last executing test programs: 2.768097568s ago: executing program 4 (id=564): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x400a2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x7, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.767847368s ago: executing program 1 (id=565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300fe8000000000000000000000000000bb14000400ff020000000000000000fff5000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001080007400000000018000d80140004"], 0xac}}, 0x0) 2.73354353s ago: executing program 1 (id=567): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100001002abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80210000080004001400030062736c6176655f30000014001680100001800c000900f9ffffff08000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) socket(0x2, 0x805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket(0x10, 0x803, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x1, 0x44a}) socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@deltaction={0x14, 0x31, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xe) pipe2$9p(&(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800"], &(0x7f0000001f80)=""/226, 0x18, 0xe2, 0x2}, 0x28) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 2.507286343s ago: executing program 4 (id=570): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000280)={0x0, 0xfcb0, 0x13100, 0x3, 0x124}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000100)={0x0, r0, 0x5, {0x5, 0x9}, 0x2}, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000200)={0x1d, r5}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "e6bff385353800ff"}, 0x10}}, 0x2004c895) 2.339604473s ago: executing program 4 (id=571): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") socket$inet(0x2, 0x800, 0xd68) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./bus\x00', 0x2fffffc) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xd, 0x1, 0xff, 0x10, 0x0, 0x1000, 0x800, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x36a000000000000, 0x1c0}, 0x100, 0x100, 0x0, 0x1, 0x401, 0x9, 0x5c5, 0x0, 0x101, 0x0, 0x997}, 0xffffffffffffffff, 0x6, r1, 0x2) setitimer(0x0, 0x0, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000001c0)={[{@dioread_nolock}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nodelalloc}, {@oldalloc}, {@quota}, {@orlov}, {@abort}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@inlinecrypt}]}, 0x2, 0xbd1, &(0x7f0000001340)="$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") creat(&(0x7f0000000080)='./file0\x00', 0x69) file_setattr(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x1440, 0x2, 0x6, 0x7, 0x1}, 0x18, 0x100) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000040)='./bus\x00') mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000880)={0x8, &(0x7f00000008c0)=[{0x9, 0x6, 0x1, 0x7}, {0x9, 0x3, 0x8, 0x407}, {0x3, 0x6f, 0x6, 0x3}, {0x4, 0x5, 0x10, 0x3}, {0x8, 0x4, 0x9, 0x5}, {0x1, 0xd, 0x9, 0x8}, {0x747, 0x5, 0x81, 0x1000}, {0x6, 0x40, 0x4, 0x7}]}, 0x10) 2.191107601s ago: executing program 3 (id=576): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x59, 0x7, 0x7, 0x18f, {{0x35, 0x4, 0x1, 0x7, 0xd4, 0x68, 0x0, 0x8, 0x2f, 0x0, @remote, @loopback, {[@end, @lsrr={0x83, 0x17, 0x63, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0x4a, 0x3, 0x0, [{@local, 0x3}, {@local, 0xd}, {@empty, 0x5}, {@remote, 0x20}, {@remote, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0xf0, 0x3, 0x3, [{@rand_addr=0x64010101, 0x8}, {@multicast1, 0x81}]}, @rr={0x7, 0xb, 0x5f, [@empty, @broadcast]}, @ssrr={0x89, 0x17, 0xf3, [@dev={0xac, 0x14, 0x14, 0x1b}, @empty, @loopback, @empty, @broadcast]}, @cipso={0x86, 0x44, 0x3, [{0x1, 0x4, "b2dd"}, {0x2, 0x9, "8e32d9c9ed304d"}, {0x0, 0x10, "1f6ad85a924d6fce0fbfc1d0b4bf"}, {0x6, 0xf, "1c077598ce9b72072e26b44649"}, {0x1, 0x12, "cb475b8201a7d995cceebd1eefb6c2ad"}]}]}}}}}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r5 = socket(0x10, 0x803, 0x6) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x6, 0x9, 0x1, 0x95, 0x0, 0x80000001, 0x280, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x5}, 0x2, 0x7, 0x5, 0x4, 0x4, 0x6, 0x25a3, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xa) 2.062202429s ago: executing program 3 (id=577): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000911103000000000095"], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 2.034170451s ago: executing program 4 (id=578): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00001000000000000000000000000000432e00000000000000000000000000080012ff800002000000f1edc4ea00000600000000000080ffffff000000020000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 1.972374394s ago: executing program 3 (id=579): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x40}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) memfd_create(0x0, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) clock_getres(0x6, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x1) setsockopt(r2, 0x84, 0x7f, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c000140", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 1.972182774s ago: executing program 2 (id=580): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x800000000000000, 0x0, 0x0, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) 1.969552324s ago: executing program 2 (id=581): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) (async) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10000, 0x800, 0x4, 0x5, 0x78d9, 0x3ff, 0x1, 0x4, 0x2}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x14c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x120, 0x2, [@TCA_U32_SEL={0x114, 0x5, {0xf, 0x5, 0x10, 0x1, 0x1, 0x644e, 0x7, 0x4, [{0xe, 0x7ff, 0x5f, 0x6}, {0x8, 0x101, 0x7d, 0xfffffffa}, {0x3, 0x0, 0x6e86, 0x4}, {0x6, 0x2230, 0x0, 0x8}, {0x7fff, 0x401, 0xffff, 0xff}, {0x1, 0x8, 0xff, 0x4}, {0x8, 0x0, 0x6, 0x8}, {0xf02, 0x7, 0x4, 0xffff}, {0x5, 0x81, 0x3, 0x2}, {0x9, 0x4, 0x216, 0x5}, {0x401, 0xdc6, 0xadb, 0x6}, {0x0, 0x8, 0xb62, 0x5}, {0x6, 0xa, 0x1, 0x2}, {0x2, 0x79ff, 0x4, 0x4}, {0x101, 0x10003, 0xfffffbff, 0x400}, {0x0, 0x0, 0x6, 0x3}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xc}}]}}]}, 0x14c}}, 0x4080) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @alu={0x7, 0x1, 0x7, 0x1, 0xb, 0x10, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000240)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x4, 0x800, 0x8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[{0x3, 0x3, 0x7, 0x7}, {0x1, 0x3, 0x10, 0x2}, {0x4, 0x2, 0x10}]}, 0x94) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x80) 1.938054196s ago: executing program 2 (id=582): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00012000000001503000008004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.929594967s ago: executing program 4 (id=583): stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept(0xffffffffffffffff, &(0x7f00000009c0)=@nfc_llcp, &(0x7f00000001c0)=0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0xa1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000100"], 0x0, 0x5, 0xfd61, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x80, 0x0, 0xfffff020}, {0x6, 0x0, 0x3}]}, 0x10) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f00000000c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000240)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@data_journal}, {@noload}, {@resgid={'resgid', 0x3d, r0}}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noacl}, {@journal_dev={'journal_dev', 0x3d, 0x767}}, {@norecovery}, {@abort}, {@nobh}, {@resgid}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x535, &(0x7f0000000480)="$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") 1.87206514s ago: executing program 2 (id=584): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="01000000000000005a90f57f07703aefe7364ebbee07022c2277ae2a00000000000000000000000000c0", 0x2a}, {&(0x7f0000000040)="aa1d48", 0x3}], 0x2) 1.87191705s ago: executing program 2 (id=585): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x2010, 0xffffffffffffffff, 0x8000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}}, 0x24}}, 0x2) 1.854198971s ago: executing program 1 (id=586): request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xfffffffffffffffb) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$inet_udplite(0x2, 0x2, 0x88) capset(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffe4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd, 0x0, 0x0, 0x100}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0xc6}, {}, {}, {}, {0x0, 0x0, 0x4}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.838259642s ago: executing program 4 (id=587): r0 = socket$key(0xf, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) dup3(r1, r0, 0x80000) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfa, 0x55b, &(0x7f0000000980)="$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") r4 = openat$incfs(r3, 0x0, 0xa2000, 0x8) rmdir(&(0x7f0000000040)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000040)=0xfff) r6 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe806, 0x800, 0x1, 0x3c2}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/219, 0xdb}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x84020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x1}, 0x1313a1, 0x400000, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8], 0x1, 0x296, &(0x7f0000000740)="$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") r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r10, 0x800448d5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x7ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1.806972824s ago: executing program 2 (id=588): r0 = socket$key(0xf, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) dup3(r1, r0, 0x80000) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfa, 0x55b, &(0x7f0000000980)="$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") openat$incfs(r3, 0x0, 0xa2000, 0x8) rmdir(&(0x7f0000000040)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000040)=0xfff) r5 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe806, 0x800, 0x1, 0x3c2}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/219, 0xdb}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x84020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x1}, 0x1313a1, 0x400000, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8], 0x1, 0x296, &(0x7f0000000740)="$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") r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r9, 0x800448d5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x9}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1.504095222s ago: executing program 3 (id=589): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000b40)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@bh}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@nouid32}, {@nobh}, {@nodiscard}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@abort}, {@nouid32}, {@resgid}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x52e, &(0x7f0000000c80)="$eJzs3M9vG1UeAPCvHefXJtlkuz+73d1mt7vaaFc0TfrzwKGtQOoFhARC5YIUkrQqTQtqgtRWkZoi1EocQP0LCtyQOHHkBBcEiAOoVyokLiCkCuXS0AMaNPbYseM4v2onSvP5SI7fvHnjed+Z9+J582wHsGMNpn9yEb0R8U1vRH9psbbAYOlpYX52/Of52fFcJMmzP+WK5e7Pz46Xi5a368kWhvIR+Tdysad+t53TV66eH5uamryUZQzP5LPUhbGzk2cnL44eO3boYPfRI6OHmxJnT7lyu0+9cOup8dO3Xvr8gzQrybKr4ygZKP7tWPMe2haTHxaKT4MxWHssq/xnHXXfDvqq0rli+Pmtqwxrlrba9HS1p/0/+qMtCpV1/fHk61taOaClkiRJOutyK+9lc0m1XK60QZJcT4BHQC5WK7HkvwDwiCi/0d+fT0eqs+P14+BH270TURwBpXEvZI/SmkJxBDs4UBobtbdo/3+IiNNzD26Xr8F22vEHADbfxycibp4sXXeUH6U1+fhTVbnfRmluaCAifhcRuyLi99n1yx8jimX/HBF/qdqmb9VZgPbS/FOV+uufr7uzRPXlatOk13+PZ3Nbtdd/lZoPtGVLfcX423Nnzk1NHsiOyVC0d6bLI/UvXbmt9skTd95utP/B7Pqv/Ej3nz4vlsj/WFhyg25ibGbsYeMuu3e9eGCv1cT/XRQn8ArZ5FX6tDsi/rqB10+P2bn/vf+3Rutr4k/jrIv/rcYvXthAhZZI3o34b+n8z0XN+S8F35GlhmcuvDo8feXqY+eq5ydHjh4ZPTzcFVOTB4bLraLeF1/deCZL1g0jVjj/5a7R0om0e9ej6zfLtv/KzOVAmqrM106vfx837t5sOKbZaPvvyD1XTJfnZy+PzcxcGonoyM3V548ubnt5rLumfNr+h/Yt3/93RfzyTrbdnohIG/HfI+IfEbE3q/s/I+JfEbFvhfg/O/nvlxsNIVePv7XS+CfWdf4bJY5/GbH8qrbzn35Ut+M3B+vib48HtxfqJszT83+omBrKcibGZrpWi2ulmlYnHuLQAQAAwLaxNyJ6I5ffn91o6o18fv/+iJ7KHZTpmf+feeW1ixOl7wgMRHu+fKerv+p+6Eh2bzhdTrcarVpO1x8s3jdOkiTpTpfT8ftU39aGDjteT4P+n/qhbatrB7TcuubRGn2jDdiWlvb/u2vesvkfyAA2VxM+RwNsU/o/7Fxr7v+t+hYcsGWW6//XIha2oCrAJluu/z9fl3N8U+oCbC7jf9i5Nt7/fRgAtjvv/7AjrelL8htI7Dq1QplcoTU7bZzIRynx/YulsJf+CsBARDmnfE2z8gt+m49oTg3bHj7AtMZZTnfNOc0vu1VXNOOoRn7VMoV1/BBDw0R3k45zTSK/mJNbpXB3nH/6TkubaGd9g1zaeiuN7Vo5cbXVXabYCd7bwn9NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATfFrAAAA///c8MWj") io_submit(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x4000423) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) getdents(r2, &(0x7f0000000380)=""/4096, 0x1000) getdents(r2, 0x0, 0x0) listen(r0, 0x2) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x0, 0x1a, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 1.503100452s ago: executing program 1 (id=590): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000001880)=0x40, 0x4) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e1f, 0x1, @private0, 0x83}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xd}}], 0x2, 0x884) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'pim6reg0\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x70}, 0x1, 0x7}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f00000003c0)="b54ff8066d801fc95c89d9562463c2e07e2e14e867948dc47d1743603755f3989d45f96861bd5a18676cadf30c3aa1943ea91093bd4dbbf3b6f2c5876460bff2c0b52e3369d964b1d596ef39439e71157d6e3bfdd663f94b92ed285e4cc31f37d842cfbbddd78d5f1c72c1335ac11b18508a761a3a18384b2ad7bb5ecbaff20e3f5343db2a6009a7343b", 0x8a, 0x45, &(0x7f0000000480)={0x1a, 0x5, 0x6d, 0x6, 0x6, 0x0, @multicast}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, 0x3a) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x14, r8, 0x300, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40011) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000380)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xfff}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={r9, 0x8}, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0xe, 0x0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00', @mcast1, 0x3, 0x1, 0xf, 0x400, 0x7, 0x20000090, r11}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r9, 0x8007, 0x30}, 0xfffffffffffffef7) 1.476684763s ago: executing program 1 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) syz_clone3(&(0x7f0000000800)={0x100000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0x6}, &(0x7f0000000700)=""/96, 0x60, &(0x7f0000000780)=""/69, 0x0}, 0x58) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x1, 0x1ff}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffffffffffffff90000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 852.21739ms ago: executing program 3 (id=595): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000001600)) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f00000001c0)={{r2}, 0x0, 0x2, @unused=[0x5, 0x3, 0x5, 0x3], @name="adddc99b13d80637030879069967c69d6fb3ec05247de566cf091df7f54278bac8e0d2f118f7df1665095715f0a4aa117630c9a374d063318ee55a962b5aa39ee9ca4ee980dbf19ee974b8adecfa313b0d544b729c58127c03139c83cea61aca39e210fc8691beba04cb1ae05c3cd3e6f061bd31194dcb0d2b5a0059da43142a193c02efad51a1bade5d9d39b6dffff574fc67f09901ee8d1a12679dc2c7193e59579b0f8848b4062f81111f47b405c45dfce22f93ba3fc4073882d72237e59cd27d3a3d98c683c743788ae1fb4f99b50c3ffe38f1ff14dde2ffff9203760172100cf5e96cf88c23d444601533c9f25eb0b40b59a650e133c89fe555158cb2b916010cf584485ef735a485db4368c1da45be290f21f9938d44b74d2950f8f53fe95b5e7f83d1602637ed2ec2ed3893a6023f619dccb3c1c59b1950daff604a3c6011572c4eb521883a734b70f2e7905ee72d06f3f59799a19d28bfe1e8030cb151e550ba3e94b6ea0d788baaa3bc1e0369895ec9cceb36f34a244655ec99894470f17590965f00d561876413d9dbe73b5a9a300e52f165776f9aa4bb0c8ffbda8d9d461b608d49895d8fd347d3363466eb7c20f604118f5dbf57a515d969a63b189ad0ff5b34aba070bef7a373ffc0c86d5b6296fa5d3a6d21d201adf2d1e4d652351e903d90c1cecf70c44e7a8afa0a4aae1f7d6a3630f0facc55277bf97965c973ff8699103d29d55589d31800e86656e0e6628bcebcf449b834bd53f43e1b856555290abb55a2eb5cdeaa790027f303e54e5cc11547912c14af21828eee60be7a48400d4dc85286f492ddc435b01f6868e093014cbfce1a5657653541b33e3bb1c819ccfccf9da9172e5948afa07b643dea743823fa86f32b6f80ec1b76e7e33b7b76c1ac029bfda13a37f996aaff753995ea61f9918fbbbc1e906e7c7ad105a883b0ea448f4eec284890b63dca092fd810e374720a4c9cfa13a2eeee006e49fc78a688c3cb9429da380152ac4f979cd5cbea4d2642d7fa7118d1e68829da05704b0fe79c1819cabe0bb88cf1c758d3b926b8922c1ddce1360e871693c95461e5bda7c61f3d60710beb9ddc80bed761aca39241d8d44461582dab0bfe9dbae3911e7e290f95006dd3992f0cecaa4a5a849e47281f9838a2eaeee1207b723700f9ceba544d381cd58d29e3eb74ed9f15cad3ee90ee8091f16b49a76977eec620745e64db6044f4729f319bcef71cf8fc64c0ea125f891454f7407f523eef8ad7c2bd6e46984a327322ed5cb980c2782744d8472982729db54d7c3a9844d20b10cd66e4a08281cc02062d1077feda62ff0b9c794884e52d77ab093094c3ee1cee7f934e772a5c18c527a4b75f0cf16af8a7c54592bfb616b9702f249adbf1bf89126661494efca35e5e85f1adcec38474357e9e014c1387b36e7a184787cc54f51ad58646dcb57b6bb57ee2be4bfab4d082dcc2b9567dfdb81721c50682bcd67132acffc6ed78450359fba0abcbc60a16462719dc637cb7d26e808b01f0c3fc807915dbd8eaed68a96739686c1b86bce51f7639f1853d33e82bb4a5dc64dab61214506cffce1856e67b3f61a851de44a706d6e93397558daca65d85900c12a25e528dcba56801747032a1ba7f7931f26f251e7e838d2a774623446feba7e180f26f84e694f2d5f891482a416f48633a74f16068305f519b225a6c63512a3d1613c825687517218f45a50552e0343f535ad8f4cc7271b0504334a891d2d5f4d5a6731e86f2945bb4b8f3a729bb45db66f91efdc75bdbddb8607ceef36e27a0c92cf7e669e2919bffaffbff31561290fb2d05fd49f8502852757f586cd0beba43b04828648584eba6d7f0197372561959ab3c1cf92508c473b61b2be129d5a6cc7b62560fb5f47c4676de260d7dc94997b6a631a807f6c6ce9fb7ef50fc366fe7a2a3c73d582ee5af3fd3c891259b3b3b63b6a79245d4127aaf13264a5f450cc2d5c585fff9c998c26146d66a713a576d26fc9ab6ea3ea0a35f5f14c236f1b032eb3ee073ccbca9ff0470062fe4d846f74ac65e15d51583c764dbf093b85d0f84afd2553cc97553c43b54f63a5a6d23397ad4b237c7ff2c768686245790cfbe171517473a65bca4237231916112954d1b197fbb480964321101352e3f6d8e51ec345f029d4adca7e0be8e8c66f249899fd5c9702eedc7bf12abb92b93f4442e7f7ac15475735569ed7a1a36b779c229b2eb768dbb243c9ba4160615b44f6315a26c129e664822ac22d23c0dd8afed591a01fa00575bc97b2fb5f0f76d94491d3fb18b2d7884bd7132841d9aad9bf6ea3f697e668094d52b9ec76099cf13e271ac6e0fb56d7fbe1916d4aab4d11626502308fdde616375806a30e1d2d85b3536d7e73cd872a0d8a6490a98c881ddbcae96516277d2f90aef922ab915e393be8f590b9b325ee3ee6c6a42a33c99e596a2b68b86bc88d41e03006b98d986476d0f818c089f579fc8749da92840a4d0c2c12e3d3495cac88f34ea47b6a07c08f415408b9e65503bde5dc3592b769d87d1c9c5dd94c833fc9b78ca3a2bf1dd912f5f9d67fa31e6450e5604b8b00b0cc8339889586e8dc7e724a5ac2222ab098c6d97cf250afd7f4f7ff05498be2fd0f92bca0fc16ad9f94125da0d9ec1307b0050b68612e763e2e9f7c82b2ab4224d8025444a44afd525c9ac0fe6b1dc8a6b6c553a9a8892e3eb057f7c038ee0d40b252d3c1de98b08da764332d031ff8cdda6bcf2cc855f0c9455dfbbf64957ee4fa1a4cced7d18e4e06967a74500fae8c4b74da3503a19a0d001deb92e66f24a3b7ecffaf20fb22d7832f6681c7d68ed9cdff158777b1086b5516ce1644741024bc09eda367e26be8a96406cd3fcbeea779681f4ac6c1ea86286728e385b4de585554eeb6006eab43a66bfa5c19e4abf2efb9655789732d091a95060b31e30664b4bb469d9711a32f8e57285dd8bdd079cdb874aada09fa9f2848b4818deb483be9eda88b14ee15206e48190f189c6fd9d5e4a17fe6fc40724d6e906999b2a2722c589ef8c4f831550aaa80a74e556481691aea5bf0b9924497b329a8a00e893032e95082511164d0728a1249309a394246f3ad0a92f87f251fd2266040d3fd73ccaffd6f4c685b7675dd10f70e740c48398bee37e78aa91689eda992b629ba784bba28d0dcfa09934a62c7c808fffc25e1df07c6901c420ad374c0c3cc6323a03c22f1461755a72e92ad2d7124519195d81f776c17257985f623c89776cc43fc8334418460ee3f0a16c7604b9f270317943e4a7f6fb39489728d229e864dbe3a5c59d4de0ff53bba4afac50cb4cf8b7adb85a36f5e11172d2c1590f2e05cb81d85e9cb588e2366a7182b8758fcf7f318cb2b41a1350b3318ee54145ea1dff64856e270ff59337f803c04eb440c48d08b8522426578780695b5f01acc325f062104a2937fd2e99600c6d20dfbcacacf12070c6642d300e969d8718f5bd5139748e4f394a911308813377d83004c53dbad78c8185e9db2968a05f26fc3a25098d45a9dd09282e4ed05a15aec14b07ec0613daf53d15a0b28c9fb422300b60630be78c5a0d65f40a9f96f1691d3e3b530fe1bfb5fb9ac181eec7c9e6c920693468bb024de4f4da563802c609818a715589f715d795525fafb4f18025a46aac3cabb0493ed7b7a929b17b8e91efa7505278c2971d15c8f085080d109110970d4f43774c9390b51ba09b08122d2d0cecef42175a534921a68b98f1e410f0d1ddb50486da9d1420fd04ee974d8b02e434dd2d5f1cc3a0a72864c8a1532002d2712bd9546dbbfe9871b9784fcee4de38a02c8d3e9795d7d89cd88ce497b538bd71306b90fbf977b20e83157a1e180a7e844fd7d2d86738b9561a2c571d7d71cc2fec5f7f617c0dd56cf17912496a9ae1916d201ff34e9d15c153974c8db038c2339bf034a8e21b4e2ceebab440d9b53aaff5877a215c033cede65b9cb9576d2a7d138fdae096a9c22078e94b99d857b1612eb70179e6cc5d9e6bbfd6dc6035e42518d94499a3e564f3f9e35b1efda6336a6e9bc9a0c5a7d87bcad6e9c89aceb6d98b563af2ac7e8a23626e33e0e8a356b127adc46fc255030cb400fe449ba499d02cb8765c729a5805962c0467e8cae2410e2e486b82940f59469c176a777367bf1782f2fc69a49ffbe308784ea4eb4ecb28d992afa3b1e0a9e38c3aa9dd13e3032105ebda4d1dba0e064a0e9c0d44083ca2bc1d44150dc8664011fabc6302287de8d545fae85ccbf04e1eeca5d1be365938a5b2a488d39455d64dd914f62dbfd2f47e6a492b4bccae225f046c6c6de56e25bc61fa0d104b5cc28b41cd359607732383d7b46bee16456e1ad274e95c326838eb1c5b667f85eb8819487195137cbbef7361df830efaab6fc6d5849eac3cd12c2bb43ad6b985177f98977d4e08079775552723ad2b9be31a60c852e5d90a09e86c16efee46400b112a3819a9080c8a19e2af1254b72f5944b6c707c62616ee5924ce4df1c5f907ba88ad2a0c53761fecbf7786423a3e390bc12aa8591ec4b937d919101132942504f119095e3cf99e0ea026264058cd8144ec9f67d6e9ffd246395f3f236ec346a7f72e1f8dde22bd402897bb58360bcd55d75f86bf473705ab47f1099b90842fb9ef720da8a42f61338c126da220454ece251bbef22ecdec5f3216002104e8a43b06f6baa529de15d9b5b75b72bf1fcf723caa5ad8b31b564bf65c3fec25443172c63750e6b58b1fc8b84c98693bec76659b62b30c77a4eadb0f67b07d98d04d43bb5385bc60dfd8c261d4965525e574d234d8713388b7fc1fef778327ea19823eb61a1fc010571d99c34dac99b066b8f45dc311705a6a3a421b5c95dfb2559b191a93273cab4b2ec89ebd713256b8f2ea15a6aad040bde4bab65f3d2d1bb50810f58ac5770ff74f1072ccc58f9c55f79337d201acb5ed204bd310e97b4365818142313a0c70ba2c8bbd95d2d97b745a72ab5f16e96f1f31eb88941a4f6790516a6c42d6fa26074e889e445bad3b8b6838313e16f9f66f583bc53bb61f83c928da08cef9d1d532eff14b0c631ddc13efee49a203fead6680d2f7f9cd683b265fe06cf80d5c0031032b91f1459cb81593505f6c090e1c0fc4c57a5cd46cfd91c2c43eaf58e0cb4a9868465993fb4947f2ad4728bff2a1ce0595235be1a7a181a7ff14010d073bfcdb80f7a3e3723e2f889c112b047bf3788f08b61eb32c1e9befd23dce5924ed1559aea4fbdfa4d95ec562ee9e31d4797d775a7cd8942ab86e388b8293f5b2d7d73239e1d90d68c9fecf69d8486f9e8119e0bc2662ba0bcfa76722cc517b0ab9400702fbe664a0ab9caa38484af861225e1450590a8797d3822ee21fd66b695f8f0cf0630fd6548da19c1394159bf5bee03f28a1ae558e42608f5a523b9c53f2957ef961eb7b0fec040e147970a5e3d1a87929518b30d1e122bae61d682fe2206aa7a96ab2510473097b373ff3b7559306dc4b1d9b8dd521e8ce83c26c14ad3e7e4250d8e8fff4b14b5fe7dffda186aeb8a9ca7e467b97e4ee82f8a301cee9d1b7a8ba4d7ecea1c670f3e4aa6ed9c1239148d1dc369008b66fa14ed46111ba07124147554e87ef1894008a34f0dad1c8d7f169155478777527a181b5745b91b4523fd82f132db9102c406c63f3c67e6ad4f721b06501f7814c3d8683f70880f59f"}) getsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000080)=""/175, &(0x7f0000000000)=0xaf) 751.964645ms ago: executing program 3 (id=598): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="140000000000000000000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000700000094040000820d212aab96bad6cdf92da325000000290000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a76000000090000000701862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000290000000100000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000010000000100000001000000000000001c000000000000000000000008000000", @ANYRES32=r10], 0x168}}], 0x1, 0x8000004) 557.854797ms ago: executing program 1 (id=603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a01258e7898aeab188b000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x0, &(0x7f0000000040)}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x2}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000000)={[{@barrier}]}, 0x0, 0x236, &(0x7f0000000540)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000000080)={0x5, 0x7, 0x6, 0x1e11, 0xa26, 0xe}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) fsopen(0x0, 0x1) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000000000000000) write(r5, &(0x7f0000000a00)="c7", 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 547.630358ms ago: executing program 0 (id=604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff4f21, 0x3, 0x4, 0xfffffffc}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcba8a400"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0xa888}], 0x2}, 0x44005) 428.060745ms ago: executing program 0 (id=605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) 427.651195ms ago: executing program 0 (id=606): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000006, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff0200007b010000000000001d130000000000007a0a00fe0000001f0f1400000000a700b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014"], 0x7c}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034001680300001802c000c80"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newae={0xf4, 0x1e, 0x124, 0x70bd29, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4d2, 0x2, 0x32}, @in=@local, 0x4, 0x3503}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2c, 0x5}}, @migrate={0x9c, 0x11, [{@in=@broadcast, @in=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010102, 0x2b, 0x3, 0x0, 0x8, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@mcast1, @in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x0, 0x0, 0x34ff, 0x2, 0xa}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x4010) 369.987528ms ago: executing program 0 (id=607): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x9c}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xd61}}, 0x7, 0x3, 0x8, 0xc, 0x5, 0x2, 0x3}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xd61}}, 0x7, 0x3, 0x8, 0xc, 0x5, 0x2, 0x3}, 0x9c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 89.902825ms ago: executing program 0 (id=608): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'}) 0s ago: executing program 0 (id=609): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x37) openat$cgroup_ro(r2, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) r3 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100001000000000000000000020030af125f91a1000a70000000060a0b160000000000000000020000084400048418000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080000001408000240a769334d9046cb1eadb7396f3ff661a4000000020900010073797a30000000000900020073797a320000000014000000180a0102000000000000000000000005140000001100010000000000000000000000000abd3b5f"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000", @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000805}, 0x804) mount(&(0x7f0000000080)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='nsfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): us mode [ 25.002258][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.009347][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.016550][ T3323] bridge_slave_1: entered allmulticast mode [ 25.022994][ T3323] bridge_slave_1: entered promiscuous mode [ 25.029201][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 25.083344][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.090548][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.097744][ T3320] bridge_slave_0: entered allmulticast mode [ 25.104067][ T3320] bridge_slave_0: entered promiscuous mode [ 25.112755][ T3310] hsr_slave_0: entered promiscuous mode [ 25.118795][ T3310] hsr_slave_1: entered promiscuous mode [ 25.128447][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.140281][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.147590][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.154819][ T3320] bridge_slave_1: entered allmulticast mode [ 25.161437][ T3320] bridge_slave_1: entered promiscuous mode [ 25.177632][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.209884][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.230790][ T3323] team0: Port device team_slave_0 added [ 25.236648][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.243905][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.251023][ T3311] bridge_slave_0: entered allmulticast mode [ 25.257655][ T3311] bridge_slave_0: entered promiscuous mode [ 25.268480][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.275758][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.283059][ T3311] bridge_slave_1: entered allmulticast mode [ 25.289610][ T3311] bridge_slave_1: entered promiscuous mode [ 25.297028][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.307082][ T3323] team0: Port device team_slave_1 added [ 25.330523][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.337989][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.345451][ T3313] bridge_slave_0: entered allmulticast mode [ 25.352458][ T3313] bridge_slave_0: entered promiscuous mode [ 25.367975][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.375083][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.401342][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.417050][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.424110][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.450437][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.461240][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.468608][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.476196][ T3313] bridge_slave_1: entered allmulticast mode [ 25.482836][ T3313] bridge_slave_1: entered promiscuous mode [ 25.497032][ T3320] team0: Port device team_slave_0 added [ 25.503861][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.531261][ T3323] hsr_slave_0: entered promiscuous mode [ 25.537481][ T3323] hsr_slave_1: entered promiscuous mode [ 25.543566][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 25.549366][ T3323] Cannot create hsr debugfs directory [ 25.558365][ T3320] team0: Port device team_slave_1 added [ 25.564962][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.601466][ T3311] team0: Port device team_slave_0 added [ 25.608530][ T3311] team0: Port device team_slave_1 added [ 25.615302][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.632182][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.666619][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.673671][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.700150][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.715921][ T3313] team0: Port device team_slave_0 added [ 25.721789][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.729103][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.755229][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.773602][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.780777][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.807611][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.819208][ T3313] team0: Port device team_slave_1 added [ 25.825394][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.832543][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.858691][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.908550][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.915666][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.942179][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.960527][ T3311] hsr_slave_0: entered promiscuous mode [ 25.966859][ T3311] hsr_slave_1: entered promiscuous mode [ 25.972809][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 25.978789][ T3311] Cannot create hsr debugfs directory [ 25.987498][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.994615][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.021010][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.058393][ T3320] hsr_slave_0: entered promiscuous mode [ 26.064632][ T3320] hsr_slave_1: entered promiscuous mode [ 26.070557][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 26.076421][ T3320] Cannot create hsr debugfs directory [ 26.126752][ T3313] hsr_slave_0: entered promiscuous mode [ 26.133214][ T3313] hsr_slave_1: entered promiscuous mode [ 26.139262][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 26.145135][ T3313] Cannot create hsr debugfs directory [ 26.167023][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.195486][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.213486][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.235276][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.272386][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.291087][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.299851][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.310411][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.350504][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.363927][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.374360][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.384834][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.414614][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.424078][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.433159][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.446676][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.475989][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.488473][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.499566][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.512846][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.528072][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.541016][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.557184][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.567053][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.574198][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.597741][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.605008][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.621332][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.633950][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.655219][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.664231][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.671297][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.680228][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.687453][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.721137][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.728402][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.737349][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.744597][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.773032][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.788433][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.838308][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.854320][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.863379][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.887416][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.896045][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.903167][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.913835][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.920883][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.943100][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.972998][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.980143][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.003453][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.010596][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.048520][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.067755][ T3310] veth0_vlan: entered promiscuous mode [ 27.080695][ T3323] veth0_vlan: entered promiscuous mode [ 27.097774][ T3323] veth1_vlan: entered promiscuous mode [ 27.107262][ T3310] veth1_vlan: entered promiscuous mode [ 27.122753][ T3323] veth0_macvtap: entered promiscuous mode [ 27.153488][ T3310] veth0_macvtap: entered promiscuous mode [ 27.167409][ T3323] veth1_macvtap: entered promiscuous mode [ 27.183219][ T3310] veth1_macvtap: entered promiscuous mode [ 27.196924][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.228416][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.237646][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.257229][ T3311] veth0_vlan: entered promiscuous mode [ 27.265696][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.276026][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.286137][ T3311] veth1_vlan: entered promiscuous mode [ 27.303186][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.313623][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.324484][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.333375][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.345612][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.354594][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.372338][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.382797][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.409082][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.420515][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.444622][ T3311] veth0_macvtap: entered promiscuous mode [ 27.473498][ T3311] veth1_macvtap: entered promiscuous mode [ 27.480816][ T3478] loop1: detected capacity change from 0 to 512 [ 27.488402][ T3313] veth0_vlan: entered promiscuous mode [ 27.498493][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.518452][ T3478] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.519730][ T3313] veth1_vlan: entered promiscuous mode [ 27.568313][ T3320] veth0_vlan: entered promiscuous mode [ 27.578832][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.592753][ T3320] veth1_vlan: entered promiscuous mode [ 27.603024][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.612836][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.621740][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.636599][ T3485] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 27.642535][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.645394][ T3487] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.2: Directory hole found for htree leaf block 0 [ 27.662434][ T3485] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 27.678565][ T3320] veth0_macvtap: entered promiscuous mode [ 27.686651][ T3320] veth1_macvtap: entered promiscuous mode [ 27.700806][ T3313] veth0_macvtap: entered promiscuous mode [ 27.717257][ T3313] veth1_macvtap: entered promiscuous mode [ 27.733150][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.750791][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.759670][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.779777][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.823102][ T3492] Zero length message leads to an empty skb [ 27.893787][ T2207] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.903058][ T2207] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.914384][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.923229][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.993265][ T3498] loop2: detected capacity change from 0 to 256 [ 28.001214][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 28.001226][ T28] audit: type=1400 audit(1771283065.034:117): avc: denied { read write } for pid=3489 comm="syz.2.6" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.052563][ T28] audit: type=1400 audit(1771283065.034:118): avc: denied { open } for pid=3489 comm="syz.2.6" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.141862][ T3498] FAT-fs (loop2): Directory bread(block 64) failed [ 28.148531][ T3498] FAT-fs (loop2): Directory bread(block 65) failed [ 28.155185][ T3498] FAT-fs (loop2): Directory bread(block 66) failed [ 28.161845][ T3498] FAT-fs (loop2): Directory bread(block 67) failed [ 28.168625][ T3498] FAT-fs (loop2): Directory bread(block 68) failed [ 28.175277][ T3498] FAT-fs (loop2): Directory bread(block 69) failed [ 28.181824][ T3498] FAT-fs (loop2): Directory bread(block 70) failed [ 28.188437][ T3498] FAT-fs (loop2): Directory bread(block 71) failed [ 28.195126][ T3498] FAT-fs (loop2): Directory bread(block 72) failed [ 28.202108][ T3498] FAT-fs (loop2): Directory bread(block 73) failed [ 28.331244][ T28] audit: type=1400 audit(1771283065.034:119): avc: denied { ioctl } for pid=3489 comm="syz.2.6" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.380823][ T28] audit: type=1400 audit(1771283065.254:120): avc: denied { mount } for pid=3489 comm="syz.2.6" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.404097][ T28] audit: type=1400 audit(1771283065.304:121): avc: denied { allowed } for pid=3489 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 28.425270][ T28] audit: type=1400 audit(1771283065.314:122): avc: denied { create } for pid=3489 comm="syz.2.6" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.447361][ T28] audit: type=1400 audit(1771283065.314:123): avc: denied { map } for pid=3489 comm="syz.2.6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.472115][ T28] audit: type=1400 audit(1771283065.314:124): avc: denied { read write } for pid=3489 comm="syz.2.6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.512600][ T3310] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 28.529688][ T28] audit: type=1400 audit(1771283065.564:125): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.559771][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.934085][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.947057][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.962862][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.976520][ T28] audit: type=1400 audit(1771283066.004:126): avc: denied { create } for pid=3502 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.977282][ C1] hrtimer: interrupt took 37799 ns [ 29.313829][ T3505] loop4: detected capacity change from 0 to 256 [ 29.601776][ T3505] FAT-fs (loop4): Directory bread(block 64) failed [ 29.608495][ T3505] FAT-fs (loop4): Directory bread(block 65) failed [ 29.615187][ T3505] FAT-fs (loop4): Directory bread(block 66) failed [ 29.621757][ T3505] FAT-fs (loop4): Directory bread(block 67) failed [ 29.628727][ T3505] FAT-fs (loop4): Directory bread(block 68) failed [ 29.635415][ T3505] FAT-fs (loop4): Directory bread(block 69) failed [ 29.641972][ T3505] FAT-fs (loop4): Directory bread(block 70) failed [ 29.648629][ T3505] FAT-fs (loop4): Directory bread(block 71) failed [ 29.655275][ T3505] FAT-fs (loop4): Directory bread(block 72) failed [ 29.661870][ T3505] FAT-fs (loop4): Directory bread(block 73) failed [ 29.781719][ T3510] loop2: detected capacity change from 0 to 128 [ 29.788817][ T3510] ======================================================= [ 29.788817][ T3510] WARNING: The mand mount option has been deprecated and [ 29.788817][ T3510] and is ignored by this kernel. Remove the mand [ 29.788817][ T3510] option from the mount to silence this warning. [ 29.788817][ T3510] ======================================================= [ 30.363683][ T3512] loop0: detected capacity change from 0 to 256 [ 30.809599][ T3503] netlink: 'syz.1.7': attribute type 8 has an invalid length. [ 30.974224][ T3512] FAT-fs (loop0): Directory bread(block 64) failed [ 30.980805][ T3512] FAT-fs (loop0): Directory bread(block 65) failed [ 31.036060][ T3512] FAT-fs (loop0): Directory bread(block 66) failed [ 31.042828][ T3512] FAT-fs (loop0): Directory bread(block 67) failed [ 31.049635][ T3512] FAT-fs (loop0): Directory bread(block 68) failed [ 31.056274][ T3512] FAT-fs (loop0): Directory bread(block 69) failed [ 31.063146][ T3512] FAT-fs (loop0): Directory bread(block 70) failed [ 31.069700][ T3512] FAT-fs (loop0): Directory bread(block 71) failed [ 31.076620][ T3512] FAT-fs (loop0): Directory bread(block 72) failed [ 31.083240][ T3512] FAT-fs (loop0): Directory bread(block 73) failed [ 31.502858][ T3517] netlink: 'syz.4.10': attribute type 8 has an invalid length. [ 31.535110][ T3520] loop1: detected capacity change from 0 to 512 [ 31.553728][ T3521] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 31.561226][ T3521] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 31.584298][ T3526] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4'. [ 31.617824][ T3520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.644840][ T3530] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4'. [ 31.668247][ T3520] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.224346][ T3541] loop2: detected capacity change from 0 to 256 [ 32.268170][ T3541] FAT-fs (loop2): Directory bread(block 64) failed [ 32.274970][ T3541] FAT-fs (loop2): Directory bread(block 65) failed [ 32.281888][ T3541] FAT-fs (loop2): Directory bread(block 66) failed [ 32.288719][ T3541] FAT-fs (loop2): Directory bread(block 67) failed [ 32.295454][ T3541] FAT-fs (loop2): Directory bread(block 68) failed [ 32.302458][ T3541] FAT-fs (loop2): Directory bread(block 69) failed [ 32.309190][ T3541] FAT-fs (loop2): Directory bread(block 70) failed [ 32.315968][ T3541] FAT-fs (loop2): Directory bread(block 71) failed [ 32.322793][ T3541] FAT-fs (loop2): Directory bread(block 72) failed [ 32.329465][ T3541] FAT-fs (loop2): Directory bread(block 73) failed [ 32.754018][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.813688][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.821026][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.889297][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.902029][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.953620][ T3546] netlink: 'syz.3.15': attribute type 8 has an invalid length. [ 32.989594][ T57] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.027250][ T57] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.047286][ T3557] loop1: detected capacity change from 0 to 1024 [ 33.064766][ T57] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.086701][ T3557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.116113][ T57] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.165081][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 33.165099][ T28] audit: type=1400 audit(1771283070.204:146): avc: denied { rmdir } for pid=3556 comm="syz.1.16" name="file1" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.278200][ T28] audit: type=1400 audit(1771283070.244:147): avc: denied { read write } for pid=3556 comm="syz.1.16" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.305916][ T3563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 33.374823][ T28] audit: type=1400 audit(1771283070.244:148): avc: denied { open } for pid=3556 comm="syz.1.16" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.478897][ T28] audit: type=1400 audit(1771283070.394:149): avc: denied { node_bind } for pid=3560 comm="syz.0.18" saddr=::ffff:224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 33.556194][ T28] audit: type=1400 audit(1771283070.554:150): avc: denied { create } for pid=3556 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.583008][ T3548] syzkaller0: entered promiscuous mode [ 33.598565][ T3548] syzkaller0: entered allmulticast mode [ 33.629179][ T28] audit: type=1400 audit(1771283070.554:151): avc: denied { bind } for pid=3556 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.657179][ T28] audit: type=1400 audit(1771283070.554:152): avc: denied { ioctl } for pid=3556 comm="syz.1.16" path="socket:[4937]" dev="sockfs" ino=4937 ioctlcmd=0x48d5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.693685][ T28] audit: type=1400 audit(1771283070.554:153): avc: denied { ioctl } for pid=3547 comm="syz.4.17" path="socket:[4917]" dev="sockfs" ino=4917 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.719890][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.736623][ T28] audit: type=1400 audit(1771283070.634:154): avc: denied { setopt } for pid=3547 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.769610][ T28] audit: type=1400 audit(1771283070.634:155): avc: denied { write } for pid=3547 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.928911][ T3568] loop2: detected capacity change from 0 to 512 [ 33.966019][ T3568] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.006852][ T3568] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.20: couldn't read orphan inode 26 (err -116) [ 34.019114][ T3568] loop2: lost filesystem error report for type 5 error -116 [ 34.020374][ T3568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.041314][ T3568] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.076602][ T3568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 34.096787][ T3568] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.20: bg 0: block 64: padding at end of block bitmap is not set [ 34.111453][ T3585] loop1: detected capacity change from 0 to 1024 [ 34.129338][ T3568] netlink: 104 bytes leftover after parsing attributes in process `syz.2.20'. [ 34.140809][ T3585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.151086][ T3568] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.20: Failed to acquire dquot type 0 [ 34.173910][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.183792][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.204728][ T3589] loop2: detected capacity change from 0 to 512 [ 34.230658][ T3589] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 34.478631][ T3596] loop2: detected capacity change from 0 to 512 [ 34.490513][ T3353] IPVS: starting estimator thread 0... [ 34.497751][ T3596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.511305][ T3596] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.524426][ T3603] loop1: detected capacity change from 0 to 256 [ 34.561891][ T3603] FAT-fs (loop1): Directory bread(block 64) failed [ 34.568595][ T3603] FAT-fs (loop1): Directory bread(block 65) failed [ 34.575162][ T3603] FAT-fs (loop1): Directory bread(block 66) failed [ 34.581687][ T3603] FAT-fs (loop1): Directory bread(block 67) failed [ 34.588420][ T3603] FAT-fs (loop1): Directory bread(block 68) failed [ 34.595074][ T3603] FAT-fs (loop1): Directory bread(block 69) failed [ 34.601891][ T3603] FAT-fs (loop1): Directory bread(block 70) failed [ 34.608520][ T3603] FAT-fs (loop1): Directory bread(block 71) failed [ 34.615493][ T3603] FAT-fs (loop1): Directory bread(block 72) failed [ 34.621986][ T3603] FAT-fs (loop1): Directory bread(block 73) failed [ 34.648929][ T3603] process 'syz.1.26' launched './file0' with NULL argv: empty string added [ 34.657685][ T3603] syz.1.26: attempt to access beyond end of device [ 34.657685][ T3603] loop1: rw=8912896, sector=1160, nr_sectors = 4 limit=256 [ 34.671586][ T3603] syz.1.26: attempt to access beyond end of device [ 34.671586][ T3603] loop1: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 34.700980][ T3599] IPVS: using max 2448 ests per chain, 122400 per kthread [ 35.048489][ T3615] loop3: detected capacity change from 0 to 512 [ 35.290253][ T3615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.322732][ T3615] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.512276][ T3605] syz.0.28 (3605) used greatest stack depth: 10424 bytes left [ 35.644415][ T3622] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 35.651849][ T3622] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 35.661724][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.056648][ T3640] loop3: detected capacity change from 0 to 256 [ 36.426046][ T3642] loop1: detected capacity change from 0 to 256 [ 39.015276][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 39.015289][ T28] audit: type=1326 audit(1771283076.054:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3643 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76795ebf79 code=0x7ffc0000 [ 39.032835][ T3642] FAT-fs (loop1): Directory bread(block 64) failed [ 39.051648][ T3642] FAT-fs (loop1): Directory bread(block 65) failed [ 39.052525][ T3640] FAT-fs (loop3): Directory bread(block 64) failed [ 39.058346][ T3642] FAT-fs (loop1): Directory bread(block 66) failed [ 39.064799][ T3640] FAT-fs (loop3): Directory bread(block 65) failed [ 39.064834][ T3640] FAT-fs (loop3): Directory bread(block 66) failed [ 39.064849][ T3640] FAT-fs (loop3): Directory bread(block 67) failed [ 39.064886][ T3640] FAT-fs (loop3): Directory bread(block 68) failed [ 39.071453][ T3642] FAT-fs (loop1): Directory bread(block 67) failed [ 39.077988][ T3640] FAT-fs (loop3): Directory bread(block 69) failed [ 39.078022][ T3640] FAT-fs (loop3): Directory bread(block 70) failed [ 39.084513][ T3642] FAT-fs (loop1): Directory bread(block 68) failed [ 39.091031][ T3640] FAT-fs (loop3): Directory bread(block 71) failed [ 39.097525][ T3642] FAT-fs (loop1): Directory bread(block 69) failed [ 39.104202][ T3640] FAT-fs (loop3): Directory bread(block 72) failed [ 39.104219][ T3640] FAT-fs (loop3): Directory bread(block 73) failed [ 39.149861][ T3642] FAT-fs (loop1): Directory bread(block 70) failed [ 39.156388][ T3642] FAT-fs (loop1): Directory bread(block 71) failed [ 39.163154][ T3642] FAT-fs (loop1): Directory bread(block 72) failed [ 39.169859][ T3642] FAT-fs (loop1): Directory bread(block 73) failed [ 39.173106][ T28] audit: type=1400 audit(1771283076.144:213): avc: denied { mount } for pid=3632 comm="syz.3.31" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.229540][ T3650] loop3: detected capacity change from 0 to 1024 [ 39.250245][ T28] audit: type=1326 audit(1771283076.194:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3643 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76795ebf79 code=0x7ffc0000 [ 39.280581][ T28] audit: type=1326 audit(1771283076.194:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3643 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76795ebf79 code=0x7ffc0000 [ 39.298270][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.308322][ T3650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.331106][ T3656] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 39.338697][ T3656] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 39.346414][ T28] audit: type=1326 audit(1771283076.194:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3643 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76795ebf79 code=0x7ffc0000 [ 39.370283][ T28] audit: type=1400 audit(1771283076.254:217): avc: denied { create } for pid=3649 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 39.391835][ T28] audit: type=1326 audit(1771283076.284:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3643 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76795ebf79 code=0x7ffc0000 [ 39.421869][ T28] audit: type=1326 audit(1771283076.284:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3643 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f76795ebf79 code=0x7ffc0000 [ 39.432834][ T3658] audit: audit_backlog=65 > audit_backlog_limit=64 [ 39.452480][ T28] audit: type=1326 audit(1771283076.284:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3643 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76795ebf79 code=0x7ffc0000 [ 39.530090][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.536438][ T3661] loop2: detected capacity change from 0 to 1024 [ 39.546737][ T3662] loop1: detected capacity change from 0 to 128 [ 39.564997][ T3662] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.577846][ T3661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.601417][ T3666] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 39.605230][ T3662] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.609099][ T3666] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 39.658632][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.686743][ T3668] capability: warning: `syz.3.42' uses 32-bit capabilities (legacy support in use) [ 39.700933][ T3668] loop3: detected capacity change from 0 to 512 [ 39.716260][ T3670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.41'. [ 39.860731][ T3678] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 39.876967][ T3672] loop4: detected capacity change from 0 to 8192 [ 39.903464][ T3678] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 39.904854][ T3672] syz_tun: entered allmulticast mode [ 39.916429][ T3674] loop2: detected capacity change from 0 to 256 [ 39.947122][ T3674] FAT-fs (loop2): Directory bread(block 64) failed [ 39.953762][ T3674] FAT-fs (loop2): Directory bread(block 65) failed [ 39.960293][ T3674] FAT-fs (loop2): Directory bread(block 66) failed [ 39.966845][ T3674] FAT-fs (loop2): Directory bread(block 67) failed [ 39.973406][ T3674] FAT-fs (loop2): Directory bread(block 68) failed [ 39.980327][ T3674] FAT-fs (loop2): Directory bread(block 69) failed [ 39.986930][ T3674] FAT-fs (loop2): Directory bread(block 70) failed [ 39.993480][ T3674] FAT-fs (loop2): Directory bread(block 71) failed [ 40.000246][ T3674] FAT-fs (loop2): Directory bread(block 72) failed [ 40.006845][ T3674] FAT-fs (loop2): Directory bread(block 73) failed [ 40.023061][ T3674] syz.2.44: attempt to access beyond end of device [ 40.023061][ T3674] loop2: rw=8912896, sector=1160, nr_sectors = 4 limit=256 [ 40.036678][ T3674] syz.2.44: attempt to access beyond end of device [ 40.036678][ T3674] loop2: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 40.083234][ T3687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 40.202744][ T3696] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 40.223275][ T3696] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 40.297437][ T3672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.43'. [ 40.311155][ T3708] loop3: detected capacity change from 0 to 256 [ 40.322470][ T3708] FAT-fs (loop3): bogus number of FAT sectors [ 40.329425][ T3708] FAT-fs (loop3): Can't find a valid FAT filesystem [ 40.348558][ T3694] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.404483][ T3715] netlink: 44 bytes leftover after parsing attributes in process `syz.3.58'. [ 40.423946][ T3710] loop2: detected capacity change from 0 to 8192 [ 40.435294][ T3710] syz_tun: entered allmulticast mode [ 40.514559][ T3717] loop3: detected capacity change from 0 to 1024 [ 40.547542][ T3672] syz.4.43 (3672) used greatest stack depth: 9912 bytes left [ 40.566718][ T3717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.683803][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.707575][ T3728] loop4: detected capacity change from 0 to 128 [ 40.724604][ T3728] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.749045][ T3728] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.768196][ T3731] netlink: 44 bytes leftover after parsing attributes in process `syz.1.65'. [ 40.772270][ T3733] EXT4-fs: Ignoring removed nobh option [ 40.783115][ T3731] netlink: 7 bytes leftover after parsing attributes in process `syz.1.65'. [ 40.783934][ T3710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 40.805847][ T3733] EXT4-fs: Mount option(s) incompatible with ext2 [ 40.992601][ T3748] netlink: 100 bytes leftover after parsing attributes in process `syz.3.71'. [ 41.002748][ T3744] syz.2.68 uses obsolete (PF_INET,SOCK_PACKET) [ 41.086242][ T3759] xt_socket: unknown flags 0xf8 [ 41.221054][ T3758] syz_tun: entered allmulticast mode [ 41.340891][ T3764] EXT4-fs: Ignoring removed bh option [ 41.366521][ T3764] EXT4-fs: Ignoring removed nobh option [ 41.400846][ T3772] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.423567][ T3764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.440128][ T3775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'. [ 41.441107][ T3772] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.474270][ T3764] netlink: 248 bytes leftover after parsing attributes in process `syz.2.76'. [ 41.831637][ T3786] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.040851][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.506968][ T3818] EXT4-fs: Ignoring removed nobh option [ 42.521526][ T3818] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 42.540297][ T3818] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.547209][ T3823] bond1: Removing last ns target with arp_interval on [ 42.551393][ T3818] EXT4-fs (loop4): invalid journal inode [ 42.563362][ T3818] EXT4-fs (loop4): can't get journal size [ 42.582451][ T3818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.684198][ T3831] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 42.706774][ T3831] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 42.715129][ T3831] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.722232][ T3831] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.99: bad orphan inode 267 [ 42.732711][ T3831] loop3: lost filesystem error report for type 5 error -117 [ 42.732852][ T3831] EXT4-fs (loop3): Remounting filesystem read-only [ 42.746875][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 42.746895][ C1] EXT4-fs (loop3): initial error at time 1771283079: ext4_orphan_get:1417 [ 42.746921][ C1] EXT4-fs (loop3): last error at time 1771283079: ext4_orphan_get:1417 [ 42.772428][ T3831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 42.819317][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.867478][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 42.914273][ T3838] syz_tun: entered allmulticast mode [ 42.970068][ T3843] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 43.028684][ T3843] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 43.485233][ T3860] xt_NFQUEUE: number of total queues is 0 [ 43.587933][ T3861] FAULT_INJECTION: forcing a failure. [ 43.587933][ T3861] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.675606][ T3861] CPU: 1 UID: 0 PID: 3861 Comm: syz.1.109 Not tainted syzkaller #0 PREEMPT(full) [ 43.675636][ T3861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 43.675652][ T3861] Call Trace: [ 43.675660][ T3861] [ 43.675668][ T3861] __dump_stack+0x1d/0x30 [ 43.675696][ T3861] dump_stack_lvl+0x95/0xd0 [ 43.675771][ T3861] dump_stack+0x15/0x1b [ 43.675790][ T3861] should_fail_ex+0x263/0x280 [ 43.675858][ T3861] should_fail+0xb/0x20 [ 43.675893][ T3861] should_fail_usercopy+0x1a/0x20 [ 43.675998][ T3861] _copy_to_user+0x20/0xa0 [ 43.676070][ T3861] simple_read_from_buffer+0xb5/0x130 [ 43.676129][ T3861] proc_fail_nth_read+0x10e/0x150 [ 43.676151][ T3861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 43.676171][ T3861] vfs_read+0x1ab/0x7f0 [ 43.676221][ T3861] ? __rcu_read_unlock+0x4e/0x70 [ 43.676314][ T3861] ? __fget_files+0x184/0x1c0 [ 43.676406][ T3861] ? mutex_lock+0x57/0x90 [ 43.676438][ T3861] ksys_read+0xdc/0x1a0 [ 43.676467][ T3861] __x64_sys_read+0x40/0x50 [ 43.676495][ T3861] x64_sys_call+0x2886/0x3020 [ 43.676518][ T3861] do_syscall_64+0x12c/0x370 [ 43.676600][ T3861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.676704][ T3861] RIP: 0033:0x7f0a68fdc84e [ 43.676721][ T3861] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.676739][ T3861] RSP: 002b:00007f0a67a2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.676789][ T3861] RAX: ffffffffffffffda RBX: 00007f0a67a2d6c0 RCX: 00007f0a68fdc84e [ 43.676801][ T3861] RDX: 000000000000000f RSI: 00007f0a67a2d0a0 RDI: 0000000000000007 [ 43.676815][ T3861] RBP: 00007f0a67a2d090 R08: 0000000000000000 R09: 0000000000000000 [ 43.676829][ T3861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.676843][ T3861] R13: 00007f0a69296218 R14: 00007f0a69296180 R15: 00007ffc90a6feb8 [ 43.676869][ T3861] [ 44.425952][ T3873] set_capacity_and_notify: 7 callbacks suppressed [ 44.425973][ T3873] loop2: detected capacity change from 0 to 164 [ 44.642311][ T28] kauditd_printk_skb: 239 callbacks suppressed [ 44.642341][ T28] audit: type=1400 audit(1771283081.654:458): avc: denied { connect } for pid=3879 comm="syz.0.116" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.749782][ T28] audit: type=1400 audit(1771283081.704:459): avc: denied { write } for pid=3879 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.774538][ T3881] IPv6: sit1: Disabled Multicast RS [ 44.853459][ T28] audit: type=1400 audit(1771283081.724:460): avc: denied { name_bind } for pid=3877 comm="syz.4.114" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 44.942365][ T28] audit: type=1400 audit(1771283081.964:461): avc: denied { mount } for pid=3866 comm="syz.2.111" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 45.010646][ T3870] loop1: detected capacity change from 0 to 512 [ 45.017262][ T3873] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 45.037400][ T28] audit: type=1400 audit(1771283082.064:462): avc: denied { map } for pid=3895 comm="syz.0.119" path="socket:[6557]" dev="sockfs" ino=6557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.083147][ T3903] loop3: detected capacity change from 0 to 1024 [ 45.089645][ T28] audit: type=1400 audit(1771283082.064:463): avc: denied { read } for pid=3895 comm="syz.0.119" path="socket:[6557]" dev="sockfs" ino=6557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.181314][ T3903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.226933][ T3870] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.112: couldn't read orphan inode 26 (err -116) [ 45.252345][ T3870] loop1: lost filesystem error report for type 5 error -116 [ 45.259435][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.261887][ T3870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.292665][ T3870] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.318207][ T3870] __nla_validate_parse: 3 callbacks suppressed [ 45.318275][ T3870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.112'. [ 45.334764][ T3921] batadv_slave_0: entered promiscuous mode [ 45.342264][ T28] audit: type=1400 audit(1771283082.364:464): avc: denied { ioctl } for pid=3919 comm="syz.3.123" path="socket:[6593]" dev="sockfs" ino=6593 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.370517][ T3919] batadv_slave_0: left promiscuous mode [ 45.376682][ T28] audit: type=1400 audit(1771283082.364:465): avc: denied { setopt } for pid=3919 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.392317][ T3870] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.112: bg 0: block 64: padding at end of block bitmap is not set [ 45.442969][ T28] audit: type=1400 audit(1771283082.484:466): avc: denied { read } for pid=3923 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.477061][ T3925] loop3: detected capacity change from 0 to 1024 [ 45.495823][ T28] audit: type=1400 audit(1771283082.504:467): avc: denied { create } for pid=3923 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 45.515484][ T3925] EXT4-fs (loop3): bad geometry: block count 16777728 exceeds size of device (512 blocks) [ 45.532471][ T3870] netlink: 104 bytes leftover after parsing attributes in process `syz.1.112'. [ 45.542245][ T3928] loop4: detected capacity change from 0 to 1024 [ 45.551252][ T3924] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.112: Failed to acquire dquot type 0 [ 45.579736][ T3928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.607416][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.617947][ T3932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.128'. [ 46.280564][ T3944] bridge1: entered allmulticast mode [ 46.618323][ T3958] loop1: detected capacity change from 0 to 256 [ 46.633868][ T3958] FAT-fs (loop1): bogus number of FAT sectors [ 46.642435][ T3958] FAT-fs (loop1): Can't find a valid FAT filesystem [ 46.706485][ T3963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.141'. [ 46.797134][ T3952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'. [ 46.882552][ T3970] netlink: 'syz.3.142': attribute type 4 has an invalid length. [ 47.217144][ T3969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.143'. [ 47.227232][ T3969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.143'. [ 47.477547][ T3999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.153'. [ 47.609955][ T4017] loop3: detected capacity change from 0 to 128 [ 47.635017][ T4017] FAT-fs (loop3): bogus sectors per cluster 0 [ 47.641551][ T4017] FAT-fs (loop3): Can't find a valid FAT filesystem [ 47.678017][ T4020] loop3: detected capacity change from 0 to 512 [ 47.687462][ T4020] EXT4-fs (loop3): blocks per group (8192) and clusters per group (2304) inconsistent [ 47.733840][ T4020] loop3: detected capacity change from 0 to 128 [ 47.745909][ T4020] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 47.868412][ T4020] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.883260][ T4020] ext2 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.942533][ T3939] Bluetooth: hci0: command 0x1003 tx timeout [ 47.948575][ T3600] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.011003][ T4020] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.058350][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.500172][ T4039] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 48.541765][ T4039] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 48.623428][ T40] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.848944][ T4035] loop1: detected capacity change from 0 to 512 [ 48.873880][ T4055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 48.899483][ T4053] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.975604][ T4035] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.165: couldn't read orphan inode 26 (err -116) [ 49.001175][ T4060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.174'. [ 49.020597][ T4035] loop1: lost filesystem error report for type 5 error -116 [ 49.024657][ T4035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.078293][ T4062] bond1: Removing last ns target with arp_interval on [ 49.086562][ T4035] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.269862][ T4035] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.165: bg 0: block 64: padding at end of block bitmap is not set [ 49.332561][ T4071] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.165: corrupted inode contents [ 49.406694][ T4071] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #3: comm syz.1.165: mark_inode_dirty error [ 49.536184][ T4071] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.165: Failed to acquire dquot type 0 [ 49.633682][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.666653][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 49.666746][ T28] audit: type=1400 audit(1771283086.704:495): avc: denied { bind } for pid=4081 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.773628][ T28] audit: type=1400 audit(1771283086.814:496): avc: denied { create } for pid=4081 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.793647][ T4087] set_capacity_and_notify: 1 callbacks suppressed [ 49.793660][ T4087] loop1: detected capacity change from 0 to 512 [ 49.811734][ T4087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.824916][ T28] audit: type=1400 audit(1771283086.864:497): avc: denied { read } for pid=4086 comm="syz.1.184" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.848097][ T28] audit: type=1400 audit(1771283086.864:498): avc: denied { open } for pid=4086 comm="syz.1.184" path="/32/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.893343][ T28] audit: type=1400 audit(1771283086.924:499): avc: denied { write } for pid=4086 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.946231][ T28] audit: type=1400 audit(1771283086.984:500): avc: denied { read } for pid=4086 comm="syz.1.184" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.031271][ T28] audit: type=1400 audit(1771283086.984:501): avc: denied { open } for pid=4086 comm="syz.1.184" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.054549][ T28] audit: type=1400 audit(1771283086.984:502): avc: denied { ioctl } for pid=4086 comm="syz.1.184" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.178510][ T4109] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 50.190685][ T4109] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 50.543805][ T4121] loop4: detected capacity change from 0 to 512 [ 50.566237][ T28] audit: type=1400 audit(1771283087.484:503): avc: denied { create } for pid=4115 comm="syz.0.195" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.602270][ T4121] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 50.652740][ T4121] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 50.678501][ T4121] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.685166][ T3939] Bluetooth: hci0: command 0x1003 tx timeout [ 50.691197][ T3600] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.720654][ T4121] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.197: bad orphan inode 267 [ 50.796704][ T4121] loop4: lost filesystem error report for type 5 error -117 [ 50.797262][ T4121] EXT4-fs (loop4): Remounting filesystem read-only [ 50.804897][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 50.804944][ C1] EXT4-fs (loop4): initial error at time 1771283087: ext4_orphan_get:1417 [ 50.804978][ C1] EXT4-fs (loop4): last error at time 1771283087: ext4_orphan_get:1417 [ 50.943617][ T47] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.961792][ T47] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.008526][ T28] audit: type=1400 audit(1771283088.044:504): avc: denied { bind } for pid=4125 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 51.046165][ T4121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 51.160179][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 51.465750][ T4136] loop2: detected capacity change from 0 to 512 [ 51.494715][ T4136] ext4: Unknown parameter 'audit' [ 51.522527][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.664088][ T4147] loop4: detected capacity change from 0 to 512 [ 51.695061][ T4147] ext2: Unknown parameter 'smackfshat' [ 51.733932][ T4157] loop2: detected capacity change from 0 to 128 [ 51.806776][ T4162] syzkaller0: entered promiscuous mode [ 51.812424][ T4162] syzkaller0: entered allmulticast mode [ 51.942581][ T4167] loop1: detected capacity change from 0 to 512 [ 51.954436][ T4167] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.968838][ T4167] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.213: bg 0: block 384: padding at end of block bitmap is not set [ 51.983753][ T4167] loop1: lost filesystem error report for type 5 error -117 [ 51.987167][ T4167] EXT4-fs (loop1): Remounting filesystem read-only [ 51.994512][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 51.994549][ C0] EXT4-fs (loop1): initial error at time 1771283089: ext4_validate_block_bitmap:441 [ 51.994572][ C0] EXT4-fs (loop1): last error at time 1771283089: ext4_validate_block_bitmap:441 [ 52.026520][ T4167] EXT4-fs (loop1): 1 truncate cleaned up [ 52.033067][ T4167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.078274][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.220565][ T4183] __nla_validate_parse: 5 callbacks suppressed [ 52.220664][ T4183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.214'. [ 52.236166][ T4183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.214'. [ 52.666959][ T4207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'. [ 52.798118][ T4224] loop2: detected capacity change from 0 to 512 [ 52.806015][ T4224] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 52.826481][ T4223] loop1: detected capacity change from 0 to 1024 [ 52.860931][ T4223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.982253][ T3600] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 52.988604][ T3939] Bluetooth: hci0: command 0x1003 tx timeout [ 53.015121][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.251205][ T4250] loop2: detected capacity change from 0 to 256 [ 53.277967][ T4250] FAT-fs (loop2): Directory bread(block 64) failed [ 53.294640][ T4250] FAT-fs (loop2): Directory bread(block 65) failed [ 53.315977][ T4232] loop3: detected capacity change from 0 to 128 [ 53.332257][ T4250] FAT-fs (loop2): Directory bread(block 66) failed [ 53.338807][ T4250] FAT-fs (loop2): Directory bread(block 67) failed [ 53.354220][ T4250] FAT-fs (loop2): Directory bread(block 68) failed [ 53.376291][ T4250] FAT-fs (loop2): Directory bread(block 69) failed [ 53.392415][ T4250] FAT-fs (loop2): Directory bread(block 70) failed [ 53.411636][ T4250] FAT-fs (loop2): Directory bread(block 71) failed [ 53.431159][ T4250] FAT-fs (loop2): Directory bread(block 72) failed [ 53.460037][ T4250] FAT-fs (loop2): Directory bread(block 73) failed [ 53.494230][ T4250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.239'. [ 53.518525][ T4264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.596189][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.649004][ T4281] netlink: 'syz.3.252': attribute type 10 has an invalid length. [ 53.656939][ T4281] netlink: 168 bytes leftover after parsing attributes in process `syz.3.252'. [ 53.671254][ T4281] EXT4-fs: Ignoring removed bh option [ 53.678401][ T4281] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 53.697417][ T4281] EXT4-fs (loop3): 1 truncate cleaned up [ 53.706811][ T4281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.819555][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.035837][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 55.035860][ T28] audit: type=1400 audit(1771283092.074:522): avc: denied { read } for pid=4313 comm="syz.2.261" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 55.152283][ T28] audit: type=1400 audit(1771283092.074:523): avc: denied { open } for pid=4313 comm="syz.2.261" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 55.196231][ T28] audit: type=1400 audit(1771283092.074:524): avc: denied { ioctl } for pid=4313 comm="syz.2.261" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x583a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 55.272180][ T28] audit: type=1400 audit(1771283092.074:525): avc: denied { ioctl } for pid=4313 comm="syz.2.261" path="/dev/uhid" dev="devtmpfs" ino=253 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.647196][ T4335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.268'. [ 55.676719][ T4335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.268'. [ 55.708895][ T4332] netlink: 32 bytes leftover after parsing attributes in process `syz.3.269'. [ 55.765849][ T28] audit: type=1400 audit(1771283092.804:526): avc: denied { create } for pid=4336 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 56.084444][ T4345] set_capacity_and_notify: 2 callbacks suppressed [ 56.084460][ T4345] loop4: detected capacity change from 0 to 256 [ 56.126662][ T4345] FAT-fs (loop4): Directory bread(block 64) failed [ 56.133419][ T4345] FAT-fs (loop4): Directory bread(block 65) failed [ 56.140037][ T4345] FAT-fs (loop4): Directory bread(block 66) failed [ 56.146589][ T4345] FAT-fs (loop4): Directory bread(block 67) failed [ 56.153384][ T4345] FAT-fs (loop4): Directory bread(block 68) failed [ 56.155374][ T28] audit: type=1400 audit(1771283093.194:527): avc: denied { connect } for pid=4352 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.159911][ T4345] FAT-fs (loop4): Directory bread(block 69) failed [ 56.186478][ T4345] FAT-fs (loop4): Directory bread(block 70) failed [ 56.193195][ T4345] FAT-fs (loop4): Directory bread(block 71) failed [ 56.199957][ T4345] FAT-fs (loop4): Directory bread(block 72) failed [ 56.206615][ T4345] FAT-fs (loop4): Directory bread(block 73) failed [ 56.222522][ T4345] syz.4.272: attempt to access beyond end of device [ 56.222522][ T4345] loop4: rw=8912896, sector=1160, nr_sectors = 4 limit=256 [ 56.237369][ T4345] syz.4.272: attempt to access beyond end of device [ 56.237369][ T4345] loop4: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 56.406354][ T28] audit: type=1400 audit(1771283093.444:528): avc: denied { bind } for pid=4360 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.679607][ T4368] loop1: detected capacity change from 0 to 512 [ 56.700573][ T4368] EXT4-fs: Ignoring removed i_version option [ 56.735974][ T4368] EXT4-fs: Ignoring removed bh option [ 56.773509][ T4368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.872784][ T28] audit: type=1400 audit(1771283093.904:529): avc: denied { create } for pid=4372 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.907281][ T4368] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.949915][ T4365] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.278: iget: bad i_size value: 2533274857506816 [ 56.964575][ T4365] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.278: iget: bad i_size value: 2533274857506816 [ 56.977614][ T4365] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.278: iget: bad i_size value: 2533274857506816 [ 57.014561][ T28] audit: type=1400 audit(1771283094.044:530): avc: denied { ioctl } for pid=4364 comm="syz.1.278" path="/58/bus/file1" dev="loop1" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.050910][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.061710][ T4383] netlink: 'syz.4.284': attribute type 15 has an invalid length. [ 57.096051][ T4387] syzkaller0: entered promiscuous mode [ 57.101703][ T4387] syzkaller0: entered allmulticast mode [ 57.209827][ T4393] loop4: detected capacity change from 0 to 2048 [ 57.274360][ T3303] GPT:first_usable_lbas don't match. [ 57.281074][ T3303] GPT:34 != 290 [ 57.288989][ T3303] GPT: Use GNU Parted to correct GPT errors. [ 57.300610][ T3303] loop4: p1 p2 p3 [ 57.317135][ T4393] GPT:first_usable_lbas don't match. [ 57.329779][ T4393] GPT:34 != 290 [ 57.342140][ T4393] GPT: Use GNU Parted to correct GPT errors. [ 57.358480][ T4393] loop4: p1 p2 p3 [ 57.364380][ T4395] loop1: detected capacity change from 0 to 512 [ 57.419388][ T4395] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.289: couldn't read orphan inode 26 (err -116) [ 57.433221][ T4395] loop1: lost filesystem error report for type 5 error -116 [ 57.453925][ T4395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.514922][ T4400] syzkaller0: entered promiscuous mode [ 57.520656][ T4400] syzkaller0: entered allmulticast mode [ 57.527318][ T4395] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.544090][ T28] audit: type=1400 audit(1771283094.584:531): avc: denied { write } for pid=4399 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.551939][ T4395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.289'. [ 57.597452][ T4395] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.289: bg 0: block 64: padding at end of block bitmap is not set [ 57.620300][ T4395] netlink: 104 bytes leftover after parsing attributes in process `syz.1.289'. [ 57.635122][ T4395] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.289: Failed to acquire dquot type 0 [ 57.670832][ T4402] loop3: detected capacity change from 0 to 1024 [ 57.693180][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.703967][ T4402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.766385][ T4406] loop1: detected capacity change from 0 to 2048 [ 57.791565][ T4408] ip6tnl1: entered allmulticast mode [ 57.833635][ T3303] GPT:first_usable_lbas don't match. [ 57.839036][ T3303] GPT:34 != 290 [ 57.842849][ T3303] GPT: Use GNU Parted to correct GPT errors. [ 57.858779][ T2063] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.865755][ T3303] loop1: p1 p2 p3 [ 57.885774][ T4406] GPT:first_usable_lbas don't match. [ 57.892297][ T4406] GPT:34 != 290 [ 57.902300][ T4406] GPT: Use GNU Parted to correct GPT errors. [ 57.909847][ T4406] loop1: p1 p2 p3 [ 58.120826][ T4424] loop4: detected capacity change from 0 to 1024 [ 58.138767][ T4424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.219678][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.394947][ T4437] loop2: detected capacity change from 0 to 512 [ 58.424042][ T4437] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 58.435934][ T4437] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 58.444488][ T4437] EXT4-fs (loop2): orphan cleanup on readonly fs [ 58.450907][ T4437] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.304: bad orphan inode 267 [ 58.461312][ T4437] loop2: lost filesystem error report for type 5 error -117 [ 58.461822][ T4437] EXT4-fs (loop2): Remounting filesystem read-only [ 58.469304][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 58.469334][ C0] EXT4-fs (loop2): initial error at time 1771283095: ext4_orphan_get:1417 [ 58.469356][ C0] EXT4-fs (loop2): last error at time 1771283095: ext4_orphan_get:1417 [ 58.499612][ T4437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 58.514565][ T4437] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.304: dx entry: limit 0 != root limit 125 [ 58.526725][ T4437] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.304: Corrupt directory, running e2fsck is recommended [ 58.557569][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 58.889355][ T4455] loop2: detected capacity change from 0 to 164 [ 58.954257][ T4455] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 59.673077][ T4465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.724561][ T4471] loop4: detected capacity change from 0 to 512 [ 59.770408][ T4471] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 59.798716][ T4465] capability: warning: `syz.0.314' uses deprecated v2 capabilities in a way that may be insecure [ 59.818362][ T4471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 59.851116][ T4471] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.862288][ T3600] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.864631][ T4471] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.316: bad orphan inode 267 [ 59.899009][ T4471] loop4: lost filesystem error report for type 5 error -117 [ 59.899224][ T4471] EXT4-fs (loop4): Remounting filesystem read-only [ 59.906558][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 59.906579][ C0] EXT4-fs (loop4): initial error at time 1771283096: ext4_orphan_get:1417 [ 59.906597][ C0] EXT4-fs (loop4): last error at time 1771283096: ext4_orphan_get:1417 [ 59.943000][ T4482] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 59.973777][ T4471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 59.986810][ T4471] FAULT_INJECTION: forcing a failure. [ 59.986810][ T4471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.001925][ T4482] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 60.010206][ T4482] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.016863][ T4482] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.320: bad orphan inode 267 [ 60.027893][ T4471] CPU: 0 UID: 0 PID: 4471 Comm: syz.4.316 Not tainted syzkaller #0 PREEMPT(full) [ 60.027922][ T4471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.027934][ T4471] Call Trace: [ 60.027941][ T4471] [ 60.027949][ T4471] __dump_stack+0x1d/0x30 [ 60.027972][ T4471] dump_stack_lvl+0x95/0xd0 [ 60.028028][ T4471] dump_stack+0x15/0x1b [ 60.028050][ T4471] should_fail_ex+0x263/0x280 [ 60.028083][ T4471] should_fail+0xb/0x20 [ 60.028101][ T4471] should_fail_usercopy+0x1a/0x20 [ 60.028152][ T4471] strncpy_from_user+0x27/0x250 [ 60.028191][ T4471] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 60.028278][ T4471] do_getname+0x59/0x1c0 [ 60.028298][ T4471] __se_sys_mkdirat+0x21/0xf0 [ 60.028330][ T4471] __x64_sys_mkdirat+0x43/0x50 [ 60.028421][ T4471] x64_sys_call+0x2c4e/0x3020 [ 60.028506][ T4471] do_syscall_64+0x12c/0x370 [ 60.028535][ T4471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.028554][ T4471] RIP: 0033:0x7f39f2dcbf79 [ 60.028568][ T4471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.028584][ T4471] RSP: 002b:00007f39f1827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 60.028611][ T4471] RAX: ffffffffffffffda RBX: 00007f39f3045fa0 RCX: 00007f39f2dcbf79 [ 60.028626][ T4471] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 60.028653][ T4471] RBP: 00007f39f1827090 R08: 0000000000000000 R09: 0000000000000000 [ 60.028666][ T4471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.028677][ T4471] R13: 00007f39f3046038 R14: 00007f39f3045fa0 R15: 00007ffc1a161d68 [ 60.028694][ T4471] [ 60.200210][ T4482] loop1: lost filesystem error report for type 5 error -117 [ 60.203299][ T4482] EXT4-fs (loop1): Remounting filesystem read-only [ 60.217209][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 60.217238][ C0] EXT4-fs (loop1): initial error at time 1771283097: ext4_orphan_get:1417 [ 60.217263][ C0] EXT4-fs (loop1): last error at time 1771283097: ext4_orphan_get:1417 [ 60.241506][ T4482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 60.258558][ T4482] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.320: dx entry: limit 0 != root limit 125 [ 60.276975][ T4482] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.320: Corrupt directory, running e2fsck is recommended [ 60.420682][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 60.422551][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 60.462548][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.537796][ T4488] syzkaller0: entered promiscuous mode [ 60.573402][ T4488] syzkaller0: entered allmulticast mode [ 60.594928][ T4496] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 60.595810][ T4500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 60.602594][ T4496] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.650884][ T4500] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.658618][ T4500] EXT4-fs: inline encryption not supported [ 60.667704][ T4500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.682376][ T4500] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84fc01c, mo2=0003] [ 60.700474][ T4500] System zones: 1-2, 4-12, 8-8 [ 60.711594][ T4500] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.326: iget: bad i_size value: 38620345925642 [ 60.729615][ T4500] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.730017][ T4500] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.326: couldn't read orphan inode 15 (err -117) [ 60.739232][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 60.739253][ C0] EXT4-fs (loop4): initial error at time 1771283097: ext4_orphan_get:1391: inode 15 [ 60.739279][ C0] EXT4-fs (loop4): last error at time 1771283097: ext4_orphan_get:1391: inode 15 [ 60.777012][ T4500] loop4: lost filesystem error report for type 5 error -117 [ 60.786162][ T4500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.881676][ T4515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 60.947460][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.410945][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.444612][ T4515] bond0 (unregistering): Released all slaves [ 61.453689][ T4528] set_capacity_and_notify: 3 callbacks suppressed [ 61.453716][ T4528] loop3: detected capacity change from 0 to 1024 [ 61.523967][ T4528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.604945][ T40] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 61.623811][ T4535] loop1: detected capacity change from 0 to 512 [ 61.642677][ T4535] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 61.658373][ T40] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8448 with max blocks 64 with error 28 [ 61.677507][ T40] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.677507][ T40] [ 61.690103][ T40] EXT4-fs (loop4): Total free blocks count 0 [ 61.699649][ T40] EXT4-fs (loop4): Free/Dirty block details [ 61.705664][ T40] EXT4-fs (loop4): free_blocks=0 [ 61.710878][ T40] EXT4-fs (loop4): dirty_blocks=64 [ 61.716196][ T40] EXT4-fs (loop4): Block reservation details [ 61.722804][ T40] EXT4-fs (loop4): i_reserved_data_blocks=64 [ 61.730042][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.811402][ T47] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.843318][ T4541] loop4: detected capacity change from 0 to 128 [ 61.852336][ T4541] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 61.864724][ T4541] EXT4-fs (loop4): failed to initialize system zone (-117) [ 61.872308][ T4541] EXT4-fs (loop4): mount failed [ 61.981913][ T4552] loop4: detected capacity change from 0 to 512 [ 61.989478][ T4544] loop1: detected capacity change from 0 to 1024 [ 62.012663][ T4552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.042300][ T4544] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 62.050923][ T4552] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.064156][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 62.064172][ T28] audit: type=1400 audit(1771283099.104:532): avc: denied { mounton } for pid=4551 comm="syz.4.342" path="/71/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.082049][ T4544] System zones: 0-1, 3-36 [ 62.105586][ T28] audit: type=1400 audit(1771283099.104:533): avc: denied { mount } for pid=4551 comm="syz.4.342" name="/" dev="hugetlbfs" ino=8532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 62.112889][ T4544] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.339: bad orphan inode 134217728 [ 62.134202][ T4552] 9p: Bad value for 'rfdno' [ 62.150504][ T4544] loop1: lost filesystem error report for type 5 error -117 [ 62.152225][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 62.165543][ T4559] syz.0.344 (4559) used greatest stack depth: 9608 bytes left [ 62.166160][ C1] EXT4-fs (loop1): initial error at time 1771283099: ext4_orphan_get:1417 [ 62.179791][ T4544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.182108][ C1] EXT4-fs (loop1): last error at time 1771283099: ext4_orphan_get:1417 [ 62.215664][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.287100][ T4567] syzkaller0: entered promiscuous mode [ 62.298531][ T4567] syzkaller0: entered allmulticast mode [ 62.307609][ T28] audit: type=1400 audit(1771283099.344:534): avc: denied { read } for pid=4543 comm="syz.1.339" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.333013][ T28] audit: type=1400 audit(1771283099.344:535): avc: denied { open } for pid=4543 comm="syz.1.339" path="/dev/input/event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.366051][ T28] audit: type=1400 audit(1771283099.404:536): avc: denied { ioctl } for pid=4543 comm="syz.1.339" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.460166][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.659099][ T4575] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 62.677590][ T4575] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.456961][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 64.017775][ T3939] Bluetooth: hci0: command 0x1003 tx timeout [ 64.025081][ T3600] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.036628][ T4589] loop4: detected capacity change from 0 to 8192 [ 64.099789][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.109346][ T4589] loop4: p2 p3 p4 [ 64.118402][ T4589] loop4: p2 size 64053 extends beyond EOD, truncated [ 64.139760][ T4589] loop4: p3 start 65280 is beyond EOD, truncated [ 64.162468][ T4589] loop4: p4 size 50331904 extends beyond EOD, truncated [ 64.242614][ T4593] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.336887][ T4606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 64.364076][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 64.378538][ T4608] loop2: detected capacity change from 0 to 128 [ 64.383794][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 64.400924][ T4593] loop1: detected capacity change from 0 to 8192 [ 64.410729][ T28] audit: type=1400 audit(1771283101.434:537): avc: denied { mounton } for pid=4604 comm="syz.2.359" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 64.539230][ T4611] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 64.553131][ T4613] syz.2.359: attempt to access beyond end of device [ 64.553131][ T4613] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 64.573484][ T4611] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.600649][ T4613] syz.2.359: attempt to access beyond end of device [ 64.600649][ T4613] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 64.615577][ T4613] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 64.625191][ T4613] syz.2.359: attempt to access beyond end of device [ 64.625191][ T4613] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 64.679927][ T2207] kworker/u8:8: attempt to access beyond end of device [ 64.679927][ T2207] loop2: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 64.700954][ T2207] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 64.727419][ T4613] syz.2.359: attempt to access beyond end of device [ 64.727419][ T4613] loop2: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 64.742370][ T4613] syz.2.359: attempt to access beyond end of device [ 64.742370][ T4613] loop2: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 64.756358][ T4613] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 64.824566][ T4632] syzkaller0: entered promiscuous mode [ 64.861965][ T4613] syz.2.359: attempt to access beyond end of device [ 64.861965][ T4613] loop2: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 64.904206][ T4632] syzkaller0: entered allmulticast mode [ 64.915584][ T28] audit: type=1400 audit(1771283101.954:538): avc: denied { create } for pid=4628 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.956683][ T4613] syz.2.359: attempt to access beyond end of device [ 64.956683][ T4613] loop2: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 64.973128][ T4638] loop1: detected capacity change from 0 to 512 [ 64.981993][ T28] audit: type=1400 audit(1771283101.954:539): avc: denied { write } for pid=4628 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.012483][ T4613] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 65.076479][ T28] audit: type=1400 audit(1771283101.954:540): avc: denied { read } for pid=4628 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.142936][ T4613] syz.2.359: attempt to access beyond end of device [ 65.142936][ T4613] loop2: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 65.177006][ T28] audit: type=1400 audit(1771283101.984:541): avc: denied { write } for pid=4631 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.198906][ T4613] syz.2.359: attempt to access beyond end of device [ 65.198906][ T4613] loop2: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 65.216798][ T4638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.235395][ T4645] loop4: detected capacity change from 0 to 1024 [ 65.241879][ T4613] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 65.262725][ T4638] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.302054][ T4645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.342806][ T4613] Buffer I/O error on dev loop2, logical block 116, lost async page write [ 65.456412][ T4654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.373'. [ 65.660546][ T4650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.371'. [ 65.672084][ T4650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.371'. [ 65.934640][ T4677] syzkaller0: entered promiscuous mode [ 65.940273][ T4677] syzkaller0: entered allmulticast mode [ 65.992170][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.131620][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.153141][ T4685] netlink: 'syz.1.383': attribute type 6 has an invalid length. [ 66.187605][ T4691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.238552][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.058023][ T4744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 67.072383][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 67.072447][ T28] audit: type=1400 audit(1771283104.114:649): avc: denied { read write } for pid=4745 comm="syz.3.406" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.109782][ T4746] netlink: 'syz.3.406': attribute type 6 has an invalid length. [ 67.177952][ T4730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.398'. [ 67.205110][ T4746] netlink: 168 bytes leftover after parsing attributes in process `syz.3.406'. [ 67.210941][ T28] audit: type=1400 audit(1771283104.194:650): avc: denied { create } for pid=4729 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 67.234200][ T28] audit: type=1400 audit(1771283104.224:651): avc: denied { firmware_load } for pid=4729 comm="syz.0.398" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 67.259664][ T28] audit: type=1400 audit(1771283104.254:652): avc: denied { getopt } for pid=4729 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.364182][ T4756] set_capacity_and_notify: 1 callbacks suppressed [ 67.364207][ T4756] loop1: detected capacity change from 0 to 256 [ 67.390915][ T4756] FAT-fs (loop1): Directory bread(block 64) failed [ 67.397702][ T4756] FAT-fs (loop1): Directory bread(block 65) failed [ 67.404248][ T4756] FAT-fs (loop1): Directory bread(block 66) failed [ 67.410800][ T4756] FAT-fs (loop1): Directory bread(block 67) failed [ 67.417436][ T4756] FAT-fs (loop1): Directory bread(block 68) failed [ 67.423981][ T4756] FAT-fs (loop1): Directory bread(block 69) failed [ 67.430573][ T4756] FAT-fs (loop1): Directory bread(block 70) failed [ 67.437279][ T4756] FAT-fs (loop1): Directory bread(block 71) failed [ 67.443953][ T4756] FAT-fs (loop1): Directory bread(block 72) failed [ 67.450663][ T4756] FAT-fs (loop1): Directory bread(block 73) failed [ 67.510522][ T28] audit: type=1400 audit(1771283104.414:653): avc: denied { mounton } for pid=4747 comm="syz.1.407" path="/82/file1" dev="tmpfs" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.713432][ T28] audit: type=1400 audit(1771283104.504:654): avc: denied { mount } for pid=4747 comm="syz.1.407" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 67.865899][ T28] audit: type=1400 audit(1771283104.794:655): avc: denied { write } for pid=4764 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.997424][ T28] audit: type=1400 audit(1771283104.794:656): avc: denied { connect } for pid=4764 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.060386][ T28] audit: type=1400 audit(1771283104.794:657): avc: denied { name_connect } for pid=4764 comm="syz.0.413" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 68.130092][ T28] audit: type=1400 audit(1771283104.804:658): avc: denied { create } for pid=4764 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.443792][ T4789] netlink: 'syz.3.422': attribute type 29 has an invalid length. [ 68.453002][ T4789] netlink: 'syz.3.422': attribute type 29 has an invalid length. [ 68.670404][ T4794] bond0: option resend_igmp: invalid value (1024) [ 68.682350][ T4794] bond0: option resend_igmp: allowed values 0 - 255 [ 68.704259][ T4794] bond0 (unregistering): Released all slaves [ 68.872071][ T4813] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 68.888006][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 68.907803][ T4817] loop1: detected capacity change from 0 to 512 [ 68.938156][ T4817] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 68.944385][ T4819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.959522][ T4817] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 68.965422][ T4817] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.965438][ T4817] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.430: bad orphan inode 267 [ 68.965460][ T4817] loop1: lost filesystem error report for type 5 error -117 [ 68.966088][ T4817] EXT4-fs (loop1): Remounting filesystem read-only [ 68.966692][ T4817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 69.008790][ T4817] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.430: dx entry: limit 0 != root limit 125 [ 69.008825][ T4817] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.430: Corrupt directory, running e2fsck is recommended [ 69.052163][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 69.103317][ T4829] loop3: detected capacity change from 0 to 1024 [ 69.123911][ T4829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.153306][ T4833] loop1: detected capacity change from 0 to 512 [ 69.157982][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.190776][ T4833] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.190801][ T4833] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 69.280888][ T4833] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 69.282449][ T4833] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 69.283048][ T4833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.552228][ T4847] xt_NFQUEUE: number of total queues is 0 [ 69.726230][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.012963][ T4855] loop4: detected capacity change from 0 to 256 [ 70.062954][ T4855] FAT-fs (loop4): bogus number of FAT sectors [ 70.069190][ T4855] FAT-fs (loop4): Can't find a valid FAT filesystem [ 70.313876][ T4868] loop3: detected capacity change from 0 to 1024 [ 70.398605][ T4868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.567041][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.681897][ T4880] loop1: detected capacity change from 0 to 256 [ 71.361280][ T4884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.375630][ T4880] FAT-fs (loop1): Directory bread(block 64) failed [ 71.382421][ T4880] FAT-fs (loop1): Directory bread(block 65) failed [ 71.389273][ T4880] FAT-fs (loop1): Directory bread(block 66) failed [ 71.395954][ T4880] FAT-fs (loop1): Directory bread(block 67) failed [ 71.402582][ T4880] FAT-fs (loop1): Directory bread(block 68) failed [ 71.409089][ T4880] FAT-fs (loop1): Directory bread(block 69) failed [ 71.415776][ T4880] FAT-fs (loop1): Directory bread(block 70) failed [ 71.422383][ T4880] FAT-fs (loop1): Directory bread(block 71) failed [ 71.429079][ T4880] FAT-fs (loop1): Directory bread(block 72) failed [ 71.435639][ T4880] FAT-fs (loop1): Directory bread(block 73) failed [ 71.457798][ T4880] bio_check_eod: 2 callbacks suppressed [ 71.457825][ T4880] syz.1.439: attempt to access beyond end of device [ 71.457825][ T4880] loop1: rw=8912896, sector=1160, nr_sectors = 4 limit=256 [ 71.477437][ T4880] syz.1.439: attempt to access beyond end of device [ 71.477437][ T4880] loop1: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 71.611234][ T4885] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 72.296413][ T4901] netlink: 112 bytes leftover after parsing attributes in process `syz.2.458'. [ 72.448356][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 72.448373][ T28] audit: type=1400 audit(1771283109.484:696): avc: denied { create } for pid=4907 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.501587][ T4908] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 72.510989][ T4908] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.539096][ T28] audit: type=1400 audit(1771283109.484:697): avc: denied { connect } for pid=4907 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.604256][ T28] audit: type=1400 audit(1771283109.534:698): avc: denied { bind } for pid=4899 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.661404][ T28] audit: type=1400 audit(1771283109.534:699): avc: denied { append } for pid=4907 comm="syz.3.461" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.696251][ T4918] netlink: 'syz.4.465': attribute type 8 has an invalid length. [ 72.727154][ T28] audit: type=1400 audit(1771283109.574:700): avc: denied { write } for pid=4912 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.731271][ T4921] loop3: detected capacity change from 0 to 512 [ 72.762501][ T28] audit: type=1400 audit(1771283109.764:701): avc: denied { mount } for pid=4920 comm="syz.3.466" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 72.787010][ T4921] EXT4-fs (loop3): blocks per group (8192) and clusters per group (2304) inconsistent [ 72.813324][ T4929] loop1: detected capacity change from 0 to 512 [ 72.843238][ T28] audit: type=1400 audit(1771283109.824:702): avc: denied { mounton } for pid=4920 comm="syz.3.466" path="/file1" dev="bpf" ino=9216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 72.845456][ T4929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.865906][ T28] audit: type=1400 audit(1771283109.844:703): avc: denied { setopt } for pid=4928 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.897872][ T28] audit: type=1400 audit(1771283109.844:704): avc: denied { write } for pid=4928 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.922419][ T4929] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.937554][ T4921] loop3: detected capacity change from 0 to 128 [ 72.938732][ T28] audit: type=1400 audit(1771283109.974:705): avc: denied { mounton } for pid=4928 comm="syz.1.469" path="/90/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.979510][ T4921] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 73.009339][ T4921] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.042749][ T4921] ext2 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.085864][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.142961][ T4921] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.282423][ T4943] vhci_hcd vhci_hcd.0: invalid port number 133 [ 73.301138][ T4943] vhci_hcd vhci_hcd.0: default hub control req: 1f05 v01ff i0085 l0 [ 73.344827][ T4943] loop3: detected capacity change from 0 to 512 [ 73.355008][ T4943] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 73.375674][ T4943] EXT4-fs (loop3): orphan cleanup on readonly fs [ 73.402443][ T4943] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 73.432833][ T4900] syz.2.458 (4900) used greatest stack depth: 7256 bytes left [ 73.462605][ T4943] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 73.506322][ T4955] loop4: detected capacity change from 0 to 512 [ 73.515684][ T4943] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.474: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 73.562330][ T4955] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.581595][ T4943] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 73.582244][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 73.597904][ C0] EXT4-fs (loop3): last error at time 1771283110: ext4_ext_check_inode:521: inode 13 [ 73.607643][ T4943] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.474: couldn't read orphan inode 13 (err -117) [ 73.620555][ T4943] loop3: lost filesystem error report for type 5 error -117 [ 73.623329][ T4943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.677103][ T4955] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #11: comm syz.4.481: corrupted in-inode xattr: invalid ea_ino [ 73.729396][ T4955] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.729637][ T4955] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.481: couldn't read orphan inode 11 (err -117) [ 73.738943][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 73.738957][ C1] EXT4-fs (loop4): initial error at time 1771283110: ext4_iget_extra_inode:5025: inode 11 [ 73.738985][ C1] EXT4-fs (loop4): last error at time 1771283110: ext4_iget_extra_inode:5025: inode 11 [ 73.777055][ T4955] loop4: lost filesystem error report for type 5 error -117 [ 73.782766][ T4955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.868268][ T4955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.481'. [ 73.884197][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 73.894301][ T4984] syzkaller0: entered promiscuous mode [ 73.899852][ T4984] syzkaller0: entered allmulticast mode [ 73.947298][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.045030][ T4985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'. [ 74.182818][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.251477][ T4991] netlink: 44 bytes leftover after parsing attributes in process `syz.4.489'. [ 74.282939][ T4991] netlink: 7 bytes leftover after parsing attributes in process `syz.4.489'. [ 74.308810][ T4992] netlink: 'syz.3.491': attribute type 8 has an invalid length. [ 74.567633][ T5014] bond1: Removing last ns target with arp_interval on [ 74.630157][ T5019] syzkaller0: entered promiscuous mode [ 74.637281][ T5019] syzkaller0: entered allmulticast mode [ 74.761927][ T5027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 74.770830][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 74.779870][ T5027] netlink: 'syz.0.504': attribute type 13 has an invalid length. [ 74.787678][ T5027] netlink: 'syz.0.504': attribute type 12 has an invalid length. [ 74.818368][ T5030] bpf: Bad value for 'gid' [ 74.843930][ T5031] loop4: detected capacity change from 0 to 256 [ 74.875367][ T5031] FAT-fs (loop4): Directory bread(block 64) failed [ 74.882406][ T5031] FAT-fs (loop4): Directory bread(block 65) failed [ 74.889032][ T5031] FAT-fs (loop4): Directory bread(block 66) failed [ 74.895662][ T5031] FAT-fs (loop4): Directory bread(block 67) failed [ 74.902287][ T5031] FAT-fs (loop4): Directory bread(block 68) failed [ 74.908905][ T5031] FAT-fs (loop4): Directory bread(block 69) failed [ 74.915505][ T5031] FAT-fs (loop4): Directory bread(block 70) failed [ 74.922098][ T5031] FAT-fs (loop4): Directory bread(block 71) failed [ 74.928814][ T5031] FAT-fs (loop4): Directory bread(block 72) failed [ 74.935781][ T5031] FAT-fs (loop4): Directory bread(block 73) failed [ 74.958674][ T5031] syz.4.502: attempt to access beyond end of device [ 74.958674][ T5031] loop4: rw=8912896, sector=1160, nr_sectors = 4 limit=256 [ 74.972753][ T5031] syz.4.502: attempt to access beyond end of device [ 74.972753][ T5031] loop4: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 76.642574][ T5040] xt_NFQUEUE: number of total queues is 0 [ 77.064859][ T5055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.095307][ T5057] loop4: detected capacity change from 0 to 512 [ 78.399116][ T5057] EXT4-fs (loop4): blocks per group (8192) and clusters per group (2304) inconsistent [ 78.422063][ T5064] netlink: 14 bytes leftover after parsing attributes in process `syz.2.517'. [ 78.472472][ T5064] hsr0: entered promiscuous mode [ 78.486946][ T5064] macsec1: entered allmulticast mode [ 78.503758][ T5064] hsr0: entered allmulticast mode [ 78.511022][ T5064] hsr_slave_0: entered allmulticast mode [ 78.517182][ T5064] hsr_slave_1: entered allmulticast mode [ 78.524993][ T5064] hsr0: left allmulticast mode [ 78.529888][ T5064] hsr_slave_0: left allmulticast mode [ 78.535803][ T5064] hsr_slave_1: left allmulticast mode [ 78.553651][ T5068] netlink: 'syz.3.518': attribute type 8 has an invalid length. [ 78.601002][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 78.601017][ T28] audit: type=1400 audit(1771283115.634:733): avc: denied { shutdown } for pid=5073 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.629724][ T5074] netlink: 'syz.1.520': attribute type 10 has an invalid length. [ 78.637908][ T5074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.520'. [ 78.647347][ T5074] dummy0: entered promiscuous mode [ 78.653738][ T5074] dummy0: entered allmulticast mode [ 78.659546][ T5074] bridge0: port 3(dummy0) entered blocking state [ 78.666060][ T5074] bridge0: port 3(dummy0) entered disabled state [ 78.673356][ T5074] bridge0: port 3(dummy0) entered blocking state [ 78.679795][ T5074] bridge0: port 3(dummy0) entered forwarding state [ 78.692152][ T5057] loop4: detected capacity change from 0 to 128 [ 78.712405][ T5057] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 78.777610][ T5057] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.790635][ T5057] ext2 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.823597][ T5057] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.022338][ T28] audit: type=1400 audit(1771283116.054:734): avc: denied { create } for pid=5086 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 79.050280][ T5087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 79.060155][ T5087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.524'. [ 79.077031][ T28] audit: type=1400 audit(1771283116.084:735): avc: denied { read } for pid=5086 comm="syz.1.524" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.105600][ T28] audit: type=1400 audit(1771283116.084:736): avc: denied { open } for pid=5086 comm="syz.1.524" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.130424][ T28] audit: type=1400 audit(1771283116.144:737): avc: denied { write } for pid=5086 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.243628][ T5090] syzkaller0: entered promiscuous mode [ 79.250130][ T5090] syzkaller0: entered allmulticast mode [ 79.352035][ T5092] loop3: detected capacity change from 0 to 1024 [ 79.494879][ T5092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.631399][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.918462][ T28] audit: type=1400 audit(1771283116.954:738): avc: denied { create } for pid=5103 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 80.694067][ T5106] loop3: detected capacity change from 0 to 164 [ 80.723535][ T5106] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 80.782481][ T28] audit: type=1400 audit(1771283117.734:739): avc: denied { ioctl } for pid=5103 comm="syz.2.531" path="socket:[10760]" dev="sockfs" ino=10760 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 80.826599][ T28] audit: type=1400 audit(1771283117.744:740): avc: denied { append } for pid=5103 comm="syz.2.531" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.850339][ T28] audit: type=1400 audit(1771283117.754:741): avc: denied { watch watch_reads } for pid=5103 comm="syz.2.531" path="/proc/285" dev="proc" ino=10756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 80.903037][ T28] audit: type=1400 audit(1771283117.754:742): avc: denied { mount } for pid=5101 comm="syz.3.530" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 81.648923][ T5122] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 81.656729][ T5122] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.831169][ T5126] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 81.868093][ T5125] netlink: 44 bytes leftover after parsing attributes in process `syz.4.535'. [ 81.879322][ T5130] syzkaller0: entered promiscuous mode [ 81.885090][ T5130] syzkaller0: entered allmulticast mode [ 81.897281][ T5133] loop1: detected capacity change from 0 to 512 [ 81.904622][ T5125] netlink: 7 bytes leftover after parsing attributes in process `syz.4.535'. [ 81.922285][ T5133] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.943238][ T5136] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 81.958677][ T5126] veth7: entered promiscuous mode [ 81.965239][ T5126] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 81.975091][ T5126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.534'. [ 81.984674][ T5126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.017251][ T5142] loop3: detected capacity change from 0 to 512 [ 82.058067][ T57] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 82.078852][ T5133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.092977][ T5133] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.111314][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 82.123273][ T5142] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 82.140893][ T5142] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.141038][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.148197][ T5142] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.542: Failed to acquire dquot type 1 [ 82.167689][ T5142] loop3: lost filesystem error report for type 5 error -5 [ 82.168347][ T5142] EXT4-fs (loop3): Remounting filesystem read-only [ 82.175505][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 82.175541][ C1] EXT4-fs (loop3): initial error at time 1771283119: ext4_acquire_dquot:7003 [ 82.175587][ C1] EXT4-fs (loop3): last error at time 1771283119: ext4_acquire_dquot:7003 [ 82.182229][ T2207] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 82.188929][ T5142] EXT4-fs (loop3): 1 truncate cleaned up [ 82.223235][ T5142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.246351][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.546818][ T5170] loop3: detected capacity change from 0 to 256 [ 82.587959][ T5170] FAT-fs (loop3): Directory bread(block 64) failed [ 82.594570][ T5170] FAT-fs (loop3): Directory bread(block 65) failed [ 82.601267][ T5170] FAT-fs (loop3): Directory bread(block 66) failed [ 82.607844][ T5170] FAT-fs (loop3): Directory bread(block 67) failed [ 82.614468][ T5170] FAT-fs (loop3): Directory bread(block 68) failed [ 82.621089][ T5170] FAT-fs (loop3): Directory bread(block 69) failed [ 82.627657][ T5170] FAT-fs (loop3): Directory bread(block 70) failed [ 82.634351][ T5170] FAT-fs (loop3): Directory bread(block 71) failed [ 82.640954][ T5170] FAT-fs (loop3): Directory bread(block 72) failed [ 82.647595][ T5170] FAT-fs (loop3): Directory bread(block 73) failed [ 82.927445][ T5176] loop4: detected capacity change from 0 to 1024 [ 83.054834][ T5176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.322692][ T5188] loop1: detected capacity change from 0 to 1024 [ 83.403025][ T5192] netlink: 104 bytes leftover after parsing attributes in process `syz.0.552'. [ 83.423927][ T5188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.462710][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.522437][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.673950][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 84.126525][ T5217] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.244334][ T5232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.567'. [ 84.263095][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 84.263111][ T28] audit: type=1400 audit(1771283121.304:746): avc: denied { setopt } for pid=5230 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.311872][ T5235] loop3: detected capacity change from 0 to 512 [ 84.318619][ T28] audit: type=1400 audit(1771283121.304:747): avc: denied { bind } for pid=5230 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.339467][ T5235] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 84.339914][ T28] audit: type=1400 audit(1771283121.304:748): avc: denied { name_bind } for pid=5230 comm="syz.2.568" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 84.373709][ T28] audit: type=1400 audit(1771283121.304:749): avc: denied { node_bind } for pid=5230 comm="syz.2.568" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 84.399029][ T28] audit: type=1400 audit(1771283121.334:750): avc: denied { execute } for pid=5229 comm="syz.1.567" path="/117/file0" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.403227][ T5235] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 84.462041][ T28] audit: type=1400 audit(1771283121.474:751): avc: denied { create } for pid=5229 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 84.472392][ T5235] EXT4-fs (loop3): orphan cleanup on readonly fs [ 84.492385][ T5235] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.569: bad orphan inode 267 [ 84.512493][ T5235] loop3: lost filesystem error report for type 5 error -117 [ 84.512676][ T5235] EXT4-fs (loop3): Remounting filesystem read-only [ 84.526624][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 84.526639][ C0] EXT4-fs (loop3): initial error at time 1771283121: ext4_orphan_get:1417 [ 84.526659][ C0] EXT4-fs (loop3): last error at time 1771283121: ext4_orphan_get:1417 [ 84.586788][ T5246] loop4: detected capacity change from 0 to 1024 [ 84.615474][ T5235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 84.655324][ T5235] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.569: dx entry: limit 0 != root limit 125 [ 84.663079][ T5246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.667453][ T5235] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.569: Corrupt directory, running e2fsck is recommended [ 84.687523][ T5246] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.727093][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 84.736221][ T28] audit: type=1400 audit(1771283121.764:752): avc: denied { bind } for pid=5252 comm="syz.0.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.756027][ T28] audit: type=1400 audit(1771283121.764:753): avc: denied { name_bind } for pid=5252 comm="syz.0.573" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 84.777320][ T28] audit: type=1400 audit(1771283121.764:754): avc: denied { node_bind } for pid=5252 comm="syz.0.573" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 84.800495][ T28] audit: type=1400 audit(1771283121.764:755): avc: denied { connect } for pid=5252 comm="syz.0.573" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.825116][ T5246] syz.4.571 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 84.856733][ T5257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.573'. [ 84.859438][ T5259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.916613][ T57] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 84.936247][ T57] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 84.937100][ T5264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'. [ 84.958089][ T57] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.958089][ T57] [ 84.968944][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.979765][ T5264] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.047262][ T5264] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.085823][ T5264] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.146563][ T5264] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.175592][ T5287] loop4: detected capacity change from 0 to 1024 [ 85.207810][ T5287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.251712][ T30] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.270914][ T2207] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.277569][ T64] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.286091][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.292740][ T64] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.305184][ T5285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.586'. [ 85.314489][ T5285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.586'. [ 85.325853][ T64] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.418047][ T5295] loop3: detected capacity change from 0 to 512 [ 85.442270][ T5297] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 85.450162][ T5297] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.458139][ T5295] EXT4-fs: Ignoring removed bh option [ 85.465092][ T5295] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 85.477153][ T5295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 85.485606][ T5295] System zones: 1-12 [ 85.489773][ T5295] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.496699][ T5295] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.589: bad orphan inode 267 [ 85.507030][ T5295] loop3: lost filesystem error report for type 5 error -117 [ 85.512233][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 85.526182][ C0] EXT4-fs (loop3): initial error at time 1771283122: ext4_orphan_get:1417 [ 85.534791][ C0] EXT4-fs (loop3): last error at time 1771283122: ext4_orphan_get:1417 [ 85.554417][ T5295] EXT4-fs (loop3): Remounting filesystem read-only [ 85.561574][ T5295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 85.595563][ T5295] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.589: error -117 reading directory block [ 85.609072][ T5295] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.589: error -117 reading directory block [ 85.622841][ T5295] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.589: error -117 reading directory block [ 85.636037][ T5295] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.589: error -117 reading directory block [ 85.650442][ T5295] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.589: error -117 reading directory block [ 86.037099][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'. [ 86.099124][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 86.182014][ T5317] syzkaller0: entered promiscuous mode [ 86.189381][ T5317] syzkaller0: entered allmulticast mode [ 86.198373][ T5319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.236806][ T5321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.250687][ T5321] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 86.259743][ T5321] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 86.287184][ T5324] veth0: entered promiscuous mode [ 86.293156][ T5323] veth0: left promiscuous mode [ 86.365905][ T2207] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 86.376737][ T2207] bond1: (slave macvlan2): link status up again after 0 ms [ 86.384587][ T2207] bond1: (slave macvlan2): failed to get link speed/duplex [ 86.414225][ T5329] loop1: detected capacity change from 0 to 128 [ 86.482263][ T40] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 86.494997][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 86.587593][ T5345] bridge_slave_0: left allmulticast mode [ 86.594767][ T5345] bridge_slave_0: left promiscuous mode [ 86.601421][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.643577][ T5345] bridge_slave_1: left allmulticast mode [ 86.712808][ T5345] bridge_slave_1: left promiscuous mode [ 86.718934][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.729075][ T5345] bond0: (slave bond_slave_0): Releasing backup interface [ 86.738167][ T5345] bond0: (slave bond_slave_1): Releasing backup interface [ 86.751438][ T5345] team0: Port device team_slave_0 removed [ 86.758392][ T5345] team0: Port device team_slave_1 removed [ 86.764624][ T5345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.772900][ T5345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.780996][ T5345] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.798575][ T5344] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.842276][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 86.939987][ T5340] ================================================================== [ 86.948374][ T5340] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 86.957439][ T5340] [ 86.959956][ T5340] write to 0xffff88811eaca5e8 of 8 bytes by task 5329 on cpu 1: [ 86.967783][ T5340] filemap_splice_read+0x523/0x780 [ 86.973351][ T5340] splice_direct_to_actor+0x26e/0x670 [ 86.979287][ T5340] do_splice_direct+0x119/0x1a0 [ 86.984360][ T5340] do_sendfile+0x382/0x650 [ 86.988802][ T5340] __x64_sys_sendfile64+0x105/0x150 [ 86.994016][ T5340] x64_sys_call+0x2dc4/0x3020 [ 86.998792][ T5340] do_syscall_64+0x12c/0x370 [ 87.003416][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.009312][ T5340] [ 87.011988][ T5340] write to 0xffff88811eaca5e8 of 8 bytes by task 5340 on cpu 0: [ 87.019711][ T5340] filemap_splice_read+0x523/0x780 [ 87.024833][ T5340] splice_direct_to_actor+0x26e/0x670 [ 87.030246][ T5340] do_splice_direct+0x119/0x1a0 [ 87.035125][ T5340] do_sendfile+0x382/0x650 [ 87.039735][ T5340] __x64_sys_sendfile64+0x105/0x150 [ 87.044936][ T5340] x64_sys_call+0x2dc4/0x3020 [ 87.049711][ T5340] do_syscall_64+0x12c/0x370 [ 87.054319][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.060317][ T5340] [ 87.062634][ T5340] value changed: 0x0000000000000626 -> 0x0000000000000627 [ 87.069740][ T5340] [ 87.072066][ T5340] Reported by Kernel Concurrency Sanitizer on: [ 87.078852][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.1.603 Not tainted syzkaller #0 PREEMPT(full) [ 87.088447][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.099043][ T5340] ================================================================== [ 87.107749][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 87.222747][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 87.302271][ T3600] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.342572][ T2207] bond1: (slave macvlan2): failed to get link speed/duplex [ 87.452297][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 87.462258][ T3939] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 87.462258][ T3600] Bluetooth: hci1: command 0x1003 tx timeout [ 87.502362][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.562317][ T2207] bond1: (slave macvlan2): failed to get link speed/duplex [ 87.672711][ T2207] bond1: (slave macvlan2): failed to get link speed/duplex [ 87.782376][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 87.902336][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 88.012274][ T2207] bond1: (slave macvlan2): failed to get link speed/duplex [ 88.122380][ T2207] bond1: (slave macvlan2): failed to get link speed/duplex [ 92.122582][ T2207] net_ratelimit: 35 callbacks suppressed [ 92.122594][ T2207] bond1: (slave macvlan2): failed to get link speed/duplex [ 92.242299][ T2207] bond1: (slave macvlan2): failed to get link speed/duplex [ 92.352302][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 92.462279][ T2207] bond1: (slave macvlan2): failed to get link speed/duplex [ 92.572312][ T2207] bond1: (slave macvlan2): failed to get link speed/duplex [ 92.682319][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 92.792345][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 92.902260][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 93.012259][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 93.122294][ T57] bond1: (slave macvlan2): failed to get link speed/duplex