last executing test programs: 1m18.158259166s ago: executing program 0 (id=494): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1m17.979985312s ago: executing program 0 (id=499): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b85, 0x2, @perf_bp={0x0}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "23000040121d00"}, 0x28) writev(r3, &(0x7f00000009c0)=[{&(0x7f00000008c0)='X', 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", '\a\x00', "bb100000e9ffff00"}, 0x28) read(r3, 0x0, 0x78) close_range(r2, 0xffffffffffffffff, 0x0) 1m17.750637103s ago: executing program 0 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1m16.812807647s ago: executing program 0 (id=506): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 1m16.093327271s ago: executing program 0 (id=513): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000200)=""/60, 0x3c) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) getdents64(r2, 0xfffffffffffffffe, 0x29) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m15.65664844s ago: executing program 0 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xffffd000) tee(r2, r1, 0x80000001, 0x0) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) 1m15.585888336s ago: executing program 32 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xffffd000) tee(r2, r1, 0x80000001, 0x0) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) 1m7.827078929s ago: executing program 2 (id=567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0xf}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 1m7.722341409s ago: executing program 2 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES32], 0x20}}, 0x8080) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r4, r5, 0x2f}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1m7.540748365s ago: executing program 2 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(r0, 0x6, &(0x7f00000000c0)={0x6, 0x6}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m6.246431071s ago: executing program 2 (id=578): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 1m5.128019421s ago: executing program 2 (id=583): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) socket$caif_stream(0x25, 0x1, 0x4) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x0, 0x80, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x1, 0x1ff, 0x7fffffff}, 0x0, 0x0) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) 1m4.708693278s ago: executing program 2 (id=588): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 1m4.708403988s ago: executing program 33 (id=588): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 3.372089739s ago: executing program 5 (id=984): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000001000007000000890b040a0101027f00000100000000001c00"], 0x40}, 0xfffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005f1affd5020000000900010073797a3000000000080002c0000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1914}}, 0x4048010) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x9) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000f00)={[{@mb_optimize_scan}]}, 0x0, 0x24c, &(0x7f0000000f40)="$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") ptrace$pokeuser(0x6, r2, 0x358, 0x3) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000003c0)={{0x3, 0x9}, 0x100, './file0\x00'}) socket$isdn(0x22, 0x3, 0x25) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x60008801}, 0x8a4) 3.336739492s ago: executing program 3 (id=986): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000060000000b00000000000000", @ANYRESHEX, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af"], 0x6) 3.236648811s ago: executing program 5 (id=988): unshare(0x22020600) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r1, 0x407, 0x176) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r3 = socket$kcm(0x21, 0x2, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000002c0)='\x02;\xe5\b\x00\x00\x9c\x00\xe4c\xbf\x00\x00\x00\x00PbS\xf2\"j\x88\xe7\xe1\x04\xd8\x92yJ\xba\xe0\xaf(\xda}\xb6p\xcb\xbd\f&\xb3]\t\x81\xd3\x0f\x18\xc9X\xba:\x1f\x94!\x8f\xd6F\xbar\xa8\xb8\xfc\x92\xc0\xfb\xdbd*f\x9c\ap\xd6\x1c,\x99\x8fWn\x16\xb9\x1el\xf4\xc8\x16\xc3\x05\x01\x9c\xa8\xd2\xe7J\xd0\xa5\xa8\xf4\xc0DL\x85ju\xe6\xdc\t\x15b\x12\xda\x83\xc5\xafQ\xed\x11\xda\x03\x05K|~B\xfe\xb6U\xae\xb1J\xc8\xe6\"t\x11N\x7f=\x9e\xbd\xd1\x8d\x90I\xbeb\xf6\x0f\xe8\xf4\xa8\\`0\x15[W\xd6\x95\f\x84\xe94]\xa5\xad\xb3\xd0\x80[\x92_\xca^8\x80\xa8\xd1\x9d\xe0Zu\x9f\xeb\xb7\xceM ;`37+P\xbc\xcafTT\xf7\x0f\xf1\xa7c<\x87\xf6\nI\x06\xdc\xb7\xf8\x12n)\x8df\xb3\xa8l\x92\xdcz]\x1c/\xa5/\x1f') sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty, 0xa7ff}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 3.215876363s ago: executing program 3 (id=991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000070a01040000000000000080020000000c000340"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 3.102250793s ago: executing program 3 (id=994): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, 0x0, 0x5) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, 0x0, 0x800) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) io_setup(0x1, 0x0) io_pgetevents(0x0, 0xe, 0x0, &(0x7f0000000680), &(0x7f0000000100), 0x0) 3.003842422s ago: executing program 1 (id=995): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013ffffefb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat(0xffffffffffffff9c, 0x0, 0x181243, 0x1bd) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) 2.91272991s ago: executing program 3 (id=996): unshare(0x22020600) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x80800) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176) 2.878408623s ago: executing program 3 (id=997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x2000000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7}}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.844420836s ago: executing program 1 (id=998): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="99800300000700003472657461700000002000028014000600fe80000000000000000000000000003308000500003000"/80], 0x68}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x6a040000) 2.593497559s ago: executing program 5 (id=1001): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = msgget$private(0x0, 0x286) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0xb4020003) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) msgsnd(r0, 0x0, 0x0, 0x8fa2496c381b7ad5) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, 0xee01, 0x0, 0x3, 0xff}, 0x0, 0x0, 0x5, 0x4, 0x3, 0x45, 0x0, 0x8000, 0x7, 0x6}) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x800000ad) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) 2.226201432s ago: executing program 6 (id=1004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000070a01040000000000000080020000000c000340"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 2.194040234s ago: executing program 6 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed"], 0x208}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0), 0x0, 0x2002, 0x0) 1.788066191s ago: executing program 3 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0x0) io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) 1.540665513s ago: executing program 5 (id=1007): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1208002, &(0x7f0000000780), 0x1, 0x5de, &(0x7f0000001840)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000000000002b0, 0x401eb94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMSET(r4, 0x5418, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 1.390536296s ago: executing program 4 (id=1008): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013ffffefb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat(0xffffffffffffff9c, 0x0, 0x181243, 0x1bd) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) socket(0x10, 0x803, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) 1.390170786s ago: executing program 6 (id=1009): unshare(0x22020600) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r1, 0x407, 0x176) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r3 = socket$kcm(0x21, 0x2, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000002c0)='\x02;\xe5\b\x00\x00\x9c\x00\xe4c\xbf\x00\x00\x00\x00PbS\xf2\"j\x88\xe7\xe1\x04\xd8\x92yJ\xba\xe0\xaf(\xda}\xb6p\xcb\xbd\f&\xb3]\t\x81\xd3\x0f\x18\xc9X\xba:\x1f\x94!\x8f\xd6F\xbar\xa8\xb8\xfc\x92\xc0\xfb\xdbd*f\x9c\ap\xd6\x1c,\x99\x8fWn\x16\xb9\x1el\xf4\xc8\x16\xc3\x05\x01\x9c\xa8\xd2\xe7J\xd0\xa5\xa8\xf4\xc0DL\x85ju\xe6\xdc\t\x15b\x12\xda\x83\xc5\xafQ\xed\x11\xda\x03\x05K|~B\xfe\xb6U\xae\xb1J\xc8\xe6\"t\x11N\x7f=\x9e\xbd\xd1\x8d\x90I\xbeb\xf6\x0f\xe8\xf4\xa8\\`0\x15[W\xd6\x95\f\x84\xe94]\xa5\xad\xb3\xd0\x80[\x92_\xca^8\x80\xa8\xd1\x9d\xe0Zu\x9f\xeb\xb7\xceM ;`37+P\xbc\xcafTT\xf7\x0f\xf1\xa7c<\x87\xf6\nI\x06\xdc\xb7\xf8\x12n)\x8df\xb3\xa8l\x92\xdcz]\x1c/\xa5/\x1f') sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty, 0xa7ff}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 1.309401244s ago: executing program 1 (id=1010): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syz_emit_ethernet(0xb6, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x80, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [{0x4, 0xb, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b7"}]}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000080)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x12}, @fda={0x66646185, 0x3, 0x2, 0x24}, @fda={0x66646185, 0xa, 0x1, 0x11}}, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) read(r0, 0x0, 0x0) 1.076557144s ago: executing program 1 (id=1011): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r5, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") 1.076421954s ago: executing program 4 (id=1012): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd25, 0x35dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c085}, 0x4080080) 1.076245124s ago: executing program 4 (id=1013): unshare(0x22020600) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r1, 0x407, 0x176) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r3 = socket$kcm(0x21, 0x2, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000002c0)='\x02;\xe5\b\x00\x00\x9c\x00\xe4c\xbf\x00\x00\x00\x00PbS\xf2\"j\x88\xe7\xe1\x04\xd8\x92yJ\xba\xe0\xaf(\xda}\xb6p\xcb\xbd\f&\xb3]\t\x81\xd3\x0f\x18\xc9X\xba:\x1f\x94!\x8f\xd6F\xbar\xa8\xb8\xfc\x92\xc0\xfb\xdbd*f\x9c\ap\xd6\x1c,\x99\x8fWn\x16\xb9\x1el\xf4\xc8\x16\xc3\x05\x01\x9c\xa8\xd2\xe7J\xd0\xa5\xa8\xf4\xc0DL\x85ju\xe6\xdc\t\x15b\x12\xda\x83\xc5\xafQ\xed\x11\xda\x03\x05K|~B\xfe\xb6U\xae\xb1J\xc8\xe6\"t\x11N\x7f=\x9e\xbd\xd1\x8d\x90I\xbeb\xf6\x0f\xe8\xf4\xa8\\`0\x15[W\xd6\x95\f\x84\xe94]\xa5\xad\xb3\xd0\x80[\x92_\xca^8\x80\xa8\xd1\x9d\xe0Zu\x9f\xeb\xb7\xceM ;`37+P\xbc\xcafTT\xf7\x0f\xf1\xa7c<\x87\xf6\nI\x06\xdc\xb7\xf8\x12n)\x8df\xb3\xa8l\x92\xdcz]\x1c/\xa5/\x1f') sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty, 0xa7ff}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 843.423775ms ago: executing program 6 (id=1014): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013ffffefb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat(0xffffffffffffff9c, 0x0, 0x181243, 0x1bd) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) 715.985297ms ago: executing program 4 (id=1015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000070a01040000000000000080020000000c000340000000000000000409000200"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 665.612861ms ago: executing program 5 (id=1016): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000200)={[{@errors_remount}, {@nolazytime}]}, 0x1, 0x46b, &(0x7f0000000600)="$eJzs3M+PE1UcAPDvtF1Wfm5F/AGiomgk/thlF1QOXjQx8aCJiR7wuC4LQQprYE2EbNzFELyYKAl3Y+LFxL/AEyeinky84t2QEMMF9FQzdFq63XYpbWlZ+vkkw87bvvZ9vzPzOm/eMBvA0NqV/pNEbIqIKxExFhG5+grrK0ta7+b1hZl/ry/MJFEuf/hPkr4tblxfmKlWTbKfGyuFQvpBuXNJFJu0e+r0mWPTpdLsyaw8MX/8s4lTp8+8evT49JHZI7Mnpg4c2L9v8o3Xp17rSZ5pTDd2fDm3c/u7H194f+bghU9++7kSb7l88fLeZXn0xkhELNS2SaMXetvYwG2uW08KAwyEuzIaEYXsaL0SY5E/t6X22li889VAgwPuqXK5XJ5q/fJSGXiAJTHoCIDBqJ7o0+vf6tKnocd94dpblQugNO+b2VJ5pRBnszojDde3vbQrIg4u/fd9ukTDfAoAwL1wKR3/vNJk/FeMeKyu3pZsKUbEwxGxNSIeiYhtEfFoVOo+HhFP3GX7uxrKK8c/uaudZdaedPz3ZnZva/n4r3YXrJjPSptv5T+SHD5amt2bbY89MTKaliebfnoSsZT+/PPbVu3Xj//SJW2/OhbM4rhaGF3+nkPT89NdJ565djZiR6FZ/kkUbmcR2yNiR4dtHH3pp53Lf5Ovrd05/1X04D5T+YeIFyv7fyka8q9KVr8/OfFQlGb3TlSPikaX4vc/zn/Qqv2u8u+BdP9vaHr81/IvJvX3a/MrPmLdndo4/9fXLa9pOj3+1yUfLWv8i+n5+ZOTEeuS91b+vm6Cu1qu1k/z37O7ef/fGre3xJMRkR7ET0XE0xHxTBb7sxHxXETsXiX/X99+/tPO87+30vwX72b/d7CSP3b5l1btt7f/91cLt4Jq5/uv3QC72XYAAACwVuQiYlMkufHaei43Pl75//LbYkOuNHdq/uXDc5+fOFR5RqAYI7nqTNdY3XzoZDY3XC1PZeXFrLwvmze+mF9/qzw+M1c6NOjkYchtbNH/U3+vnOsFHjSe14Lhpf/D8Oq8//vmgLXuDr041684gP5zFofh1az/Lw4gDqD/nP9heNX6/3dtVK573Kvx4U1g7XH+h+Gl/8NQ6ua5/vtiJX6MWL1O0l0To4PJ65tu3l7oQ4SRuz8OgD6uTOUjBhhGod2/ahGny4tdNzrobyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+D8AAP//Gvzn2A==") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x9, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) futimesat(r5, 0x0, &(0x7f0000000080)) connect$pppl2tp(r4, &(0x7f0000019380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e2b, @remote}, 0x2000001}}, 0x2e) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x558, &(0x7f0000000340)="$eJzs3cFvI1cZAPBvnDib3c3WKXCASi0VLdqtYO1NQ9uIQykSglMlRLkvIfFG0TrxKnHaTVSB9y9AQgiQ4AIXLkj8AUhoJS4cEdJKcAapCIRgCxIcSgeNPd4EZ5ykqRNnnd9PmvV7zzPzfc+bGc94nmYCOLeejYjXIuL9NE1fiIhK3l7Kp2h3p2y+dx++vZRNSaTpG39PIsnbstnSNE1767ycLzYdEV/7SsQ3kz0Bp/PX7Z3bi41GfSOv1lprd2qb2zvXV9cWV+or9fX5+bmXF15ZeGnhxlD6eSUiXv3Sn7//nZ99+dVfffatP93867VvZWnN5O/3+nEMk49KF/e/2e16+cJ03wIbxwx2FmX9Kb+XVwo+gyL3TjIhAAAGyo7xPxIRn4qIF6ISE3sOZwEAAIDxkH5hJt5LutfvCkwNaAcAAAAeI6XOGNikVM3HAsxEqVStdsfwfiwulRrNzdZnbjW31pe7Y2Vno1y6tdqo38jHCs9GOcnqc53ybv3Fvvp8RDwZEd+rXOzUq0vNxvKof/wAAACAc+Jy3/n/vyrd8/+DJaeTHAAAADA8s6NOAAAAADhxzv8BAABgrJVHnQAAAABw4r76+uvZlPaef7385vbW7eab15frm7era1tL1aXmxp3qSrO50rln39ph62s0m3c+F+tbd2ut+mardmV75+Zac2u9dXM1pk+lQwAAAMA+T37y/h+SiGh//mJnykyNOingVEw+KvXu6Vmw9f/xie7rO6eUFHAqJo4wzzsXitsdJ8DjbbK/YcC2Dowf4/+Bw57oMXDwzm+7L6UDl/7x5WMlBQAADNXVTxRf/z/4eD7TPnwW4EyzEcP51Xf9P62MKhHg1HWu/x91II+DBRgr5SONAATG2Ye9/n+4NP1ACQEAAEM305mSUjX/eW8mSqVqNeJK57GA5eTWaqN+IyKeiIjfV8oXsvpcZ8nk0HMGAAAAAAAAAAAAAAAAAAAAAAAAAKArTZNIAQAAgLEWUfpL8uvuvfyvVp6f6f99YCr5T+eRwFMR8daP3vjB3cVWa2Mua/9HpfdQr9YP8/YXR/ITBgAAANCnd57eef33qLMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNy8+/Dtpd7UbZk+aPaLw4r7ty9GxGxR/Mk8g+koR8SlfyYxuWe5JCImhhC/fS8iPl4UP8nSehSyKP4wPoT2vaSddhTGj9n8UyiKf3kI8eE8u5/tf17LSv3bXyme7bwWb3+TEf9XP67B+794tP+bGLD9XzlijKce/KI2MP69iKcmi/d/vfjJgPjPHSl6Ob7x9Z2dQe+mP4m42vv+6ezx9kbYLdVaa3dqm9s711fXFlfqK/X1+fm5lxdeWXhp4Ubt1mqjnv9bGOO7T//y/YP6f6nw+y/Jsxnc/+cL1jdRkP9/H9x9+NFepb0//rXnCuL/5qf5HPvjl/I4n97zDXQ1b0/a3fJez/z8d88c1P/l3f6XP8j//7VBK+23b0N5+mh/OgDAidjc3rm92GjUN8a2kB0jnYE0jlOYijORxvgWvp0VHgxrhWmaptk2VfDW/Yg4ynqSGHJPS8X57BYG7gFGvWcCAACGbfegf9SZAAAAAAAAAAAAAAAAAAAAwPl1GndZ64+5ewvkZBi30AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGIr/BQAA//9/ktza") socket$inet6_mptcp(0xa, 0x1, 0x106) 665.202551ms ago: executing program 4 (id=1017): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffbffffffffe, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 620.179145ms ago: executing program 6 (id=1018): unshare(0x22020600) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r1, 0x407, 0x176) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)='\x02;\xe5\b\x00\x00\x9c\x00\xe4c\xbf\x00\x00\x00\x00PbS\xf2\"j\x88\xe7\xe1\x04\xd8\x92yJ\xba\xe0\xaf(\xda}\xb6p\xcb\xbd\f&\xb3]\t\x81\xd3\x0f\x18\xc9X\xba:\x1f\x94!\x8f\xd6F\xbar\xa8\xb8\xfc\x92\xc0\xfb\xdbd*f\x9c\ap\xd6\x1c,\x99\x8fWn\x16\xb9\x1el\xf4\xc8\x16\xc3\x05\x01\x9c\xa8\xd2\xe7J\xd0\xa5\xa8\xf4\xc0DL\x85ju\xe6\xdc\t\x15b\x12\xda\x83\xc5\xafQ\xed\x11\xda\x03\x05K|~B\xfe\xb6U\xae\xb1J\xc8\xe6\"t\x11N\x7f=\x9e\xbd\xd1\x8d\x90I\xbeb\xf6\x0f\xe8\xf4\xa8\\`0\x15[W\xd6\x95\f\x84\xe94]\xa5\xad\xb3\xd0\x80[\x92_\xca^8\x80\xa8\xd1\x9d\xe0Zu\x9f\xeb\xb7\xceM ;`37+P\xbc\xcafTT\xf7\x0f\xf1\xa7c<\x87\xf6\nI\x06\xdc\xb7\xf8\x12n)\x8df\xb3\xa8l\x92\xdcz]\x1c/\xa5/\x1f') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty, 0xa7ff}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 472.898228ms ago: executing program 4 (id=1019): socket(0x29, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x20100) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000600)={{}, 'port0\x00', 0xe4, 0x4, 0xff, 0xff, 0xc, 0x8, 0x7fffffff, 0x0, 0x0, 0xff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt(r1, 0x200000000114, 0x271b, &(0x7f0000032580)=""/102376, &(0x7f0000000100)=0x18fe8) close(0x3) 276.270826ms ago: executing program 1 (id=1020): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) socketpair$nbd(0x1, 0x1, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x10000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r1, 0x30, r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x38}}, 0x0) 204.679722ms ago: executing program 1 (id=1021): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200), 0x0) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = io_uring_setup(0x21dd, &(0x7f0000000340)={0x0, 0x7604, 0x0, 0x2, 0xd5}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}, 0x20) 191.853673ms ago: executing program 5 (id=1022): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013ffffefb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat(0xffffffffffffff9c, 0x0, 0x181243, 0x1bd) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) socket(0x10, 0x803, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) 0s ago: executing program 6 (id=1023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xfffffe64, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x6, 0x40, 0x5, 0x100, 0xfff, 0xffff9efc, 0xffff7f79}}}}]}, 0x58}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): m [ 61.757068][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 61.757092][ C1] EXT4-fs (loop3): initial error at time 1771356500: ext4_validate_block_bitmap:441 [ 61.757119][ C1] EXT4-fs (loop3): last error at time 1771356500: ext4_validate_block_bitmap:441 [ 61.850501][ T4254] loop3: lost filesystem error report for type 5 error -117 [ 61.850743][ T4254] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.261: invalid indirect mapped block 1 (level 1) [ 61.891980][ T4254] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.892301][ T4254] EXT4-fs (loop3): 1 truncate cleaned up [ 61.927677][ T4254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.197925][ T4254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 62.261461][ T4262] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.316774][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.332271][ T4262] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 62.395428][ T4265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.265'. [ 62.448127][ T4270] loop2: detected capacity change from 0 to 512 [ 62.477409][ T4270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.498237][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.505577][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.530208][ T4270] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.559413][ T4268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.570397][ T4268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.622802][ T4268] bond1: left promiscuous mode [ 62.627654][ T4268] bridge1: left promiscuous mode [ 62.634917][ T4271] netlink: 176 bytes leftover after parsing attributes in process `syz.3.264'. [ 62.645414][ T1691] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.654988][ T1691] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.688180][ T1691] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.713272][ T1691] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.775280][ T4278] netlink: 'syz.3.268': attribute type 13 has an invalid length. [ 62.800810][ T4278] gretap0: refused to change device tx_queue_len [ 62.820489][ T4278] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 62.935893][ T4283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 63.023414][ T4283] netlink: 92 bytes leftover after parsing attributes in process `syz.3.271'. [ 63.074220][ T4286] loop1: detected capacity change from 0 to 512 [ 63.133392][ T4286] ------------[ cut here ]------------ [ 63.138896][ T4286] EA inode 11 i_nlink=2 [ 63.138924][ T4286] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.272/4286 [ 63.153844][ T4286] Modules linked in: [ 63.157759][ T4286] CPU: 1 UID: 0 PID: 4286 Comm: syz.1.272 Not tainted syzkaller #0 PREEMPT(full) [ 63.166988][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 63.177083][ T4286] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 63.183727][ T4286] Code: c4 6f 99 ff 4c 8d 2d 9d f9 5d 05 49 8d 7e 40 e8 74 03 b6 ff 49 8b 6e 40 4c 89 e7 e8 a8 fe b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 df 5e dc 03 66 66 66 66 66 66 2e [ 63.203368][ T4286] RSP: 0018:ffffc900012df778 EFLAGS: 00010246 [ 63.209462][ T4286] RAX: ffff888103578a78 RBX: ffff88811b0ec1a8 RCX: ffffffff81bfe0b8 [ 63.217460][ T4286] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dda40 [ 63.225455][ T4286] RBP: 000000000000000b R08: 000188811b0ec15b R09: 0000000000000000 [ 63.233529][ T4286] R10: ffffc900012df6a8 R11: 0001c900012df6a8 R12: ffff88811b0ec158 [ 63.241564][ T4286] R13: ffffffff871dda40 R14: ffff88811b0ec110 R15: 0000000000000001 [ 63.249544][ T4286] FS: 00007fdbdcbde6c0(0000) GS:ffff8882ae9e3000(0000) knlGS:0000000000000000 [ 63.258491][ T4286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.265087][ T4286] CR2: 00007fcba2c55ff0 CR3: 000000011cee6000 CR4: 00000000003506f0 [ 63.273122][ T4286] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.281163][ T4286] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 63.289212][ T4286] Call Trace: [ 63.292514][ T4286] [ 63.295444][ T4286] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 63.301600][ T4286] ? errseq_check+0x2c/0x50 [ 63.306136][ T4286] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 63.311611][ T4286] ? ext4_truncate+0x92b/0xb00 [ 63.316413][ T4286] ext4_evict_inode+0xa1f/0xd60 [ 63.321450][ T4286] ? __pfx_ext4_evict_inode+0x10/0x10 [ 63.326889][ T4286] evict+0x2af/0x510 [ 63.330787][ T4286] ? __dquot_initialize+0x146/0x7c0 [ 63.336080][ T4286] iput+0x41a/0x580 [ 63.340003][ T4286] ext4_process_orphan+0x1a9/0x1c0 [ 63.345198][ T4286] ext4_orphan_cleanup+0x6a8/0xa00 [ 63.350314][ T4286] ext4_fill_super+0x3408/0x37c0 [ 63.355398][ T4286] ? set_blocksize+0x14c/0x270 [ 63.360171][ T4286] ? setup_bdev_super+0x30e/0x370 [ 63.365329][ T4286] ? __pfx_ext4_fill_super+0x10/0x10 [ 63.370636][ T4286] get_tree_bdev_flags+0x291/0x300 [ 63.375779][ T4286] ? __pfx_ext4_fill_super+0x10/0x10 [ 63.381066][ T4286] get_tree_bdev+0x1f/0x30 [ 63.385497][ T4286] ext4_get_tree+0x1c/0x30 [ 63.389956][ T4286] vfs_get_tree+0x57/0x1d0 [ 63.394396][ T4286] do_new_mount+0x288/0x8d0 [ 63.399018][ T4286] path_mount+0x4d0/0xbc0 [ 63.403460][ T4286] __se_sys_mount+0x28c/0x2e0 [ 63.408173][ T4286] __x64_sys_mount+0x67/0x80 [ 63.412782][ T4286] x64_sys_call+0x2d61/0x3020 [ 63.417535][ T4286] do_syscall_64+0x12c/0x370 [ 63.422167][ T4286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.428133][ T4286] RIP: 0033:0x7fdbde1ad8ca [ 63.432631][ T4286] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.452348][ T4286] RSP: 002b:00007fdbdcbdde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.460773][ T4286] RAX: ffffffffffffffda RBX: 00007fdbdcbddee0 RCX: 00007fdbde1ad8ca [ 63.468853][ T4286] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fdbdcbddea0 [ 63.476852][ T4286] RBP: 00002000000009c0 R08: 00007fdbdcbddee0 R09: 0000000000800718 [ 63.484898][ T4286] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 63.492915][ T4286] R13: 00007fdbdcbddea0 R14: 000000000000048d R15: 0000200000000200 [ 63.500905][ T4286] [ 63.503969][ T4286] ---[ end trace 0000000000000000 ]--- [ 63.509618][ T4286] EXT4-fs (loop1): 1 orphan inode deleted [ 63.516021][ T4286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.022117][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.033777][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.375528][ T4302] loop2: detected capacity change from 0 to 512 [ 66.527489][ T4311] bridge_slave_0: left allmulticast mode [ 66.537484][ T4311] bridge_slave_0: left promiscuous mode [ 66.563654][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.609544][ T4311] bridge_slave_1: left allmulticast mode [ 66.627940][ T4311] bridge_slave_1: left promiscuous mode [ 66.638808][ T4302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.661338][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.672373][ T4311] bond0: (slave bond_slave_0): Releasing backup interface [ 66.682617][ T4311] bond0: (slave bond_slave_1): Releasing backup interface [ 66.695486][ T4311] team0: Port device team_slave_0 removed [ 66.704780][ T4311] team0: Port device team_slave_1 removed [ 66.712466][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.719923][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.729226][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.737086][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.747414][ T4311] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 66.766416][ T4314] ip6gre1: entered allmulticast mode [ 66.782642][ T4314] team0: Port device ip6gre1 added [ 66.832452][ T35] syz1: Port: 1 Link DOWN [ 66.889029][ T4302] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.937169][ T28] audit: type=1400 audit(1771356505.539:339): avc: denied { add_name } for pid=4301 comm="syz.2.275" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.998276][ T28] audit: type=1400 audit(1771356505.579:340): avc: denied { read write } for pid=4301 comm="syz.2.275" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.042819][ T35] IPVS: starting estimator thread 0... [ 67.043125][ T28] audit: type=1400 audit(1771356505.579:341): avc: denied { open } for pid=4301 comm="syz.2.275" path="/37/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.083722][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.091242][ T28] audit: type=1400 audit(1771356505.589:342): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 67.113071][ T4319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 67.274048][ T4324] IPVS: using max 2352 ests per chain, 117600 per kthread [ 67.292907][ T28] audit: type=1400 audit(1771356505.899:343): avc: denied { read write } for pid=4331 comm="syz.1.286" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 67.446643][ T4332] ALSA: seq fatal error: cannot create timer (-22) [ 67.595789][ T28] audit: type=1400 audit(1771356505.899:344): avc: denied { open } for pid=4331 comm="syz.1.286" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 67.763843][ T28] audit: type=1400 audit(1771356506.049:345): avc: denied { ioctl } for pid=4331 comm="syz.1.286" path="socket:[8891]" dev="sockfs" ino=8891 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.093770][ T4344] loop3: detected capacity change from 0 to 512 [ 68.144929][ T4344] EXT4-fs (loop3): 1 orphan inode deleted [ 68.154101][ T4344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.456699][ T28] audit: type=1400 audit(1771356507.059:346): avc: denied { append } for pid=4352 comm="syz.0.303" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.492019][ T4353] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 68.515035][ T4353] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.543787][ T4353] vhci_hcd vhci_hcd.4: default hub control req: 000e v0014 i0003 l0 [ 68.579540][ T28] audit: type=1400 audit(1771356507.179:347): avc: denied { sqpoll } for pid=4352 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.779365][ T4359] loop0: detected capacity change from 0 to 512 [ 68.890235][ T4359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.946096][ T4359] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.988960][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.058285][ T4370] loop3: detected capacity change from 0 to 164 [ 69.097707][ T28] audit: type=1400 audit(1771356507.699:348): avc: denied { mount } for pid=4369 comm="syz.3.297" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 69.170007][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.384360][ T4384] loop2: detected capacity change from 0 to 8192 [ 70.157500][ T4414] loop0: detected capacity change from 0 to 128 [ 70.360510][ T4419] loop1: detected capacity change from 0 to 512 [ 70.680189][ T4419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.699268][ T4419] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.920970][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.998855][ T4431] loop3: detected capacity change from 0 to 512 [ 71.238132][ T4437] 9p: Could not find request transport: tcp*por0000000004e22 [ 71.463694][ T4444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 71.760209][ T4451] netlink: 'syz.1.323': attribute type 13 has an invalid length. [ 72.109885][ T4431] syz.3.317 (4431) used greatest stack depth: 9352 bytes left [ 72.398260][ T4460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 72.882161][ T4453] geneve2: entered promiscuous mode [ 72.893145][ T4457] vlan2: entered promiscuous mode [ 72.903509][ T4457] vlan2: entered allmulticast mode [ 72.915855][ T4457] hsr_slave_1: entered allmulticast mode [ 73.517737][ T4469] loop3: detected capacity change from 0 to 128 [ 73.532262][ T4472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 73.578963][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.591434][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.617533][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.639009][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.651176][ T4473] loop2: detected capacity change from 0 to 512 [ 73.753680][ T4473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.792732][ T4473] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.979901][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.146292][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 75.146374][ T28] audit: type=1400 audit(1771356513.749:351): avc: denied { getopt } for pid=4513 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.528214][ T4521] loop1: detected capacity change from 0 to 512 [ 76.079369][ T4533] loop2: detected capacity change from 0 to 128 [ 76.166169][ T4532] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.208084][ T28] audit: type=1400 audit(1771356514.809:352): avc: denied { ioctl } for pid=4531 comm="syz.3.350" path="socket:[12028]" dev="sockfs" ino=12028 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.234830][ T4539] netlink: 180 bytes leftover after parsing attributes in process `syz.1.352'. [ 76.261707][ T4539] netlink: 48 bytes leftover after parsing attributes in process `syz.1.352'. [ 76.462803][ T4548] vlan4: entered promiscuous mode [ 76.467987][ T4548] vlan4: entered allmulticast mode [ 76.474654][ T4548] hsr_slave_1: entered allmulticast mode [ 76.518011][ T4544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 76.611832][ T4551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 77.313342][ T28] audit: type=1400 audit(1771356515.919:353): avc: denied { getopt } for pid=4561 comm="syz.4.360" lport=42293 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 77.357252][ T3393] Process accounting resumed [ 77.363422][ T28] audit: type=1400 audit(1771356515.969:354): avc: denied { ioctl } for pid=4564 comm="syz.0.358" path="socket:[12041]" dev="sockfs" ino=12041 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.451283][ T28] audit: type=1400 audit(1771356516.039:355): avc: denied { cmd } for pid=4567 comm="syz.4.361" path="socket:[12047]" dev="sockfs" ino=12047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.483053][ T4572] loop2: detected capacity change from 0 to 1024 [ 77.521740][ T4572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.566028][ T28] audit: type=1400 audit(1771356516.169:356): avc: denied { setattr } for pid=4571 comm="syz.2.364" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.634030][ T28] audit: type=1400 audit(1771356516.239:357): avc: denied { remove_name } for pid=4571 comm="syz.2.364" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.681218][ T28] audit: type=1400 audit(1771356516.239:358): avc: denied { unlink } for pid=4571 comm="syz.2.364" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.741946][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.782286][ T4593] loop0: detected capacity change from 0 to 128 [ 80.061038][ T4622] tipc: Started in network mode [ 80.075055][ T4622] tipc: Node identity 4, cluster identity 4711 [ 80.168846][ T4622] tipc: Node number set to 4 [ 80.207664][ T28] audit: type=1400 audit(1771356518.809:359): avc: denied { relabelfrom } for pid=4627 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 80.228589][ T28] audit: type=1400 audit(1771356518.809:360): avc: denied { relabelto } for pid=4627 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 80.412734][ T4638] loop1: detected capacity change from 0 to 256 [ 80.437582][ T4638] FAT-fs (loop1): Directory bread(block 64) failed [ 80.444321][ T4638] FAT-fs (loop1): Directory bread(block 65) failed [ 80.450989][ T4638] FAT-fs (loop1): Directory bread(block 66) failed [ 80.457546][ T4638] FAT-fs (loop1): Directory bread(block 67) failed [ 80.464199][ T4638] FAT-fs (loop1): Directory bread(block 68) failed [ 80.470786][ T4638] FAT-fs (loop1): Directory bread(block 69) failed [ 80.477415][ T4638] FAT-fs (loop1): Directory bread(block 70) failed [ 80.484016][ T4638] FAT-fs (loop1): Directory bread(block 71) failed [ 80.490587][ T4638] FAT-fs (loop1): Directory bread(block 72) failed [ 80.497171][ T4638] FAT-fs (loop1): Directory bread(block 73) failed [ 80.561455][ T3378] IPVS: starting estimator thread 0... [ 80.711445][ T4637] IPVS: using max 2352 ests per chain, 117600 per kthread [ 81.079692][ T4642] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.232762][ T4642] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.385642][ T4642] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.884870][ T4642] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.067908][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.172181][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.224316][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.363602][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.967781][ T4676] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 82.983971][ T28] audit: type=1400 audit(1771356521.569:361): avc: denied { mac_admin } for pid=4675 comm="syz.0.391" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.022656][ T28] audit: type=1400 audit(1771356521.619:362): avc: denied { relabelto } for pid=4675 comm="syz.0.391" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 83.052464][ T28] audit: type=1400 audit(1771356521.619:363): avc: denied { associate } for pid=4675 comm="syz.0.391" name="cgroup.procs" dev="cgroup" ino=102 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 83.285244][ T4687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.310770][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 83.319821][ T4687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 83.344786][ T4687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.371916][ T4687] bond1: (slave bond0): making interface the new active one [ 83.380409][ T4687] bond1: (slave bond0): Enslaving as an active interface with an up link [ 83.473168][ T4689] bond1: (slave bond0): Releasing active interface [ 83.535310][ T4689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.875452][ T4699] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.152761][ T4699] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.361532][ T4699] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.432682][ T4710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.403'. [ 84.487589][ T4699] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.608552][ T30] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.679672][ T30] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.706926][ T30] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.715904][ T30] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.990089][ T4736] : renamed from bond_slave_0 [ 86.004061][ T28] audit: type=1326 audit(1771356524.599:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde1ac629 code=0x7ffc0000 [ 86.073890][ T4740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 86.099427][ T4734] loop0: detected capacity change from 0 to 512 [ 86.106174][ T28] audit: type=1326 audit(1771356524.599:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde1ac629 code=0x7ffc0000 [ 86.148055][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.179954][ T28] audit: type=1326 audit(1771356524.599:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde1ac629 code=0x7ffc0000 [ 86.184467][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.263222][ T28] audit: type=1326 audit(1771356524.609:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdbde1ac629 code=0x7ffc0000 [ 86.351246][ T28] audit: type=1326 audit(1771356524.609:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde1ac629 code=0x7ffc0000 [ 86.403153][ T28] audit: type=1326 audit(1771356524.609:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde1ac629 code=0x7ffc0000 [ 86.531458][ T28] audit: type=1326 audit(1771356524.609:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde1ac629 code=0x7ffc0000 [ 86.571223][ T28] audit: type=1326 audit(1771356524.609:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde1ac629 code=0x7ffc0000 [ 86.610193][ T28] audit: type=1326 audit(1771356524.609:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fdbde1ac629 code=0x7ffc0000 [ 86.641616][ T28] audit: type=1326 audit(1771356524.609:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde1ac629 code=0x7ffc0000 [ 86.858097][ T4754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 87.095348][ T4748] loop1: detected capacity change from 0 to 32768 [ 87.160943][ T4760] loop2: detected capacity change from 0 to 512 [ 87.172988][ T4760] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.250073][ T4760] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 87.260145][ T4760] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 87.268528][ T4760] System zones: 0-2, 18-18, 34-35 [ 87.290017][ T4760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.371857][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.653578][ T4779] delete_channel: no stack [ 88.911730][ T4797] loop2: detected capacity change from 0 to 512 [ 89.138964][ T4803] syzkaller0: entered promiscuous mode [ 89.149286][ T4803] syzkaller0: entered allmulticast mode [ 89.466756][ T4810] loop1: detected capacity change from 0 to 2048 [ 89.490674][ T4810] EXT4-fs: Ignoring removed i_version option [ 89.513329][ T4810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.529695][ T4810] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.762337][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.771569][ T4819] loop0: detected capacity change from 0 to 8192 [ 89.774121][ T4824] netlink: 'syz.4.441': attribute type 10 has an invalid length. [ 89.787396][ T4824] netlink: 40 bytes leftover after parsing attributes in process `syz.4.441'. [ 89.805194][ T4824] dummy0: entered promiscuous mode [ 89.814284][ T4824] dummy0: entered allmulticast mode [ 89.820685][ T4824] bridge0: port 3(dummy0) entered blocking state [ 89.827456][ T4824] bridge0: port 3(dummy0) entered disabled state [ 89.920798][ T4833] loop1: detected capacity change from 0 to 512 [ 89.962309][ T4833] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.995440][ T4833] EXT4-fs (loop1): 1 truncate cleaned up [ 90.016819][ T4837] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 90.029132][ T4833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.029960][ T4837] bond2: entered promiscuous mode [ 90.052634][ T4837] bond2: entered allmulticast mode [ 90.057976][ T4837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.075246][ T4837] erspan1: entered allmulticast mode [ 90.085424][ T4837] bond2: (slave erspan1): making interface the new active one [ 90.099437][ T4837] erspan1: entered promiscuous mode [ 90.106120][ T4837] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 90.121003][ T4837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 90.142321][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.156268][ T4837] bond2 (unregistering): (slave erspan1): Releasing active interface [ 90.164872][ T4837] erspan1: left promiscuous mode [ 90.177970][ T4837] bond2 (unregistering): Released all slaves [ 91.014817][ T4854] syzkaller0: entered promiscuous mode [ 91.079994][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 91.080015][ T28] audit: type=1400 audit(1771356529.679:441): avc: denied { write } for pid=4864 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.176827][ T4854] syzkaller0: entered allmulticast mode [ 91.216335][ T4871] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 91.331749][ T4871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 91.356643][ T4874] 8021q: adding VLAN 0 to HW filter on device bond4 [ 91.410712][ T4877] netlink: 'syz.2.455': attribute type 1 has an invalid length. [ 91.418425][ T4877] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.455'. [ 91.729259][ T4874] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 91.811985][ T4874] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 91.839046][ T4886] loop1: detected capacity change from 0 to 512 [ 91.845824][ T4871] veth3: entered promiscuous mode [ 91.853665][ T4886] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 91.864477][ T4871] bond4: (slave veth3): Enslaving as an active interface with a down link [ 91.869078][ T4886] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.458: iget: bad i_size value: 12154757448730 [ 91.893928][ T4886] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 91.901225][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 91.916809][ C0] EXT4-fs (loop1): initial error at time 1771356530: ext4_orphan_get:1391: inode 13 [ 91.921804][ T4882] macvlan2: entered promiscuous mode [ 91.926231][ C0] EXT4-fs (loop1): last error at time 1771356530: ext4_orphan_get:1391: inode 13 [ 91.940831][ T4886] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.458: couldn't read orphan inode 13 (err -117) [ 91.944358][ T4882] macvlan2: entered allmulticast mode [ 91.953054][ T4886] loop1: lost filesystem error report for type 5 error -117 [ 91.968933][ T4886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.991839][ T4882] bond4: entered promiscuous mode [ 92.002281][ T4882] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.022294][ T4882] bond4: left promiscuous mode [ 92.027522][ T28] audit: type=1400 audit(1771356530.629:442): avc: denied { bind } for pid=4884 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.103981][ T28] audit: type=1400 audit(1771356530.629:443): avc: denied { name_bind } for pid=4884 comm="syz.1.458" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 92.125095][ T28] audit: type=1400 audit(1771356530.629:444): avc: denied { node_bind } for pid=4884 comm="syz.1.458" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 92.172458][ T4896] netlink: 'syz.0.463': attribute type 1 has an invalid length. [ 92.180781][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.205093][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 92.214035][ T4896] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 92.225478][ T4896] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 92.241618][ T4902] sctp: [Deprecated]: syz.1.464 (pid 4902) Use of int in maxseg socket option. [ 92.241618][ T4902] Use struct sctp_assoc_value instead [ 92.272136][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 92.290323][ T4906] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 92.323384][ T4896] macvlan2: entered promiscuous mode [ 92.329279][ T4896] macvlan2: entered allmulticast mode [ 92.335770][ T4896] bond2: entered promiscuous mode [ 92.342964][ T4896] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.381562][ T4896] bond2: left promiscuous mode [ 92.408088][ T4927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 93.685604][ T4960] loop2: detected capacity change from 0 to 256 [ 94.080505][ T4960] FAT-fs (loop2): Directory bread(block 64) failed [ 94.087400][ T4960] FAT-fs (loop2): Directory bread(block 65) failed [ 94.094300][ T4960] FAT-fs (loop2): Directory bread(block 66) failed [ 94.101002][ T4960] FAT-fs (loop2): Directory bread(block 67) failed [ 94.107739][ T4960] FAT-fs (loop2): Directory bread(block 68) failed [ 94.114315][ T4960] FAT-fs (loop2): Directory bread(block 69) failed [ 94.120903][ T4960] FAT-fs (loop2): Directory bread(block 70) failed [ 94.127494][ T4960] FAT-fs (loop2): Directory bread(block 71) failed [ 94.134148][ T4960] FAT-fs (loop2): Directory bread(block 72) failed [ 94.140685][ T4960] FAT-fs (loop2): Directory bread(block 73) failed [ 96.261310][ T28] audit: type=1400 audit(1771356534.789:445): avc: denied { write } for pid=4996 comm="syz.2.492" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.300469][ T5001] netlink: 'syz.2.493': attribute type 1 has an invalid length. [ 96.328832][ T5001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.374569][ T5001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.389790][ T5001] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 96.419833][ T5001] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 96.447026][ T5003] gretap1: entered promiscuous mode [ 96.463414][ T5003] bond1: (slave gretap1): making interface the new active one [ 96.482978][ T5003] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 96.512182][ T5004] macvlan2: entered promiscuous mode [ 96.520477][ T5004] macvlan2: entered allmulticast mode [ 96.565279][ T5004] bond1: entered promiscuous mode [ 96.570980][ T5004] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 96.616771][ T5004] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 96.632808][ T5004] bond1: left promiscuous mode [ 96.638931][ T5017] netlink: 'syz.4.498': attribute type 1 has an invalid length. [ 96.649016][ T5016] : renamed from bond_slave_0 (while UP) [ 96.667659][ T5017] 8021q: adding VLAN 0 to HW filter on device bond5 [ 96.702316][ T5017] vlan2: entered promiscuous mode [ 96.707485][ T5017] bond5: entered promiscuous mode [ 96.715001][ T5017] vlan2: entered allmulticast mode [ 96.722076][ T5017] bond5: entered allmulticast mode [ 96.759613][ T5017] bond5: (slave bridge2): making interface the new active one [ 96.767357][ T5017] bridge2: entered promiscuous mode [ 96.773012][ T5017] bridge2: entered allmulticast mode [ 96.779138][ T5017] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 96.806318][ T5026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 96.816369][ T5026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 97.900883][ T5044] loop0: detected capacity change from 0 to 2048 [ 97.912757][ T28] audit: type=1400 audit(1771356536.519:446): avc: denied { read write } for pid=5041 comm="syz.2.505" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.960682][ T28] audit: type=1400 audit(1771356536.519:447): avc: denied { open } for pid=5041 comm="syz.2.505" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.988500][ T5044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.001040][ T28] audit: type=1400 audit(1771356536.519:448): avc: denied { ioctl } for pid=5041 comm="syz.2.505" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 98.077000][ T5050] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 98.091598][ T28] audit: type=1400 audit(1771356536.689:449): avc: denied { mounton } for pid=5043 comm="syz.0.506" path="/102/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.129884][ T5044] loop0: detected capacity change from 2048 to 0 [ 98.154519][ T5055] loop2: detected capacity change from 0 to 128 [ 98.160274][ T5052] syzkaller0: entered promiscuous mode [ 98.161990][ T5059] EXT4-fs error (device loop0): __ext4_find_entry:1615: inode #2: comm syz.0.506: reading directory lblock 0 [ 98.166595][ T5052] syzkaller0: entered allmulticast mode [ 98.209193][ T5059] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 98.218821][ T5059] EXT4-fs (loop0): I/O error while writing superblock [ 98.226589][ T5044] EXT4-fs error (device loop0): ext4_get_inode_loc:4920: inode #18: block 6: comm syz.0.506: unable to read itable block [ 98.239460][ T5044] EXT4-fs (loop0): previous I/O error to superblock detected [ 98.247676][ T5044] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 98.256226][ T5044] EXT4-fs (loop0): I/O error while writing superblock [ 98.263231][ T5044] EXT4-fs error (device loop0): ext4_get_inode_loc:4920: inode #18: block 6: comm syz.0.506: unable to read itable block [ 98.274827][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.276201][ T5062] netlink: 'syz.2.509': attribute type 16 has an invalid length. [ 98.296925][ T5044] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 98.305517][ T5044] EXT4-fs (loop0): I/O error while writing superblock [ 98.312591][ T5062] netlink: 'syz.2.509': attribute type 17 has an invalid length. [ 98.320477][ T5044] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: IO failure [ 98.329510][ T5044] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 98.338174][ T5044] EXT4-fs (loop0): I/O error while writing superblock [ 98.345585][ T5044] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #18: comm syz.0.506: mark_inode_dirty error [ 98.351346][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.358323][ T5044] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 98.372411][ T5044] EXT4-fs (loop0): I/O error while writing superblock [ 98.379518][ T5044] EXT4-fs error (device loop0): ext4_get_inode_loc:4920: inode #18: block 6: comm syz.0.506: unable to read itable block [ 98.392846][ T5044] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 98.409170][ T5044] EXT4-fs (loop0): I/O error while writing superblock [ 98.416156][ T5056] syzkaller0: entered promiscuous mode [ 98.419213][ T5044] EXT4-fs error (device loop0): ext4_get_max_inline_size:121: inode #18: comm syz.0.506: can't get inode location 18 [ 98.421759][ T5056] syzkaller0: entered allmulticast mode [ 98.441176][ T5044] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 98.450221][ T5044] EXT4-fs (loop0): I/O error while writing superblock [ 98.457134][ T5044] EXT4-fs error (device loop0): ext4_get_inode_loc:4920: inode #18: block 6: comm syz.0.506: unable to read itable block [ 98.469942][ T5044] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 98.478228][ T5044] EXT4-fs (loop0): I/O error while writing superblock [ 98.485055][ T5044] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: IO failure [ 98.493849][ T5044] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 98.502214][ T5044] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #18: comm syz.0.506: mark_inode_dirty error [ 98.513490][ T5044] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 98.553209][ T5062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.648757][ T4991] team0: Port device syz_tun removed [ 98.677903][ T3378] IPVS: starting estimator thread 0... [ 98.705563][ T5082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.516'. [ 98.791299][ T5081] IPVS: using max 2256 ests per chain, 112800 per kthread [ 98.791345][ T28] audit: type=1400 audit(1771356537.379:450): avc: denied { write } for pid=5078 comm="syz.3.517" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.875327][ T5085] netlink: 'syz.1.518': attribute type 4 has an invalid length. [ 98.951693][ T5088] netlink: 'syz.1.519': attribute type 1 has an invalid length. [ 98.981169][ T5088] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 98.991973][ T5088] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 99.031445][ T5092] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 99.047115][ T5092] bond1: (slave gretap1): making interface the new active one [ 99.055185][ T5092] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 99.083545][ T70] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.255135][ T70] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.360241][ T70] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.405654][ T5106] 0: reclassify loop, rule prio 0, protocol 700 [ 99.436575][ T70] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.603338][ T28] audit: type=1400 audit(1771356538.209:451): avc: denied { read } for pid=3038 comm="dhcpcd" name="n25" dev="tmpfs" ino=3095 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.628338][ T70] bridge_slave_1: left allmulticast mode [ 99.628433][ T70] bridge_slave_1: left promiscuous mode [ 99.628523][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.645170][ T70] bridge_slave_0: left allmulticast mode [ 99.645187][ T70] bridge_slave_0: left promiscuous mode [ 99.645267][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.647487][ T28] audit: type=1400 audit(1771356538.209:452): avc: denied { open } for pid=3038 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=3095 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.647548][ T28] audit: type=1400 audit(1771356538.209:453): avc: denied { getattr } for pid=3038 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=3095 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.669797][ T28] audit: type=1400 audit(1771356538.269:454): avc: denied { allowed } for pid=5116 comm="syz.1.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.711350][ T70] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 99.851126][ T5118] loop2: detected capacity change from 0 to 1024 [ 99.867158][ T70] bond2 (unregistering): (slave bridge1): Releasing active interface [ 99.878286][ T5118] EXT4-fs: Ignoring removed nobh option [ 99.884622][ T5128] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 99.894267][ T5118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.924232][ T5118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.939963][ T5118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.951345][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.961990][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.979387][ T70] bond0 (unregistering): Released all slaves [ 99.987602][ T70] bond1 (unregistering): Released all slaves [ 99.997229][ T70] bond2 (unregistering): Released all slaves [ 100.019966][ T5128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.038053][ T5135] bond2: (slave ip6gretap1): making interface the new active one [ 100.047278][ T5135] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 100.069798][ T5138] macvlan2: entered promiscuous mode [ 100.075331][ T5138] macvlan2: entered allmulticast mode [ 100.081503][ T5138] bond2: entered promiscuous mode [ 100.086775][ T5138] ip6gretap1: entered promiscuous mode [ 100.092987][ T5138] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 100.100322][ T5138] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 100.116638][ T5138] bond2: left promiscuous mode [ 100.121845][ T5138] ip6gretap1: left promiscuous mode [ 100.148570][ T70] hsr_slave_0: left promiscuous mode [ 100.301671][ T70] veth1_macvtap: left promiscuous mode [ 100.313276][ T70] veth0_macvtap: left promiscuous mode [ 100.325908][ T70] veth1_vlan: left promiscuous mode [ 100.336241][ T70] veth0_vlan: left promiscuous mode [ 100.664062][ T70] team0 (unregistering): Port device team_slave_1 removed [ 100.674490][ T70] team0 (unregistering): Port device team_slave_0 removed [ 100.719940][ T5142] syzkaller0: entered promiscuous mode [ 100.727891][ T5142] syzkaller0: entered allmulticast mode [ 100.948763][ T5194] netlink: 'syz.1.546': attribute type 8 has an invalid length. [ 100.952651][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 100.989357][ T70] IPVS: stop unused estimator thread 0... [ 101.057931][ T5206] v: renamed from ip6_vti0 (while UP) [ 101.141258][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.151904][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.168716][ T5097] bridge_slave_0: entered allmulticast mode [ 101.175873][ T5097] bridge_slave_0: entered promiscuous mode [ 101.197377][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.204612][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.212049][ T5097] bridge_slave_1: entered allmulticast mode [ 101.218631][ T5097] bridge_slave_1: entered promiscuous mode [ 101.248058][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.259745][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.308852][ T5097] team0: Port device team_slave_0 added [ 101.315708][ T5097] team0: Port device team_slave_1 added [ 101.332003][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.339080][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.387308][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.421529][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.431328][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.433686][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 101.433698][ T28] audit: type=1400 audit(1771356540.039:463): avc: denied { name_bind } for pid=5224 comm="syz.1.540" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 101.484551][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.499586][ T28] audit: type=1400 audit(1771356540.099:464): avc: denied { name_connect } for pid=5224 comm="syz.1.540" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 101.776641][ T28] audit: type=1400 audit(1771356540.369:465): avc: denied { bind } for pid=5232 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.381096][ T5097] hsr_slave_0: entered promiscuous mode [ 102.395091][ T5097] hsr_slave_1: entered promiscuous mode [ 102.414253][ T5097] debugfs: 'hsr0' already exists in 'hsr' [ 102.426261][ T5097] Cannot create hsr debugfs directory [ 102.579593][ T5241] loop1: detected capacity change from 0 to 2048 [ 102.605879][ T28] audit: type=1400 audit(1771356541.199:466): avc: denied { read } for pid=5246 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.627536][ T28] audit: type=1400 audit(1771356541.209:467): avc: denied { shutdown } for pid=5246 comm="syz.3.545" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.672922][ T3301] GPT:first_usable_lbas don't match. [ 102.678221][ T3301] GPT:34 != 290 [ 102.707518][ T3301] GPT: Use GNU Parted to correct GPT errors. [ 102.731646][ T28] audit: type=1400 audit(1771356541.209:468): avc: denied { read } for pid=5246 comm="syz.3.545" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.756837][ T5253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 102.766255][ T5253] netlink: 32 bytes leftover after parsing attributes in process `syz.3.548'. [ 102.775560][ T3301] loop1: p1 p2 p3 [ 102.779833][ T28] audit: type=1400 audit(1771356541.249:469): avc: denied { create } for pid=5244 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.823444][ T28] audit: type=1400 audit(1771356541.259:470): avc: denied { write } for pid=5244 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.952385][ T28] audit: type=1400 audit(1771356541.359:471): avc: denied { create } for pid=5252 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.972257][ T5256] lo speed is unknown, defaulting to 1000 [ 102.988864][ T5256] lo speed is unknown, defaulting to 1000 [ 103.509751][ T28] audit: type=1400 audit(1771356541.659:472): avc: denied { mount } for pid=5257 comm="syz.4.550" name="/" dev="rpc_pipefs" ino=16795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 103.538201][ T5097] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.562110][ T5241] GPT:first_usable_lbas don't match. [ 103.567596][ T5241] GPT:34 != 290 [ 103.571110][ T5241] GPT: Use GNU Parted to correct GPT errors. [ 103.585518][ T5241] loop1: p1 p2 p3 [ 103.794751][ T5256] lo speed is unknown, defaulting to 1000 [ 103.800630][ T5097] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.816742][ T5256] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 103.828778][ T5097] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.838621][ T5097] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.866564][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 103.885304][ T5256] lo speed is unknown, defaulting to 1000 [ 103.921302][ T5256] lo speed is unknown, defaulting to 1000 [ 103.972891][ T5256] lo speed is unknown, defaulting to 1000 [ 103.979050][ T5256] lo speed is unknown, defaulting to 1000 [ 104.013418][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.034862][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.095792][ T5256] lo speed is unknown, defaulting to 1000 [ 104.211536][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.218641][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.236880][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.243979][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.320516][ T5298] lo speed is unknown, defaulting to 1000 [ 104.577794][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.674801][ T5313] loop3: detected capacity change from 0 to 256 [ 104.683754][ T5313] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 104.838692][ T5097] veth0_vlan: entered promiscuous mode [ 104.871822][ T5097] veth1_vlan: entered promiscuous mode [ 104.922441][ T5097] veth0_macvtap: entered promiscuous mode [ 104.949919][ T5097] veth1_macvtap: entered promiscuous mode [ 104.980855][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.004562][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.025209][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.040609][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.092560][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.121606][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.223814][ T5339] loop3: detected capacity change from 0 to 512 [ 105.242476][ T5339] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 105.260831][ T5339] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.559: iget: bad i_size value: 12154757448730 [ 105.421292][ T5339] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 105.421484][ T5339] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.559: couldn't read orphan inode 13 (err -117) [ 105.442381][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 105.442402][ C0] EXT4-fs (loop3): initial error at time 1771356544: ext4_orphan_get:1391: inode 13 [ 105.442429][ C0] EXT4-fs (loop3): last error at time 1771356544: ext4_orphan_get:1391: inode 13 [ 105.518285][ T5339] loop3: lost filesystem error report for type 5 error -117 [ 105.518988][ T5339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.732986][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.749768][ T5367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5367 comm=syz.1.574 [ 106.848825][ T5375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.567'. [ 106.974172][ T5383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 108.503624][ T5408] loop2: detected capacity change from 0 to 2048 [ 108.569380][ T5408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.720477][ C1] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 108.730599][ T5408] loop2: detected capacity change from 2048 to 0 [ 108.761549][ T5420] EXT4-fs error (device loop2): __ext4_find_entry:1615: inode #2: comm syz.2.578: reading directory lblock 0 [ 108.880070][ T5408] EXT4-fs error (device loop2): ext4_get_inode_loc:4920: inode #18: block 6: comm syz.2.578: unable to read itable block [ 108.992750][ T5420] buffer_io_error: 14 callbacks suppressed [ 108.992765][ T5420] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 109.053892][ T5420] EXT4-fs (loop2): I/O error while writing superblock [ 109.060829][ T5408] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 109.069151][ T5408] EXT4-fs (loop2): I/O error while writing superblock [ 109.078644][ T5408] EXT4-fs error (device loop2): ext4_get_inode_loc:4920: inode #18: block 6: comm syz.2.578: unable to read itable block [ 109.091783][ T5408] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 109.100134][ T5408] EXT4-fs (loop2): I/O error while writing superblock [ 109.111596][ T5408] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: IO failure [ 109.120620][ T5408] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 109.151397][ T5408] EXT4-fs (loop2): I/O error while writing superblock [ 109.174812][ T5408] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #18: comm syz.2.578: mark_inode_dirty error [ 109.200618][ T5408] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 109.223541][ T5408] EXT4-fs (loop2): I/O error while writing superblock [ 109.238761][ T5408] EXT4-fs error (device loop2): ext4_get_inode_loc:4920: inode #18: block 6: comm syz.2.578: unable to read itable block [ 109.267069][ T5408] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 109.321630][ T5408] EXT4-fs (loop2): I/O error while writing superblock [ 109.328593][ T5408] EXT4-fs error (device loop2): ext4_get_max_inline_size:121: inode #18: comm syz.2.578: can't get inode location 18 [ 109.358672][ T5408] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 109.367281][ T5408] EXT4-fs (loop2): I/O error while writing superblock [ 109.374327][ T5408] EXT4-fs error (device loop2): ext4_get_inode_loc:4920: inode #18: block 6: comm syz.2.578: unable to read itable block [ 109.387566][ T5408] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 109.396422][ T5408] EXT4-fs (loop2): I/O error while writing superblock [ 109.403658][ T5408] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: IO failure [ 109.412608][ T5408] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 109.413303][ T5427] syzkaller0: entered promiscuous mode [ 109.421025][ T5408] EXT4-fs (loop2): I/O error while writing superblock [ 109.448821][ T5408] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #18: comm syz.2.578: mark_inode_dirty error [ 109.461728][ T5427] syzkaller0: entered allmulticast mode [ 109.473814][ T5408] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 109.800398][ T5436] loop5: detected capacity change from 0 to 512 [ 109.836372][ T5436] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.585: bg 0: block 393: padding at end of block bitmap is not set [ 109.901265][ T5436] loop5: lost filesystem error report for type 5 error -117 [ 109.913442][ T5436] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 109.929468][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 109.929501][ C0] EXT4-fs (loop5): initial error at time 1771356548: ext4_validate_block_bitmap:441 [ 109.929526][ C0] EXT4-fs (loop5): last error at time 1771356548: ext4_validate_block_bitmap:441 [ 109.964037][ T1691] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.993563][ T5436] loop5: lost filesystem error report for type 5 error -117 [ 110.003696][ T5436] EXT4-fs (loop5): 2 truncates cleaned up [ 110.035667][ T1691] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.037893][ T5436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.080295][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 110.080308][ T28] audit: type=1400 audit(1771356548.679:479): avc: denied { execute } for pid=5444 comm="syz.4.590" path="/137/cpu.stat" dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.141835][ T1691] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.282372][ T1691] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.802505][ T5446] lo speed is unknown, defaulting to 1000 [ 110.901014][ T1691] bridge_slave_1: left allmulticast mode [ 110.907037][ T1691] bridge_slave_1: left promiscuous mode [ 110.913243][ T1691] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.930508][ T1691] bridge_slave_0: left allmulticast mode [ 110.950606][ T1691] bridge_slave_0: left promiscuous mode [ 110.956438][ T1691] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.049705][ T5436] syz.5.585 (5436) used greatest stack depth: 9256 bytes left [ 111.094365][ T5097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.121475][ T1691] bond1 (unregistering): (slave gretap1): Releasing active interface [ 111.200423][ T1691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.357052][ T1691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.383474][ T1691] bond0 (unregistering): Released all slaves [ 111.398834][ T1691] bond1 (unregistering): Released all slaves [ 111.635079][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 111.679690][ T1691] tipc: Left network mode [ 111.753435][ T1691] hsr_slave_0: left promiscuous mode [ 111.786765][ T1691] hsr_slave_1: left promiscuous mode [ 111.818773][ T1691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.854561][ T1691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.883882][ T1691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.911242][ T1691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.941392][ T1691] veth1_macvtap: left promiscuous mode [ 111.953164][ T1691] veth0_macvtap: left promiscuous mode [ 111.963949][ T1691] veth1_vlan: left promiscuous mode [ 111.976601][ T1691] veth0_vlan: left promiscuous mode [ 112.090263][ T1691] team0 (unregistering): Port device team_slave_1 removed [ 112.113964][ T1691] team0 (unregistering): Port device team_slave_0 removed [ 112.140216][ T28] audit: type=1400 audit(1771356550.739:480): avc: denied { ioctl } for pid=5499 comm="syz.5.599" path="socket:[18507]" dev="sockfs" ino=18507 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.193778][ T5493] lo speed is unknown, defaulting to 1000 [ 112.202328][ T5501] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.209510][ T5501] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.248527][ T5503] tipc: Started in network mode [ 112.254639][ T5503] tipc: Node identity 2, cluster identity 4711 [ 112.261977][ T5503] tipc: Node number set to 2 [ 112.267390][ T5493] lo speed is unknown, defaulting to 1000 [ 112.273500][ T5493] lo speed is unknown, defaulting to 1000 [ 112.293442][ T5446] chnl_net:caif_netlink_parms(): no params data found [ 112.359983][ T5493] infiniband syz0: set down [ 112.368299][ T5493] infiniband syz0: added lo [ 112.418172][ T3365] lo speed is unknown, defaulting to 1000 [ 112.431047][ T5493] RDS/IB: syz0: added [ 112.436390][ T5493] smc: adding ib device syz0 with port count 1 [ 112.442991][ T5493] smc: ib device syz0 port 1 has no pnetid [ 112.452650][ T3365] lo speed is unknown, defaulting to 1000 [ 112.481987][ T5493] lo speed is unknown, defaulting to 1000 [ 112.505142][ T5446] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.515830][ T5516] sd 0:0:1:0: device reset [ 112.561388][ T28] audit: type=1400 audit(1771356551.119:481): avc: denied { listen } for pid=5506 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.593223][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.618933][ T5520] netlink: 'syz.3.602': attribute type 10 has an invalid length. [ 112.644143][ T5446] bridge_slave_0: entered allmulticast mode [ 112.677203][ T5446] bridge_slave_0: entered promiscuous mode [ 112.697974][ T28] audit: type=1400 audit(1771356551.119:482): avc: denied { ioctl } for pid=5506 comm="syz.1.600" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 112.750467][ T5446] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.802820][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.859147][ T5446] bridge_slave_1: entered allmulticast mode [ 112.891923][ T5446] bridge_slave_1: entered promiscuous mode [ 112.905444][ T5520] ipvlan0: entered allmulticast mode [ 112.913429][ T5520] veth0_vlan: entered allmulticast mode [ 112.928658][ T5520] team0: Device ipvlan0 failed to register rx_handler [ 112.965550][ T5523] ipvlan0: left allmulticast mode [ 112.970684][ T5523] veth0_vlan: left allmulticast mode [ 113.012534][ T5446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.023380][ T5446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.044468][ T5446] team0: Port device team_slave_0 added [ 113.052340][ T5446] team0: Port device team_slave_1 added [ 113.068951][ T5446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.075987][ T5446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.101965][ T5446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.112995][ T5493] lo speed is unknown, defaulting to 1000 [ 113.121857][ T5446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.128826][ T5446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.199712][ T5446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.216188][ T5493] lo speed is unknown, defaulting to 1000 [ 113.254092][ T5446] hsr_slave_0: entered promiscuous mode [ 113.257268][ T5541] netlink: 'syz.1.605': attribute type 1 has an invalid length. [ 113.272516][ T5446] hsr_slave_1: entered promiscuous mode [ 113.355622][ T5541] bond2: entered promiscuous mode [ 113.362562][ T5541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.493353][ T5552] bond2: (slave bridge3): making interface the new active one [ 113.511278][ T5552] bridge3: entered promiscuous mode [ 113.517939][ T5552] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 113.531313][ T5493] lo speed is unknown, defaulting to 1000 [ 113.621790][ T5493] lo speed is unknown, defaulting to 1000 [ 113.630358][ T5446] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.685104][ T5446] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.704346][ T5446] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.729912][ T5446] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 113.769057][ T5571] netlink: 'syz.4.607': attribute type 1 has an invalid length. [ 113.861775][ T5571] 8021q: adding VLAN 0 to HW filter on device bond7 [ 113.884878][ T5571] bond6: (slave bond7): Enslaving as an active interface with an up link [ 113.938158][ T5571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.607'. [ 113.948148][ T5571] 8021q: adding VLAN 0 to HW filter on device bond6 [ 113.962247][ T5571] vlan3: entered promiscuous mode [ 113.967298][ T5571] bond6: entered promiscuous mode [ 113.972653][ T5571] bond7: entered promiscuous mode [ 114.015073][ T5446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.039975][ T5446] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.095008][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.102150][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.129788][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.136963][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.151820][ T5596] 8021q: adding VLAN 0 to HW filter on device bond8 [ 114.168387][ T5594] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.181472][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 114.190255][ T5596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 114.251562][ T5446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.267858][ T5446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.299972][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.324468][ T5596] bond8: (slave bond0): making interface the new active one [ 114.344013][ T5596] bond8: (slave bond0): Enslaving as an active interface with an up link [ 114.425418][ T5601] bridge0: port 3(dummy0) entered blocking state [ 114.431836][ T5601] bridge0: port 3(dummy0) entered listening state [ 114.479083][ T5601] bond8: (slave bond0): Releasing active interface [ 114.517737][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.534637][ T5601] dummy0: left allmulticast mode [ 114.545305][ T5601] bridge0: port 3(dummy0) entered disabled state [ 114.566154][ T5601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.612709][ T10] lo speed is unknown, defaulting to 1000 [ 114.626393][ T5594] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.645343][ T10] syz0: Port: 1 Link ACTIVE [ 114.660342][ T10] lo speed is unknown, defaulting to 1000 [ 114.673666][ T5446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.706349][ T5594] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.895416][ T5594] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.128545][ T70] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.208340][ T70] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.305293][ T70] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.405928][ T1691] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.509588][ T5446] veth0_vlan: entered promiscuous mode [ 115.526849][ T5446] veth1_vlan: entered promiscuous mode [ 115.616306][ T5643] tipc: Started in network mode [ 115.625206][ T5645] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5645 comm=syz.1.623 [ 115.641292][ T5643] tipc: Node identity 4, cluster identity 4711 [ 115.647458][ T5643] tipc: Node number set to 4 [ 115.689085][ T5446] veth0_macvtap: entered promiscuous mode [ 115.710616][ T5446] veth1_macvtap: entered promiscuous mode [ 115.729561][ T5446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.754925][ T5446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.766312][ T1691] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.775447][ T1691] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.784920][ T1691] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.800934][ T1691] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.063735][ T5662] loop1: detected capacity change from 0 to 8192 [ 116.414796][ T5662] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.518557][ T5656] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 116.551065][ T5656] FAT-fs (loop1): Filesystem has been set read-only [ 116.570197][ T5656] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 116.604510][ T5656] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 116.642319][ T5672] lo speed is unknown, defaulting to 1000 [ 116.652146][ T5672] lo speed is unknown, defaulting to 1000 [ 116.940710][ T5680] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 117.356816][ T5682] loop6: detected capacity change from 0 to 256 [ 117.678865][ T5682] FAT-fs (loop6): Directory bread(block 64) failed [ 117.685494][ T5682] FAT-fs (loop6): Directory bread(block 65) failed [ 117.692242][ T5682] FAT-fs (loop6): Directory bread(block 66) failed [ 117.698810][ T5682] FAT-fs (loop6): Directory bread(block 67) failed [ 117.705576][ T5682] FAT-fs (loop6): Directory bread(block 68) failed [ 117.712242][ T5682] FAT-fs (loop6): Directory bread(block 69) failed [ 117.718986][ T5682] FAT-fs (loop6): Directory bread(block 70) failed [ 117.725662][ T5682] FAT-fs (loop6): Directory bread(block 71) failed [ 117.732382][ T5682] FAT-fs (loop6): Directory bread(block 72) failed [ 117.739168][ T5682] FAT-fs (loop6): Directory bread(block 73) failed [ 118.325209][ T5701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5701 comm=syz.5.621 [ 119.074036][ T5723] team_slave_0: entered promiscuous mode [ 119.079811][ T5723] team_slave_1: entered promiscuous mode [ 119.111384][ T5723] vlan2: entered promiscuous mode [ 119.127855][ T5723] team0: entered promiscuous mode [ 119.794239][ T28] audit: type=1400 audit(1771356558.349:483): avc: denied { mounton } for pid=5737 comm="syz.5.630" path="/17/file0" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 120.192790][ T35] IPVS: starting estimator thread 0... [ 120.312272][ T28] audit: type=1400 audit(1771356558.919:484): avc: denied { write } for pid=5749 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.341538][ T5753] IPVS: using max 2400 ests per chain, 120000 per kthread [ 120.468141][ T5764] lo speed is unknown, defaulting to 1000 [ 120.605977][ T5764] lo speed is unknown, defaulting to 1000 [ 120.620019][ T5769] lo speed is unknown, defaulting to 1000 [ 120.628794][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.635954][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.854557][ T5773] tipc: Started in network mode [ 120.868017][ T5773] tipc: Node identity 2, cluster identity 4711 [ 120.931233][ T5773] tipc: Node number set to 2 [ 120.976821][ T5769] lo speed is unknown, defaulting to 1000 [ 121.126184][ T5784] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5784 comm=syz.3.638 [ 121.193332][ T28] audit: type=1400 audit(1771356559.789:485): avc: denied { read write } for pid=5787 comm="syz.1.640" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.234119][ T28] audit: type=1400 audit(1771356559.789:486): avc: denied { open } for pid=5787 comm="syz.1.640" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.647153][ T5796] lo speed is unknown, defaulting to 1000 [ 121.653490][ T5796] lo speed is unknown, defaulting to 1000 [ 121.847898][ T5796] xt_NFQUEUE: number of total queues is 0 [ 122.640896][ T28] audit: type=1400 audit(1771356561.239:487): avc: denied { setopt } for pid=5807 comm="syz.3.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.489799][ T5815] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.518633][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 123.533866][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 123.629326][ T5815] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.767434][ T5815] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.801267][ T5834] tipc: Enabled bearer , priority 10 [ 123.944485][ T5815] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.548461][ T70] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.585373][ T70] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.643351][ T41] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.668179][ T41] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.568502][ T5867] v: renamed from ip6_vti0 (while UP) [ 125.951678][ T5858] lo speed is unknown, defaulting to 1000 [ 125.960604][ T5855] lo speed is unknown, defaulting to 1000 [ 126.041791][ T5858] lo speed is unknown, defaulting to 1000 [ 126.255242][ T5885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.665'. [ 126.357615][ T5855] lo speed is unknown, defaulting to 1000 [ 126.549464][ T5901] tipc: Enabled bearer , priority 10 [ 126.872131][ T5925] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.671'. [ 127.009222][ T5925] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 127.188073][ T5928] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.301089][ T5928] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.426069][ T5928] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.486174][ T5967] netlink: 'syz.4.675': attribute type 1 has an invalid length. [ 127.558307][ T5967] bond9: entered promiscuous mode [ 127.566107][ T5967] 8021q: adding VLAN 0 to HW filter on device bond9 [ 127.629860][ T5928] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.731962][ T5970] bond9: (slave bridge3): making interface the new active one [ 127.765358][ T5970] bridge3: entered promiscuous mode [ 127.785276][ T5970] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 127.841976][ T5969] lo speed is unknown, defaulting to 1000 [ 127.871130][ T5978] loop1: detected capacity change from 0 to 256 [ 127.879135][ T5969] lo speed is unknown, defaulting to 1000 [ 127.885340][ T5978] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 128.333513][ T5982] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 5982 comm: syz.5.677) [ 128.342981][ T28] audit: type=1400 audit(1771356566.939:488): avc: denied { setopt } for pid=5981 comm="syz.5.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.793960][ T28] audit: type=1400 audit(1771356566.939:489): avc: denied { module_load } for pid=5981 comm="syz.5.677" path=2F2173656C696E7578776B311FD06DC37F39C99E2A0D5493FDE291EFAA16236A978FBCDE590FCCC56D56CB15766D2870C92D515A23D27B84BF06 dev="mqueue" ino=19426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 129.705207][ T6007] loop5: detected capacity change from 0 to 128 [ 129.712306][ T6005] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 129.884783][ T6010] loop6: detected capacity change from 0 to 128 [ 130.695599][ T6010] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.717780][ T6010] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.925635][ T6007] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.967046][ T6007] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.420287][ T5446] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.429987][ T6035] netlink: 'syz.1.693': attribute type 13 has an invalid length. [ 131.442883][ T5097] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.541278][ T28] audit: type=1400 audit(1771356570.139:490): avc: denied { map_create } for pid=6036 comm="syz.6.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.592452][ T28] audit: type=1400 audit(1771356570.139:491): avc: denied { map_read map_write } for pid=6036 comm="syz.6.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.618457][ T6041] syzkaller0: entered promiscuous mode [ 131.637820][ T6041] syzkaller0: entered allmulticast mode [ 131.656878][ T6037] loop6: detected capacity change from 0 to 256 [ 131.687469][ T28] audit: type=1400 audit(1771356570.229:492): avc: denied { create } for pid=6033 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 131.735099][ T28] audit: type=1400 audit(1771356570.229:493): avc: denied { execmem } for pid=6038 comm="syz.5.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 131.777979][ T6037] FAT-fs (loop6): Directory bread(block 64) failed [ 131.787755][ T6037] FAT-fs (loop6): Directory bread(block 65) failed [ 131.794365][ T6037] FAT-fs (loop6): Directory bread(block 66) failed [ 131.800915][ T6037] FAT-fs (loop6): Directory bread(block 67) failed [ 131.807517][ T6037] FAT-fs (loop6): Directory bread(block 68) failed [ 131.814064][ T6037] FAT-fs (loop6): Directory bread(block 69) failed [ 131.820629][ T6037] FAT-fs (loop6): Directory bread(block 70) failed [ 131.827455][ T28] audit: type=1400 audit(1771356570.239:494): avc: denied { read } for pid=6036 comm="syz.6.694" dev="nsfs" ino=4026532926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 131.827497][ T6037] FAT-fs (loop6): Directory bread(block 71) failed [ 131.869144][ T28] audit: type=1400 audit(1771356570.239:495): avc: denied { open } for pid=6036 comm="syz.6.694" path="net:[4026532926]" dev="nsfs" ino=4026532926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 131.893357][ T28] audit: type=1400 audit(1771356570.239:496): avc: denied { create } for pid=6036 comm="syz.6.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.914161][ T28] audit: type=1400 audit(1771356570.249:497): avc: denied { write } for pid=6036 comm="syz.6.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.917273][ T6037] FAT-fs (loop6): Directory bread(block 72) failed [ 131.940921][ T6037] FAT-fs (loop6): Directory bread(block 73) failed [ 132.178031][ T6058] lo speed is unknown, defaulting to 1000 [ 132.187599][ T6058] lo speed is unknown, defaulting to 1000 [ 132.982604][ T6072] loop6: detected capacity change from 0 to 256 [ 133.009533][ T6072] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 133.386466][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 133.386481][ T28] audit: type=1400 audit(1771356571.989:541): avc: denied { module_request } for pid=6055 comm="syz.6.700" kmod="arptable_vfat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 133.639184][ T28] audit: type=1400 audit(1771356572.219:542): avc: denied { write } for pid=6081 comm="syz.6.707" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 133.685891][ T6082] loop5: detected capacity change from 0 to 4096 [ 133.701259][ T28] audit: type=1400 audit(1771356572.219:543): avc: denied { open } for pid=6081 comm="syz.6.707" path="/dev/input/event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 133.761567][ T6082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.804707][ T6082] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.708: corrupted inode contents [ 133.819842][ T28] audit: type=1400 audit(1771356572.219:544): avc: denied { ioctl } for pid=6081 comm="syz.6.707" path="socket:[20738]" dev="sockfs" ino=20738 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.846139][ T28] audit: type=1400 audit(1771356572.329:545): avc: denied { getopt } for pid=6085 comm="syz.6.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.865682][ T28] audit: type=1400 audit(1771356572.349:546): avc: denied { setopt } for pid=6089 comm="syz.6.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.886124][ T6082] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.708: mark_inode_dirty error [ 133.887134][ T28] audit: type=1400 audit(1771356572.349:547): avc: denied { read write } for pid=6087 comm="syz.1.710" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.920349][ T6082] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.708: corrupted inode contents [ 133.920526][ T6082] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.708: mark_inode_dirty error [ 133.932339][ T28] audit: type=1400 audit(1771356572.349:548): avc: denied { open } for pid=6087 comm="syz.1.710" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.966409][ T28] audit: type=1400 audit(1771356572.389:549): avc: denied { bind } for pid=6089 comm="syz.6.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.985801][ T6082] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.708: corrupted inode contents [ 133.997740][ T28] audit: type=1400 audit(1771356572.399:550): avc: denied { mount } for pid=6080 comm="syz.5.708" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.032873][ T6082] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.708: mark_inode_dirty error [ 134.051850][ T6103] netlink: 'syz.6.713': attribute type 1 has an invalid length. [ 134.052396][ T6104] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.708'. [ 134.074227][ T6102] lo speed is unknown, defaulting to 1000 [ 134.086713][ T6102] lo speed is unknown, defaulting to 1000 [ 134.092885][ T6082] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.708: corrupted inode contents [ 134.175174][ T6082] EXT4-fs error (device loop5): ext4_truncate:4587: inode #15: comm syz.5.708: mark_inode_dirty error [ 134.224991][ T6082] EXT4-fs error (device loop5) in ext4_setattr:5983: Corrupt filesystem [ 134.561723][ T6093] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.708: corrupted inode contents [ 135.311430][ T6122] netlink: 'syz.6.718': attribute type 15 has an invalid length. [ 135.373767][ T5097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.590618][ T6138] loop6: detected capacity change from 0 to 512 [ 135.600781][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 135.610168][ T6140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.723'. [ 135.621553][ T6138] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.650400][ T6142] loop5: detected capacity change from 0 to 1024 [ 135.666165][ T6142] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 135.680471][ T6142] JBD2: no valid journal superblock found [ 135.681315][ T6138] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.722: bg 0: block 393: padding at end of block bitmap is not set [ 135.686258][ T6142] EXT4-fs (loop5): Could not load journal inode [ 135.718533][ T6149] sctp: [Deprecated]: syz.1.726 (pid 6149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.718533][ T6149] Use struct sctp_sack_info instead [ 135.736846][ T6142] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000 [ 135.755436][ T6138] loop6: lost filesystem error report for type 5 error -117 [ 135.760995][ T6138] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 135.768377][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 135.768398][ C0] EXT4-fs (loop6): initial error at time 1771356574: ext4_validate_block_bitmap:441 [ 135.768434][ C0] EXT4-fs (loop6): last error at time 1771356574: ext4_validate_block_bitmap:441 [ 135.803693][ T6138] loop6: lost filesystem error report for type 5 error -117 [ 135.808732][ T6138] EXT4-fs (loop6): 2 truncates cleaned up [ 135.817879][ T6151] loop5: detected capacity change from 0 to 4096 [ 135.825929][ T6138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.849312][ T6151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.937707][ T6151] SELinux: Context system_u:object_r:dmesg_exec_t:s0 is not valid (left unmapped). [ 135.969495][ T6162] rdma_rxe: rxe_newlink: failed to add lo [ 135.989625][ T6162] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.996101][ T6162] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 136.060643][ T5097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.404009][ T6175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.416279][ T5446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.586171][ T6186] bond_slave_0: entered promiscuous mode [ 136.591896][ T6186] bond_slave_1: entered promiscuous mode [ 136.599011][ T6186] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.609270][ T6186] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 137.526118][ T6267] sit0: Caught tx_queue_len zero misconfig [ 138.401343][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 138.401360][ T28] audit: type=1400 audit(1771356576.929:590): avc: denied { write } for pid=6274 comm="syz.6.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.459574][ T6283] xt_policy: too many policy elements [ 138.491277][ T28] audit: type=1400 audit(1771356576.929:591): avc: denied { connect } for pid=6274 comm="syz.6.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.569559][ T28] audit: type=1400 audit(1771356576.929:592): avc: denied { name_connect } for pid=6274 comm="syz.6.743" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 138.650637][ T28] audit: type=1400 audit(1771356576.989:593): avc: denied { mount } for pid=6278 comm="syz.4.744" name="/" dev="ramfs" ino=20864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 139.512264][ T28] audit: type=1400 audit(1771356578.109:594): avc: denied { listen } for pid=6296 comm="syz.1.758" lport=48408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.553557][ T28] audit: type=1400 audit(1771356578.109:595): avc: denied { accept } for pid=6296 comm="syz.1.758" lport=48408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.602660][ T6326] netlink: 'syz.5.756': attribute type 1 has an invalid length. [ 141.642878][ T6326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.729450][ T6326] bond2: (slave ip6gretap1): making interface the new active one [ 141.782999][ T6326] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 141.829897][ T5446] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 141.862045][ T6326] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 141.918361][ T5446] CPU: 1 UID: 0 PID: 5446 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 141.918399][ T5446] Tainted: [W]=WARN [ 141.918406][ T5446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.918425][ T5446] Call Trace: [ 141.918433][ T5446] [ 141.918441][ T5446] __dump_stack+0x1d/0x30 [ 141.918465][ T5446] dump_stack_lvl+0x95/0xd0 [ 141.918553][ T5446] dump_stack+0x15/0x1b [ 141.918569][ T5446] dump_header+0x80/0x240 [ 141.918590][ T5446] oom_kill_process+0x295/0x350 [ 141.918678][ T5446] out_of_memory+0x97d/0xb80 [ 141.918709][ T5446] try_charge_memcg+0x62e/0xa10 [ 141.918743][ T5446] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 141.918826][ T5446] __swap_cache_prepare_and_add+0x386/0x530 [ 141.918889][ T5446] swap_cache_alloc_folio+0xa2/0x120 [ 141.918985][ T5446] swap_cluster_readahead+0x26e/0x3d0 [ 141.919012][ T5446] swapin_readahead+0xde/0x840 [ 141.919035][ T5446] ? __rcu_read_unlock+0x4e/0x70 [ 141.919060][ T5446] ? __perf_event_task_sched_in+0xa65/0xad0 [ 141.919087][ T5446] ? __list_add_valid_or_report+0x38/0xe0 [ 141.919170][ T5446] ? __rcu_read_unlock+0x4e/0x70 [ 141.919186][ T5446] ? swap_cache_get_folio+0x26f/0x280 [ 141.919205][ T5446] do_swap_page+0x309/0x2210 [ 141.919294][ T5446] ? __schedule+0x85a/0xd40 [ 141.919317][ T5446] ? __rcu_read_lock+0x36/0x50 [ 141.919333][ T5446] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 141.919352][ T5446] handle_mm_fault+0xb40/0x3020 [ 141.919448][ T5446] ? vma_start_read+0x1c7/0x2c0 [ 141.919470][ T5446] do_user_addr_fault+0x62f/0x1050 [ 141.919511][ T5446] ? trace_page_fault_user+0x1f/0xe0 [ 141.919535][ T5446] exc_page_fault+0x62/0xa0 [ 141.919627][ T5446] asm_exc_page_fault+0x26/0x30 [ 141.919648][ T5446] RIP: 0033:0x7f06fec07817 [ 141.919672][ T5446] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 141.919686][ T5446] RSP: 002b:00007ffd7151c1c0 EFLAGS: 00010202 [ 141.919699][ T5446] RAX: 0000000000000000 RBX: 0000555589c33500 RCX: 00007f06fec07817 [ 141.919712][ T5446] RDX: 00007ffd7151c200 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.919725][ T5446] RBP: 00007ffd7151c26c R08: 0000000000000000 R09: 0000000000000000 [ 141.919739][ T5446] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 141.919783][ T5446] R13: 00000000000927c0 R14: 0000000000022979 R15: 00007ffd7151c2c0 [ 141.919802][ T5446] [ 141.919813][ T5446] memory: usage 259328kB, limit 307200kB, failcnt 784 [ 142.167384][ T6331] veth3: entered promiscuous mode [ 142.175118][ T6331] bond2: (slave veth3): Enslaving as an active interface with a down link [ 142.197871][ T5446] memory+swap: usage 198980kB, limit 9007199254740988kB, failcnt 0 [ 142.237119][ T5446] kmem: usage 190344kB, limit 9007199254740988kB, failcnt 0 [ 142.260721][ T6336] loop5: detected capacity change from 0 to 128 [ 142.267474][ T5446] Memory cgroup stats for /syz6: [ 142.290833][ T28] audit: type=1400 audit(1771356580.889:596): avc: denied { create } for pid=6334 comm="syz.5.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.361126][ T5446] cache 0 [ 142.374521][ T5446] rss 24576 [ 142.377666][ T5446] shmem 0 [ 142.389940][ T28] audit: type=1400 audit(1771356580.889:597): avc: denied { connect } for pid=6334 comm="syz.5.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.401222][ T5446] mapped_file 0 [ 142.439755][ T5446] dirty 0 [ 142.464350][ T5446] writeback 4096 [ 142.468138][ T5446] workingset_refault_anon 85 [ 142.579739][ T5446] workingset_refault_file 0 [ 142.718566][ T5446] swap 8568832 [ 142.781253][ T5446] swapcached 8601600 [ 142.833006][ T5446] pgpgin 33658 [ 142.859287][ T28] audit: type=1400 audit(1771356580.889:598): avc: denied { read } for pid=6334 comm="syz.5.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.876551][ T5446] pgpgout 33650 [ 142.878747][ T28] audit: type=1400 audit(1771356580.949:599): avc: denied { bind } for pid=6334 comm="syz.5.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.901619][ T5446] pgfault 35369 [ 142.905215][ T5446] pgmajfault 45 [ 142.908667][ T5446] inactive_anon 4096 [ 142.912858][ T5446] active_anon 28672 [ 142.916722][ T5446] inactive_file 0 [ 142.920358][ T5446] active_file 0 [ 142.924095][ T5446] unevictable 0 [ 142.927540][ T5446] hierarchical_memory_limit 314572800 [ 142.933347][ T5446] hierarchical_memsw_limit 9223372036854771712 [ 142.939560][ T5446] total_cache 0 [ 142.949693][ T5446] total_rss 24576 [ 142.953476][ T5446] total_shmem 0 [ 142.956922][ T5446] total_mapped_file 0 [ 142.960940][ T5446] total_dirty 0 [ 142.981385][ T5446] total_writeback 4096 [ 142.985469][ T5446] total_workingset_refault_anon 85 [ 142.990573][ T5446] total_workingset_refault_file 0 [ 143.031337][ T5446] total_swap 8568832 [ 143.035253][ T5446] total_swapcached 8601600 [ 143.039690][ T5446] total_pgpgin 33658 [ 143.061235][ T5446] total_pgpgout 33650 [ 143.065297][ T5446] total_pgfault 35369 [ 143.069267][ T5446] total_pgmajfault 45 [ 143.093079][ T5446] total_inactive_anon 4096 [ 143.097521][ T5446] total_active_anon 28672 [ 143.114540][ T5446] total_inactive_file 0 [ 143.118715][ T5446] total_active_file 0 [ 143.160790][ T5446] total_unevictable 0 [ 143.165618][ T5446] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.750,pid=6303,uid=0 [ 143.180761][ T5446] Memory cgroup out of memory: Killed process 6303 (syz.6.750) total-vm:100576kB, anon-rss:1228kB, file-rss:26272kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 143.301684][ T6305] syz.6.750 (6305) used greatest stack depth: 6944 bytes left [ 143.578996][ T6348] loop5: detected capacity change from 0 to 512 [ 144.717747][ T6348] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.770: iget: bad i_size value: 38620345925642 [ 144.741735][ T6348] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 144.744040][ T6348] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.770: couldn't read orphan inode 15 (err -117) [ 144.753456][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 144.753484][ C0] EXT4-fs (loop5): initial error at time 1771356583: ext4_orphan_get:1391: inode 15 [ 144.753733][ C0] EXT4-fs (loop5): last error at time 1771356583: ext4_orphan_get:1391: inode 15 [ 144.872561][ T6348] loop5: lost filesystem error report for type 5 error -117 [ 144.922384][ T6348] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.062700][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 145.062715][ T28] audit: type=1400 audit(1771356583.659:603): avc: denied { read write open } for pid=6347 comm="syz.5.770" path="/48/file1/file1" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 145.203940][ T28] audit: type=1400 audit(1771356583.749:604): avc: denied { create } for pid=6377 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 145.299867][ T28] audit: type=1400 audit(1771356583.769:605): avc: denied { ioctl } for pid=6347 comm="syz.5.770" path="/48/file1/file1" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 145.354533][ T6348] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.770: bg 0: block 5: invalid block bitmap [ 145.761629][ T6374] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 145.956604][ T28] audit: type=1400 audit(1771356584.549:606): avc: denied { bind } for pid=6375 comm="syz.4.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.097647][ T28] audit: type=1400 audit(1771356584.599:607): avc: denied { name_connect } for pid=6390 comm="syz.3.773" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 146.189408][ T28] audit: type=1400 audit(1771356584.649:608): avc: denied { setopt } for pid=6390 comm="syz.3.773" lport=47218 faddr=::ffff:172.30.0.4 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 146.213817][ T6348] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 228 with error 28 [ 146.226864][ T28] audit: type=1400 audit(1771356584.689:609): avc: denied { ioctl } for pid=6390 comm="syz.3.773" path="socket:[22011]" dev="sockfs" ino=22011 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.235605][ T6348] EXT4-fs (loop5): This should not happen!! Data will be lost [ 146.235605][ T6348] [ 146.275105][ T6348] EXT4-fs (loop5): Total free blocks count 0 [ 146.281105][ T6348] EXT4-fs (loop5): Free/Dirty block details [ 146.288975][ T6348] EXT4-fs (loop5): free_blocks=0 [ 146.295160][ T6348] EXT4-fs (loop5): dirty_blocks=233 [ 146.300537][ T6348] EXT4-fs (loop5): Block reservation details [ 146.307361][ T6348] EXT4-fs (loop5): i_reserved_data_blocks=233 [ 146.345517][ T6232] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 236 with max blocks 4 with error 28 [ 146.461228][ T28] audit: type=1400 audit(1771356585.059:610): avc: denied { write } for pid=6397 comm="syz.4.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.322371][ T6421] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.330978][ T6421] bond8: (slave macvlan2): making interface the new active one [ 147.362881][ T6421] bond8: (slave macvlan2): Enslaving as an active interface with an up link [ 147.663475][ T28] audit: type=1400 audit(1771356586.269:611): avc: denied { name_bind } for pid=6432 comm="syz.3.788" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 147.955619][ T28] audit: type=1400 audit(1771356586.289:612): avc: denied { node_bind } for pid=6432 comm="syz.3.788" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 148.547152][ T6441] loop6: detected capacity change from 0 to 128 [ 148.547955][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.605963][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.707147][ T6441] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.777454][ T6441] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.828596][ T6436] veth1_macvtap: left allmulticast mode [ 148.949157][ T6436] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 149.019724][ T10] lo speed is unknown, defaulting to 1000 [ 149.031541][ T6239] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.040728][ T6239] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.050269][ T10] syz2: Port: 1 Link DOWN [ 149.070893][ T6239] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.090168][ T6239] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.108505][ T6461] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 149.167200][ T6461] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.204119][ T6461] bond3: (slave gretap1): making interface the new active one [ 149.212275][ T6461] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 149.237775][ T6461] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6461 comm=syz.3.795 [ 149.545571][ T6475] netlink: 'syz.5.810': attribute type 1 has an invalid length. [ 149.562599][ T6475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.582698][ T6475] bond3: (slave gretap1): making interface the new active one [ 149.590886][ T6475] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 149.605790][ T6475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6475 comm=syz.5.810 [ 149.712612][ T5446] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.749745][ T6484] netlink: 'syz.3.803': attribute type 13 has an invalid length. [ 151.105550][ T6239] Bluetooth: hci0: Frame reassembly failed (-84) [ 151.554401][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 151.554415][ T28] audit: type=1400 audit(1771356590.159:622): avc: denied { ioctl } for pid=6529 comm="syz.4.818" path="socket:[21131]" dev="sockfs" ino=21131 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.794883][ T28] audit: type=1400 audit(1771356590.399:623): avc: denied { firmware_load } for pid=6538 comm="syz.3.821" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 152.059558][ T28] audit: type=1400 audit(1771356590.649:624): avc: denied { create } for pid=6538 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 152.394007][ T3420] lo speed is unknown, defaulting to 1000 [ 152.399760][ T3420] syz0: Port: 1 Link DOWN [ 152.495894][ T3400] lo speed is unknown, defaulting to 1000 [ 152.841414][ T3481] Bluetooth: hci0: command 0x1003 tx timeout [ 152.847438][ T4137] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.293219][ T6603] tipc: Enabling of bearer rejected, failed to enable media [ 154.449915][ T6608] loop5: detected capacity change from 0 to 512 [ 154.500209][ T6608] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.539221][ T5097] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 154.590453][ T6618] loop5: detected capacity change from 0 to 1024 [ 154.619360][ T6618] EXT4-fs: Ignoring removed oldalloc option [ 154.634216][ T6618] EXT4-fs: Ignoring removed bh option [ 154.726933][ T6618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.796234][ T6583] syz.3.836 (6583) used greatest stack depth: 5792 bytes left [ 155.201180][ T6639] lo speed is unknown, defaulting to 1000 [ 155.202693][ T5097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.221608][ T6639] lo speed is unknown, defaulting to 1000 [ 155.248959][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.852'. [ 155.268310][ T28] audit: type=1400 audit(1771356593.849:625): avc: denied { create } for pid=6638 comm="syz.6.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.288220][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.852'. [ 155.328206][ T28] audit: type=1400 audit(1771356593.849:626): avc: denied { bind } for pid=6638 comm="syz.6.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.401287][ T28] audit: type=1400 audit(1771356593.989:627): avc: denied { bind } for pid=6645 comm="syz.5.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.421479][ T28] audit: type=1400 audit(1771356594.009:628): avc: denied { setopt } for pid=6645 comm="syz.5.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.433138][ T6642] bridge1: entered promiscuous mode [ 155.467791][ T6642] bridge1: entered allmulticast mode [ 155.494749][ T6241] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.515782][ T6237] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.532064][ T6237] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.581144][ T6239] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.739271][ T6653] loop5: detected capacity change from 0 to 512 [ 155.793781][ T6653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.831266][ T6653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 155.851403][ T6653] System zones: 1-2, 4-12, 8-8 [ 155.869137][ T6653] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.856: iget: bad i_size value: 38620345925642 [ 155.892760][ T6653] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 155.892946][ T6653] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.856: couldn't read orphan inode 15 (err -117) [ 155.902158][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 155.902173][ C1] EXT4-fs (loop5): initial error at time 1771356594: ext4_orphan_get:1391: inode 15 [ 155.902213][ C1] EXT4-fs (loop5): last error at time 1771356594: ext4_orphan_get:1391: inode 15 [ 155.964425][ T6653] loop5: lost filesystem error report for type 5 error -117 [ 155.965140][ T6653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.702658][ T6652] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.856: bg 0: block 5: invalid block bitmap [ 156.718202][ T6652] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 7808 with max blocks 64 with error 28 [ 156.730778][ T6652] EXT4-fs (loop5): This should not happen!! Data will be lost [ 156.730778][ T6652] [ 156.740438][ T6652] EXT4-fs (loop5): Total free blocks count 0 [ 156.746439][ T6652] EXT4-fs (loop5): Free/Dirty block details [ 156.752352][ T6652] EXT4-fs (loop5): free_blocks=0 [ 156.757292][ T6652] EXT4-fs (loop5): dirty_blocks=64 [ 156.762431][ T6652] EXT4-fs (loop5): Block reservation details [ 156.768477][ T6652] EXT4-fs (loop5): i_reserved_data_blocks=64 [ 156.822553][ T5097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.978731][ T6677] loop5: detected capacity change from 0 to 512 [ 157.134845][ T6677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.213930][ T6677] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.271251][ T28] audit: type=1326 audit(1771356595.859:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 157.325159][ T28] audit: type=1326 audit(1771356595.859:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 157.361069][ T28] audit: type=1326 audit(1771356595.859:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 157.455340][ T28] audit: type=1326 audit(1771356595.859:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 157.533247][ T28] audit: type=1326 audit(1771356595.859:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 157.652092][ T28] audit: type=1326 audit(1771356595.859:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 157.729518][ T28] audit: type=1326 audit(1771356595.859:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 157.753080][ T28] audit: type=1326 audit(1771356595.859:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 157.754822][ T5097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.776471][ T28] audit: type=1326 audit(1771356595.859:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 157.813544][ T28] audit: type=1326 audit(1771356595.859:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 162.261813][ T6772] tipc: Enabling of bearer rejected, failed to enable media [ 162.735225][ T6787] lo speed is unknown, defaulting to 1000 [ 162.918659][ T6787] lo speed is unknown, defaulting to 1000 [ 163.100560][ T6794] ip6gre0: Caught tx_queue_len zero misconfig [ 163.264532][ T6794] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 163.719117][ T6803] lo speed is unknown, defaulting to 1000 [ 163.743278][ T6803] lo speed is unknown, defaulting to 1000 [ 163.777726][ T6804] loop5: detected capacity change from 0 to 512 [ 163.784363][ T6804] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 163.802519][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 163.802533][ T28] audit: type=1400 audit(1771356602.409:656): avc: denied { create } for pid=6802 comm="syz.5.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 163.994770][ T28] audit: type=1400 audit(1771356602.589:657): avc: denied { write } for pid=6802 comm="syz.5.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 164.387025][ T6818] dummy0: Caught tx_queue_len zero misconfig [ 164.394061][ T6818] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.904'. [ 164.404489][ T28] audit: type=1326 audit(1771356603.009:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 164.430207][ T28] audit: type=1326 audit(1771356603.009:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 164.456261][ T28] audit: type=1326 audit(1771356603.009:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 164.480363][ T28] audit: type=1326 audit(1771356603.009:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 164.521330][ T28] audit: type=1326 audit(1771356603.009:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 164.557355][ T28] audit: type=1400 audit(1771356603.009:663): avc: denied { setattr } for pid=6815 comm="syz.3.904" name="" dev="pipefs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 164.586191][ T28] audit: type=1326 audit(1771356603.009:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 164.610885][ T28] audit: type=1326 audit(1771356603.009:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6f6c629 code=0x7ffc0000 [ 165.406538][ T6849] lo speed is unknown, defaulting to 1000 [ 165.421849][ T6849] lo speed is unknown, defaulting to 1000 [ 165.471073][ T6854] netlink: 'syz.1.918': attribute type 13 has an invalid length. [ 165.671573][ T6864] ipvlan2: entered allmulticast mode [ 165.677264][ T6864] vlan0: entered allmulticast mode [ 165.701874][ T6864] veth0_vlan: entered allmulticast mode [ 165.745312][ T6873] SET target dimension over the limit! [ 166.510167][ T6891] netlink: 'syz.3.928': attribute type 27 has an invalid length. [ 166.522720][ T6891] macsec0: left promiscuous mode [ 166.533006][ T6891] macsec0: left allmulticast mode [ 166.542422][ T6891] gtp0: left promiscuous mode [ 166.550234][ T6891] vlan2: left promiscuous mode [ 166.555437][ T6891] bridge1: left promiscuous mode [ 166.560834][ T6891] vlan2: left allmulticast mode [ 166.565981][ T6891] bridge1: left allmulticast mode [ 166.572867][ T6891] erspan1: left allmulticast mode [ 167.317554][ T6912] syzkaller0: entered promiscuous mode [ 167.423442][ T6917] netlink: 'syz.4.936': attribute type 2 has an invalid length. [ 167.431090][ T6917] netlink: 'syz.4.936': attribute type 4 has an invalid length. [ 167.431408][ T6912] syzkaller0: entered allmulticast mode [ 167.439246][ T6917] netlink: 132 bytes leftover after parsing attributes in process `syz.4.936'. [ 167.836978][ T6940] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6940 comm=syz.6.944 [ 168.283279][ T6951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.948'. [ 168.562289][ T6958] netlink: 100 bytes leftover after parsing attributes in process `syz.6.950'. [ 169.091354][ T6982] netlink: 112 bytes leftover after parsing attributes in process `syz.3.958'. [ 170.312320][ T6980] syz.3.958 (6980) used greatest stack depth: 5304 bytes left [ 170.498395][ T7032] netlink: 'syz.1.976': attribute type 2 has an invalid length. [ 170.515408][ T7032] netlink: 'syz.1.976': attribute type 4 has an invalid length. [ 170.541717][ T7032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.976'. [ 170.982227][ T7041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.979'. [ 171.346815][ T7055] loop5: detected capacity change from 0 to 128 [ 171.353666][ T7055] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 171.370638][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 171.370651][ T28] audit: type=1400 audit(1771356609.969:737): avc: denied { create } for pid=7054 comm="syz.5.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 171.385328][ T3303] udevd[3303]: incorrect ext4 checksum on /dev/loop5 [ 171.460349][ T7073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.991'. [ 171.618135][ T28] audit: type=1400 audit(1771356610.219:738): avc: denied { read } for pid=7078 comm="syz.4.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 172.055385][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.999'. [ 172.143794][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz.6.999'. [ 172.229876][ T6220] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.238409][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.999'. [ 172.249631][ T6220] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.272284][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz.6.999'. [ 172.303442][ T6220] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.312669][ T6220] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.423630][ T7093] lo speed is unknown, defaulting to 1000 [ 172.439209][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1004'. [ 172.446846][ T7093] lo speed is unknown, defaulting to 1000 [ 172.877490][ T28] audit: type=1400 audit(1771356611.469:739): avc: denied { read } for pid=7112 comm="syz.6.1005" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 172.984141][ T7117] 9p: Bad value for 'rfdno' [ 173.112976][ T7122] loop5: detected capacity change from 0 to 1024 [ 173.140549][ T28] audit: type=1400 audit(1771356611.469:740): avc: denied { open } for pid=7112 comm="syz.6.1005" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 173.283185][ T7122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.489574][ T28] audit: type=1400 audit(1771356612.089:741): avc: denied { ioctl } for pid=7130 comm="syz.1.1010" path="socket:[24057]" dev="sockfs" ino=24057 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.962259][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1015'. [ 174.018980][ T5097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.074295][ T7155] loop5: detected capacity change from 0 to 512 [ 174.114533][ T7155] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 174.155205][ T7155] EXT4-fs (loop5): orphan cleanup on readonly fs [ 174.189605][ T7155] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1016: Block bitmap for bg 0 marked uninitialized [ 174.288733][ T7155] loop5: lost filesystem error report for type 5 error -117 [ 174.291233][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 174.304986][ C0] EXT4-fs (loop5): initial error at time 1771356612: ext4_read_block_bitmap_nowait:517 [ 174.314695][ C0] EXT4-fs (loop5): last error at time 1771356612: ext4_read_block_bitmap_nowait:517 [ 174.324173][ T7155] EXT4-fs (loop5): Remounting filesystem read-only [ 174.330863][ T7155] EXT4-fs (loop5): 1 orphan inode deleted [ 174.341231][ T28] audit: type=1400 audit(1771356612.829:742): avc: denied { shutdown } for pid=7161 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 174.364983][ T7155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 174.393049][ T7155] netlink: 212892 bytes leftover after parsing attributes in process `syz.5.1016'. [ 174.417874][ T28] audit: type=1326 audit(1771356613.019:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ea9ac629 code=0x7ffc0000 [ 174.466198][ T28] audit: type=1326 audit(1771356613.049:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ea9ac629 code=0x7ffc0000 [ 174.490080][ T5097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.533410][ T28] audit: type=1326 audit(1771356613.049:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ea9ac629 code=0x7ffc0000 [ 174.594016][ T28] audit: type=1326 audit(1771356613.049:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ea9ac629 code=0x7ffc0000 [ 174.674708][ T7166] ================================================================== [ 174.682817][ T7166] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 174.691415][ T7166] [ 174.693732][ T7166] write to 0xffff888100bcbbe8 of 8 bytes by task 7167 on cpu 0: [ 174.701375][ T7166] shmem_file_splice_read+0x470/0x600 [ 174.706756][ T7166] splice_direct_to_actor+0x26e/0x670 [ 174.712135][ T7166] do_splice_direct+0x119/0x1a0 [ 174.716990][ T7166] do_sendfile+0x382/0x650 [ 174.721406][ T7166] __x64_sys_sendfile64+0x105/0x150 [ 174.726599][ T7166] x64_sys_call+0x2dc4/0x3020 [ 174.731273][ T7166] do_syscall_64+0x12c/0x370 [ 174.735900][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.741795][ T7166] [ 174.744112][ T7166] write to 0xffff888100bcbbe8 of 8 bytes by task 7166 on cpu 1: [ 174.751736][ T7166] shmem_file_splice_read+0x470/0x600 [ 174.757110][ T7166] splice_direct_to_actor+0x26e/0x670 [ 174.762495][ T7166] do_splice_direct+0x119/0x1a0 [ 174.765019][ T7176] tipc: Enabling of bearer rejected, failed to enable media [ 174.767350][ T7166] do_sendfile+0x382/0x650 [ 174.767374][ T7166] __x64_sys_sendfile64+0x105/0x150 [ 174.785682][ T7166] x64_sys_call+0x2dc4/0x3020 [ 174.790366][ T7166] do_syscall_64+0x12c/0x370 [ 174.794958][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.800852][ T7166] [ 174.803162][ T7166] value changed: 0x0000000000002666 -> 0x0000000000002668 [ 174.810252][ T7166] [ 174.812569][ T7166] Reported by Kernel Concurrency Sanitizer on: [ 174.818708][ T7166] CPU: 1 UID: 0 PID: 7166 Comm: syz.1.1021 Tainted: G W syzkaller #0 PREEMPT(full) [ 174.829561][ T7166] Tainted: [W]=WARN [ 174.833362][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.843412][ T7166] ==================================================================