T4675] team0: Port device netdevsim1 added [ 50.493120][ T4675] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 50.511291][ T4675] team0: Port device netdevsim1 removed [ 50.523636][ T4675] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 50.536965][ T4683] loop1: detected capacity change from 0 to 512 [ 50.551600][ T4683] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 50.576178][ T4688] loop0: detected capacity change from 0 to 512 [ 50.582797][ T4686] loop4: detected capacity change from 0 to 512 [ 50.590837][ T4688] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.430: casefold flag without casefold feature [ 50.604270][ T4686] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 50.613866][ T4688] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.430: couldn't read orphan inode 15 (err -117) [ 50.627504][ T1662] ================================================================== [ 50.635593][ T1662] BUG: KCSAN: data-race in n_tty_receive_buf_common / n_tty_write [ 50.643416][ T1662] [ 50.645732][ T1662] write to 0xffffc900011e5020 of 8 bytes by task 4690 on cpu 1: [ 50.653350][ T1662] n_tty_write+0x1bc/0xb90 [ 50.657781][ T1662] file_tty_write+0x386/0x690 [ 50.662451][ T1662] tty_write+0x28/0x30 [ 50.666515][ T1662] do_iter_readv_writev+0x3b0/0x470 [ 50.671715][ T1662] vfs_writev+0x2e0/0x880 [ 50.676035][ T1662] do_writev+0xf8/0x220 [ 50.678143][ T4691] netlink: 'syz.1.428': attribute type 10 has an invalid length. [ 50.680177][ T1662] __x64_sys_writev+0x45/0x50 [ 50.692554][ T1662] x64_sys_call+0x1d63/0x2e00 [ 50.697231][ T1662] do_syscall_64+0xc9/0x1c0 [ 50.701739][ T1662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.707726][ T1662] [ 50.710042][ T1662] read to 0xffffc900011e5020 of 8 bytes by task 1662 on cpu 0: [ 50.710464][ T4660] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.421: bg 0: block 234: padding at end of block bitmap is not set [ 50.717566][ T1662] n_tty_receive_buf_common+0x892/0xbe0 [ 50.717597][ T1662] n_tty_receive_buf2+0x33/0x40 [ 50.717620][ T1662] tty_ldisc_receive_buf+0x63/0x100 [ 50.717638][ T1662] tty_port_default_receive_buf+0x59/0x90 [ 50.717658][ T1662] flush_to_ldisc+0x1ce/0x410 [ 50.734185][ T4660] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 50.737290][ T1662] process_scheduled_works+0x483/0x9a0 [ 50.737322][ T1662] worker_thread+0x526/0x700 [ 50.737344][ T1662] kthread+0x1d1/0x210 [ 50.742205][ T4660] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.742205][ T4660] [ 50.747354][ T1662] ret_from_fork+0x4b/0x60 [ 50.747376][ T1662] ret_from_fork_asm+0x1a/0x30 [ 50.802961][ T1662] [ 50.805277][ T1662] value changed: 0x0000000000004676 -> 0x0000000000004678 [ 50.812389][ T1662] [ 50.814698][ T1662] Reported by Kernel Concurrency Sanitizer on: [ 50.820831][ T1662] CPU: 0 UID: 0 PID: 1662 Comm: kworker/u8:5 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 50.831750][ T1662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.841792][ T1662] Workqueue: events_unbound flush_to_ldisc [ 50.847594][ T1662] ================================================================== [ 50.861681][ T4691] bond0: (slave netdevsim1): Releasing backup interface [ 50.872523][ T4691] team0: Port device netdevsim1 added [ 50.883919][ T4686] netlink: 'syz.4.429': attribute type 10 has an invalid length. [ 50.899328][ T4693] netlink: 'syz.4.429': attribute type 10 has an invalid length. [ 50.908078][ T4693] team0: Port device netdevsim1 removed [ 50.916159][ T4693] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 50.932746][ T4694] 9pnet: Could not find request transport: xen [ 50.989205][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 51.001963][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.001963][ T11] [ 51.011768][ T11] EXT4-fs (loop3): Total free blocks count 0 [ 51.017752][ T11] EXT4-fs (loop3): Free/Dirty block details [ 51.023710][ T11] EXT4-fs (loop3): free_blocks=0 [ 51.028728][ T11] EXT4-fs (loop3): dirty_blocks=6144 [ 51.034030][ T11] EXT4-fs (loop3): Block reservation details [ 51.040067][ T11] EXT4-fs (loop3): i_reserved_data_blocks=384