last executing test programs: 2.97178182s ago: executing program 4 (id=458): socket$kcm(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)}}], 0x1, 0x30008001) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) 2.962879681s ago: executing program 0 (id=459): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fgetxattr(r0, &(0x7f0000000780)=@known='security.selinux\x00', &(0x7f0000000880)=""/138, 0xffffffffffffff98) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x20140c4, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x20140c4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r2, 0x1, 0x70bd2d, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) chroot(&(0x7f0000000b80)='./file0\x00') umount2(&(0x7f0000000280)='./file0\x00', 0x1) utimes(&(0x7f0000000240)='./file0\x00', 0x0) (async) utimes(&(0x7f0000000240)='./file0\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x1a, &(0x7f0000000140), 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e20, 0x0, @loopback, 0x401}}, 0xe, 0x4, 0x7, 0xacb, 0xa4, 0x9, 0x3}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e20, 0x0, @loopback, 0x401}}, 0xe, 0x4, 0x7, 0xacb, 0xa4, 0x9, 0x3}, 0x9c) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) r6 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000000)={0x1, {{0x2, 0x4e20, @multicast2}}}, 0x90) close(r3) (async) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000100)=0x1) (async) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000100)=0x1) 2.847186281s ago: executing program 0 (id=462): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PROTO={0x0, 0x4, 0x88a2}]}, {0x4, 0x4}, {0x2c}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x74}}, 0x4000850) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x8000000}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@rnullb, r3, &(0x7f0000000340)='./file0\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0xc0, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x8390, 0xff5c, 0x8}}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, 0xc568}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x10}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c041}, 0x200088c4) 2.701384783s ago: executing program 0 (id=467): r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x14) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_gettime(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x49, 0x0, &(0x7f0000000380)) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x25dfdbf7, {}, [{0x78, 0x1, [@m_ct={0x74, 0x3, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "1353d485f59320df34f4b7432edc8f8d"}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x20, 0x3, 0x0, 0x7}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "a2bc8d684815cfc83a3c31de6be7a674"}, @TCA_CT_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x8000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRESDEC=r4, @ANYBLOB="010102000000000008000500", @ANYRESHEX, @ANYRESHEX=r3], 0x90}, 0x1, 0xba01, 0x0, 0x10}, 0x811) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) r6 = syz_pidfd_open(0x0, 0x0) r7 = pidfd_getfd(r6, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000000100)={0x200, r5, 'id0\x00'}) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) 2.431702957s ago: executing program 0 (id=471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6, 0x0, 0x0, 0xffffe}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff80000000fe02000200000000", 0x1c) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x1) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r0, r4, 0x0) 2.390700821s ago: executing program 0 (id=473): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) (async) r2 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) (async) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000380)={0x8}) io_uring_enter(r2, 0x44fd, 0x3, 0x1, 0x0, 0x0) (async) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) (async) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x178539, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x4005, 0xa600000, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030700"/20, @ANYRES32=0x0, @ANYBLOB="1501000000000000240012800b0001006272696467650000140002800800010007000000080002000302"], 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000040}, 0x40088c0) (async) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r5, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000001d00)={0x2, 0xffffffffffffffb4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1002, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x2}, 0x120, 0xfffc, 0x33f8, 0x1, 0x8, 0xd, 0x8b, 0x0, 0x66, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x2) (rerun: 32) 2.361572573s ago: executing program 0 (id=474): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) memfd_create(&(0x7f0000000200)='\\\x00', 0x4) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffe) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3f, 0xfffffff6, 0xa, 0x4, 0x401, 0x81}) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x27, 0x81, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x8001}, 0x0, 0x8, 0x0, 0x6, 0x5, 0x20001, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x40000023, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f0000000940)=ANY=[@ANYBLOB="bf53c5bce2"], 0x0, 0x567, &(0x7f0000000200)="$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") timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001000000000000000140080001400000000000000000004fd000001000006040000000100000008830000002e305f5f"], 0x0, 0x33, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) fsopen(0x0, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x2010, 0xffffffffffffffff, 0x0) signalfd(r5, &(0x7f00000002c0)={[0x9]}, 0x8) futex(&(0x7f000000cffc)=0x800000, 0x80000000000b, 0x0, 0x0, &(0x7f0000000900)=0x1, 0xfffffffc) futex(&(0x7f000000cffc), 0x100, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f0000000780), 0xc, 0x1, &(0x7f0000000040), &(0x7f00000007c0), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000390440bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="019800000006000008de3d0016150700140012800b00010067726574617000000400028082be28fe774723b425e022cfbeb91fca333f39483d67c1e525dd01d7f55f2155ad87fce305385f9ac0ca381c19d565f8e982c5b2c48e5d18e05a8656567327574bc353fc215dcb1deaf253a9bd8d934d5e0b6618e90b0497ce5df40c42ec166069e8b5d94c4a4cd124a87975df93bbfba28e356a29a281ad596fedf8e911044e77ce2b8224c8d25b4ca0"], 0x3c}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 2.115654515s ago: executing program 2 (id=478): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{0x0, 0xb}, 'port0\x00', 0x42, 0x180a, 0x9, 0xe54, 0x1000, 0x1, 0x8, 0x0, 0x5, 0x7f}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f00005e1000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x2f25, &(0x7f0000000040)={0x0, 0xc8a3, 0xc010, 0x1, 0xc1}) 1.782423684s ago: executing program 4 (id=479): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x2, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b72, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0], 0x38}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xfffffffc, @empty, 0x4}, 0x1c) syz_emit_ethernet(0xb5, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6a00ea00007f110000000000000000000000ffffe0000002fe8000000000000000000000000000aa4e1d4e20007f90"], 0x0) readv(r3, &(0x7f0000002680)=[{&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000380)=""/100, 0x64}], 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0) write$binfmt_aout(r6, &(0x7f0000000300)=ANY=[], 0xff2e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000340)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) setgroups(0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=ANY=[@ANYBLOB="68f4815026ba000020", @ANYRES16=r9, @ANYBLOB="0100feffffff0000010017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024000000e38e7e1a5ea29bfc1b77b94955c07855eb12198979fea4538f5c09ab625bff936d53d3b704000180"], 0x68}, 0x1, 0x0, 0x0, 0x4000024}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000f00)={0x18, r9, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x11}, 0x4000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x4014850) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.728937678s ago: executing program 2 (id=483): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x20, 0x30, 0xfb, {0xfb, 0x22, "4346b3a05a3de272a1bfa6a2165cea7b305719b5664bbe47ac28be8552993ad9dfa51c97931713d1e8bb91600d31ae53340f1c75f4ff3521fd266c136fbbed689f194359766bd413b6fd67b1a2f8fe86159c8f6f542695b24af5d1fd1dcb8350dadbeacb925f426d4653d53ed011d4d5162c3dc8ab93dec8f7d5f14957de04d39272fddacf37091d78907e193312b45dc4d7d725e15fce26c7b59ad87f407c7a65a338f2bee544527027f5b1ecb5333a9e0fceab24a94caba124fb9002d81cb2d4e3d13853f73cd2bd0346913b8051700a2db52da1c37b5bd50739cf322281e40167ebf2f5554db773f03555cf679fea7d4103247db30c49cf"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x3, 0xfc, "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"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000480), &(0x7f00000004c0)={0x40, 0x5, 0x4, "593278dc"}}) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000540)) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x0, 0x20}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 1.495744879s ago: executing program 3 (id=487): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000a00)="$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") r0 = socket$inet6(0xa, 0x3, 0x3a) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x5, 0x0, 0xff}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001a0001e1b5000000fedbdf250a000000", @ANYRES32], 0x24}}, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x8, 0x41}) socket(0x1a, 0x2, 0x3) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x42ab, 0x4) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r6 = eventfd2(0x7, 0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r4, 0x0, 0x0, 0x7, 0x0, 0x5, r6}]) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x8, 0x19dff}}}, 0x90) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r9, 0x6, 0xd, 0x0, &(0x7f0000001040)) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x48442, 0x320) pwrite64(r10, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.435328894s ago: executing program 3 (id=489): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)}}], 0x1, 0x30008001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) 1.222857493s ago: executing program 4 (id=492): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000280)={[{@block_validity}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@nombcache}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000280)={[{@block_validity}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@nombcache}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x3, r0, 0x2) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x7fff) (async) sendfile(r3, r3, 0x0, 0x7fff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000000000077f7260c1e62d4e4ca33393576c4db56d6b4"], 0x1a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4d1346ca, 0x3}, 0x0, 0x0, 0x800, 0x0, 0x2, 0x4, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4d1346ca, 0x3}, 0x0, 0x0, 0x800, 0x0, 0x2, 0x4, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0xff, 0x9, 0xa, 0x20, 0x5}, 0x20) write(r6, &(0x7f0000004200)='t', 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x4}, 0x9805, 0x9, 0x7fd, 0x6, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x4}, 0x9805, 0x9, 0x7fd, 0x6, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) (async) sendmsg$inet(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r11, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) sendfile(r6, r5, 0x0, 0x7ffff000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 1.100783284s ago: executing program 4 (id=493): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1218e0b, &(0x7f0000000640)={[{@jqfmt_vfsold}, {@barrier}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x102}}, {@minixdf}, {@bh}]}, 0x6, 0x607, &(0x7f00000006c0)="$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") r1 = open(&(0x7f0000000000)='./file1\x00', 0x208000, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000ffff25bd7000fcdbdf2700000000b1240435d5dc01c73674a56573f732715f943a40b7520ea7847e699b1a5871af2eec05fadd010593e9b7773a175f992f711656bf4b199ca2963dec8825c0c82b3cefe62a64270c13be6d30632b604aa6f693a8046da5b6af841a9c8b5569f04f553cfb15a4d0fb631e1d66f8df6f18cb72a8a7ac946c5d0286c2947d14b2051bd87ccf5e9768aecd2c1c947870e36a9c120845d39b270325cb044281cc2294079e1bc3704bb4ddee0a7eddce2c52430773e99cbc27db50356b39f5a8243d", @ANYRES32=0x0, @ANYBLOB="fa0a050023080700340012800e00010069703665727370616e0000002000028005001600020000000400120006001800010000000500170001000000"], 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x804) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbc3, &(0x7f0000003d80)="$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") 967.767945ms ago: executing program 2 (id=494): socket$netlink(0x10, 0x3, 0x4) 967.636695ms ago: executing program 2 (id=495): r0 = io_uring_setup(0x5266, 0x0) close_range(r0, r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) 839.083876ms ago: executing program 4 (id=496): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5d1, &(0x7f0000000880)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000050000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0xfff, &(0x7f0000002080)=""/4095}, 0x94) 665.855661ms ago: executing program 4 (id=497): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40043, 0x132) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="58000000020601080000000000000000000081435e000000000000000700020073797a300000686173693a6e65742c706f72740000000c0007800800114000350000000005000a0000000500010006f000c5000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="090000000400000008000000010000008000000003cf87593bc04b5b29c0ea3c1ed500a943c491b0d70a39b0980b747783793efc0d677fada645a95db511fb2910f505236fcbe17fe599283b95846ef1e6a3c4a20b38a23db47c191061e242cadbf9ce590980fec1b442d67f7c84bcd8476ea74abae8c4c7000a3d3edfbde48757b83d5b5a7f71377ce3604f5a3d5556d19627f0a49484b244f73aeab9ba655036e76200f24580ac6e1b7a7a1923b50e60ca24bdbe013d6b5415489a27b56cfbb34900"/207, @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/213, 0xd5) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000200106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x30) 561.009511ms ago: executing program 3 (id=498): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010026bd7000fbdbdf2507000000", @ANYRES32=r0, @ANYBLOB="000002000a0002"], 0x28}}, 0x20000800) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfc, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x800000000000002, 0x1}, 0x2008, 0x401, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) fcntl$getown(r0, 0x9) 496.675596ms ago: executing program 3 (id=499): r0 = socket(0x0, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x82, 0x6a6addfb, 0x1a, 0x2, 0x18, 0x4}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) 494.734306ms ago: executing program 3 (id=501): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) futimesat(r2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x39241}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) 485.377657ms ago: executing program 3 (id=502): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x8400, 0x32, 0x43a1bd76, 0x7, 0xa00000000, 0x6, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x20, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = accept(r0, &(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x80) sendmmsg$unix(r3, &(0x7f00000001c0), 0x0, 0x8000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r4, 0xc02063a0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) close(0x3) r7 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) setpgid(0x0, r1) close(r7) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 143.759377ms ago: executing program 1 (id=507): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x805, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@x25={0x805, {0x3, 0x7f, 0xe8}}}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) (async) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x34000}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5, 0x700}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841) 143.572447ms ago: executing program 1 (id=508): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)}}], 0x1, 0x30008001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) 143.049097ms ago: executing program 2 (id=509): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000071102b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x96) r1 = dup2(r0, r0) ioctl$BLKTRACESTOP(r1, 0x801070cf, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x14c03, 0xd) name_to_handle_at(r0, 0x0, 0x0, 0x0, 0x1200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000071102b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x96) (async) dup2(r0, r0) (async) ioctl$BLKTRACESTOP(r1, 0x801070cf, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x14c03, 0xd) (async) name_to_handle_at(r0, 0x0, 0x0, 0x0, 0x1200) (async) 116.50239ms ago: executing program 1 (id=510): socket$packet(0x11, 0x3, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x13bb711e) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, r0, 0xb) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 113.21455ms ago: executing program 2 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0x9, 0x0, 0xd0, 0x4002, 0x5, "0c411be01fbcd2b7cb366b0200", 0x1004, 0xffffffff}) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@jqfmt_vfsv1}, {@usrquota}, {@resgid}, {@data_err_ignore}, {@nojournal_checksum}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@nouid32}]}, 0x1, 0x788, &(0x7f0000002800)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r5, 0x7f, 0x80000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611898000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000280)={0x5, 0xc, 0x8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x198, &(0x7f00000002c0)=0x8dd4, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x177}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x75) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r9, &(0x7f0000000000), 0xffffff98) write$P9_RLCREATE(r9, &(0x7f0000000100)={0x18, 0xf, 0x1, {{0x2, 0x1, 0x8}, 0x5}}, 0x18) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000020005000000000002"], 0x50}}, 0x200c405a) splice(r8, 0x0, r6, 0x0, 0x100000004, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x54, r4, 0x1, 0x0, 0x0, {0x53}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 46.210486ms ago: executing program 1 (id=512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x300, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 45.889016ms ago: executing program 1 (id=513): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket(0x2a, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "8900", 0x20, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @local, {[@dstopts={0x3c, 0x2, '\x00', [@ra={0x5, 0x2, 0x8001}, @generic={0xa, 0xb, "8956d2ab6dc02ac0157c4c"}]}]}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 1 (id=514): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018, r0}, 0x18) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a6009003f020000000455a1bc00090008940699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4", 0xcc}, {&(0x7f0000000c40)="6dd950135126d19aaf46a60e", 0xc}], 0x2}, 0x44) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018, r0}, 0x18) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a6009003f020000000455a1bc00090008940699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4", 0xcc}, {&(0x7f0000000c40)="6dd950135126d19aaf46a60e", 0xc}], 0x2}, 0x44) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) (async) kernel console output (not intermixed with test programs): [ 18.130010][ T28] audit: type=1400 audit(1771662867.566:62): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.151961][ T28] audit: type=1400 audit(1771662867.566:63): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.174509][ T28] audit: type=1400 audit(1771662867.566:64): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.197600][ T28] audit: type=1400 audit(1771662867.566:65): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.220715][ T28] audit: type=1400 audit(1771662867.576:66): avc: denied { read open } for pid=3192 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 21.994191][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 21.994205][ T28] audit: type=1400 audit(1771662871.436:70): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.023454][ T28] audit: type=1400 audit(1771662871.466:71): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.024235][ T3294] cgroup: Unknown subsys name 'net' [ 22.051229][ T28] audit: type=1400 audit(1771662871.496:72): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.181195][ T3294] cgroup: Unknown subsys name 'cpuset' [ 22.187228][ T3294] cgroup: Unknown subsys name 'rlimit' [ 22.296553][ T28] audit: type=1400 audit(1771662871.736:73): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.330042][ T28] audit: type=1400 audit(1771662871.736:74): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.335442][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.350606][ T28] audit: type=1400 audit(1771662871.736:75): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.379410][ T28] audit: type=1400 audit(1771662871.736:76): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.399649][ T28] audit: type=1400 audit(1771662871.746:77): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.402979][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.424909][ T28] audit: type=1400 audit(1771662871.746:78): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.456696][ T28] audit: type=1400 audit(1771662871.766:79): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 23.533773][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 23.574521][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 23.622666][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.629888][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.637050][ T3308] bridge_slave_0: entered allmulticast mode [ 23.643569][ T3308] bridge_slave_0: entered promiscuous mode [ 23.654143][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.661202][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.668263][ T3308] bridge_slave_1: entered allmulticast mode [ 23.674658][ T3308] bridge_slave_1: entered promiscuous mode [ 23.699343][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 23.708990][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.728252][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.773730][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 23.797708][ T3308] team0: Port device team_slave_0 added [ 23.805608][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.812728][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.819791][ T3319] bridge_slave_0: entered allmulticast mode [ 23.826156][ T3319] bridge_slave_0: entered promiscuous mode [ 23.836562][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 23.849010][ T3308] team0: Port device team_slave_1 added [ 23.861614][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.868658][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.875817][ T3319] bridge_slave_1: entered allmulticast mode [ 23.882208][ T3319] bridge_slave_1: entered promiscuous mode [ 23.924561][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.931654][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.938715][ T3309] bridge_slave_0: entered allmulticast mode [ 23.945311][ T3309] bridge_slave_0: entered promiscuous mode [ 23.951885][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.958908][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.984999][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.998856][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.015983][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.023105][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.030222][ T3309] bridge_slave_1: entered allmulticast mode [ 24.036617][ T3309] bridge_slave_1: entered promiscuous mode [ 24.043054][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.049978][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.076069][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.090267][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.099667][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.106848][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.114001][ T3316] bridge_slave_0: entered allmulticast mode [ 24.120299][ T3316] bridge_slave_0: entered promiscuous mode [ 24.140102][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.147228][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.154474][ T3316] bridge_slave_1: entered allmulticast mode [ 24.160903][ T3316] bridge_slave_1: entered promiscuous mode [ 24.172627][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.183107][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.222202][ T3319] team0: Port device team_slave_0 added [ 24.233457][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.242780][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.249886][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.257016][ T3310] bridge_slave_0: entered allmulticast mode [ 24.263327][ T3310] bridge_slave_0: entered promiscuous mode [ 24.270183][ T3309] team0: Port device team_slave_0 added [ 24.276478][ T3319] team0: Port device team_slave_1 added [ 24.291047][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.304462][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.311629][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.318701][ T3310] bridge_slave_1: entered allmulticast mode [ 24.325233][ T3310] bridge_slave_1: entered promiscuous mode [ 24.332332][ T3309] team0: Port device team_slave_1 added [ 24.348393][ T3308] hsr_slave_0: entered promiscuous mode [ 24.354422][ T3308] hsr_slave_1: entered promiscuous mode [ 24.369166][ T3316] team0: Port device team_slave_0 added [ 24.379850][ T3316] team0: Port device team_slave_1 added [ 24.385855][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.392836][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.418840][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.430076][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.437132][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.463034][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.482823][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.496061][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.503057][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.528983][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.540050][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.547012][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.572931][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.595752][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.616268][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.623325][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.649223][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.660925][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.667856][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.693742][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.730704][ T3316] hsr_slave_0: entered promiscuous mode [ 24.736750][ T3316] hsr_slave_1: entered promiscuous mode [ 24.742538][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 24.748239][ T3316] Cannot create hsr debugfs directory [ 24.763832][ T3319] hsr_slave_0: entered promiscuous mode [ 24.769751][ T3319] hsr_slave_1: entered promiscuous mode [ 24.775865][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 24.781621][ T3319] Cannot create hsr debugfs directory [ 24.801147][ T3310] team0: Port device team_slave_0 added [ 24.809665][ T3309] hsr_slave_0: entered promiscuous mode [ 24.816700][ T3309] hsr_slave_1: entered promiscuous mode [ 24.822553][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 24.828254][ T3309] Cannot create hsr debugfs directory [ 24.844444][ T3310] team0: Port device team_slave_1 added [ 24.892064][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.899079][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.925053][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.952967][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.959959][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.985892][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.071074][ T3310] hsr_slave_0: entered promiscuous mode [ 25.077038][ T3310] hsr_slave_1: entered promiscuous mode [ 25.083029][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 25.088735][ T3310] Cannot create hsr debugfs directory [ 25.126405][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.137499][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.154714][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.168390][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.189339][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.197769][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.211929][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.224092][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.260133][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.270373][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.284501][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.300432][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.323850][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.333379][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.343764][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.352953][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.396154][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.405109][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.415872][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.428601][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.437149][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.447500][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.469636][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.485996][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.493137][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.502256][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.517151][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.524346][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.533029][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.540119][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.558213][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.567585][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.574687][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.597468][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.616318][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.630459][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.637529][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.646551][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.653587][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.665105][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.674809][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.692455][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.699486][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.714696][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.721852][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.735666][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.766261][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.789434][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.796604][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.826160][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.838056][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.852766][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.859827][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.927330][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.950094][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.996858][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.037089][ T3308] veth0_vlan: entered promiscuous mode [ 26.068933][ T3308] veth1_vlan: entered promiscuous mode [ 26.080753][ T3319] veth0_vlan: entered promiscuous mode [ 26.100113][ T3310] veth0_vlan: entered promiscuous mode [ 26.120916][ T3316] veth0_vlan: entered promiscuous mode [ 26.128014][ T3310] veth1_vlan: entered promiscuous mode [ 26.137780][ T3319] veth1_vlan: entered promiscuous mode [ 26.154920][ T3308] veth0_macvtap: entered promiscuous mode [ 26.163612][ T3316] veth1_vlan: entered promiscuous mode [ 26.175333][ T3308] veth1_macvtap: entered promiscuous mode [ 26.189949][ T3316] veth0_macvtap: entered promiscuous mode [ 26.198542][ T3316] veth1_macvtap: entered promiscuous mode [ 26.213792][ T3319] veth0_macvtap: entered promiscuous mode [ 26.224001][ T3319] veth1_macvtap: entered promiscuous mode [ 26.232385][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.242401][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.259287][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.272996][ T3310] veth0_macvtap: entered promiscuous mode [ 26.280489][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.289973][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.297641][ T83] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.308792][ T83] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.320910][ T3310] veth1_macvtap: entered promiscuous mode [ 26.331294][ T83] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.341135][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.351834][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.359641][ T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.375919][ T3309] veth0_vlan: entered promiscuous mode [ 26.384849][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.394646][ T83] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.403777][ T83] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.426042][ T83] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.435262][ T83] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.456465][ T3309] veth1_vlan: entered promiscuous mode [ 26.462947][ T83] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.480035][ T83] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.491116][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.505999][ T83] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.514821][ T83] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.526131][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.555535][ T83] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.571836][ T83] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.580551][ T83] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.616080][ T3480] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 26.630357][ T3309] veth0_macvtap: entered promiscuous mode [ 26.681043][ T3486] loop2: detected capacity change from 0 to 764 [ 26.682963][ T3309] veth1_macvtap: entered promiscuous mode [ 26.704840][ T3486] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 26.717956][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.738327][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.762175][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.785593][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.809174][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.832509][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.996442][ T3492] mmap: syz.0.1 (3492) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.009181][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 27.009261][ T28] audit: type=1400 audit(1771662876.456:124): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.300187][ T3506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 27.440867][ T3492] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 27.481899][ T28] audit: type=1400 audit(1771662876.526:125): avc: denied { shutdown } for pid=3500 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.526776][ T28] audit: type=1400 audit(1771662876.656:126): avc: denied { write } for pid=3500 comm="syz.1.6" name="route" dev="proc" ino=4026532407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 27.532423][ C1] hrtimer: interrupt took 56797 ns [ 27.549749][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.602209][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 27.619388][ T28] audit: type=1400 audit(1771662876.686:127): avc: denied { accept } for pid=3503 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.642035][ T28] audit: type=1400 audit(1771662876.736:128): avc: denied { mount } for pid=3503 comm="syz.3.7" name="/" dev="rpc_pipefs" ino=4707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 27.649311][ T3492] bridge_slave_1: left allmulticast mode [ 27.671238][ T3492] bridge_slave_1: left promiscuous mode [ 27.677018][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.698770][ T28] audit: type=1400 audit(1771662876.866:129): avc: denied { create } for pid=3487 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 27.718660][ T28] audit: type=1400 audit(1771662876.966:130): avc: denied { write } for pid=3512 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 27.747445][ T28] audit: type=1400 audit(1771662877.056:131): avc: denied { map_create } for pid=3512 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.766464][ T28] audit: type=1400 audit(1771662877.056:132): avc: denied { map_read map_write } for pid=3512 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.797863][ T3492] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 27.807404][ T3492] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1'. [ 27.816848][ T3492] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 27.848407][ T28] audit: type=1400 audit(1771662877.236:133): avc: denied { create } for pid=3512 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 27.881521][ T3516] loop1: detected capacity change from 0 to 512 [ 27.900257][ T3492] syz.0.1 (3492) used greatest stack depth: 10168 bytes left [ 27.912680][ T3516] EXT4-fs: Ignoring removed nobh option [ 27.922040][ T3486] veth3: entered promiscuous mode [ 27.947002][ T3519] loop0: detected capacity change from 0 to 512 [ 27.973652][ T3486] syz.2.3 (3486) used greatest stack depth: 9976 bytes left [ 28.011578][ T3516] EXT4-fs (loop1): orphan cleanup on readonly fs [ 28.019394][ T3519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.051654][ T3516] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.8: EA inode hash validation failed [ 28.101240][ T3519] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.121136][ T3516] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 28.138339][ T3529] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET) [ 28.168440][ T3516] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.8: corrupted inode contents [ 28.190303][ T3516] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 28.200599][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 28.218000][ C1] EXT4-fs (loop1): initial error at time 1771662877: ext4_do_update_inode:5569: inode 15 [ 28.229171][ C1] EXT4-fs (loop1): last error at time 1771662877: ext4_do_update_inode:5569: inode 15 [ 28.280670][ T3516] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.8: mark_inode_dirty error [ 28.343581][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.343841][ T3516] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 28.356587][ T3536] loop0: detected capacity change from 0 to 512 [ 28.358062][ T3516] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.8: corrupted inode contents [ 28.358181][ T3516] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 28.358889][ T3516] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.8: mark_inode_dirty error [ 28.358968][ T3516] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 28.359437][ T3516] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.8: mark inode dirty (error -117) [ 28.359538][ T3516] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 28.360094][ T3516] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 28.360829][ T3516] EXT4-fs (loop1): 1 orphan inode deleted [ 28.387944][ T3516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 28.396226][ T3536] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 28.396253][ T3536] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 28.396292][ T3536] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.14: Corrupt directory, running e2fsck is recommended [ 28.398242][ T3536] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 28.401491][ T3536] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.14: corrupted in-inode xattr: e_name out of bounds [ 28.401564][ T3536] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 28.401706][ T3536] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.14: couldn't read orphan inode 15 (err -117) [ 28.401769][ T3536] loop0: lost filesystem error report for type 5 error -117 [ 28.412803][ T3536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.417895][ T3516] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.449491][ T3540] netlink: 277 bytes leftover after parsing attributes in process `syz.2.13'. [ 28.544303][ T3544] netlink: 'syz.2.13': attribute type 36 has an invalid length. [ 28.548189][ T3544] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 28.548208][ T3544] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 28.563196][ T3540] netlink: 'syz.2.13': attribute type 10 has an invalid length. [ 28.563427][ T3540] macvlan1: entered allmulticast mode [ 28.581254][ T3540] veth1_vlan: entered allmulticast mode [ 28.594497][ T3540] team0: Port device macvlan1 added [ 28.603330][ T3540] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 28.769491][ T3549] netlink: 'syz.4.16': attribute type 1 has an invalid length. [ 28.770949][ T3550] loop1: detected capacity change from 0 to 512 [ 29.265954][ T3557] loop4: detected capacity change from 0 to 128 [ 29.269254][ T3557] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 29.269520][ T3557] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.274131][ T35] IPVS: starting estimator thread 0... [ 29.360685][ T3559] IPVS: using max 2544 ests per chain, 127200 per kthread [ 29.630164][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.678566][ T3540] syz.2.13 (3540) used greatest stack depth: 9592 bytes left [ 29.720301][ T3566] loop0: detected capacity change from 0 to 512 [ 29.727444][ T3566] EXT4-fs: Ignoring removed i_version option [ 29.734543][ T3567] netlink: 277 bytes leftover after parsing attributes in process `syz.3.21'. [ 29.743923][ T3566] EXT4-fs: Ignoring removed bh option [ 29.762203][ T3566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.775517][ T3566] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.786925][ T3567] hub 8-0:1.0: USB hub found [ 29.791957][ T3567] hub 8-0:1.0: 8 ports detected [ 29.801021][ T3567] netlink: 'syz.3.21': attribute type 36 has an invalid length. [ 29.811446][ T3567] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 29.821313][ T3567] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 29.834930][ T3567] netlink: 'syz.3.21': attribute type 10 has an invalid length. [ 29.849698][ T3566] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.20: iget: bad i_size value: 2533274857506816 [ 29.881793][ T3567] macvlan1: entered allmulticast mode [ 29.887640][ T3572] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 29.889344][ T3567] veth1_vlan: entered allmulticast mode [ 29.904044][ T3567] team0: Port device macvlan1 added [ 29.908926][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.949985][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.025991][ T3575] loop4: detected capacity change from 0 to 128 [ 30.164910][ T3579] loop2: detected capacity change from 0 to 2048 [ 30.205424][ T3579] GPT:first_usable_lbas don't match. [ 30.211220][ T3579] GPT:34 != 290 [ 30.214807][ T3579] GPT: Use GNU Parted to correct GPT errors. [ 30.220967][ T3579] loop2: p1 p2 p3 [ 30.288807][ T2999] GPT:first_usable_lbas don't match. [ 30.296081][ T2999] GPT:34 != 290 [ 30.309394][ T2999] GPT: Use GNU Parted to correct GPT errors. [ 30.333389][ T2999] loop2: p1 p2 p3 [ 30.583432][ T3585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 30.903355][ T3589] loop1: detected capacity change from 0 to 32768 [ 31.180632][ T3603] netlink: 277 bytes leftover after parsing attributes in process `syz.0.30'. [ 31.244105][ T3601] hub 8-0:1.0: USB hub found [ 31.248799][ T3601] hub 8-0:1.0: 8 ports detected [ 31.263807][ T3601] netlink: 'syz.0.30': attribute type 36 has an invalid length. [ 31.277032][ T3601] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 31.286925][ T3601] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 31.305909][ T3601] netlink: 'syz.0.30': attribute type 10 has an invalid length. [ 31.331091][ T3601] macvlan1: entered allmulticast mode [ 31.339272][ T3601] veth1_vlan: entered allmulticast mode [ 31.351344][ T3601] team0: Port device macvlan1 added [ 31.369459][ T3601] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 31.790809][ T3607] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 31.818286][ T3607] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 32.032085][ T3601] syz.0.30 (3601) used greatest stack depth: 8928 bytes left [ 32.410090][ T3615] netlink: 277 bytes leftover after parsing attributes in process `syz.0.33'. [ 32.444391][ T3615] hub 8-0:1.0: USB hub found [ 32.449064][ T3615] hub 8-0:1.0: 8 ports detected [ 32.458104][ T3615] netlink: 'syz.0.33': attribute type 36 has an invalid length. [ 32.468839][ T3615] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 32.478724][ T3615] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 32.491891][ T3615] netlink: 'syz.0.33': attribute type 10 has an invalid length. [ 32.499857][ T3615] veth1_vlan: left allmulticast mode [ 32.514583][ T3615] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 32.582807][ T3619] loop3: detected capacity change from 0 to 4096 [ 32.624380][ T3619] EXT4-fs: Ignoring removed bh option [ 32.677053][ T3619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.837694][ T3625] netlink: 277 bytes leftover after parsing attributes in process `syz.1.36'. [ 32.853171][ T3625] hub 8-0:1.0: USB hub found [ 32.857871][ T3625] hub 8-0:1.0: 8 ports detected [ 32.866920][ T3625] netlink: 'syz.1.36': attribute type 36 has an invalid length. [ 32.877267][ T3625] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 32.887113][ T3625] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 32.900682][ T3625] macvlan1: entered allmulticast mode [ 32.907951][ T3625] veth1_vlan: entered allmulticast mode [ 32.915838][ T3625] team0: Port device macvlan1 added [ 32.924663][ T3625] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 33.058452][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 33.058465][ T28] audit: type=1400 audit(1771662882.496:185): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.117101][ T3384] IPVS: starting estimator thread 0... [ 33.166834][ T28] audit: type=1400 audit(1771662882.606:186): avc: denied { create } for pid=3631 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.221846][ T3636] tipc: Started in network mode [ 33.228240][ T28] audit: type=1400 audit(1771662882.636:187): avc: denied { ioctl } for pid=3631 comm="syz.2.39" path="socket:[4939]" dev="sockfs" ino=4939 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.253270][ T3630] IPVS: using max 2448 ests per chain, 122400 per kthread [ 33.260636][ T3636] tipc: Node identity 0000000000002d5f006b000000000001, cluster identity 4711 [ 33.269656][ T3636] tipc: Enabling of bearer rejected, failed to enable media [ 33.271082][ T3638] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.302289][ T28] audit: type=1400 audit(1771662882.746:188): avc: denied { connect } for pid=3637 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.323230][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.350229][ T28] audit: type=1400 audit(1771662882.786:189): avc: denied { create } for pid=3637 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.370799][ T3642] vlan2: entered allmulticast mode [ 33.375924][ T3642] team0: entered allmulticast mode [ 33.398723][ T3642] team_slave_0: entered allmulticast mode [ 33.409744][ T3642] team_slave_1: entered allmulticast mode [ 33.428939][ T3649] loop3: detected capacity change from 0 to 512 [ 33.455526][ T3638] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.465366][ T3649] EXT4-fs (loop3): orphan cleanup on readonly fs [ 33.477747][ T28] audit: type=1400 audit(1771662882.916:190): avc: denied { write } for pid=3637 comm="syz.4.42" laddr=fe80::16 lport=33594 faddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.496706][ T3638] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 33.511709][ T3649] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.44: ea_inode with extended attributes [ 33.550729][ T3649] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.554101][ T3649] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.44: error while reading EA inode 11 err=-117 [ 33.563332][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 33.563360][ C1] EXT4-fs (loop3): initial error at time 1771662882: ext4_xattr_inode_iget:441: inode 11 [ 33.563392][ C1] EXT4-fs (loop3): last error at time 1771662882: ext4_xattr_inode_iget:441: inode 11 [ 33.602012][ T3649] loop3: lost filesystem error report for type 5 error -117 [ 33.603731][ T3649] EXT4-fs (loop3): 1 orphan inode deleted [ 33.619490][ T3649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.699953][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.734656][ T3663] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.750857][ T28] audit: type=1400 audit(1771662883.166:191): avc: denied { setopt } for pid=3662 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.772190][ T3663] IPVS: set_ctl: invalid protocol: 46 172.20.20.11:20003 [ 33.791288][ T3665] netlink: 277 bytes leftover after parsing attributes in process `syz.1.49'. [ 33.834696][ T3665] hub 8-0:1.0: USB hub found [ 33.839408][ T3665] hub 8-0:1.0: 8 ports detected [ 33.848163][ T3665] validate_nla: 1 callbacks suppressed [ 33.848181][ T3665] netlink: 'syz.1.49': attribute type 36 has an invalid length. [ 33.865299][ T3665] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 33.875284][ T3665] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 33.888305][ T3665] netlink: 'syz.1.49': attribute type 10 has an invalid length. [ 33.896082][ T3665] veth1_vlan: left allmulticast mode [ 33.932631][ T3665] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 33.944473][ T28] audit: type=1400 audit(1771662883.216:192): avc: denied { setopt } for pid=3662 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.003429][ T3675] tipc: Started in network mode [ 34.027085][ T3675] tipc: Node identity 0000000000002d5f006b000000000001, cluster identity 4711 [ 34.054407][ T28] audit: type=1400 audit(1771662883.366:193): avc: denied { create } for pid=3667 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 34.088338][ T3675] tipc: Enabling of bearer rejected, failed to enable media [ 34.115675][ T3677] loop0: detected capacity change from 0 to 2048 [ 34.142632][ T3644] loop2: detected capacity change from 0 to 32768 [ 34.160611][ T28] audit: type=1400 audit(1771662883.526:194): avc: denied { read write } for pid=3676 comm="syz.0.54" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 34.262092][ T3677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.282362][ T3677] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.432009][ T3697] loop3: detected capacity change from 0 to 128 [ 34.450936][ T3384] IPVS: starting estimator thread 0... [ 34.461820][ T3697] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 34.478452][ T3697] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.583969][ T3450] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.870081][ T3711] loop1: detected capacity change from 0 to 8192 [ 34.886479][ T3698] IPVS: using max 2640 ests per chain, 132000 per kthread [ 34.901681][ T3711] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.979805][ T3677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.54'. [ 34.989317][ T3677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.54'. [ 35.099255][ T3719] netlink: 277 bytes leftover after parsing attributes in process `syz.2.61'. [ 35.114029][ T3703] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 35.122876][ T3703] FAT-fs (loop1): Filesystem has been set read-only [ 35.130236][ T3703] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 35.141340][ T3719] hub 8-0:1.0: USB hub found [ 35.145979][ T3719] hub 8-0:1.0: 8 ports detected [ 35.153166][ T3719] netlink: 'syz.2.61': attribute type 36 has an invalid length. [ 35.163366][ T3719] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 35.173244][ T3719] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 35.184677][ T3719] netlink: 'syz.2.61': attribute type 10 has an invalid length. [ 35.192514][ T3719] veth1_vlan: left allmulticast mode [ 35.203490][ T3719] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 35.216926][ T3703] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 35.330786][ T3689] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 35.358901][ T3724] tipc: Started in network mode [ 35.370886][ T3689] EXT4-fs (loop0): Remounting filesystem read-only [ 35.385679][ T3724] tipc: Node identity 0000000000002d5f006b000000000001, cluster identity 4711 [ 35.408477][ T3724] tipc: Enabling of bearer rejected, failed to enable media [ 35.426039][ T3727] Zero length message leads to an empty skb [ 35.444989][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.478602][ T3732] capability: warning: `syz.4.69' uses 32-bit capabilities (legacy support in use) [ 35.519385][ T3737] loop4: detected capacity change from 0 to 512 [ 35.529363][ T3737] EXT4-fs: Ignoring removed nobh option [ 35.539883][ T3737] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.550672][ T3737] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.600850][ T3737] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.70: corrupted inode contents [ 35.613304][ T3737] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 35.613594][ T3737] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #3: comm syz.4.70: mark_inode_dirty error [ 35.622692][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 35.622711][ C0] EXT4-fs (loop4): initial error at time 1771662885: ext4_do_update_inode:5569: inode 3 [ 35.622742][ C0] EXT4-fs (loop4): last error at time 1771662885: ext4_do_update_inode:5569: inode 3 [ 35.659582][ T3737] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 35.660738][ T3737] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.70: bg 0: block 131: padding at end of block bitmap is not set [ 35.674494][ T3734] loop0: detected capacity change from 0 to 2048 [ 35.684263][ T3737] loop4: lost filesystem error report for type 5 error -117 [ 35.684599][ T3737] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.70: Failed to acquire dquot type 0 [ 35.709049][ T3737] loop4: lost filesystem error report for type 5 error -117 [ 35.709737][ T3737] EXT4-fs (loop4): 1 truncate cleaned up [ 35.722928][ T3737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.735458][ T3737] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.743096][ T3584] Alternate GPT is invalid, using primary GPT. [ 35.753029][ T3584] loop0: p2 p3 p7 [ 35.802750][ T3737] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.70: Failed to acquire dquot type 0 [ 35.822958][ T3734] Alternate GPT is invalid, using primary GPT. [ 35.831554][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.843613][ T3734] loop0: p2 p3 p7 [ 36.430734][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 36.528717][ T3765] tipc: Started in network mode [ 36.533783][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.548260][ T3765] tipc: Node identity 0000000000002d5f006b000000000001, cluster identity 4711 [ 36.560647][ T3765] tipc: Enabling of bearer rejected, failed to enable media [ 36.620314][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.695277][ T3780] netlink: 'syz.1.83': attribute type 12 has an invalid length. [ 36.705494][ T3778] loop3: detected capacity change from 0 to 512 [ 36.713748][ T3771] loop2: detected capacity change from 0 to 4096 [ 36.716198][ T3781] netlink: 'syz.1.83': attribute type 12 has an invalid length. [ 36.738401][ T3778] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.750696][ T3786] netlink: 'syz.4.84': attribute type 1 has an invalid length. [ 36.775239][ T3786] dummy0: entered promiscuous mode [ 36.784135][ T3778] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 36.798417][ T3778] EXT4-fs (loop3): 1 truncate cleaned up [ 36.799749][ T3790] process 'syz.1.85' launched './file0' with NULL argv: empty string added [ 36.804781][ T3778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.826243][ T3784] dummy0: left promiscuous mode [ 36.833360][ T3771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.875343][ T3793] syzkaller1: entered promiscuous mode [ 36.888435][ T3793] syzkaller1: entered allmulticast mode [ 36.895128][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.905367][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.964146][ T3793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.984361][ T3793] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.86: missing EA_INODE flag [ 37.022166][ T3793] EXT4-fs (loop1): Remounting filesystem read-only [ 37.080022][ T3798] siw: device registration error -23 [ 37.142260][ T3815] tipc: Enabling of bearer rejected, failed to enable media [ 37.188056][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.281060][ T314] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.052148][ T3824] set_capacity_and_notify: 1 callbacks suppressed [ 38.052180][ T3824] loop3: detected capacity change from 0 to 256 [ 38.068265][ T1032] IPVS: starting estimator thread 0... [ 38.087474][ T3823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.93'. [ 38.107181][ T3826] loop4: detected capacity change from 0 to 512 [ 38.113949][ T3826] ext3: Unknown parameter '"?' [ 38.125434][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 38.125446][ T28] audit: type=1400 audit(1771662887.566:229): avc: denied { read write } for pid=3827 comm="syz.1.95" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 38.167777][ T28] audit: type=1400 audit(1771662887.606:230): avc: denied { open } for pid=3827 comm="syz.1.95" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 38.191026][ T3825] IPVS: using max 2448 ests per chain, 122400 per kthread [ 38.200127][ T28] audit: type=1400 audit(1771662887.606:231): avc: denied { getopt } for pid=3827 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.220811][ T28] audit: type=1400 audit(1771662887.606:232): avc: denied { read } for pid=3827 comm="syz.1.95" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 38.238725][ T3830] loop1: detected capacity change from 0 to 512 [ 38.243852][ T28] audit: type=1400 audit(1771662887.606:233): avc: denied { open } for pid=3827 comm="syz.1.95" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 38.276383][ T3830] EXT4-fs: inline encryption not supported [ 38.312367][ T3830] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 38.339044][ T28] audit: type=1400 audit(1771662887.606:234): avc: denied { ioctl } for pid=3827 comm="syz.1.95" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 38.410736][ T28] audit: type=1400 audit(1771662887.606:235): avc: denied { create } for pid=3827 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 38.483701][ T28] audit: type=1400 audit(1771662887.606:236): avc: denied { ioctl } for pid=3827 comm="syz.1.95" path="socket:[6315]" dev="sockfs" ino=6315 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 38.508138][ T28] audit: type=1400 audit(1771662887.636:237): avc: denied { write } for pid=3817 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.539708][ T28] audit: type=1400 audit(1771662887.666:238): avc: denied { ioctl } for pid=3817 comm="syz.4.94" path="socket:[5527]" dev="sockfs" ino=5527 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.570785][ T3849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=3849 comm=syz.1.101 [ 38.622999][ T3854] pim6reg: entered allmulticast mode [ 38.651837][ T3848] netlink: 32 bytes leftover after parsing attributes in process `syz.1.101'. [ 38.673089][ T3848] netlink: 32 bytes leftover after parsing attributes in process `syz.1.101'. [ 38.682769][ T3849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 38.694498][ T3848] loop1: detected capacity change from 0 to 256 [ 38.700809][ T3857] tipc: Enabling of bearer rejected, failed to enable media [ 38.837164][ T3869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'. [ 38.901471][ T3865] loop4: detected capacity change from 0 to 4096 [ 38.912247][ T3869] vlan3: entered allmulticast mode [ 38.918451][ T3869] bridge0: entered allmulticast mode [ 38.921207][ T3865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.924054][ T3869] bridge0: port 3(vlan3) entered blocking state [ 38.942809][ T3869] bridge0: port 3(vlan3) entered disabled state [ 38.991747][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.059942][ T3886] loop4: detected capacity change from 0 to 512 [ 39.099898][ T3886] EXT4-fs: Ignoring removed nobh option [ 39.121324][ T3870] xt_connbytes: Forcing CT accounting to be enabled [ 39.131478][ T3886] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.171333][ T3886] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.109: iget: bad i_size value: 38620345925642 [ 39.224211][ T3886] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.224394][ T3886] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.109: couldn't read orphan inode 15 (err -117) [ 39.233560][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 39.233583][ C0] EXT4-fs (loop4): initial error at time 1771662888: ext4_orphan_get:1391: inode 15 [ 39.233626][ C0] EXT4-fs (loop4): last error at time 1771662888: ext4_orphan_get:1391: inode 15 [ 39.336167][ T3701] Bluetooth: hci0: command 0x1003 tx timeout [ 39.342233][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.412971][ T3886] loop4: lost filesystem error report for type 5 error -117 [ 39.416204][ T3886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.486738][ T3886] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.109: bg 0: block 5: invalid block bitmap [ 39.530653][ T3886] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 39.566585][ T3886] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.566585][ T3886] [ 39.585389][ T3886] EXT4-fs (loop4): Total free blocks count 0 [ 39.640951][ T3896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 39.668311][ T3886] EXT4-fs (loop4): Free/Dirty block details [ 39.670330][ T3898] netlink: 40 bytes leftover after parsing attributes in process `syz.2.111'. [ 39.674270][ T3886] EXT4-fs (loop4): free_blocks=0 [ 39.688128][ T3886] EXT4-fs (loop4): dirty_blocks=1 [ 39.693272][ T3886] EXT4-fs (loop4): Block reservation details [ 39.699259][ T3886] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 39.805661][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.891286][ T3916] tipc: Enabling of bearer rejected, failed to enable media [ 39.993521][ T3919] loop4: detected capacity change from 0 to 512 [ 40.043660][ T3919] EXT4-fs: Ignoring removed nobh option [ 40.095746][ T3919] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.111945][ T3919] EXT4-fs (loop4): 1 truncate cleaned up [ 40.118151][ T3919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.208346][ T3941] loop2: detected capacity change from 0 to 512 [ 40.218071][ T3941] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 40.230716][ T3941] EXT4-fs (loop2): group descriptors corrupted! [ 40.230983][ T3919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 40.418449][ T3450] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.431185][ T3450] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.693596][ T3932] netlink: 'syz.2.123': attribute type 16 has an invalid length. [ 40.718088][ T3932] netlink: 'syz.2.123': attribute type 17 has an invalid length. [ 40.733896][ T3934] team0 (unregistering): Port device team_slave_0 removed [ 40.743759][ T3947] loop1: detected capacity change from 0 to 512 [ 40.758102][ T3934] team0 (unregistering): Port device team_slave_1 removed [ 40.770827][ T3934] team0 (unregistering): Port device macvlan1 removed [ 40.855561][ T3947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.889249][ T3932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.905043][ T3947] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.962000][ T3947] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x6 [ 41.074149][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.107556][ T3959] loop2: detected capacity change from 0 to 512 [ 41.389185][ T3914] syz.4.115 (3914) used greatest stack depth: 5880 bytes left [ 41.414447][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.432784][ T3966] tipc: Enabling of bearer rejected, failed to enable media [ 41.590545][ T3970] veth1_to_bridge: mtu less than device minimum [ 41.765309][ T3978] siw: device registration error -23 [ 41.935872][ T3986] ======================================================= [ 41.935872][ T3986] WARNING: The mand mount option has been deprecated and [ 41.935872][ T3986] and is ignored by this kernel. Remove the mand [ 41.935872][ T3986] option from the mount to silence this warning. [ 41.935872][ T3986] ======================================================= [ 42.034286][ T3986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.138'. [ 42.064090][ T4002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 42.254868][ T4004] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.332702][ T4006] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.392266][ T4004] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 42.407768][ T4004] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002] [ 42.424678][ T4004] System zones: 0-1, 15-15, 18-18, 34-34 [ 42.435973][ T4004] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.452023][ T4004] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.143: bg 0: block 15: invalid block bitmap [ 42.464369][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.484517][ T4004] loop4: lost filesystem error report for type 5 error -117 [ 42.484727][ T4004] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 42.492043][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 42.492063][ C1] EXT4-fs (loop4): initial error at time 1771662891: ext4_validate_block_bitmap:432 [ 42.492094][ C1] EXT4-fs (loop4): last error at time 1771662891: ext4_validate_block_bitmap:432 [ 42.589489][ T4006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.602406][ T4006] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.641759][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.709547][ T4015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.717291][ T4004] loop4: lost filesystem error report for type 5 error -117 [ 42.717586][ T4004] EXT4-fs (loop4): 1 truncate cleaned up [ 42.737217][ T4015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.787645][ T4004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.813951][ T4021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.146'. [ 42.849503][ T4021] EXT4-fs: Ignoring removed orlov option [ 42.858460][ T4019] siw: device registration error -23 [ 42.894677][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.940769][ T4029] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 42.949825][ T4021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.067953][ T4038] set_capacity_and_notify: 4 callbacks suppressed [ 43.067973][ T4038] loop4: detected capacity change from 0 to 512 [ 43.100040][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.139747][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 43.139760][ T28] audit: type=1400 audit(1771662892.576:374): avc: denied { name_bind } for pid=4037 comm="syz.3.153" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 43.199318][ T28] audit: type=1400 audit(1771662892.576:375): avc: denied { node_bind } for pid=4037 comm="syz.3.153" saddr=::ffff:0.0.0.0 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 43.279460][ T28] audit: type=1400 audit(1771662892.576:376): avc: denied { setopt } for pid=4037 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.314846][ T4050] loop2: detected capacity change from 0 to 512 [ 43.322535][ T28] audit: type=1400 audit(1771662892.576:377): avc: denied { shutdown } for pid=4037 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.350276][ T28] audit: type=1400 audit(1771662892.576:378): avc: denied { connect } for pid=4037 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.369989][ T28] audit: type=1400 audit(1771662892.576:379): avc: denied { name_connect } for pid=4037 comm="syz.3.153" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 43.510907][ T3387] IPVS: starting estimator thread 0... [ 43.536051][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.551747][ T4050] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.598120][ T28] audit: type=1400 audit(1771662892.616:380): avc: denied { append } for pid=4033 comm="syz.4.151" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.625564][ T4050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.641452][ T28] audit: type=1400 audit(1771662892.626:381): avc: denied { execmem } for pid=4045 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.668158][ T4050] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.679438][ T28] audit: type=1326 audit(1771662892.666:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.0.154" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f498df6c629 code=0x0 [ 43.702287][ T4052] IPVS: using max 2544 ests per chain, 127200 per kthread [ 43.748907][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.783359][ T28] audit: type=1400 audit(1771662893.226:383): avc: denied { tracepoint } for pid=4060 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.842522][ T4073] capability: warning: `syz.3.161' uses deprecated v2 capabilities in a way that may be insecure [ 43.926693][ T4083] loop4: detected capacity change from 0 to 1024 [ 43.958131][ T4083] EXT4-fs: dax option not supported [ 44.024060][ T4088] loop0: detected capacity change from 0 to 1024 [ 44.174532][ T4096] xt_NFQUEUE: number of total queues is 0 [ 44.231787][ T4088] EXT4-fs warning (device loop0): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop0. [ 44.409419][ T4103] loop3: detected capacity change from 0 to 512 [ 44.498254][ T4103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.512938][ T4103] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.618150][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.112475][ T4114] loop3: detected capacity change from 0 to 512 [ 45.158032][ T4117] __nla_validate_parse: 1 callbacks suppressed [ 45.158048][ T4117] netlink: 40 bytes leftover after parsing attributes in process `syz.4.173'. [ 45.194310][ T4117] TCP: TCP_TX_DELAY enabled [ 45.275349][ T4119] loop0: detected capacity change from 0 to 512 [ 45.298055][ T4119] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.172: inode has both inline data and extents flags [ 45.333580][ T4119] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.333828][ T4119] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.172: couldn't read orphan inode 15 (err -117) [ 45.342991][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 45.343008][ C1] EXT4-fs (loop0): initial error at time 1771662894: ext4_orphan_get:1391: inode 15 [ 45.343037][ C1] EXT4-fs (loop0): last error at time 1771662894: ext4_orphan_get:1391: inode 15 [ 45.414378][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 45.420482][ T3701] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.427948][ T4119] loop0: lost filesystem error report for type 5 error -117 [ 45.441175][ T4119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 45.483288][ T4135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 45.656979][ T4142] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.180'. [ 45.717497][ T4146] loop2: detected capacity change from 0 to 128 [ 45.724699][ T4146] msdos: Bad value for 'gid' [ 45.729404][ T4146] msdos: Bad value for 'gid' [ 45.935589][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 46.005146][ T4153] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 46.065463][ T4153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.107318][ T4164] tipc: Started in network mode [ 46.112448][ T4164] tipc: Node identity 0000000000002d5f006b000000000001, cluster identity 4711 [ 46.123345][ T4164] tipc: Enabling of bearer rejected, failed to enable media [ 46.162931][ T4153] ip6erspan0: entered promiscuous mode [ 46.172672][ T4153] bond1: (slave ip6erspan0): making interface the new active one [ 46.181877][ T4153] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 46.202653][ T4153] selinux_netlink_send: 1 callbacks suppressed [ 46.202667][ T4153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4153 comm=syz.3.184 [ 46.276415][ T4172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 46.292315][ T4172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 46.379105][ T4179] netlink: 15 bytes leftover after parsing attributes in process `syz.3.191'. [ 46.574494][ T4195] loop2: detected capacity change from 0 to 512 [ 46.699526][ T4199] tipc: Enabling of bearer rejected, failed to enable media [ 46.739861][ T4201] Illegal XDP return value 4294967294 on prog (id 56) dev syz_tun, expect packet loss! [ 46.769488][ T4201] Invalid argument reading file caps for ./file0 [ 46.828719][ T4204] loop4: detected capacity change from 0 to 128 [ 46.857571][ T4204] syz.4.199: attempt to access beyond end of device [ 46.857571][ T4204] loop4: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 46.871271][ T4204] syz.4.199: attempt to access beyond end of device [ 46.871271][ T4204] loop4: rw=2049, sector=186, nr_sectors = 16 limit=128 [ 46.885195][ T4204] syz.4.199: attempt to access beyond end of device [ 46.885195][ T4204] loop4: rw=2049, sector=218, nr_sectors = 16 limit=128 [ 46.963031][ T4207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.200'. [ 46.972338][ T4207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.200'. [ 47.131517][ T4226] EXT4-fs (loop3): bad geometry: first data block 2 is beyond end of filesystem (0) [ 47.142543][ T4213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 47.165899][ T4226] EXT4-fs (loop3): bad geometry: first data block 2 is beyond end of filesystem (0) [ 47.294450][ T4233] tipc: Enabling of bearer rejected, failed to enable media [ 47.323600][ T4234] netlink: 277 bytes leftover after parsing attributes in process `syz.3.207'. [ 47.383916][ T4234] hub 8-0:1.0: USB hub found [ 47.388859][ T4234] hub 8-0:1.0: 8 ports detected [ 47.405007][ T4234] netlink: 'syz.3.207': attribute type 36 has an invalid length. [ 47.419377][ T4234] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 47.429365][ T4234] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 47.449781][ T4234] netlink: 'syz.3.207': attribute type 10 has an invalid length. [ 47.457962][ T4234] veth1_vlan: left allmulticast mode [ 47.490310][ T4234] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 47.667536][ T3450] kworker/u8:7: attempt to access beyond end of device [ 47.667536][ T3450] loop4: rw=1, sector=154, nr_sectors = 2 limit=128 [ 47.901107][ T4246] sysfs: cannot create duplicate filename '/module/raw_gadget' [ 47.901156][ T4237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.901237][ T4237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.925844][ T4246] CPU: 1 UID: 0 PID: 4246 Comm: syz.1.210 Not tainted syzkaller #0 PREEMPT(full) [ 47.925950][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.925974][ T4246] Call Trace: [ 47.925982][ T4246] [ 47.925990][ T4246] __dump_stack+0x1d/0x30 [ 47.926016][ T4246] dump_stack_lvl+0x95/0xd0 [ 47.926039][ T4246] dump_stack+0x15/0x1b [ 47.926106][ T4246] sysfs_create_dir_ns+0x1a3/0x1d0 [ 47.926195][ T4246] kobject_add_internal+0x47a/0x780 [ 47.926217][ T4246] kobject_init_and_add+0x14a/0x1f0 [ 47.926311][ T4246] ? lookup_or_create_module_kobject+0x61/0x140 [ 47.926345][ T4246] lookup_or_create_module_kobject+0xbc/0x140 [ 47.926373][ T4246] module_add_driver+0x5b/0x250 [ 47.926461][ T4246] bus_add_driver+0x2a8/0x450 [ 47.926483][ T4246] driver_register+0x162/0x220 [ 47.926504][ T4246] usb_gadget_register_driver_owner+0x92/0x1a0 [ 47.926538][ T4246] raw_ioctl+0xc6c/0x1e10 [ 47.926616][ T4246] ? ioctl_has_perm+0x27e/0x2d0 [ 47.926683][ T4246] ? do_vfs_ioctl+0x84f/0xe70 [ 47.926712][ T4246] ? selinux_file_ioctl+0x5f7/0xcb0 [ 47.926731][ T4246] ? __rcu_read_unlock+0x4e/0x70 [ 47.926752][ T4246] ? __fget_files+0x184/0x1c0 [ 47.926776][ T4246] ? __pfx_raw_ioctl+0x10/0x10 [ 47.926832][ T4246] __se_sys_ioctl+0xce/0x140 [ 47.926861][ T4246] __x64_sys_ioctl+0x43/0x50 [ 47.926968][ T4246] x64_sys_call+0x1563/0x3020 [ 47.926993][ T4246] do_syscall_64+0x12c/0x370 [ 47.927024][ T4246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.927043][ T4246] RIP: 0033:0x7f2f7290c2bb [ 47.927154][ T4246] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 47.927171][ T4246] RSP: 002b:00007f2f71322f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.927191][ T4246] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f2f7290c2bb [ 47.927205][ T4246] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 47.927217][ T4246] RBP: 00007f2f71323fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 47.927301][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.927314][ T4246] R13: 0000200000001280 R14: 0000000000000001 R15: 0000000000000868 [ 47.927338][ T4246] [ 47.927376][ T4246] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 48.093152][ T4257] set_capacity_and_notify: 4 callbacks suppressed [ 48.093170][ T4257] loop0: detected capacity change from 0 to 512 [ 48.152587][ T4246] Adding module 'raw_gadget' to sysfs failed (-17), the system may be unstable. [ 48.189442][ T4246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.198022][ T4246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.229254][ T4257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.257848][ T4257] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.270894][ T4266] loop4: detected capacity change from 0 to 128 [ 48.279070][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 48.279085][ T28] audit: type=1400 audit(1771662897.716:447): avc: denied { write } for pid=4265 comm="syz.4.220" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.311633][ T4266] FAT-fs (loop4): bogus number of reserved sectors [ 48.320193][ T4266] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 48.329750][ T4266] FAT-fs (loop4): Can't find a valid FAT filesystem [ 48.337304][ T28] audit: type=1400 audit(1771662897.766:448): avc: denied { mounton } for pid=4256 comm="syz.0.216" path="/41/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.360402][ T28] audit: type=1326 audit(1771662897.786:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4267 comm="syz.3.221" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f610f67c629 code=0x0 [ 48.383672][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.407784][ T4275] loop3: detected capacity change from 0 to 512 [ 48.453009][ T4277] loop0: detected capacity change from 0 to 512 [ 48.522427][ T28] audit: type=1326 audit(1771662897.966:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4383bac629 code=0x7ffc0000 [ 48.529598][ T4277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.560971][ T28] audit: type=1326 audit(1771662897.966:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4383bac629 code=0x7ffc0000 [ 48.584994][ T28] audit: type=1326 audit(1771662897.996:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4383bac629 code=0x7ffc0000 [ 48.586175][ T4277] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.608374][ T28] audit: type=1326 audit(1771662897.996:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4383bac629 code=0x7ffc0000 [ 48.608399][ T28] audit: type=1326 audit(1771662897.996:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4383bac629 code=0x7ffc0000 [ 48.608423][ T28] audit: type=1326 audit(1771662897.996:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4383bac629 code=0x7ffc0000 [ 48.691587][ T28] audit: type=1326 audit(1771662897.996:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4383bac629 code=0x7ffc0000 [ 48.746918][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.578367][ T4335] loop3: detected capacity change from 0 to 1024 [ 49.638472][ T4335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.662442][ T4335] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.738002][ T4335] tipc: Failed to remove unknown binding: 66,1,1/0:1895228567/1895228569 [ 49.752370][ T4335] tipc: Failed to remove unknown binding: 66,1,1/0:1895228567/1895228569 [ 49.799760][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.947040][ T4368] loop2: detected capacity change from 0 to 512 [ 50.019745][ T4373] : port 1(gretap0) entered blocking state [ 50.045601][ T4373] : port 1(gretap0) entered disabled state [ 50.052118][ T4373] gretap0: entered allmulticast mode [ 50.054570][ T4379] kernel profiling enabled (shift: 0) [ 50.058171][ T4373] gretap0: entered promiscuous mode [ 50.077945][ T4373] geneve2: entered promiscuous mode [ 50.083282][ T4373] geneve2: entered allmulticast mode [ 50.106029][ T4382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4382 comm=syz.3.252 [ 50.176902][ T4388] __nla_validate_parse: 3 callbacks suppressed [ 50.177013][ T4388] netlink: 277 bytes leftover after parsing attributes in process `syz.1.251'. [ 50.228263][ T4388] hub 8-0:1.0: USB hub found [ 50.232942][ T4388] hub 8-0:1.0: 8 ports detected [ 50.275865][ T4388] netlink: 'syz.1.251': attribute type 36 has an invalid length. [ 50.290089][ T4388] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 50.299998][ T4388] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 50.319707][ T4388] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 50.329061][ T4388] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 50.448125][ T4383] loop0: detected capacity change from 0 to 1024 [ 50.459912][ T4393] loop4: detected capacity change from 0 to 512 [ 50.499888][ T4393] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.254: invalid indirect mapped block 4294967295 (level 1) [ 50.568248][ T4383] EXT4-fs: Ignoring removed bh option [ 50.599553][ T4393] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.600572][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 50.616159][ C0] EXT4-fs (loop4): initial error at time 1771662900: ext4_free_branches:1023: inode 11 [ 50.625837][ C0] EXT4-fs (loop4): last error at time 1771662900: ext4_free_branches:1023: inode 11 [ 50.635353][ T4393] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.254: invalid indirect mapped block 4294967295 (level 1) [ 50.653331][ T4383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 50.665898][ T4393] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.680345][ T4393] EXT4-fs (loop4): 2 truncates cleaned up [ 50.755975][ T4393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.776175][ T4379] pimreg: entered allmulticast mode [ 50.784201][ T4379] pimreg: left allmulticast mode [ 50.822921][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.854278][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 50.918750][ T4413] xt_TCPMSS: Only works on TCP SYN packets [ 50.966489][ T4417] loop1: detected capacity change from 0 to 512 [ 51.026742][ T4421] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 51.040762][ T4417] EXT4-fs (loop1): 1 truncate cleaned up [ 51.052720][ T4417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.081411][ T4426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 51.100320][ T4426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 51.136076][ T4435] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.260: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 51.206547][ T4438] loop4: detected capacity change from 0 to 512 [ 51.342933][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.549768][ T4455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 51.686737][ T4461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.270'. [ 51.776248][ T4465] tipc: Enabling of bearer rejected, failed to enable media [ 51.965428][ T4474] netlink: 'syz.0.274': attribute type 4 has an invalid length. [ 52.069471][ T4478] netlink: 'syz.0.274': attribute type 4 has an invalid length. [ 52.071739][ T4476] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.100852][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 52.122282][ T4476] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.148725][ T4481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.163017][ T4481] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.177839][ T4481] netlink: 'syz.4.277': attribute type 4 has an invalid length. [ 52.252573][ T4481] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 52.292348][ T4481] bond1 (unregistering): Released all slaves [ 52.344358][ T4496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 52.354970][ T4498] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.388125][ T4496] vlan2: entered promiscuous mode [ 52.418938][ T4496] team0: entered promiscuous mode [ 52.439328][ T4496] team_slave_0: entered promiscuous mode [ 52.447716][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.470838][ T4496] team_slave_1: entered promiscuous mode [ 52.479138][ T4496] macvlan1: entered promiscuous mode [ 52.611806][ T4518] netlink: 27 bytes leftover after parsing attributes in process `syz.2.285'. [ 52.836977][ T4530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4530 comm=syz.1.292 [ 52.901765][ T3584] GPT:first_usable_lbas don't match. [ 52.907096][ T3584] GPT:34 != 290 [ 52.910829][ T3584] GPT: Use GNU Parted to correct GPT errors. [ 52.916883][ T3584] loop1: p1 p2 p3 [ 52.926785][ T4530] GPT:first_usable_lbas don't match. [ 52.932264][ T4530] GPT:34 != 290 [ 52.935742][ T4530] GPT: Use GNU Parted to correct GPT errors. [ 52.941990][ T4530] loop1: p1 p2 p3 [ 52.989353][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 52.990988][ T3584] udevd[3584]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 52.999351][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 53.062553][ T4539] EXT4-fs: Ignoring removed bh option [ 53.081725][ T4539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.229864][ T4553] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 53.237422][ T4553] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.244964][ T4553] vhci_hcd vhci_hcd.4: default hub control req: 0016 v0014 i0000 l0 [ 53.271219][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.441420][ T28] kauditd_printk_skb: 841 callbacks suppressed [ 53.441435][ T28] audit: type=1326 audit(1771662902.886:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.4.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa99ad2c629 code=0x0 [ 53.486926][ T4570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.306'. [ 53.522642][ T28] audit: type=1400 audit(1771662902.966:1299): avc: denied { watch watch_reads } for pid=4575 comm="syz.3.308" path="/64/file0" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.568614][ T28] audit: type=1400 audit(1771662903.006:1300): avc: denied { getopt } for pid=4579 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.596211][ T28] audit: type=1400 audit(1771662903.036:1301): avc: denied { read } for pid=4579 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.618324][ T4586] set_capacity_and_notify: 7 callbacks suppressed [ 53.618339][ T4586] loop3: detected capacity change from 0 to 512 [ 53.636413][ T4586] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 53.638348][ T28] audit: type=1400 audit(1771662903.036:1302): avc: denied { ioctl } for pid=4579 comm="syz.2.309" path="socket:[7960]" dev="sockfs" ino=7960 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.690078][ T28] audit: type=1400 audit(1771662903.116:1303): avc: denied { append } for pid=4587 comm="syz.2.310" name="pfkey" dev="proc" ino=4026532594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.715780][ T4592] loop2: detected capacity change from 0 to 128 [ 53.723655][ T4592] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.733046][ T28] audit: type=1400 audit(1771662903.166:1304): avc: denied { listen } for pid=4575 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.798581][ T28] audit: type=1400 audit(1771662903.236:1305): avc: denied { read write } for pid=4591 comm="syz.2.311" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 53.822388][ T28] audit: type=1400 audit(1771662903.236:1306): avc: denied { open } for pid=4591 comm="syz.2.311" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.016936][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 54.048335][ T4599] loop0: detected capacity change from 0 to 2048 [ 54.059427][ T4599] EXT4-fs: Ignoring removed nobh option [ 54.069057][ T28] audit: type=1326 audit(1771662903.516:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.2.314" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4383bac629 code=0x0 [ 54.096158][ T4599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.108487][ T4599] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.123893][ T4605] loop2: detected capacity change from 0 to 512 [ 54.169855][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.513326][ T4628] loop3: detected capacity change from 0 to 512 [ 54.530770][ T4628] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.583026][ T4628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.596054][ T4628] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.652529][ T4633] hub 8-0:1.0: USB hub found [ 54.657754][ T4633] hub 8-0:1.0: 8 ports detected [ 54.676285][ T4633] netlink: 'syz.4.322': attribute type 36 has an invalid length. [ 54.693330][ T4633] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 54.703257][ T4633] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 54.723981][ T4633] netlink: 'syz.4.322': attribute type 10 has an invalid length. [ 54.738081][ T4633] macvlan1: entered allmulticast mode [ 54.745639][ T4633] veth1_vlan: entered allmulticast mode [ 54.753408][ T4633] team0: Port device macvlan1 added [ 54.763533][ T4633] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 54.793285][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.053428][ T3384] kernel read not supported for file /190/setgroups (pid: 3384 comm: kworker/1:3) [ 55.063297][ T35] kernel write not supported for file /190/setgroups (pid: 35 comm: kworker/1:1) [ 55.198766][ T4644] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.235090][ T4648] __nla_validate_parse: 1 callbacks suppressed [ 55.235103][ T4648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'. [ 55.271517][ T4650] loop3: detected capacity change from 0 to 512 [ 55.278583][ T4650] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.367256][ T4655] loop1: detected capacity change from 0 to 256 [ 55.372478][ T4650] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #17: comm syz.3.331: inode has both inline data and extents flags [ 55.387395][ T4655] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.397440][ T4650] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 55.399499][ T4650] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.331: couldn't read orphan inode 17 (err -117) [ 55.408748][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 55.408766][ C1] EXT4-fs (loop3): initial error at time 1771662904: ext4_orphan_get:1391: inode 17 [ 55.408813][ C1] EXT4-fs (loop3): last error at time 1771662904: ext4_orphan_get:1391: inode 17 [ 55.447307][ T4655] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.463551][ T4650] loop3: lost filesystem error report for type 5 error -117 [ 55.464177][ T4650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.517760][ T4662] loop0: detected capacity change from 0 to 512 [ 55.540148][ T4662] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.579552][ T4662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.596948][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.601154][ T4662] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.636437][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.926613][ T4675] loop3: detected capacity change from 0 to 1024 [ 55.965710][ T4675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.084346][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.110984][ T4685] loop2: detected capacity change from 0 to 256 [ 56.118070][ T4687] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 56.192272][ T4692] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.252199][ T4692] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.344: Directory hole found for htree leaf block 0 [ 56.297570][ T4697] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.344: Directory hole found for htree leaf block 0 [ 56.326822][ T4695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.352922][ T4685] FAT-fs (loop2): Directory bread(block 64) failed [ 56.360372][ T4685] FAT-fs (loop2): Directory bread(block 65) failed [ 56.381128][ T4695] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.392814][ T4697] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.344: Directory hole found for htree leaf block 0 [ 56.402418][ T4685] FAT-fs (loop2): Directory bread(block 66) failed [ 56.422348][ T4685] FAT-fs (loop2): Directory bread(block 67) failed [ 56.434664][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.444113][ T4685] FAT-fs (loop2): Directory bread(block 68) failed [ 56.459735][ T4685] FAT-fs (loop2): Directory bread(block 69) failed [ 56.467633][ T4685] FAT-fs (loop2): Directory bread(block 70) failed [ 56.474709][ T4685] FAT-fs (loop2): Directory bread(block 71) failed [ 56.482393][ T4685] FAT-fs (loop2): Directory bread(block 72) failed [ 56.489788][ T4685] FAT-fs (loop2): Directory bread(block 73) failed [ 56.551203][ T4707] 9pnet_virtio: no channels available for device ./bus [ 56.563588][ T3308] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 56.665501][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 56.676137][ T4685] hsr_slave_0: left promiscuous mode [ 56.689215][ T4685] hsr_slave_1: left promiscuous mode [ 56.766898][ T4719] netlink: 212 bytes leftover after parsing attributes in process `syz.0.350'. [ 56.884187][ T4721] vfat: Unknown parameter '017777777777777777777770xffffffffffffffff00000000000000000000000' [ 56.908467][ T4726] ip6gre1: entered promiscuous mode [ 56.916461][ T4726] ip6gre1: entered allmulticast mode [ 57.693508][ T4766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 57.722873][ T4771] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 57.825411][ T4766] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.931616][ T4782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'. [ 57.941091][ T4782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'. [ 58.164341][ T4793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.181609][ T4793] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 58.193334][ T4793] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 58.228099][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.247712][ T4799] program syz.3.372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.498713][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 58.498728][ T28] audit: type=1326 audit(1771662907.936:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498df6c629 code=0x7ffc0000 [ 58.528218][ T28] audit: type=1326 audit(1771662907.936:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498df6c629 code=0x7ffc0000 [ 58.608515][ T4816] netlink: 277 bytes leftover after parsing attributes in process `syz.3.376'. [ 58.666150][ T4816] hub 8-0:1.0: USB hub found [ 58.671401][ T4816] hub 8-0:1.0: 8 ports detected [ 58.690218][ T4816] netlink: 'syz.3.376': attribute type 36 has an invalid length. [ 58.705190][ T4816] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 58.715097][ T4816] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 58.734297][ T4816] netlink: 'syz.3.376': attribute type 10 has an invalid length. [ 58.743666][ T4816] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 58.810897][ T28] audit: type=1326 audit(1771662907.936:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498df6c629 code=0x7ffc0000 [ 59.044407][ T28] audit: type=1326 audit(1771662908.036:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498df6c629 code=0x7ffc0000 [ 59.099854][ T28] audit: type=1326 audit(1771662908.036:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498df6c629 code=0x7ffc0000 [ 59.124883][ T28] audit: type=1326 audit(1771662908.036:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f498df6c629 code=0x7ffc0000 [ 59.181333][ T28] audit: type=1326 audit(1771662908.036:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498df6c629 code=0x7ffc0000 [ 59.209504][ T28] audit: type=1326 audit(1771662908.036:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498df6c629 code=0x7ffc0000 [ 59.233285][ T28] audit: type=1326 audit(1771662908.046:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f498df6c629 code=0x7ffc0000 [ 59.258683][ T28] audit: type=1326 audit(1771662908.076:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498df6c629 code=0x7ffc0000 [ 59.287463][ T4827] set_capacity_and_notify: 7 callbacks suppressed [ 59.287516][ T4827] loop0: detected capacity change from 0 to 512 [ 59.344053][ T4831] loop4: detected capacity change from 0 to 2048 [ 59.402334][ T4831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.435436][ T4827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.656792][ T4844] loop3: detected capacity change from 0 to 128 [ 59.720482][ T4855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'. [ 59.749573][ T4855] netlink: zone id is out of range [ 59.768479][ T4855] loop1: detected capacity change from 0 to 1024 [ 59.802064][ T4827] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.819624][ T4855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'. [ 59.958749][ T4859] x_tables: duplicate underflow at hook 2 [ 60.048294][ T4827] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.380: iget: bad i_size value: 2533274857506816 [ 60.233028][ T4862] loop0: detected capacity change from 0 to 512 [ 60.247573][ T4862] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.263190][ T4862] EXT4-fs (loop0): 1 truncate cleaned up [ 60.273361][ T41] kworker/u8:2: attempt to access beyond end of device [ 60.273361][ T41] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 60.293375][ T4862] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.0.391: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 60.314376][ T41] kworker/u8:2: attempt to access beyond end of device [ 60.314376][ T41] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 60.328126][ T41] kworker/u8:2: attempt to access beyond end of device [ 60.328126][ T41] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 60.342494][ T41] kworker/u8:2: attempt to access beyond end of device [ 60.342494][ T41] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 60.343901][ T4862] EXT4-fs error (device loop0) in ext4_delete_entry:2737: Corrupt filesystem [ 60.356425][ T41] kworker/u8:2: attempt to access beyond end of device [ 60.356425][ T41] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 60.378304][ T41] kworker/u8:2: attempt to access beyond end of device [ 60.378304][ T41] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 60.391756][ T41] kworker/u8:2: attempt to access beyond end of device [ 60.391756][ T41] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 60.405143][ T41] kworker/u8:2: attempt to access beyond end of device [ 60.405143][ T41] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 60.442311][ T41] kworker/u8:2: attempt to access beyond end of device [ 60.442311][ T41] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 60.442343][ T41] kworker/u8:2: attempt to access beyond end of device [ 60.442343][ T41] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 60.521858][ T4881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'. [ 60.698887][ T4884] loop3: detected capacity change from 0 to 32768 [ 60.762508][ T4900] netlink: 277 bytes leftover after parsing attributes in process `syz.2.401'. [ 60.782650][ T3584] loop3: p1 p2 p3 < p5 p6 > [ 60.788408][ T3584] loop3: p2 size 16775168 extends beyond EOD, truncated [ 60.798624][ T3584] loop3: p5 start 4294970168 is beyond EOD, truncated [ 60.815060][ T4900] hub 8-0:1.0: USB hub found [ 60.819823][ T4900] hub 8-0:1.0: 8 ports detected [ 60.833375][ T4900] netlink: 'syz.2.401': attribute type 36 has an invalid length. [ 60.848774][ T4900] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 60.858724][ T4900] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 60.872363][ T4900] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 61.130984][ T4903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=4903 comm=syz.4.402 [ 61.188267][ T4903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=4903 comm=syz.4.402 [ 61.203294][ T4884] loop3: p1 p2 p3 < > [ 61.208637][ T4903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=4903 comm=syz.4.402 [ 61.214821][ T4884] loop3: p2 size 16775168 extends beyond EOD, [ 61.222980][ T4903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=4903 comm=syz.4.402 [ 61.225811][ T4884] truncated [ 61.230834][ T4903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=4903 comm=syz.4.402 [ 61.282963][ T4914] loop1: detected capacity change from 0 to 128 [ 61.317130][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 61.469895][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 61.469963][ T3584] udevd[3584]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 61.481205][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 61.524288][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 61.525600][ T3584] udevd[3584]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 61.542005][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 61.607249][ T3584] udevd[3584]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 61.644578][ T4944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'. [ 61.673787][ T4946] loop1: detected capacity change from 0 to 512 [ 61.711235][ T4946] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.737588][ T4946] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 1986356271 (only 1 groups) [ 61.968211][ T4954] netlink: 'syz.1.418': attribute type 1 has an invalid length. [ 61.983885][ T4954] netlink: 244 bytes leftover after parsing attributes in process `syz.1.418'. [ 62.003743][ T4954] NCSI netlink: No device for ifindex 280 [ 62.017141][ T4954] netlink: 44 bytes leftover after parsing attributes in process `syz.1.418'. [ 62.038757][ T4954] batadv_slave_0: entered promiscuous mode [ 62.067251][ T4960] loop1: detected capacity change from 0 to 128 [ 62.475905][ T4996] loop3: detected capacity change from 0 to 128 [ 62.483050][ T4996] FAT-fs (loop3): bogus number of reserved sectors [ 62.492429][ T4996] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 62.507649][ T4996] FAT-fs (loop3): Can't find a valid FAT filesystem [ 62.617953][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 62.646862][ T5003] ext4: Unknown parameter 'obj_user' [ 62.680863][ T5004] EXT4-fs (loop3): 1 truncate cleaned up [ 62.723077][ T5004] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.437: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 63.299692][ T5028] macvtap1: entered promiscuous mode [ 63.314437][ T5030] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 63.333519][ T5028] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 63.341042][ T5030] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.445099][ T5030] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.444: bg 0: block 16: invalid block bitmap [ 63.467787][ T5033] ALSA: seq fatal error: cannot create timer (-19) [ 63.474476][ T5030] loop2: lost filesystem error report for type 5 error -117 [ 63.474706][ T5030] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 63.482022][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 63.482052][ C1] EXT4-fs (loop2): initial error at time 1771662912: ext4_validate_block_bitmap:432 [ 63.482072][ C1] EXT4-fs (loop2): last error at time 1771662912: ext4_validate_block_bitmap:432 [ 63.486892][ T5028] team0: Device macvtap1 is already an upper device of the team interface [ 63.523441][ T5030] loop2: lost filesystem error report for type 5 error -117 [ 63.524320][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 63.524332][ T28] audit: type=1400 audit(1771662912.966:1378): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 63.524425][ T5030] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.444: attempt to clear invalid blocks 1669132790 len 1 [ 63.583294][ T5030] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 63.597257][ T5030] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.444: invalid indirect mapped block 4294967295 (level 1) [ 63.633412][ T5030] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 63.633551][ T5030] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.444: invalid indirect mapped block 4294967295 (level 2) [ 63.663764][ T5030] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 63.663950][ T5030] EXT4-fs (loop2): 1 truncate cleaned up [ 63.697735][ T28] audit: type=1400 audit(1771662913.136:1379): avc: denied { map } for pid=5029 comm="syz.2.444" path="socket:[9630]" dev="sockfs" ino=9630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.752630][ T28] audit: type=1400 audit(1771662913.166:1380): avc: denied { read accept } for pid=5029 comm="syz.2.444" path="socket:[9630]" dev="sockfs" ino=9630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.782127][ T5049] EXT4-fs: inline encryption not supported [ 63.788044][ T5049] EXT4-fs: Ignoring removed oldalloc option [ 63.805171][ T5053] SELinux: security_context_str_to_sid (O*3!L;(x?8>${S7#!g.&[n٦9P9\ETWq3H*8YYLGR!I*' CDX [ 63.805171][ T5053] s0dnph5L0|qD81A{ꈆnK P) failed with errno=-22 [ 63.830115][ T28] audit: type=1400 audit(1771662913.246:1381): avc: denied { mounton } for pid=5046 comm="syz.4.450" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 63.926435][ T5053] netlink: 168 bytes leftover after parsing attributes in process `syz.4.450'. [ 63.967652][ T5049] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 64.014461][ T5049] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.448: invalid indirect mapped block 2683928664 (level 1) [ 64.042011][ T5049] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.042332][ T5049] EXT4-fs (loop1): 1 truncate cleaned up [ 64.051504][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 64.051524][ C1] EXT4-fs (loop1): initial error at time 1771662913: ext4_free_branches:1023: inode 13 [ 64.051571][ C1] EXT4-fs (loop1): last error at time 1771662913: ext4_free_branches:1023: inode 13 [ 64.144150][ T5049] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2037609061: comm syz.1.448: invalid block [ 64.156488][ T5049] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.448: invalid indirect mapped block 1669132791 (level 1) [ 64.195780][ T5049] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.448: invalid indirect mapped block 27745 (level 0) [ 64.211733][ T28] audit: type=1400 audit(1771662913.656:1382): avc: denied { ioctl } for pid=5048 comm="syz.1.448" path="socket:[10368]" dev="sockfs" ino=10368 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.260090][ T5049] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.448: invalid indirect mapped block 1819042155 (level 0) [ 64.327876][ T5049] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.448: Invalid block bitmap block 3 in block_group 0 [ 64.367474][ T5049] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 64.401237][ T5049] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.448: invalid indirect mapped block 2 (level 1) [ 64.522900][ T28] audit: type=1326 audit(1771662913.966:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7290c629 code=0x7ffc0000 [ 64.547096][ T28] audit: type=1326 audit(1771662913.966:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f7290c629 code=0x7ffc0000 [ 64.571860][ T28] audit: type=1326 audit(1771662913.966:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7290c629 code=0x7ffc0000 [ 64.662043][ T28] audit: type=1326 audit(1771662913.966:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f7290c629 code=0x7ffc0000 [ 64.687281][ T5082] netlink: 'syz.0.459': attribute type 25 has an invalid length. [ 64.695231][ T5081] netlink: 'syz.0.459': attribute type 25 has an invalid length. [ 64.717382][ T5086] nfs: Unknown parameter '' [ 64.730570][ T28] audit: type=1326 audit(1771662913.966:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7290c629 code=0x7ffc0000 [ 64.776779][ T5094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.462'. [ 64.790670][ T5094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.462'. [ 64.799695][ T5094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 64.841064][ T5094] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 64.872888][ T5099] IPv6: syztnl0: Disabled Multicast RS [ 64.897309][ T5104] set_capacity_and_notify: 4 callbacks suppressed [ 64.897386][ T5104] loop1: detected capacity change from 0 to 512 [ 64.981511][ T5104] EXT4-fs: Ignoring removed oldalloc option [ 64.999686][ T5104] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.466: Parent and EA inode have the same ino 15 [ 65.012028][ T5104] loop1: lost filesystem error report for type 5 error -117 [ 65.012285][ T5104] EXT4-fs (loop1): 1 orphan inode deleted [ 65.025302][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 65.025320][ C1] EXT4-fs (loop1): initial error at time 1771662914: ext4_xattr_inode_iget:437 [ 65.025338][ C1] EXT4-fs (loop1): last error at time 1771662914: ext4_xattr_inode_iget:437 [ 65.169823][ T5122] pim6reg1: entered promiscuous mode [ 65.175187][ T5122] pim6reg1: entered allmulticast mode [ 65.201515][ T5124] loop2: detected capacity change from 0 to 128 [ 65.516891][ T5148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.524199][ T5148] IPv6: NLM_F_CREATE should be set when creating new route [ 65.622132][ T3308] EXT4-fs unmount: 15 callbacks suppressed [ 65.622148][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.692334][ T5153] loop1: detected capacity change from 0 to 512 [ 65.704659][ T5153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.721317][ T5153] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 65.806506][ T5154] loop4: detected capacity change from 0 to 8192 [ 65.815640][ T5160] netlink: 'syz.1.481': attribute type 3 has an invalid length. [ 65.871781][ T5154] loop4: p1 < > p2 p4 < p5 > [ 65.876557][ T5154] loop4: partition table partially beyond EOD, truncated [ 65.884883][ T5154] loop4: p1 start 134217728 is beyond EOD, truncated [ 65.900982][ T5154] loop4: p2 size 591360 extends beyond EOD, truncated [ 65.911873][ T5154] loop4: p5 size 591360 extends beyond EOD, truncated [ 65.951186][ T5151] tipc: Enabled bearer , priority 10 [ 65.988867][ T5169] loop1: detected capacity change from 0 to 164 [ 66.010805][ T5169] Unable to read rock-ridge attributes [ 66.023540][ T5171] __nla_validate_parse: 3 callbacks suppressed [ 66.023561][ T5171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.483'. [ 66.039136][ T5166] Unable to read rock-ridge attributes [ 66.050774][ T5171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.483'. [ 66.091811][ T5180] loop3: detected capacity change from 0 to 512 [ 66.122538][ T5180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.135501][ T5180] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.180830][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.228678][ T5195] loop1: detected capacity change from 0 to 128 [ 66.245102][ T5195] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 66.428406][ T5200] loop4: detected capacity change from 0 to 1024 [ 66.436708][ T5200] EXT4-fs: Ignoring removed orlov option [ 66.442744][ T5200] EXT4-fs: Ignoring removed nobh option [ 66.461808][ T5200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.495409][ T5200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.532149][ T5207] loop4: detected capacity change from 0 to 1024 [ 66.540884][ T5207] EXT4-fs: Ignoring removed bh option [ 66.547837][ T5207] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.559973][ T5207] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.582354][ T5207] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.598831][ T5207] EXT4-fs error (device loop4): ext4_quota_enable:7194: comm syz.4.493: inode #2304: comm syz.4.493: iget: illegal inode # [ 66.628956][ T5207] loop4: lost filesystem error report for type 5 error -117 [ 66.629170][ T5207] EXT4-fs error (device loop4): ext4_quota_enable:7197: comm syz.4.493: Bad quota inode: 2304, type: 2 [ 66.636537][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 66.636556][ C1] EXT4-fs (loop4): initial error at time 1771662916: ext4_quota_enable:7194 [ 66.636578][ C1] EXT4-fs (loop4): last error at time 1771662916: ext4_quota_enable:7194 [ 66.673166][ T5207] loop4: lost filesystem error report for type 5 error -117 [ 66.673335][ T5207] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 66.696264][ T5207] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 66.703501][ T5207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.717282][ T5207] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #15: comm syz.4.493: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 66.734904][ T5207] netlink: 52 bytes leftover after parsing attributes in process `syz.4.493'. [ 66.776787][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.815711][ T5214] loop4: detected capacity change from 0 to 2048 [ 66.860882][ T3584] loop4: p1 p2 p3 p4 [ 66.865380][ T3584] loop4: p2 start 117440512 is beyond EOD, truncated [ 66.872837][ T3584] loop4: p4 size 589824 extends beyond EOD, truncated [ 66.882633][ T5214] loop4: p1 p2 p3 p4 [ 66.887408][ T5214] loop4: p2 start 117440512 is beyond EOD, truncated [ 66.895697][ T5214] loop4: p4 size 589824 extends beyond EOD, truncated [ 66.986501][ T5216] netlink: 68 bytes leftover after parsing attributes in process `syz.4.497'. [ 67.080598][ T10] tipc: Node number set to 7023966 [ 67.339195][ T5238] syzkaller0: entered promiscuous mode [ 67.344797][ T5238] syzkaller0: entered allmulticast mode [ 67.530360][ T5258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 67.556402][ T5252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.575424][ T5252] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.640349][ T5269] ================================================================== [ 67.648466][ T5269] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 67.655673][ T5269] [ 67.657993][ T5269] read-write to 0xffff8881004a4b48 of 8 bytes by task 5252 on cpu 1: [ 67.666054][ T5269] __xa_set_mark+0xd2/0x1a0 [ 67.670562][ T5269] __folio_mark_dirty+0x383/0x4a0 [ 67.675598][ T5269] mark_buffer_dirty+0x120/0x220 [ 67.680540][ T5269] folio_zero_new_buffers+0x28c/0x2e0 [ 67.685913][ T5269] block_write_end+0x200/0x210 [ 67.690690][ T5269] ext4_da_write_end+0x1d3/0x810 [ 67.695630][ T5269] generic_perform_write+0x311/0x490 [ 67.700921][ T5269] ext4_buffered_write_iter+0x1ee/0x3c0 [ 67.706488][ T5269] ext4_file_write_iter+0x380/0xfa0 [ 67.711698][ T5269] vfs_write+0x5a6/0x9f0 [ 67.716031][ T5269] ksys_write+0xdc/0x1a0 [ 67.720277][ T5269] __x64_sys_write+0x40/0x50 [ 67.724871][ T5269] x64_sys_call+0x27e1/0x3020 [ 67.729548][ T5269] do_syscall_64+0x12c/0x370 [ 67.734137][ T5269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.740029][ T5269] [ 67.742347][ T5269] read to 0xffff8881004a4b48 of 8 bytes by task 5269 on cpu 0: [ 67.749884][ T5269] xas_find_marked+0x213/0x620 [ 67.754664][ T5269] filemap_get_folios_tag+0xfa/0x510 [ 67.759947][ T5269] mpage_prepare_extent_to_map+0x328/0xc50 [ 67.765744][ T5269] ext4_do_writepages+0xa07/0x2840 [ 67.770848][ T5269] ext4_writepages+0x18f/0x320 [ 67.775596][ T5269] do_writepages+0x1c6/0x310 [ 67.780171][ T5269] filemap_flush_range+0x105/0x140 [ 67.785277][ T5269] generic_fadvise+0x338/0x460 [ 67.790028][ T5269] __x64_sys_fadvise64+0xcb/0x110 [ 67.795043][ T5269] x64_sys_call+0x242b/0x3020 [ 67.799710][ T5269] do_syscall_64+0x12c/0x370 [ 67.804294][ T5269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.810169][ T5269] [ 67.812473][ T5269] value changed: 0x0007ffffffffffff -> 0x001fffffffffffff [ 67.819562][ T5269] [ 67.821866][ T5269] Reported by Kernel Concurrency Sanitizer on: [ 67.828005][ T5269] CPU: 0 UID: 0 PID: 5269 Comm: syz.2.511 Not tainted syzkaller #0 PREEMPT(full) [ 67.837183][ T5269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 67.847314][ T5269] ================================================================== [ 67.885626][ T5269] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.511: bg 0: block 345: padding at end of block bitmap is not set [ 67.900336][ T5269] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1871 with error 117 [ 67.913355][ T5269] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.913355][ T5269] [ 68.371986][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1887 with max blocks 1 with error 28 [ 68.384512][ T41] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.384512][ T41] [ 68.394184][ T41] EXT4-fs (loop2): Total free blocks count 0 [ 68.400160][ T41] EXT4-fs (loop2): Free/Dirty block details [ 68.406168][ T41] EXT4-fs (loop2): free_blocks=0 [ 68.411271][ T41] EXT4-fs (loop2): dirty_blocks=16 [ 68.416374][ T41] EXT4-fs (loop2): Block reservation details