last executing test programs: 1m32.497009422s ago: executing program 1 (id=3716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000000), &(0x7f0000000240), 0x2}, 0x20) 1m32.495776522s ago: executing program 1 (id=3718): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m32.456225914s ago: executing program 1 (id=3720): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) 1m32.165587032s ago: executing program 3 (id=3722): pipe(&(0x7f0000000140)) epoll_create(0x2) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2808008, &(0x7f0000001040)={[{@debug}, {@jqfmt_vfsv0}, {@mblk_io_submit}, {@debug}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@audit}, {@obj_role={'obj_role', 0x3d, '&['}}, {@smackfshat={'smackfshat', 0x3d, 'nogrpid'}}, {@seclabel}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x64000400) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m30.369793566s ago: executing program 3 (id=3730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32, @ANYBLOB="14000380"], 0x34}}, 0x20000090) 1m30.312004448s ago: executing program 3 (id=3731): fsmount(0xffffffffffffffff, 0x1, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x34020000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, 0x0, 0x4) 1m29.348168597s ago: executing program 3 (id=3735): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x10, 0x0, &(0x7f0000000280)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x4000) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x100, 0x400, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x4e24, 0xa8, 0x4e24, 0x0, 0xa, 0x120, 0x20, 0x3b, 0x0, r2}, {0x9, 0xf, 0xd64f, 0x6, 0x0, 0x1, 0x100, 0x9}, {0xfffffffffffffff7, 0x2, 0x8, 0x8}, 0x9, 0x6e6bb4, 0x2, 0x0, 0x3}, {{@in=@broadcast, 0x4d5, 0x6c}, 0xa, @in=@local, 0x3505, 0x2, 0x0, 0x4, 0x17, 0xffff48d1, 0x4}}, 0xe8) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x1000) mremap(&(0x7f0000376000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f000004e000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) fcntl$setsig(0xffffffffffffffff, 0x3, 0x100) mincore(&(0x7f0000714000/0x3000)=nil, 0x3000, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) preadv(r4, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 1m28.878465361s ago: executing program 3 (id=3740): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x10020) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x3e, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 1m28.747869125s ago: executing program 1 (id=3741): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x4ee, &(0x7f0000002080)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 1m27.691978687s ago: executing program 3 (id=3745): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001200010028bd7000fddbdf25e000000200000000000000000000000001000000000000000c0015005c0735000300000014000d"], 0x48}}, 0x0) 1m27.58887591s ago: executing program 32 (id=3745): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001200010028bd7000fddbdf25e000000200000000000000000000000001000000000000000c0015005c0735000300000014000d"], 0x48}}, 0x0) 1m27.5860329s ago: executing program 1 (id=3747): unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 1m27.125735494s ago: executing program 1 (id=3751): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x800000000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0, 0x1}, 0x100ae1, 0x4, 0x0, 0x4, 0xfffffffffffffffc, 0xffff0000, 0x9, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000005000000000000008000000018000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1m27.101584415s ago: executing program 33 (id=3751): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x800000000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0, 0x1}, 0x100ae1, 0x4, 0x0, 0x4, 0xfffffffffffffffc, 0xffff0000, 0x9, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000005000000000000008000000018000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1m24.388517007s ago: executing program 2 (id=3774): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x10020) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x3e, r3}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 1m22.806151654s ago: executing program 2 (id=3784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/4088, 0xff8}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) 1m21.016812708s ago: executing program 2 (id=3797): io_setup(0x1ff, &(0x7f0000000380)=0x0) io_destroy(r0) io_submit(r0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom$unix(r2, 0x0, 0x47, 0x40012002, 0x0, 0xffffffffffffff02) 1m20.088905067s ago: executing program 2 (id=3809): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x10, 0x0, &(0x7f0000000280)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x4000) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x100, 0x400, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x4e24, 0xa8, 0x4e24, 0x0, 0xa, 0x120, 0x20, 0x3b, 0x0, r2}, {0x9, 0xf, 0xd64f, 0x6, 0x0, 0x1, 0x100, 0x9}, {0xfffffffffffffff7, 0x2, 0x8, 0x8}, 0x9, 0x6e6bb4, 0x2, 0x0, 0x3}, {{@in=@broadcast, 0x4d5, 0x6c}, 0xa, @in=@local, 0x3505, 0x2, 0x0, 0x4, 0x17, 0xffff48d1, 0x4}}, 0xe8) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x1000) mremap(&(0x7f0000376000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f000004e000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) fcntl$setsig(0xffffffffffffffff, 0x3, 0x100) mincore(&(0x7f0000714000/0x3000)=nil, 0x3000, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) preadv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 1m19.725607967s ago: executing program 2 (id=3812): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xc5bf) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x38, 0x0, &(0x7f0000000500)="2077e7dedda60fb505e6394d02d95ae1583b0f97782b80bb0e15fd51433a497e67474911a70c77e53c2086485135099591ce5d5bd6fc4e68", 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.cpus\x00', 0x2, 0x0) 1m19.493222314s ago: executing program 2 (id=3814): syz_open_dev$usbmon(0x0, 0x7, 0x74900) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"}) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) 1m19.486206325s ago: executing program 34 (id=3814): syz_open_dev$usbmon(0x0, 0x7, 0x74900) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"}) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) 3.32472799s ago: executing program 4 (id=4406): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESHEX=0x0]) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 3.279473691s ago: executing program 5 (id=4407): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@abort}, {@block_validity}, {@grpid}]}, 0x1, 0x77f, &(0x7f0000000840)="$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") syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000a40902"], 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 3.278013201s ago: executing program 4 (id=4408): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x10020) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x3e, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 3.092087877s ago: executing program 0 (id=4411): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) 2.864108654s ago: executing program 0 (id=4418): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x810a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.810900275s ago: executing program 0 (id=4419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x62020600) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x81) signalfd(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002d80)={0xe, {"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", 0x1000}}, 0x1006) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008880) 2.469250495s ago: executing program 5 (id=4420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000001, 0x0) 2.373580949s ago: executing program 6 (id=4422): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x8001, 0x4) 2.33202969s ago: executing program 4 (id=4423): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x1a0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x82518, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844) 2.253245292s ago: executing program 6 (id=4425): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') lseek(r0, 0x1, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) 2.252905942s ago: executing program 4 (id=4426): socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x200000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10020, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@fallback=r0, 0x4, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0]}, 0x40) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4044800) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f00009b9000/0x3000)=nil, 0x3000, 0x0, 0x4008132, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00001f1000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) 2.177679504s ago: executing program 6 (id=4427): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r7 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendfile(r7, r7, 0x0, 0x2000000000006) 1.129123946s ago: executing program 7 (id=4428): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x7, 0x8000001}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1b, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061114c0000000000180000000000000000000000000000009500000000000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x48}, 0x80) 957.095551ms ago: executing program 0 (id=4429): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x810a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 777.201206ms ago: executing program 4 (id=4430): modify_ldt$write2(0x11, &(0x7f00000004c0)={0x9, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 744.974368ms ago: executing program 6 (id=4431): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000009c0)={0x2, 0x12, 0x8, 0x7, 0x5, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_ident={0x2, 0xa, 0xe, 0x0, 0x718}, @sadb_key={0x1, 0x9}]}, 0x28}}, 0x0) 709.254299ms ago: executing program 0 (id=4432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, 0x0, 0x0) 614.330802ms ago: executing program 0 (id=4433): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x10020) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x3e, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 613.764071ms ago: executing program 6 (id=4434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000090) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x989680}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) fdatasync(0xffffffffffffffff) sendmsg$netlink(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)={0x10, 0x25, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) r6 = socket$netlink(0x10, 0x3, 0x4c918f3fcf6a298f) bind$netlink(r6, 0x0, 0x0) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}], 0x2}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f0000000100)=""/119, 0x77}, {0x0}, {0x0}], 0x5}, 0x1000}], 0x3, 0x8042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 613.500731ms ago: executing program 7 (id=4435): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000000)=@secondary) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRES32], 0x1, 0x343, &(0x7f0000000bc0)="$eJzs3cGLG1UcB/BfY+22tdvsQQQF8aEXvYTd9R8wSAvigrJ2pXoQpu6shkyTJRMqKWJ7E2/+HcWjN0EEz3vx7s3bXjz2UIwk2d1u4u7BQna25POB5L3My5d5k/DC7zJ5+7d/vNveKRs7WT9q76W4EhG1xxErUYtDFw7a2rh/KY57GO/Ub//5+iefff5hc2PjxmZKN5u33l1PKV1/49dvvv3pzd/6L3368/VflmJv5Yv9v9f/2ntl79X9f2593SpTq0ydbj9l6U6328/uFHnabpXtRkofF3lW5qnVKfPe1PhO0d3dHaSss718dbeXl2XKOoPUzgep30393iBlX2WtTmo0Gmn5aiyWZ7nerUebm1lzDpPhDP0we+DK9Mter5mN1vDSf5Jbj+Y6MQDgXJqt/2txeXy8ovr/sET5//X/hUWv/5+F+n8RjOr/Swfrd5r6HwAAAAAAAAAAAAAAngePh8P6cDisH7azj6rnx3z5/hfbsRv3LkcU39/burc1aSfjzZ1oRRF5rEY9nkQMj8T4TsGbH2zcWE1jK7F898EkP2pfmM6vRT1WpvOj51F+LaU0fJDSdP7F8T9aHOXXox4vn5xfn5x/Jn8p3n7rWL4R9fjjy+hGEdsxyj7Nf7eW0vsfbczkl8bvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAxNNKRE/fvbzROG5/kj/bXX416PDl5f/7VE/fnvxivXaz22gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgUDm4386KIu+dfedhnDI0PFDVxM6+EzG3U/x+LU77nHXOV+fawZo8H/Op+IcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKvB00++qZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECVysH9dlYUeW+OnaqvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HnybwAAAP//V3Yinw==") syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 565.085093ms ago: executing program 7 (id=4436): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x9, r0, 0x80000001, 0x0) 538.745954ms ago: executing program 7 (id=4437): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000c8c0)=@newtfilter={0x24, 0x25, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xb}, {0x0, 0xfff3}, {0xc, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x40090) 469.838126ms ago: executing program 7 (id=4438): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='.\x02\x00', 0x2000840, &(0x7f0000000080)=ANY=[], 0x26, 0x334, &(0x7f0000000140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140) 469.598526ms ago: executing program 4 (id=4439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x62020600) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x81) signalfd(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002d80)={0xe, {"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", 0x1000}}, 0x1006) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008880) 468.701726ms ago: executing program 5 (id=4440): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffffffffffd97}, 0x1, 0x0, 0x0, 0x20000000}, 0x4006840) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 361.191389ms ago: executing program 7 (id=4441): socket$inet6(0xa, 0x803, 0x6) prlimit64(0x0, 0x5, &(0x7f0000000180)={0xfffbfffffffffff3, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10107, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x92) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x180) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000200)=0xc) r5 = syz_clone3(&(0x7f0000000480)={0x10100, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300), {0x17}, &(0x7f0000000340)=""/145, 0x91, &(0x7f0000000400)=""/50, &(0x7f0000000440)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) setpgid(r4, r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1002, 0x2c3) write(r6, &(0x7f0000004200)='t', 0x1) unshare(0x6020400) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x9, 0x10, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r7, 0x4}, 0x38) sendfile(r6, r3, 0x0, 0x40003) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 355.291169ms ago: executing program 5 (id=4442): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x810a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 273.348702ms ago: executing program 5 (id=4443): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)=',', 0x1}, {&(0x7f0000000f40)="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", 0x204}, {&(0x7f0000000200)="f1e0bb4eb5a8daacaf47dccecf96a4a749f42643c96cc28e14d0abcb244414bce8cb7251234e6f89b08c6c456a87e8d83537cba0c238cb292f159d364b17c796ba", 0x41}, {&(0x7f0000000280)="494f2f806454d6155e144fd3a18ab5dfcf39e15a48b7d68a85c731e70dad5dcb46e0d6a4682624b4c57887927f76332c069221db01397b6ebce89b6b406df178a5bd98227d320f538dd1940644d639659f9f24efcc82b97a487e662bc4314d79fd80d4202606e706f65c2cbcfe8e1aec03914baf54e69f68ed7d002ef2db019bf568a4b1b60606b2f95914b9daceb2204007ddc35c73a90c31009a7949fb6b801f9f295ee6cafb30fc3878d06cb87d3ed3ba62f529664173b1999e8f4e80310bbbe83736bd3065ac4ad3581baa808e37a31e91562f43b8ad673183e543f74b96a61a608a98b048a9dd2c1461feb834c0a25bae5fb6ad41b263e7221b5a6dfb3043a58c5b674858bd0e94950dd144a83c00e8d98da8c8ba6d0be7f1bd649d7d9f662f5d0a533739541a2db9814680fed6592d69e5f650bd21efa99376d7efdc67858d4982a80d595b8121b0a774025ba255e8b46d94936aa6809b24762d02d247ae436736affbba3e746cf35f5fbc2b9bb607f82a773f401f7d6f87cc267c2cc7c74feffa211e7a5d9237819a876f8739f561d000e1ddf1314310610b731b7e310e1af0adb2839d16cf34cc766abc4e174abc8a2c13b92610ed9ed10ea7fe92b17c572ed700e879ce179605f7a0aacbcbeaa94697afac24", 0x1d7}, {&(0x7f00000018c0)="b2210d91b934957ed7ecedd97cdaf8d1d8264a9451466805e67b566b91a156c4cafde272cf6dd84149fdb1df35fdad261617f43a49d46837b252987cac0ff006d1d293b23b28f2e0bc1e00a482cb1dff446b67fc9a9b38a0febfeeea260495789f4cd5b05d86d93b84d85eaa0773bb47ec58e27d848721be92c68bed8893e7013af16b0bde975899fec5866331ea69b6b148408c68e9bbd4b2d32a1593bea83fa39119e715a0633ee967ae1f436191b6becdc5ccbfa38247832e8e40d85605e3b8388da279e1974c71214849d13f5a5221421b68d0f9fbb15ae6633ddac96fc71aeee079d15d11f47b77a715ad7df7739efc4677e281b12aaba9e301d21eaa3ad8cd6b8615e7bd0c0583e35748bd0bc9315d453e840a2091bfc8cda8283182d37d876d266321dd0cad306f7dae5b0e1953dfcd8d3ef4b2ecfe31c92330584b1db0c7a46180b35c5010e889641d6e47aec678aef9986224d9ecbc3001e831e8873fba777765e8a3cb1b4c7fa9bf3e11f8af87739f499dcaf53e76d2e803ac3be34e0b229186bc754d5391ec547f073249ffa951123cbf198f2609dc3b2ae77a9b7ff3053e3377dcd7a702d92e7a50e0f5ba50dbf6aa647b335ecd2ffc9841e166d6e5d3acd2b500af0382bda92cdce851920c1f2c0a675e987a63fd4ae4c6a8fe03d848221ac953106b35b5165e1ad14c8b76618985025eab6dc5721396cd1c20d184c742a7deba2afa17626040a6d80c2f0234adfac6805b9b53041519e3ac156304a542ffee8eaaeacfde79ac6a495ce0cb501429acca26d4ca5361f2f027bb1355766ea3ec8f16361b21c64efceafee4d3b3fa7c6774e513e39aad7d83a128f93558fadd3d92a1657d0517a66451e2c29c9df472ca3d118479fe9603ca0adb3f21ba0873b45ad31a13259709d471bbb9237469aae18ec8dc9a81b1fcea8ee9ce0a95f8db70ee660f6d7b1c1205e3b643f9d6ec6d402b14ec1895b80fc9e1d06810abfe1a042171593c99a2a2c858a06f5488cdbeb9625833f47393758e6f453d14dd2342fe18fec462005d5d00c72e344e7d59474465b00bd69d05e3954b48d4075a75dda55e7629e94148121be4b6742783dbee965086e62a253e5889583ab745899044bda4ad8e9212f27de49dd555bd56c6", 0x334}], 0x5, 0x0, 0x0, 0x2c}, 0x24044880) 130.032256ms ago: executing program 5 (id=4444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4c010) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000280)={[{@test_dummy_encryption_v1}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@orlov}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 0s ago: executing program 6 (id=4445): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, 0x0, 0x0, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) kernel console output (not intermixed with test programs): netlink: 60 bytes leftover after parsing attributes in process `syz.2.3688'. [ 416.597974][T14576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3688'. [ 417.047442][ C1] vcan0: j1939_tp_rxtimer: 0xffff888123e60000: abort rx timeout. Force session deactivation [ 418.427721][ C1] vcan0: j1939_tp_rxtimer: 0xffff888118b56000: rx timeout, send abort [ 418.490063][ T7613] tipc: Node number set to 2130706433 [ 418.605953][T14619] tipc: Enabling of bearer rejected, already enabled [ 418.626403][T14619] tipc: Enabling of bearer rejected, already enabled [ 418.686729][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 418.686741][ T28] audit: type=1400 audit(1781865656.604:1868): avc: denied { remount } for pid=14630 comm="syz.4.3710" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 418.962031][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810564a000: rx timeout, send abort [ 418.975519][ C1] vcan0: j1939_tp_rxtimer: 0xffff888118b56000: abort rx timeout. Force session deactivation [ 419.094002][T14641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.127831][T14641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.162195][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3714'. [ 419.275846][T14653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.285605][T14653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.504661][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810564a000: abort rx timeout. Force session deactivation [ 419.636499][T14662] loop3: detected capacity change from 0 to 4096 [ 419.648879][T14662] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 420.276084][T14676] tipc: Enabling of bearer rejected, already enabled [ 420.353522][T14676] tipc: Enabling of bearer rejected, already enabled [ 421.192989][T14686] loop0: detected capacity change from 0 to 512 [ 421.226083][T14686] EXT4-fs: test_dummy_encryption option not supported [ 421.282282][T14686] loop0: detected capacity change from 0 to 128 [ 421.317467][T14686] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 421.372388][T14686] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.427824][ T28] audit: type=1400 audit(1781865659.168:1869): avc: denied { write } for pid=14685 comm="syz.0.3729" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.452221][ T28] audit: type=1400 audit(1781865659.168:1870): avc: denied { ioctl } for pid=14685 comm="syz.0.3729" path="/106/file1/file1" dev="loop0" ino=12 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 421.476810][ T28] audit: type=1400 audit(1781865659.168:1871): avc: denied { setattr } for pid=14685 comm="syz.0.3729" name="file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 421.576467][T12757] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 422.157247][T14698] loop0: detected capacity change from 0 to 512 [ 422.175091][T14698] EXT4-fs: inline encryption not supported [ 422.187573][T14698] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.3733: bad orphan inode 15 [ 422.204620][T14698] loop0: lost filesystem error report for type 5 error -117 [ 422.204847][T14698] ext4_test_bit(bit=14, block=5) = 0 [ 422.217612][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 422.217630][ C0] EXT4-fs (loop0): initial error at time 1781865659: ext4_orphan_get:1425 [ 422.217649][ C0] EXT4-fs (loop0): last error at time 1781865659: ext4_orphan_get:1425 [ 422.244556][T14698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.271778][T14701] loop2: detected capacity change from 0 to 128 [ 422.290115][ T28] audit: type=1400 audit(1781865659.982:1872): avc: denied { write } for pid=14697 comm="syz.0.3733" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.290210][T14698] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 422.333326][T14701] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 422.354477][T14701] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 422.368626][T14701] ext2 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 422.423800][T14704] loop3: detected capacity change from 0 to 1024 [ 422.431908][T14704] EXT4-fs: Ignoring removed oldalloc option [ 422.439487][T14704] EXT4-fs: Ignoring removed oldalloc option [ 422.439735][ T28] audit: type=1400 audit(1781865660.123:1873): avc: denied { write } for pid=14700 comm="syz.2.3734" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.471914][T14704] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 422.481994][T14701] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3734: bg 0: block 156: padding at end of block bitmap is not set [ 422.509072][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.530874][T14704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.556521][T14708] loop0: detected capacity change from 0 to 256 [ 422.567240][ T28] audit: type=1400 audit(1781865660.123:1874): avc: denied { create } for pid=14700 comm="syz.2.3734" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 422.629120][T13218] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 422.657242][T14710] tipc: Enabling of bearer rejected, already enabled [ 422.687241][ T28] audit: type=1400 audit(1781865660.273:1875): avc: denied { write } for pid=14703 comm="syz.3.3735" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.726017][T14715] loop2: detected capacity change from 0 to 512 [ 422.726547][ T28] audit: type=1400 audit(1781865660.329:1876): avc: denied { map } for pid=14703 comm="syz.3.3735" path="/122/file1/blkio.bfq.io_wait_time_recursive" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 422.760972][T14710] tipc: Enabling of bearer rejected, already enabled [ 422.762603][T14715] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 422.785138][T14715] EXT4-fs (loop2): 1 truncate cleaned up [ 422.791901][T14715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.883627][ T28] audit: type=1400 audit(1781865660.525:1877): avc: denied { write } for pid=13026 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.894886][T14715] EXT4-fs error (device loop2): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.2.3737: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 422.926150][T14715] EXT4-fs error (device loop2) in ext4_delete_entry:2744: Corrupt filesystem [ 422.936773][T14715] EXT4-fs warning (device loop2): ext4_rename_delete:3739: inode #2: comm syz.2.3737: Deleting old file: nlink 4, error=-117 [ 422.942832][T14623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.040910][T14720] loop0: detected capacity change from 0 to 512 [ 423.048140][T14720] EXT4-fs: Ignoring removed orlov option [ 423.058032][T14720] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 423.099283][T14720] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #16: comm syz.0.3739: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 423.116252][T14720] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 423.116934][T14720] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3739: couldn't read orphan inode 16 (err -117) [ 423.126157][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 423.126176][ C1] EXT4-fs (loop0): initial error at time 1781865660: ext4_ext_check_inode:521: inode 16 [ 423.126200][ C1] EXT4-fs (loop0): last error at time 1781865660: ext4_ext_check_inode:521: inode 16 [ 423.163606][T14720] loop0: lost filesystem error report for type 5 error -117 [ 423.164164][T14720] EXT4-fs (loop0): 1 orphan inode deleted [ 423.178164][T14720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.200475][T14720] netlink: 'syz.0.3739': attribute type 12 has an invalid length. [ 423.208367][T14720] netlink: 'syz.0.3739': attribute type 29 has an invalid length. [ 423.216178][T14720] netlink: 'syz.0.3739': attribute type 2 has an invalid length. [ 423.224125][T14720] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3739'. [ 423.265312][T13218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.280871][T14722] loop1: detected capacity change from 0 to 512 [ 423.360476][T14722] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3741: bg 0: block 5: invalid block bitmap [ 423.465735][T14722] loop1: lost filesystem error report for type 5 error -117 [ 423.466288][T14722] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 423.482373][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 423.482416][ C1] EXT4-fs (loop1): initial error at time 1781865661: ext4_validate_block_bitmap:432 [ 423.482441][ C1] EXT4-fs (loop1): last error at time 1781865661: ext4_validate_block_bitmap:432 [ 423.531033][ T12] bridge_slave_0: left allmulticast mode [ 423.566572][ T12] bridge_slave_0: left promiscuous mode [ 423.596447][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.831511][T14722] loop1: lost filesystem error report for type 5 error -117 [ 423.831645][T14722] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3741: invalid indirect mapped block 3 (level 2) [ 423.932158][T14722] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 423.932471][T14722] EXT4-fs (loop1): 1 orphan inode deleted [ 424.001470][T14722] EXT4-fs (loop1): 1 truncate cleaned up [ 424.029769][T14722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.118010][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 424.118024][ T28] audit: type=1400 audit(1781865661.686:1893): avc: denied { write } for pid=14719 comm="syz.1.3741" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 424.145986][ T28] audit: type=1400 audit(1781865661.686:1894): avc: denied { mounton } for pid=14719 comm="syz.1.3741" path="/188/file0/file0" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 424.175744][T11854] EXT4-fs error (device loop1): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 424.216686][ T12] bond1 (unregistering): (slave bond0): Releasing backup interface [ 424.232776][ T28] audit: type=1400 audit(1781865661.686:1895): avc: denied { mounton } for pid=14719 comm="syz.1.3741" path="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 424.277335][T11854] EXT4-fs error (device loop1): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 424.304532][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.363663][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.406103][T14324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.417984][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 424.467628][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.483878][ T12] bond0 (unregistering): Released all slaves [ 424.492205][ T12] bond1 (unregistering): Released all slaves [ 424.564476][ T12] tipc: Disabling bearer [ 424.595428][ T12] tipc: Disabling bearer [ 424.617717][ T12] tipc: Left network mode [ 424.627374][T14749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.658622][T14749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.667501][ T12] hsr_slave_0: left promiscuous mode [ 424.676851][ T12] hsr_slave_1: left promiscuous mode [ 424.689163][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.699085][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.708948][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.721356][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.732378][ T12] veth0_to_team: left promiscuous mode [ 424.738094][ T12] veth1_macvtap: left promiscuous mode [ 424.743921][ T12] veth0_macvtap: left promiscuous mode [ 424.749795][ T12] veth1_vlan: left promiscuous mode [ 424.755049][ T12] veth0_vlan: left promiscuous mode [ 424.830492][ T12] team0 (unregistering): Port device team_slave_1 removed [ 424.840124][ T12] team0 (unregistering): Port device team_slave_0 removed [ 424.880484][T14749] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 425.007463][T14735] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.014698][T14735] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.021981][T14735] bridge_slave_0: entered allmulticast mode [ 425.028905][T14735] bridge_slave_0: entered promiscuous mode [ 425.036998][T14735] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.044130][T14735] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.052320][T14735] bridge_slave_1: entered allmulticast mode [ 425.059482][T14735] bridge_slave_1: entered promiscuous mode [ 425.077616][T14735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.126560][T14735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.149233][T14735] team0: Port device team_slave_0 added [ 425.157918][T14735] team0: Port device team_slave_1 added [ 425.173455][T14735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.180966][T14735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.207862][T14735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.223738][T14735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.233045][T14735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.259746][T14735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.307457][T14735] hsr_slave_0: entered promiscuous mode [ 425.314846][T14735] hsr_slave_1: entered promiscuous mode [ 425.320965][T14735] debugfs: 'hsr0' already exists in 'hsr' [ 425.327535][T14735] Cannot create hsr debugfs directory [ 425.582735][T14787] loop2: detected capacity change from 0 to 512 [ 425.611804][T14789] loop0: detected capacity change from 0 to 512 [ 425.716006][T14789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.809717][T14789] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.029029][T14735] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 426.058005][T14735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.066446][T14798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.077207][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.087403][T14735] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 426.094564][T14798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.105204][T14735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.114341][T14735] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 426.123085][T14735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.132279][T14735] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 426.141048][T14735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.282286][T14735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.290743][T14754] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.299461][T14754] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.307232][T14754] bridge_slave_0: entered allmulticast mode [ 426.314536][T14754] bridge_slave_0: entered promiscuous mode [ 426.327270][T14735] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.350699][T14754] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.365479][T14754] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.385532][T14754] bridge_slave_1: entered allmulticast mode [ 426.402473][T14754] bridge_slave_1: entered promiscuous mode [ 426.423123][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.430282][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.455991][T14406] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.463190][T14406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.512606][T14754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.549250][T14754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.652102][T14754] team0: Port device team_slave_0 added [ 426.676747][T14754] team0: Port device team_slave_1 added [ 426.742086][T14754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.751036][T14754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.777129][T14754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.788546][T14754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.802496][T14754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.828753][T14754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.829932][T14822] loop2: detected capacity change from 0 to 128 [ 426.855053][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.939160][T14754] hsr_slave_0: entered promiscuous mode [ 426.960131][T14754] hsr_slave_1: entered promiscuous mode [ 426.979698][T14754] debugfs: 'hsr0' already exists in 'hsr' [ 426.993206][T14754] Cannot create hsr debugfs directory [ 427.014560][ T28] audit: type=1400 audit(1781865664.399:1896): avc: denied { write } for pid=14824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.054378][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.081137][T14848] loop2: detected capacity change from 0 to 256 [ 427.091649][ T28] audit: type=1400 audit(1781865664.446:1897): avc: denied { write } for pid=14844 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.126049][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1 [ 427.141779][T14848] FAT-fs (loop2): codepage cp737 not found [ 427.173394][T14735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.198505][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.276221][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.408606][ T12] bridge_slave_1: left allmulticast mode [ 427.414310][ T12] bridge_slave_1: left promiscuous mode [ 427.422187][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.424617][ T28] audit: type=1400 audit(1781865664.783:1898): avc: denied { write } for pid=14860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.454831][ T12] bridge_slave_0: left allmulticast mode [ 427.462953][ T12] bridge_slave_0: left promiscuous mode [ 427.472972][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.482834][ T28] audit: type=1400 audit(1781865664.839:1899): avc: denied { write } for pid=14882 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.509002][ T12] bridge_slave_1: left allmulticast mode [ 427.514697][ T12] bridge_slave_1: left promiscuous mode [ 427.520689][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.530123][ T12] bridge_slave_0: left allmulticast mode [ 427.536645][ T12] bridge_slave_0: left promiscuous mode [ 427.542372][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.570985][T14889] loop0: detected capacity change from 0 to 512 [ 427.591923][T14889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.605169][T14889] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.618071][ T28] audit: type=1400 audit(1781865664.961:1900): avc: denied { write } for pid=14888 comm="syz.0.3777" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 427.640173][ T28] audit: type=1400 audit(1781865664.961:1901): avc: denied { write } for pid=14888 comm="syz.0.3777" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 427.668288][ T28] audit: type=1400 audit(1781865664.961:1902): avc: denied { append } for pid=14888 comm="syz.0.3777" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 427.693044][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.694439][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.719642][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.730842][ T12] bond0 (unregistering): Released all slaves [ 427.788781][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.892755][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.902812][ T12] bond0 (unregistering): Released all slaves [ 427.913920][T14754] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 427.922746][T14754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.932850][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2 [ 427.943440][T14754] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 427.973632][T14754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.000678][ T12] tipc: Disabling bearer [ 428.021521][ T12] tipc: Disabling bearer [ 428.030210][T14754] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 428.037196][ T12] tipc: Left network mode [ 428.052784][T14754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.078535][ T12] tipc: Disabling bearer [ 428.084325][ T12] tipc: Disabling bearer [ 428.102360][ T12] tipc: Left network mode [ 428.106921][T14754] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 428.118553][T14754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.153429][ T12] hsr_slave_0: left promiscuous mode [ 428.163952][ T12] hsr_slave_1: left promiscuous mode [ 428.170098][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.193613][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.221739][ T12] hsr_slave_0: left promiscuous mode [ 428.227636][ T12] hsr_slave_1: left promiscuous mode [ 428.235807][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.259209][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.283986][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.307899][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.343458][ T12] veth1_macvtap: left promiscuous mode [ 428.362529][ T12] veth0_macvtap: left promiscuous mode [ 428.381193][ T12] veth1_vlan: left promiscuous mode [ 428.398908][ T12] veth0_vlan: left promiscuous mode [ 428.621404][ T12] team0 (unregistering): Port device team_slave_1 removed [ 428.635277][ T12] team0 (unregistering): Port device team_slave_0 removed [ 428.777020][ T12] team0 (unregistering): Port device team_slave_1 removed [ 428.788384][ T12] team0 (unregistering): Port device team_slave_0 removed [ 428.927168][T14735] veth0_vlan: entered promiscuous mode [ 428.971022][T14735] veth1_vlan: entered promiscuous mode [ 429.005129][T14754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.043751][T14754] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.058521][T14934] loop0: detected capacity change from 0 to 1024 [ 429.071704][T14735] veth0_macvtap: entered promiscuous mode [ 429.107208][T14735] veth1_macvtap: entered promiscuous mode [ 429.127980][T14934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.164379][T14735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.197060][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.204158][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.273947][T14735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.286886][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 429.303776][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.310881][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.364724][T14406] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.378132][T14406] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.417873][T14406] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.443979][T14406] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.538472][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 429.538486][ T28] audit: type=1400 audit(1781865666.758:1907): avc: denied { mount } for pid=14735 comm="syz-executor" name="/" dev="gadgetfs" ino=4688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 429.611769][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.657441][T14965] capability: warning: `syz.0.3787' uses deprecated v2 capabilities in a way that may be insecure [ 429.708840][ T28] audit: type=1400 audit(1781865666.917:1908): avc: denied { write } for pid=14948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.743241][T14974] loop5: detected capacity change from 0 to 512 [ 429.765303][T14974] EXT4-fs: Ignoring removed i_version option [ 429.782110][ T28] audit: type=1400 audit(1781865666.992:1909): avc: denied { write } for pid=14977 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.810499][T14974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.846330][T14974] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.857371][ T3017] 8021q: adding VLAN 0 to HW filter on device eth3 [ 429.877325][T14754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.884641][ T28] audit: type=1400 audit(1781865667.076:1910): avc: denied { write } for pid=14970 comm="syz.5.3789" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 429.957690][T14735] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.151860][ T28] audit: type=1400 audit(1781865667.328:1911): avc: denied { write } for pid=14997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.349193][T14754] veth0_vlan: entered promiscuous mode [ 430.409191][T14754] veth1_vlan: entered promiscuous mode [ 430.484529][T14754] veth0_macvtap: entered promiscuous mode [ 430.516553][T14754] veth1_macvtap: entered promiscuous mode [ 430.592126][T14754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.637648][T14754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.647698][ T28] audit: type=1400 audit(1781865667.787:1912): avc: denied { write } for pid=15021 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.694361][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 430.703526][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.716306][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.733846][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.748227][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.773667][T15034] tipc: Started in network mode [ 430.778731][T15034] tipc: Node identity 7f000001, cluster identity 4711 [ 430.797245][T15034] tipc: Enabled bearer , priority 10 [ 430.807826][T15034] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 430.816979][T15034] tipc: Enabled bearer , priority 10 [ 430.841816][T15038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3798'. [ 430.853147][T15038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3798'. [ 431.109941][T15041] loop5: detected capacity change from 0 to 4096 [ 431.135577][T15041] EXT4-fs: Ignoring removed mblk_io_submit option [ 431.194541][T15041] EXT4-fs: test_dummy_encryption option not supported [ 431.360617][ T28] audit: type=1400 audit(1781865668.461:1913): avc: denied { write } for pid=15042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.429248][ T28] audit: type=1400 audit(1781865668.526:1914): avc: denied { write } for pid=15057 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.442017][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 431.553988][T15079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.562559][T15079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.575421][ T28] audit: type=1400 audit(1781865668.667:1915): avc: denied { write } for pid=15068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.599286][ T28] audit: type=1400 audit(1781865668.676:1916): avc: denied { write } for pid=15083 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.624446][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 431.680437][T15091] loop6: detected capacity change from 0 to 512 [ 431.689119][T15091] EXT4-fs: Ignoring removed nobh option [ 431.703155][T15091] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 431.712534][T15091] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.3807: attempt to clear invalid blocks 1 len 1 [ 431.725853][T15091] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 431.726074][T15091] EXT4-fs (loop6): Remounting filesystem read-only [ 431.735214][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 431.735238][ C0] EXT4-fs (loop6): initial error at time 1781865668: ext4_clear_blocks:876: inode 13 [ 431.735273][ C0] EXT4-fs (loop6): last error at time 1781865668: ext4_clear_blocks:876: inode 13 [ 431.768958][T15096] loop2: detected capacity change from 0 to 1024 [ 431.770465][T15091] EXT4-fs (loop6): 1 truncate cleaned up [ 431.782054][T15091] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.792717][T15096] EXT4-fs: Ignoring removed oldalloc option [ 431.813145][T15096] EXT4-fs: Ignoring removed oldalloc option [ 431.820865][T15096] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 431.854724][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.867912][T15096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.956942][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8 [ 431.991503][ T35] tipc: Node number set to 2130706433 [ 432.135933][T15124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.149213][T15124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.187234][T15118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.238173][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.316344][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.376758][T15133] loop5: detected capacity change from 0 to 128 [ 432.410667][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.486207][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.543886][T15145] loop6: detected capacity change from 0 to 512 [ 432.598128][T15145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.677124][T15145] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 432.692413][ T68] bridge_slave_1: left allmulticast mode [ 432.698623][ T68] bridge_slave_1: left promiscuous mode [ 432.704717][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.716844][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.726364][ T68] bridge_slave_0: left allmulticast mode [ 432.734294][ T68] bridge_slave_0: left promiscuous mode [ 432.751306][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.907066][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.919120][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.944946][ T68] bond0 (unregistering): Released all slaves [ 432.988186][ T3017] 8021q: adding VLAN 0 to HW filter on device eth9 [ 433.050763][T15189] tipc: Enabling of bearer rejected, already enabled [ 433.090263][T15130] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.097593][T15130] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.105309][T15130] bridge_slave_0: entered allmulticast mode [ 433.111908][T15130] bridge_slave_0: entered promiscuous mode [ 433.120661][T15130] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.131340][T15130] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.140839][T15130] bridge_slave_1: entered allmulticast mode [ 433.147653][T15130] bridge_slave_1: entered promiscuous mode [ 433.231287][T15130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.245126][T15130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.269088][T15130] team0: Port device team_slave_0 added [ 433.274792][ T68] tipc: Disabling bearer [ 433.326696][ T68] tipc: Disabling bearer [ 433.345421][T15210] loop5: detected capacity change from 0 to 1024 [ 433.352781][T15210] EXT4-fs: Ignoring removed orlov option [ 433.380544][T15130] team0: Port device team_slave_1 added [ 433.394677][ T68] tipc: Left network mode [ 433.419818][ T68] hsr_slave_0: left promiscuous mode [ 433.453529][T15210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.529634][ T68] hsr_slave_1: left promiscuous mode [ 433.557894][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.570470][T15216] loop6: detected capacity change from 0 to 512 [ 433.577110][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.585551][T15216] EXT4-fs: test_dummy_encryption option not supported [ 433.615643][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.659971][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.714793][T15218] loop6: detected capacity change from 0 to 128 [ 433.724119][ T68] veth1_macvtap: left promiscuous mode [ 433.749027][ T68] veth0_macvtap: left promiscuous mode [ 433.795493][ T68] veth1_vlan: left promiscuous mode [ 433.826719][ T68] veth0_vlan: left promiscuous mode [ 434.093754][ T68] team0 (unregistering): Port device team_slave_1 removed [ 434.115276][ T68] team0 (unregistering): Port device team_slave_0 removed [ 434.187936][T15130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.202994][T15130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.234664][T15130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.278611][T15130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.335118][T15130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.427964][T15130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.448882][ T3017] 8021q: adding VLAN 0 to HW filter on device eth10 [ 434.505740][T15130] hsr_slave_0: entered promiscuous mode [ 434.563468][T15130] hsr_slave_1: entered promiscuous mode [ 434.576945][T15240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3837'. [ 434.821038][T14735] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.916360][T15130] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 434.927611][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 434.927625][ T28] audit: type=1400 audit(1781865671.802:1935): avc: denied { write } for pid=15262 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.958579][T15130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.981830][ T3017] 8021q: adding VLAN 0 to HW filter on device eth11 [ 434.994026][ T28] audit: type=1400 audit(1781865671.811:1936): avc: denied { unlink } for pid=12016 comm="syz-executor" name="file0" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 434.995362][T15130] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 435.073288][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3840'. [ 435.138570][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3840'. [ 435.152212][T15130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.265132][T15130] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 435.332637][T15130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.401519][T15130] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 435.494300][T15130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.620559][ T28] audit: type=1400 audit(1781865672.447:1937): avc: denied { write } for pid=15280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.627425][T15130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.973569][ T28] audit: type=1400 audit(1781865672.784:1938): avc: denied { write } for pid=15302 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.150164][ T3017] 8021q: adding VLAN 0 to HW filter on device eth12 [ 436.163953][T15130] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.182940][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.190025][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.235989][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.243161][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.313951][T15316] loop5: detected capacity change from 0 to 512 [ 436.344162][T15316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.357811][T15316] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.382784][T14735] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.423322][ T28] audit: type=1400 audit(1781865673.196:1939): avc: denied { write } for pid=15307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.446615][T15318] loop6: detected capacity change from 0 to 8192 [ 436.534048][ T28] audit: type=1400 audit(1781865673.299:1940): avc: denied { write } for pid=15336 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.579676][ T28] audit: type=1400 audit(1781865673.336:1941): avc: denied { write } for pid=15333 comm="syz.5.3852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 436.672367][T15130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.745654][T15351] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3854'. [ 437.614190][ T28] audit: type=1400 audit(1781865674.319:1942): avc: denied { create } for pid=15372 comm="syz.4.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 437.802412][ T28] audit: type=1400 audit(1781865674.487:1943): avc: denied { write } for pid=15342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.423537][ T28] audit: type=1400 audit(1781865675.068:1944): avc: denied { write } for pid=15390 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.532283][T15130] veth0_vlan: entered promiscuous mode [ 438.560849][T15130] veth1_vlan: entered promiscuous mode [ 438.634424][T15130] veth0_macvtap: entered promiscuous mode [ 438.675450][T15130] veth1_macvtap: entered promiscuous mode [ 438.746803][T15130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.782832][T15130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.806218][ T154] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.837066][ T154] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.881524][ T154] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.912189][ T154] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.987347][T15439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3871'. [ 439.014857][T15442] loop6: detected capacity change from 0 to 256 [ 439.037941][T15442] FAT-fs (loop6): IO charset cp932 not found [ 439.171449][T15465] loop6: detected capacity change from 0 to 2048 [ 439.183907][T15465] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.211781][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.288624][T15490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.291804][ C1] vcan0: j1939_tp_rxtimer: 0xffff888123ffea00: rx timeout, send abort [ 439.298456][T15490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.826107][ C1] vcan0: j1939_tp_rxtimer: 0xffff888123ffe000: rx timeout, send abort [ 439.839711][ C1] vcan0: j1939_tp_rxtimer: 0xffff888123ffea00: abort rx timeout. Force session deactivation [ 439.894758][T15541] loop6: detected capacity change from 0 to 256 [ 439.926832][T15543] tipc: Started in network mode [ 439.941675][T15543] tipc: Node identity 7f000001, cluster identity 4711 [ 439.953854][T15543] tipc: Enabled bearer , priority 10 [ 439.968173][T15546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3885'. [ 439.994074][T15541] FAT-fs (loop6): codepage cp861 not found [ 440.006534][T15543] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 440.054545][T15543] tipc: Enabled bearer , priority 10 [ 440.102706][T15555] loop6: detected capacity change from 0 to 512 [ 440.166099][T15555] EXT4-fs: inline encryption not supported [ 440.212845][T15555] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.3889: bad orphan inode 15 [ 440.222948][T15555] loop6: lost filesystem error report for type 5 error -117 [ 440.224459][T15555] ext4_test_bit(bit=14, block=5) = 0 [ 440.231851][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 440.231876][ C1] EXT4-fs (loop6): initial error at time 1781865676: ext4_orphan_get:1425 [ 440.231898][ C1] EXT4-fs (loop6): last error at time 1781865676: ext4_orphan_get:1425 [ 440.235902][T15560] xt_hashlimit: size too large, truncated to 1048576 [ 440.243284][T15555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.292770][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 440.292841][ T28] audit: type=1400 audit(1781865676.817:1959): avc: denied { setattr } for pid=15554 comm="syz.6.3889" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 440.328499][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.368656][ C1] vcan0: j1939_tp_rxtimer: 0xffff888123ffe000: abort rx timeout. Force session deactivation [ 440.531830][T15577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3895'. [ 441.118692][ T11] tipc: Node number set to 2130706433 [ 441.151501][T15592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.165010][T15592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.297840][T15602] tipc: Enabling of bearer rejected, already enabled [ 441.306766][T15602] tipc: Enabling of bearer rejected, already enabled [ 441.476714][ C0] vcan0: j1939_tp_rxtimer: 0xffff888124ef3c00: rx timeout, send abort [ 441.574487][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3910'. [ 441.585153][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3910'. [ 441.786949][T15618] loop7: detected capacity change from 0 to 128 [ 441.818654][T15618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.845188][T15618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.011037][ C0] vcan0: j1939_tp_rxtimer: 0xffff888123f11c00: rx timeout, send abort [ 442.019405][ C0] vcan0: j1939_tp_rxtimer: 0xffff888124ef3c00: abort rx timeout. Force session deactivation [ 442.081570][T15630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3918'. [ 442.553588][ C0] vcan0: j1939_tp_rxtimer: 0xffff888123f11c00: abort rx timeout. Force session deactivation [ 442.567952][T15642] loop0: detected capacity change from 0 to 128 [ 442.584573][T15642] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 442.617903][T15642] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 442.659329][ T28] audit: type=1400 audit(1781865679.026:1960): avc: denied { write } for pid=15641 comm="syz.0.3921" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 442.694680][T12757] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 442.767929][T15650] tipc: Enabling of bearer rejected, already enabled [ 442.792106][T15650] tipc: Enabling of bearer rejected, already enabled [ 442.930166][T15653] loop6: detected capacity change from 0 to 512 [ 442.938309][T15653] EXT4-fs: test_dummy_encryption option not supported [ 443.262030][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810c6a9e00: rx timeout, send abort [ 443.796379][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811940ae00: rx timeout, send abort [ 443.804757][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810c6a9e00: abort rx timeout. Force session deactivation [ 443.944838][T15672] loop0: detected capacity change from 0 to 128 [ 444.338927][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811940ae00: abort rx timeout. Force session deactivation [ 444.461929][ T28] audit: type=1400 audit(1781865680.720:1961): avc: denied { write } for pid=15684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.527235][ T28] audit: type=1400 audit(1781865680.720:1962): avc: denied { write } for pid=15697 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.601342][ T28] audit: type=1400 audit(1781865680.851:1963): avc: denied { write } for pid=15700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.762271][ T28] audit: type=1400 audit(1781865681.000:1964): avc: denied { write } for pid=15717 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.793280][T15726] tipc: Enabling of bearer rejected, already enabled [ 444.805855][T15726] tipc: Enabling of bearer rejected, already enabled [ 445.350497][ T28] audit: type=1400 audit(1781865681.562:1965): avc: denied { write } for pid=15729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.423418][ T28] audit: type=1400 audit(1781865681.618:1966): avc: denied { write } for pid=15746 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.629191][ T28] audit: type=1400 audit(1781865681.824:1967): avc: denied { write } for pid=15749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.652262][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a2a3800: rx timeout, send abort [ 445.710971][ T28] audit: type=1400 audit(1781865681.889:1968): avc: denied { write } for pid=15764 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.912857][ T28] audit: type=1400 audit(1781865682.077:1969): avc: denied { write } for pid=15770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.984859][ T28] audit: type=1400 audit(1781865682.152:1970): avc: denied { write } for pid=15790 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.146738][ T28] audit: type=1400 audit(1781865682.301:1971): avc: denied { write } for pid=15794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.181193][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b7f0200: rx timeout, send abort [ 446.189456][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a2a3800: abort rx timeout. Force session deactivation [ 446.201579][T15816] loop0: detected capacity change from 0 to 512 [ 446.217953][T15816] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 446.248742][ T28] audit: type=1400 audit(1781865682.404:1972): avc: denied { write } for pid=15817 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.248786][T15819] tipc: Started in network mode [ 446.283182][T15816] EXT4-fs (loop0): 1 truncate cleaned up [ 446.301791][T15816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.332262][T15819] tipc: Node identity 7f000001, cluster identity 4711 [ 446.347145][T15819] tipc: Enabled bearer , priority 10 [ 446.377036][T15819] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 446.385636][T15825] netlink: 'syz.0.3956': attribute type 1 has an invalid length. [ 446.393398][T15825] netlink: 'syz.0.3956': attribute type 2 has an invalid length. [ 446.401385][T15819] tipc: Enabled bearer , priority 10 [ 446.408438][T15825] netlink: 'syz.0.3956': attribute type 1 has an invalid length. [ 446.416197][T15825] netlink: 'syz.0.3956': attribute type 2 has an invalid length. [ 446.460282][ T28] audit: type=1400 audit(1781865682.591:1973): avc: denied { write } for pid=15823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.502417][ T28] audit: type=1400 audit(1781865682.629:1974): avc: denied { write } for pid=15835 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.606594][ T28] audit: type=1400 audit(1781865682.732:1975): avc: denied { write } for pid=15840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.657926][ T28] audit: type=1400 audit(1781865682.779:1976): avc: denied { write } for pid=15854 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.723746][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b7f0200: abort rx timeout. Force session deactivation [ 446.944489][T15868] loop7: detected capacity change from 0 to 512 [ 446.959669][T15868] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 446.986704][T15868] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 446.995348][T15868] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.146240][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.159649][T15871] IPv6: Can't replace route, no match found [ 447.426068][ T3381] tipc: Node number set to 2130706433 [ 447.447419][T15875] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3965'. [ 447.655901][T15881] loop6: detected capacity change from 0 to 1024 [ 447.688817][T15881] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 447.720753][T15881] EXT4-fs (loop6): orphan cleanup on readonly fs [ 447.734768][T15881] Quota error (device loop6): v2_read_file_info: Free block number 131072 out of range (1, 6). [ 447.762774][T15881] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 447.810987][T15881] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 447.822211][T15881] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.3969: Freeing blocks not in datazone - block = 0, count = 4096 [ 447.835584][ C0] vcan0: j1939_tp_rxtimer: 0xffff888124d00c00: rx timeout, send abort [ 447.887015][T15881] loop6: lost filesystem error report for type 5 error -117 [ 447.887188][T15881] EXT4-fs (loop6): 1 orphan inode deleted [ 447.894521][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 447.894537][ C0] EXT4-fs (loop6): initial error at time 1781866452: ext4_free_blocks:6718 [ 447.894578][ C0] EXT4-fs (loop6): last error at time 1781866452: ext4_free_blocks:6718 [ 447.990872][T15881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 448.262745][T15888] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 448.272728][T15888] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 448.307341][ C0] vcan0: j1939_tp_rxtimer: 0xffff888124d01200: rx timeout, send abort [ 448.320692][ C0] vcan0: j1939_tp_rxtimer: 0xffff888124d00c00: abort rx timeout. Force session deactivation [ 448.436761][T15130] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.450140][T15896] tipc: Enabled bearer , priority 0 [ 448.477736][T15896] syzkaller0: entered promiscuous mode [ 448.489478][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.500768][T15896] syzkaller0: entered allmulticast mode [ 448.544250][T15896] tipc: Resetting bearer [ 448.567883][T15895] tipc: Resetting bearer [ 448.585388][T15895] tipc: Disabling bearer [ 448.662938][T15906] loop5: detected capacity change from 0 to 1024 [ 448.673133][T15906] EXT4-fs: Ignoring removed orlov option [ 448.703631][T15906] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 448.727396][T15906] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 448.750688][T15906] EXT4-fs (loop5): orphan cleanup on readonly fs [ 448.791985][ C0] vcan0: j1939_tp_rxtimer: 0xffff888124d01200: abort rx timeout. Force session deactivation [ 448.798697][T15906] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.3978: Invalid inode table block 0 in block_group 0 [ 448.823296][T15906] loop5: lost filesystem error report for type 5 error -117 [ 448.823432][T15906] EXT4-fs (loop5): Remounting filesystem read-only [ 448.830768][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 448.830784][ C1] EXT4-fs (loop5): initial error at time 1781866453: __ext4_get_inode_loc:4886 [ 448.830804][ C1] EXT4-fs (loop5): last error at time 1781866453: __ext4_get_inode_loc:4886 [ 448.915271][T15911] loop6: detected capacity change from 0 to 256 [ 448.929096][T15911] tipc: Bearer : already 2 bearers with priority 10 [ 448.936374][T15911] tipc: Bearer : trying with adjusted priority [ 448.943452][T15911] tipc: Enabled bearer , priority 9 [ 449.139261][T15906] EXT4-fs (loop5): 1 truncate cleaned up [ 449.356859][T15906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 449.739701][T14735] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.146377][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8ef800: rx timeout, send abort [ 450.588432][T15946] loop6: detected capacity change from 0 to 1024 [ 450.597309][T15946] EXT4-fs: Ignoring removed oldalloc option [ 450.603627][T15946] EXT4-fs: Ignoring removed oldalloc option [ 450.611758][T15946] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 450.622568][ C0] vcan0: j1939_tp_rxtimer: 0xffff888135234a00: rx timeout, send abort [ 450.630855][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8ef800: abort rx timeout. Force session deactivation [ 450.664886][T15951] loop0: detected capacity change from 0 to 128 [ 450.720895][T15954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3988'. [ 450.731283][T15954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3988'. [ 450.779507][T15946] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.794489][T15951] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 450.857459][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 450.857499][ T28] audit: type=1400 audit(1781866455.150:1981): avc: denied { write } for pid=15945 comm="syz.6.3987" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 450.955719][T15959] tipc: Enabling of bearer rejected, already enabled [ 450.969825][T15951] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 451.039918][T15959] tipc: Enabling of bearer rejected, already enabled [ 451.106017][ T28] audit: type=1400 audit(1781866455.413:1982): avc: denied { write } for pid=15950 comm="syz.0.3989" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.127870][ C0] vcan0: j1939_tp_rxtimer: 0xffff888135234a00: abort rx timeout. Force session deactivation [ 451.159765][T12757] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 451.202149][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.229451][ T28] audit: type=1400 audit(1781866455.539:1983): avc: denied { map } for pid=15962 comm="syz.0.3991" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 451.365007][T15975] loop0: detected capacity change from 0 to 4096 [ 451.374759][T15975] EXT4-fs: inline encryption not supported [ 451.426876][T15975] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 451.428735][ T28] audit: type=1400 audit(1781866455.738:1984): avc: denied { create } for pid=15976 comm="syz.4.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 451.441554][T15975] System zones: 0-5 [ 451.494831][ T28] audit: type=1400 audit(1781866455.748:1985): avc: denied { sys_admin } for pid=15976 comm="syz.4.3997" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 451.515934][ T28] audit: type=1400 audit(1781866455.801:1986): avc: denied { unmount } for pid=15976 comm="syz.4.3997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 451.518925][T15975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.616742][T15988] loop6: detected capacity change from 0 to 256 [ 451.635361][T15988] FAT-fs (loop6): Directory bread(block 64) failed [ 451.645183][T15988] FAT-fs (loop6): Directory bread(block 65) failed [ 451.665639][T15988] FAT-fs (loop6): Directory bread(block 66) failed [ 451.676032][T15988] FAT-fs (loop6): Directory bread(block 67) failed [ 451.682836][T15988] FAT-fs (loop6): Directory bread(block 68) failed [ 451.689502][T15988] FAT-fs (loop6): Directory bread(block 69) failed [ 451.706991][T15988] FAT-fs (loop6): Directory bread(block 70) failed [ 451.715488][ T28] audit: type=1400 audit(1781866456.053:1987): avc: denied { write } for pid=15974 comm="syz.0.3996" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.738350][T15988] FAT-fs (loop6): Directory bread(block 71) failed [ 451.749526][T15988] FAT-fs (loop6): Directory bread(block 72) failed [ 451.764736][T15988] FAT-fs (loop6): Directory bread(block 73) failed [ 451.772998][ T28] audit: type=1400 audit(1781866456.084:1988): avc: denied { write } for pid=15981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.811997][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.837328][ T28] audit: type=1400 audit(1781866456.147:1989): avc: denied { write } for pid=16000 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.892990][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a5dbe00: rx timeout, send abort [ 451.968777][ T28] audit: type=1400 audit(1781866456.305:1990): avc: denied { write } for pid=16003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.369234][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a75d400: rx timeout, send abort [ 452.377630][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a5dbe00: abort rx timeout. Force session deactivation [ 452.630425][T16042] loop6: detected capacity change from 0 to 1024 [ 452.647452][T16042] EXT4-fs: Ignoring removed oldalloc option [ 452.672924][T16042] EXT4-fs: Ignoring removed oldalloc option [ 452.689637][T16044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.707392][T16042] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 452.708993][T16044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.746178][T16042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.791594][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.853821][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a75d400: abort rx timeout. Force session deactivation [ 453.003731][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4007'. [ 453.014384][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4007'. [ 453.450435][T16061] tipc: Enabling of bearer rejected, already enabled [ 453.472927][T16061] tipc: Enabling of bearer rejected, already enabled [ 453.634929][T16063] xt_hashlimit: size too large, truncated to 1048576 [ 453.961220][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115c23000: rx timeout, send abort [ 454.245448][T16088] loop5: detected capacity change from 0 to 256 [ 454.437572][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a769800: rx timeout, send abort [ 454.454520][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115c23000: abort rx timeout. Force session deactivation [ 454.922089][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a769800: abort rx timeout. Force session deactivation [ 455.627870][T16098] loop6: detected capacity change from 0 to 512 [ 456.325976][T16098] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 457.047164][T16101] loop5: detected capacity change from 0 to 512 [ 457.113878][T16101] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 457.173877][T16098] EXT4-fs (loop6): 1 truncate cleaned up [ 457.308638][T16098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.326868][T16101] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -ENXIO [ 457.372079][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 457.372166][ T28] audit: type=1400 audit(1781866461.985:2001): avc: denied { write } for pid=16097 comm="syz.6.4025" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.432846][ T28] audit: type=1400 audit(1781866461.985:2002): avc: denied { read write } for pid=16097 comm="syz.6.4025" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 457.485102][ T28] audit: type=1400 audit(1781866461.985:2003): avc: denied { open } for pid=16097 comm="syz.6.4025" path="/56/file2/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 457.563772][T16114] tipc: Enabling of bearer rejected, already enabled [ 457.578314][ T28] audit: type=1400 audit(1781866462.027:2004): avc: denied { map } for pid=16097 comm="syz.6.4025" path="/56/file2/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 457.614493][T16114] tipc: Enabling of bearer rejected, already enabled [ 457.622531][ T28] audit: type=1400 audit(1781866462.027:2005): avc: denied { execute } for pid=16097 comm="syz.6.4025" path="/56/file2/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 457.674177][ T28] audit: type=1400 audit(1781866462.143:2006): avc: denied { unlink } for pid=14735 comm="syz-executor" name="file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 457.710626][T16118] loop0: detected capacity change from 0 to 512 [ 457.773275][T16118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.797222][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.826001][T16118] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.838465][ T28] audit: type=1400 audit(1781866462.478:2007): avc: denied { write } for pid=16117 comm="syz.0.4031" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.880294][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.889422][ T28] audit: type=1400 audit(1781866462.478:2008): avc: denied { append } for pid=16117 comm="syz.0.4031" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 457.911877][ T28] audit: type=1400 audit(1781866462.499:2009): avc: denied { setattr } for pid=16117 comm="syz.0.4031" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 457.955139][ T28] audit: type=1400 audit(1781866462.594:2010): avc: denied { write } for pid=16127 comm="syz.0.4034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 458.110723][T16136] loop6: detected capacity change from 0 to 1024 [ 458.207920][T16140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.243638][T16140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.263436][T16136] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 458.364564][T16136] JBD2: no valid journal superblock found [ 458.399997][T16136] EXT4-fs (loop6): Could not load journal inode [ 459.280747][T16162] tipc: Enabling of bearer rejected, failed to enable media [ 459.423708][T16170] tipc: Enabling of bearer rejected, already enabled [ 459.462116][T16170] tipc: Enabling of bearer rejected, already enabled [ 459.977775][T16184] xt_ecn: cannot match TCP bits for non-tcp packets [ 460.893324][T16191] tipc: Enabled bearer , priority 0 [ 460.900473][T16191] syzkaller0: entered promiscuous mode [ 460.911254][T16191] syzkaller0: entered allmulticast mode [ 461.479638][T16191] tipc: Resetting bearer [ 461.544168][T15221] bridge_slave_0: left allmulticast mode [ 461.552144][T15221] bridge_slave_0: left promiscuous mode [ 461.558049][T15221] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.650476][T16202] loop6: detected capacity change from 0 to 256 [ 461.667474][T15221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.678764][T15221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.695473][T15221] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 461.704364][T15221] bond0 (unregistering): Released all slaves [ 461.713556][T16202] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 461.715701][T16192] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 461.724216][T16202] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 461.763158][T16189] tipc: Resetting bearer [ 461.777896][T16189] tipc: Disabling bearer [ 461.789456][T16209] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 461.800058][T16209] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 461.810381][T16209] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 461.820858][T16209] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 461.831150][T16209] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 461.841421][T16209] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 461.860782][T16209] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 461.879947][T15221] tipc: Left network mode [ 461.893891][T16209] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 461.939889][T16212] GUP no longer grows the stack in syz.5.4064 (16212): 200000004000-200000005000 (200000001000) [ 461.951420][T16212] CPU: 0 UID: 0 PID: 16212 Comm: syz.5.4064 Not tainted syzkaller #0 PREEMPT(lazy) [ 461.951452][T16212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 461.951502][T16212] Call Trace: [ 461.951510][T16212] [ 461.951518][T16212] __dump_stack+0x1d/0x30 [ 461.951543][T16212] dump_stack_lvl+0x95/0xd0 [ 461.951565][T16212] dump_stack+0x15/0x1b [ 461.951586][T16212] __get_user_pages+0x1b27/0x1f10 [ 461.951617][T16212] __gup_longterm_locked+0x905/0xe30 [ 461.951708][T16212] ? security_ptrace_access_check+0x61/0x70 [ 461.951738][T16212] ? __ptrace_may_access+0x288/0x330 [ 461.951816][T16212] pin_user_pages_remote+0x7e/0xb0 [ 461.951848][T16212] process_vm_rw+0x49b/0x9c0 [ 461.951936][T16212] ? hrtimer_start_range_ns_common+0x585/0x860 [ 461.951980][T16212] ? restore_fpregs_from_fpstate+0x61/0x110 [ 461.952004][T16212] __x64_sys_process_vm_writev+0x78/0x90 [ 461.952072][T16212] x64_sys_call+0x1592/0x3020 [ 461.952095][T16212] do_syscall_64+0x136/0x3c0 [ 461.952115][T16212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.952135][T16212] RIP: 0033:0x7f23e4f3ce59 [ 461.952156][T16212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.952225][T16212] RSP: 002b:00007f23e3997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 461.952254][T16212] RAX: ffffffffffffffda RBX: 00007f23e51b5fa0 RCX: 00007f23e4f3ce59 [ 461.952267][T16212] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000097 [ 461.952279][T16212] RBP: 00007f23e4fd2e6f R08: 0000000000000001 R09: 0000000000000000 [ 461.952291][T16212] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 461.952352][T16212] R13: 00007f23e51b6038 R14: 00007f23e51b5fa0 R15: 00007fff21bb60e8 [ 461.952369][T16212] [ 461.955894][T16215] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4065'. [ 462.000937][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115c65400: rx timeout, send abort [ 462.182292][T15221] hsr_slave_0: left promiscuous mode [ 462.189377][T15221] hsr_slave_1: left promiscuous mode [ 462.195116][T15221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.210552][T15221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.220209][T15221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.223851][T16223] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4068'. [ 462.238968][T15221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.250071][T15221] veth0_to_team: left promiscuous mode [ 462.264544][T15221] veth1_macvtap: left promiscuous mode [ 462.270249][T15221] veth0_macvtap: left promiscuous mode [ 462.280552][T15221] veth1_vlan: left promiscuous mode [ 462.288952][T15221] veth0_vlan: left promiscuous mode [ 462.320695][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 462.320710][ T28] audit: type=1400 audit(1781866467.182:2013): avc: denied { mount } for pid=16224 comm="syz.4.4069" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 462.460093][T15221] team0 (unregistering): Port device team_slave_1 removed [ 462.477158][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119c57400: rx timeout, send abort [ 462.499999][T15221] team0 (unregistering): Port device team_slave_0 removed [ 462.596406][T16234] loop6: detected capacity change from 0 to 512 [ 462.628907][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115c65400: abort rx timeout. Force session deactivation [ 462.723905][T16238] tipc: Enabled bearer , priority 0 [ 462.739587][T16238] syzkaller0: entered promiscuous mode [ 462.755868][T16238] syzkaller0: entered allmulticast mode [ 462.903790][T16240] tipc: Resetting bearer [ 462.926410][T16237] tipc: Resetting bearer [ 462.961817][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119c57400: abort rx timeout. Force session deactivation [ 462.975150][T16237] tipc: Disabling bearer [ 463.270793][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.294262][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.465169][T16244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.493329][T16244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.878679][ T28] audit: type=1400 audit(1781866468.810:2014): avc: denied { read } for pid=16246 comm="syz.7.4079" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 464.089460][T16256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.141070][T16256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.160308][T16258] tipc: Bearer : already 2 bearers with priority 10 [ 464.167609][T16258] tipc: Bearer : trying with adjusted priority [ 464.174739][T16258] tipc: Enabled bearer , priority 9 [ 464.819568][T16263] loop6: detected capacity change from 0 to 128 [ 465.083719][T16267] tipc: Enabled bearer , priority 0 [ 465.103913][T16267] syzkaller0: entered promiscuous mode [ 465.127376][T16267] syzkaller0: entered allmulticast mode [ 465.150476][T16267] tipc: Resetting bearer [ 465.167487][T16266] tipc: Resetting bearer [ 465.179350][T16266] tipc: Disabling bearer [ 465.238056][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810cd28200: rx timeout, send abort [ 465.589582][T16273] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4089'. [ 465.600043][T16273] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4089'. [ 465.714284][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a620200: rx timeout, send abort [ 465.722946][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810cd28200: abort rx timeout. Force session deactivation [ 466.198939][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a620200: abort rx timeout. Force session deactivation [ 466.687117][T16298] tipc: Enabled bearer , priority 0 [ 466.694350][T16298] syzkaller0: entered promiscuous mode [ 466.699914][T16298] syzkaller0: entered allmulticast mode [ 466.709631][T16298] tipc: Resetting bearer [ 466.716553][T16297] tipc: Resetting bearer [ 466.726775][T16297] tipc: Disabling bearer [ 466.819485][T16300] tipc: Enabling of bearer rejected, already enabled [ 466.868515][T16305] loop6: detected capacity change from 0 to 512 [ 466.893819][T16305] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.927969][T16305] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.940705][T16309] xt_hashlimit: size too large, truncated to 1048576 [ 466.954970][T16305] EXT4-fs error (device loop6): ext4_validate_block_bitmap:423: comm syz.6.4102: bg 0: bad block bitmap checksum [ 467.004232][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.141638][T16316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4105'. [ 467.152076][T16316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4105'. [ 467.246738][T16319] loop6: detected capacity change from 0 to 256 [ 467.439347][T16322] loop0: detected capacity change from 0 to 128 [ 467.465560][T16319] FAT-fs (loop6): codepage cp949 not found [ 467.805199][T16347] tipc: Bearer : already 2 bearers with priority 10 [ 467.826913][T16347] tipc: Bearer : trying with adjusted priority [ 467.835417][T16347] tipc: Enabled bearer , priority 9 [ 467.866687][T16346] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 467.896516][T16346] syzkaller0: entered promiscuous mode [ 467.902928][T16346] syzkaller0: entered allmulticast mode [ 468.671776][T16369] loop6: detected capacity change from 0 to 1024 [ 468.894303][T16369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 468.932702][T16369] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.968520][ T28] audit: type=1400 audit(1781866474.164:2015): avc: denied { write } for pid=16367 comm="syz.6.4121" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.045039][ T28] audit: type=1400 audit(1781866474.185:2016): avc: denied { ioctl } for pid=16367 comm="syz.6.4121" path="/84/file1/file1" dev="loop6" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 469.091852][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 469.442216][T16375] loop0: detected capacity change from 0 to 1024 [ 469.467082][T16375] EXT4-fs: Ignoring removed bh option [ 469.480560][T16375] EXT4-fs: inline encryption not supported [ 469.499001][T16375] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 469.541968][T16375] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.4123: lblock 2 mapped to illegal pblock 2 (length 1) [ 469.566200][T16375] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 469.566313][T16375] EXT4-fs (loop0): Remounting filesystem read-only [ 469.575413][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 469.575438][ C0] EXT4-fs (loop0): initial error at time 1781866474: ext4_map_blocks:791: inode 3: block 2 [ 469.575478][ C0] EXT4-fs (loop0): last error at time 1781866474: ext4_map_blocks:791: inode 3: block 2 [ 469.671457][T16375] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 469.681524][T16375] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 469.690976][T16375] EXT4-fs (loop0): 1 orphan inode deleted [ 469.715376][T16375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.728066][T16383] tipc: Enabling of bearer rejected, already enabled [ 469.804096][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4124'. [ 469.853605][T16391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4124'. [ 470.068972][T16394] loop7: detected capacity change from 0 to 512 [ 470.120564][T16394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.181279][T16394] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.233689][T15130] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.247173][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.286390][T16400] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 470.306328][T16400] syzkaller0: entered promiscuous mode [ 470.319691][T16400] syzkaller0: entered allmulticast mode [ 470.417857][T16402] loop7: detected capacity change from 0 to 256 [ 470.452467][T16402] FAT-fs (loop7): codepage cp1251 not found [ 470.803877][T16422] tipc: Enabling of bearer rejected, already enabled [ 472.924922][T16424] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.932161][T16424] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.253972][T16444] loop5: detected capacity change from 0 to 256 [ 473.261508][T16444] vfat: Bad value for 'time_offset' [ 473.321887][T16424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.356018][T16424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.411903][T16424] veth0_vlan: left allmulticast mode [ 473.467840][T16463] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4143'. [ 473.517868][T16464] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4143'. [ 473.692907][T16432] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 473.771463][T14406] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.876834][T14406] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.210203][T14406] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.298735][T14406] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.546944][T16489] loop7: detected capacity change from 0 to 512 [ 474.570972][T16489] EXT4-fs: Ignoring removed nobh option [ 474.610892][T16490] loop6: detected capacity change from 0 to 512 [ 474.618225][T16490] EXT4-fs: test_dummy_encryption option not supported [ 474.752192][T16489] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 474.810541][T16489] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.4152: attempt to clear invalid blocks 1 len 1 [ 474.824450][T16489] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 474.825444][T16489] EXT4-fs (loop7): Remounting filesystem read-only [ 474.834614][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 474.834636][ C0] EXT4-fs (loop7): initial error at time 1781866480: ext4_clear_blocks:876: inode 13 [ 474.834662][ C0] EXT4-fs (loop7): last error at time 1781866480: ext4_clear_blocks:876: inode 13 [ 474.869476][T16489] EXT4-fs (loop7): 1 truncate cleaned up [ 474.876017][T16489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.953245][T15130] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.360391][T16507] tipc: Enabled bearer , priority 0 [ 475.486575][T16509] syzkaller0: entered promiscuous mode [ 476.079394][T16511] netlink: 'syz.7.4159': attribute type 27 has an invalid length. [ 476.106615][T16509] syzkaller0: entered allmulticast mode [ 476.113988][T16506] tipc: Resetting bearer [ 476.124182][T16506] tipc: Disabling bearer [ 476.229333][T16518] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4162'. [ 476.268928][T16518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.288421][T16518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.315884][T16518] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 476.464024][T16538] loop0: detected capacity change from 0 to 1024 [ 476.484736][T16538] EXT4-fs: Ignoring removed bh option [ 476.543569][T16538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.568162][ T28] audit: type=1400 audit(1781866482.144:2017): avc: denied { write } for pid=16537 comm="syz.0.4164" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 476.569284][T16538] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.4164: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 476.622812][T16548] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #12: block 7: comm syz.0.4164: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 476.642837][ T28] audit: type=1400 audit(1781866482.144:2018): avc: denied { create } for pid=16537 comm="syz.0.4164" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 476.695520][ T28] audit: type=1400 audit(1781866482.196:2019): avc: denied { write } for pid=16537 comm="syz.0.4164" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 476.720032][T16528] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.727225][T16528] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.785103][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.830615][T16557] loop0: detected capacity change from 0 to 512 [ 476.857868][T16557] EXT4-fs: test_dummy_encryption option not supported [ 477.129623][T16528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.125737][T16528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.777644][T16567] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 478.823657][T16576] loop5: detected capacity change from 0 to 512 [ 478.838059][T16576] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 478.862376][T16576] EXT4-fs (loop5): 1 truncate cleaned up [ 478.868999][T16576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.883993][ T28] audit: type=1400 audit(1781866484.579:2020): avc: denied { write } for pid=16574 comm="syz.5.4173" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 478.979958][T14735] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.124714][T16577] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 479.205463][T15221] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.215231][T15221] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.224665][T15221] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.265927][T16596] loop6: detected capacity change from 0 to 128 [ 479.280630][T15221] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.441140][T16600] netdevsim netdevsim4: Firmware load for '../file0/file0' refused, path contains '..' component [ 479.595123][T16604] loop6: detected capacity change from 0 to 2048 [ 479.609591][T16604] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a840c029, mo2=0003] [ 479.622993][T16604] System zones: 0-7 [ 479.628526][T16604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.644271][T16604] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.4182: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 479.660823][ T28] audit: type=1400 audit(1781866485.377:2021): avc: denied { write } for pid=16602 comm="syz.6.4182" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.686878][T16604] EXT4-fs (loop6): Remounting filesystem read-only [ 479.715089][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.861672][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4186'. [ 479.889271][T16618] loop6: detected capacity change from 0 to 1024 [ 479.908349][T16618] EXT4-fs: inline encryption not supported [ 479.955172][T16618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.997523][T16626] tipc: Enabling of bearer rejected, already enabled [ 480.029501][ T28] audit: type=1400 audit(1781866485.766:2022): avc: denied { write } for pid=16617 comm="syz.6.4187" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 480.053694][T16626] tipc: Enabling of bearer rejected, already enabled [ 480.064084][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.139767][T16639] loop6: detected capacity change from 0 to 512 [ 480.148199][T16639] EXT4-fs: Ignoring removed i_version option [ 480.165720][T16639] EXT4-fs: Ignoring removed i_version option [ 480.187694][ T28] audit: type=1326 audit(1781866485.944:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16641 comm="syz.0.4197" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcddceace59 code=0x0 [ 480.229318][T16639] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.243008][T16639] ext4 filesystem being mounted at /103/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.259653][T16639] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 480.290486][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.320235][T16650] loop0: detected capacity change from 0 to 2048 [ 480.472711][T16650] loop0: p1 < > p4 [ 480.477625][T16650] loop0: p4 size 722688 extends beyond EOD, truncated [ 480.743076][ T28] audit: type=1400 audit(1781866486.532:2024): avc: denied { read write } for pid=16649 comm="syz.0.4201" name="loop0p4" dev="devtmpfs" ino=2675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 480.881344][ T7449] udevd[7449]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 480.893159][ T7446] udevd[7446]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 480.966021][ T28] audit: type=1400 audit(1781866486.532:2025): avc: denied { open } for pid=16649 comm="syz.0.4201" path="/dev/loop0p4" dev="devtmpfs" ino=2675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 481.043563][T16663] loop5: detected capacity change from 0 to 1024 [ 481.064593][ T7446] udevd[7446]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 481.111587][T16663] EXT4-fs: inline encryption not supported [ 481.249599][ T7446] udevd[7446]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 481.272799][T16663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.307844][T16673] loop7: detected capacity change from 0 to 512 [ 481.334684][ T28] audit: type=1400 audit(1781866487.152:2026): avc: denied { write } for pid=16661 comm="syz.5.4204" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 481.384714][T16673] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.4208: corrupted in-inode xattr: e_value out of bounds [ 481.409730][T14735] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.432292][T16673] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 481.437159][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 481.452788][ C1] EXT4-fs (loop7): initial error at time 1781866487: ext4_iget_extra_inode:5180: inode 15 [ 481.462717][ C1] EXT4-fs (loop7): last error at time 1781866487: ext4_iget_extra_inode:5180: inode 15 [ 481.475272][T16673] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4208: couldn't read orphan inode 15 (err -117) [ 481.495652][ T28] audit: type=1326 audit(1781866487.183:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.4.4209" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa36bc2ce59 code=0x0 [ 481.532184][T16683] loop5: detected capacity change from 0 to 512 [ 481.734856][T16673] loop7: lost filesystem error report for type 5 error -117 [ 481.766686][T16686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4213'. [ 481.878573][T16673] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.930865][T16688] tipc: Enabling of bearer rejected, already enabled [ 481.959163][ T28] audit: type=1400 audit(1781866487.803:2028): avc: denied { write } for pid=16672 comm="syz.7.4208" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 481.986199][T16688] tipc: Enabling of bearer rejected, already enabled [ 482.012646][T15130] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.051632][T16693] loop7: detected capacity change from 0 to 1024 [ 482.071062][T16693] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.089304][T16689] syz.5.4211: attempt to access beyond end of device [ 482.089304][T16689] loop5: rw=34817, sector=381, nr_sectors = 966 limit=512 [ 482.107382][ T28] audit: type=1400 audit(1781866487.960:2029): avc: denied { write } for pid=16692 comm="syz.7.4216" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 482.152593][ T154] kworker/u8:5: attempt to access beyond end of device [ 482.152593][ T154] loop5: rw=1, sector=1352, nr_sectors = 2048 limit=512 [ 482.171729][ T28] audit: type=1400 audit(1781866487.981:2030): avc: denied { mounton } for pid=16692 comm="syz.7.4216" path="/54/file0/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 482.200960][ T154] kworker/u8:5: attempt to access beyond end of device [ 482.200960][ T154] loop5: rw=1, sector=3400, nr_sectors = 2048 limit=512 [ 482.217319][T15130] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.266036][ T28] audit: type=1400 audit(1781866488.023:2031): avc: denied { write } for pid=15130 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 482.268303][ T154] kworker/u8:5: attempt to access beyond end of device [ 482.268303][ T154] loop5: rw=1, sector=5448, nr_sectors = 2736 limit=512 [ 482.288286][ T28] audit: type=1400 audit(1781866488.023:2032): avc: denied { unlink } for pid=15130 comm="syz-executor" name="file.cold" dev="loop7" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 482.333143][ T28] audit: type=1400 audit(1781866488.034:2033): avc: denied { write } for pid=15130 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 482.355468][ T28] audit: type=1400 audit(1781866488.034:2034): avc: denied { unmount } for pid=15130 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 482.378924][ T28] audit: type=1400 audit(1781866488.055:2035): avc: denied { write } for pid=15130 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 482.382851][ T154] kworker/u8:5: attempt to access beyond end of device [ 482.382851][ T154] loop5: rw=1, sector=8184, nr_sectors = 8280 limit=512 [ 482.642790][T16716] EXT4-fs: Ignoring removed nomblk_io_submit option [ 482.664437][T16716] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.4225: corrupted in-inode xattr: invalid ea_ino [ 482.702882][T16716] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 482.703078][T16716] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.4225: couldn't read orphan inode 15 (err -117) [ 482.712247][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 482.712264][ C0] EXT4-fs (loop0): initial error at time 1781866488: ext4_iget_extra_inode:5180: inode 15 [ 482.712310][ C0] EXT4-fs (loop0): last error at time 1781866488: ext4_iget_extra_inode:5180: inode 15 [ 482.780057][T16716] loop0: lost filesystem error report for type 5 error -117 [ 482.780594][T16716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.481160][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.614707][T16734] set_capacity_and_notify: 1 callbacks suppressed [ 483.614723][T16734] loop5: detected capacity change from 0 to 512 [ 483.629937][T16734] EXT4-fs: test_dummy_encryption option not supported [ 483.639036][T16736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.657725][T16736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.683695][T16741] tipc: Enabling of bearer rejected, already enabled [ 483.698097][T16741] tipc: Enabling of bearer rejected, already enabled [ 483.923557][T16743] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 484.236622][T16747] loop7: detected capacity change from 0 to 512 [ 484.312177][T16747] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.4235: inode has both inline data and extents flags [ 484.445467][T16747] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 484.445610][T16747] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4235: couldn't read orphan inode 15 (err -117) [ 484.454954][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 484.454979][ C0] EXT4-fs (loop7): initial error at time 1781866490: ext4_orphan_get:1399: inode 15 [ 484.455047][ C0] EXT4-fs (loop7): last error at time 1781866490: ext4_orphan_get:1399: inode 15 [ 484.499206][T16747] loop7: lost filesystem error report for type 5 error -117 [ 484.500136][T16747] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.543887][T16753] loop6: detected capacity change from 0 to 256 [ 484.554802][T16753] tipc: Enabling of bearer rejected, already enabled [ 484.926936][T15130] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.274112][T16762] loop5: detected capacity change from 0 to 2048 [ 485.324888][T16762] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 485.658004][T16771] xt_hashlimit: size too large, truncated to 1048576 [ 486.057853][T16789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4247'. [ 486.067872][T16789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4247'. [ 486.115009][T16784] tipc: Enabling of bearer rejected, already enabled [ 486.187924][T16791] tipc: Enabling of bearer rejected, already enabled [ 487.324356][T16821] loop7: detected capacity change from 0 to 256 [ 487.335309][T16821] tipc: Enabling of bearer rejected, already enabled [ 488.821654][T16829] tipc: Enabling of bearer rejected, already enabled [ 489.355304][T16830] tipc: Enabling of bearer rejected, already enabled [ 491.967608][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 491.967623][ T28] audit: type=1400 audit(1781866497.808:2045): avc: denied { mount } for pid=16853 comm="syz.6.4273" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 492.773678][T16880] loop0: detected capacity change from 0 to 256 [ 492.829236][T16880] FAT-fs (loop0): codepage cp855 not found [ 492.855795][T16885] loop5: detected capacity change from 0 to 256 [ 492.914390][T16885] FAT-fs (loop5): Directory bread(block 64) failed [ 492.949625][T16885] FAT-fs (loop5): Directory bread(block 65) failed [ 492.988351][T16885] FAT-fs (loop5): Directory bread(block 66) failed [ 493.024641][T16885] FAT-fs (loop5): Directory bread(block 67) failed [ 493.068298][T16885] FAT-fs (loop5): Directory bread(block 68) failed [ 493.101350][T16885] FAT-fs (loop5): Directory bread(block 69) failed [ 493.126793][ T28] audit: type=1400 audit(1781866499.509:2046): avc: denied { unmount } for pid=14754 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 493.157981][T16896] loop7: detected capacity change from 0 to 1024 [ 493.166203][T16898] loop6: detected capacity change from 0 to 512 [ 493.166366][T16885] FAT-fs (loop5): Directory bread(block 70) failed [ 493.173206][T16896] EXT4-fs: Ignoring removed oldalloc option [ 493.185915][T16898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 493.202170][T16885] FAT-fs (loop5): Directory bread(block 71) failed [ 493.208828][ T28] audit: type=1400 audit(1781866499.604:2047): avc: denied { ioctl } for pid=16893 comm="syz.0.4286" path="socket:[52314]" dev="sockfs" ino=52314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 493.236602][T16896] EXT4-fs: Ignoring removed oldalloc option [ 493.238720][T16885] FAT-fs (loop5): Directory bread(block 72) failed [ 493.266004][T16885] FAT-fs (loop5): Directory bread(block 73) failed [ 493.274443][T16898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.386053][T16898] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 493.392429][T16896] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 493.404593][ T28] audit: type=1400 audit(1781866499.814:2048): avc: denied { write } for pid=16897 comm="syz.6.4288" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 493.448321][T16885] syz.5.4283: attempt to access beyond end of device [ 493.448321][T16885] loop5: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 493.580410][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.604692][T16896] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.819180][ T28] audit: type=1400 audit(1781866500.244:2049): avc: denied { write } for pid=16895 comm="syz.7.4287" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 493.954737][ T28] audit: type=1400 audit(1781866500.402:2050): avc: denied { mounton } for pid=16913 comm="syz.6.4292" path="/114/file0" dev="tmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 494.002906][T15130] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.351604][T16920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.371211][T16920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.007670][T16933] loop0: detected capacity change from 0 to 256 [ 495.047823][T16933] vfat: Bad value for 'fmask' [ 495.539331][T16945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.564351][T16945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.057443][T16970] loop6: detected capacity change from 0 to 256 [ 496.069082][T16970] tipc: Enabling of bearer rejected, already enabled [ 497.790895][T16984] loop6: detected capacity change from 0 to 128 [ 497.889686][T16986] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 497.906451][T16986] FAT-fs (loop6): Filesystem has been set read-only [ 497.944088][T16986] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 498.235455][T16993] loop0: detected capacity change from 0 to 128 [ 498.385456][T16984] syz.6.4316: attempt to access beyond end of device [ 498.385456][T16984] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 498.399260][T16984] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 498.543374][T17006] loop6: detected capacity change from 0 to 512 [ 499.575611][T17006] EXT4-fs (loop6): 1 truncate cleaned up [ 499.586725][T17006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.364649][T17016] loop7: detected capacity change from 0 to 256 [ 500.372981][T17016] tipc: Enabling of bearer rejected, already enabled [ 502.619390][ T28] audit: type=1400 audit(1781866508.040:2051): avc: denied { write } for pid=17005 comm="syz.6.4324" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 502.723248][ T28] audit: type=1400 audit(1781866509.079:2052): avc: denied { setopt } for pid=17020 comm="syz.0.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 502.889719][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.189777][T17052] loop6: detected capacity change from 0 to 1024 [ 503.210099][T17052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 503.222135][T17052] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 503.248160][T17052] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.4338: lblock 2 mapped to illegal pblock 2 (length 1) [ 503.286830][T17052] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 503.288443][T17052] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 503.297550][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 503.297567][ C0] EXT4-fs (loop6): initial error at time 1781866509: ext4_map_blocks:791: inode 3: block 2 [ 503.297608][ C0] EXT4-fs (loop6): last error at time 1781866509: ext4_map_blocks:791: inode 3: block 2 [ 503.369595][T17052] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.4338: lblock 0 mapped to illegal pblock 48 (length 1) [ 503.411620][T17052] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 503.411730][T17052] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 503.439919][ T28] audit: type=1400 audit(1781866509.753:2053): avc: denied { getopt } for pid=17063 comm="syz.5.4343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 503.451007][T17052] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.4338: Failed to acquire dquot type 0 [ 503.461420][T17066] loop0: detected capacity change from 0 to 512 [ 503.481021][T17066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.503101][T17052] loop6: lost filesystem error report for type 5 error -117 [ 503.503297][T17052] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 503.511117][T17066] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.541266][T17066] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 49 (only 1 groups) [ 503.555980][T17052] loop6: lost filesystem error report for type 5 error -117 [ 503.556090][T17052] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.4338: mark_inode_dirty error [ 503.577044][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.614110][T17052] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 503.614217][T17052] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 503.635725][T17052] EXT4-fs (loop6): 1 orphan inode deleted [ 503.644029][T17052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.657704][T14406] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 503.678955][ T28] audit: type=1400 audit(1781866509.977:2054): avc: denied { name_bind } for pid=17078 comm="syz.0.4350" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 503.679127][T14406] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 503.736469][T14406] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 503.746756][T17086] loop0: detected capacity change from 0 to 256 [ 503.750588][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.777588][T17086] FAT-fs (loop0): IO charset cp737 not found [ 503.785599][T14754] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 503.809185][T14754] loop6: lost filesystem error report for type 5 error -117 [ 503.809274][T14754] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 503.829074][T14754] loop6: lost filesystem error report for type 5 error -117 [ 503.829248][T14754] EXT4-fs error (device loop6): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 503.849550][T14754] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 504.192586][T17108] loop6: detected capacity change from 0 to 1024 [ 504.221985][T17108] EXT4-fs: Ignoring removed orlov option [ 504.306723][T17108] EXT4-fs: Ignoring removed orlov option [ 504.350473][T17108] EXT4-fs: inline encryption not supported [ 504.389722][T17108] EXT4-fs: Ignoring removed bh option [ 504.431159][T17108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.497253][T17108] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4362'. [ 504.606934][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.826299][T17124] loop5: detected capacity change from 0 to 256 [ 504.837084][T17124] tipc: Bearer : already 2 bearers with priority 10 [ 504.844413][T17124] tipc: Bearer : trying with adjusted priority [ 504.851545][T17124] tipc: Enabled bearer , priority 9 [ 506.558013][T17150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.643990][T17150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.803810][ T28] audit: type=1400 audit(1781866512.887:2055): avc: denied { mount } for pid=17151 comm="syz.5.4374" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 507.191567][T17164] loop0: detected capacity change from 0 to 512 [ 507.216147][T17164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.229141][T17164] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.252418][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.311154][T17179] loop0: detected capacity change from 0 to 512 [ 507.325579][T17179] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 507.383064][T17179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.396034][T17179] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 507.411363][ T28] audit: type=1400 audit(1781866513.468:2056): avc: denied { write } for pid=17178 comm="syz.0.4385" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 507.450831][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.551190][T17203] loop0: detected capacity change from 0 to 512 [ 507.592608][T17203] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 507.689218][T17203] EXT4-fs (loop0): Remounting filesystem read-only [ 507.695882][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 507.695900][ C1] EXT4-fs (loop0): initial error at time 1781866513: ext4_mb_generate_buddy:1317 [ 507.695920][ C1] EXT4-fs (loop0): last error at time 1781866513: ext4_mb_generate_buddy:1317 [ 507.748188][T17203] EXT4-fs (loop0): 1 truncate cleaned up [ 507.753983][T17215] loop5: detected capacity change from 0 to 512 [ 507.760926][T15221] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 507.774004][T17215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 507.785660][T17203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.798354][T15221] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 507.809689][T15221] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 507.821575][T17215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.838998][T17203] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.855856][T15221] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 507.861632][T17215] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.903733][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.990292][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 507.990305][ T28] audit: type=1400 audit(1781866514.010:2057): avc: denied { write } for pid=17214 comm="syz.5.4395" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 508.045827][T14735] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.064332][ T28] audit: type=1400 audit(1781866514.038:2058): avc: denied { write } for pid=17214 comm="syz.5.4395" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 508.143092][ T28] audit: type=1400 audit(1781866514.151:2059): avc: denied { name_bind } for pid=17220 comm="syz.5.4397" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 508.260798][ T28] audit: type=1400 audit(1781866514.263:2060): avc: denied { create } for pid=17230 comm="syz.4.4402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 508.304786][ T28] audit: type=1400 audit(1781866514.282:2061): avc: denied { write } for pid=17230 comm="syz.4.4402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 508.366688][ T28] audit: type=1400 audit(1781866514.310:2062): avc: denied { open } for pid=17233 comm="syz.5.4403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 508.410083][ T28] audit: type=1400 audit(1781866514.310:2063): avc: denied { kernel } for pid=17233 comm="syz.5.4403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 508.423965][T17241] tmpfs: Unsupported parameter 'huge' [ 508.452916][ T28] audit: type=1400 audit(1781866514.375:2064): avc: denied { cpu } for pid=17233 comm="syz.5.4403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 508.505174][T17243] loop5: detected capacity change from 0 to 2048 [ 508.540224][ T28] audit: type=1400 audit(1781866514.516:2065): avc: denied { ioctl } for pid=17246 comm="syz.0.4409" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 508.592270][T17243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.607357][T17243] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.633375][T17243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.657314][T17243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.669794][ T28] audit: type=1400 audit(1781866514.647:2066): avc: denied { write } for pid=17242 comm="syz.5.4407" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 508.708857][T17258] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4413'. [ 508.752521][T17260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.773357][T17260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.840196][T17266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.849603][T17266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.858940][T17266] netdevsim netdevsim7: Firmware load for '../file0/file0' refused, path contains '..' component [ 509.239006][T14735] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.463584][T17284] loop7: detected capacity change from 0 to 512 [ 509.475104][T17284] EXT4-fs: test_dummy_encryption option not supported [ 509.572487][T17284] loop7: detected capacity change from 0 to 4096 [ 509.595173][T17284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.830362][T15130] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.111555][T17310] loop7: detected capacity change from 0 to 512 [ 511.127807][T17310] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 511.143535][T17313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.154139][T17313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.170360][T17313] netdevsim netdevsim6: Firmware load for '../file0/file0' refused, path contains '..' component [ 511.252392][T17322] loop7: detected capacity change from 0 to 512 [ 511.305006][T17322] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 511.378028][T17326] SELinux: invalid class [ 511.382730][T17326] SELinux: failed to load policy [ 511.487712][T17334] xt_hashlimit: size too large, truncated to 1048576 [ 511.518357][T17328] loop7: detected capacity change from 0 to 128 [ 511.769339][ T361] ================================================================== [ 511.777425][ T361] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 511.786896][ T361] [ 511.789206][ T361] write to 0xffff888128cbc3ff of 2 bytes by task 17328 on cpu 0: [ 511.796904][ T361] copy_folio_from_iter_atomic+0x728/0x10a0 [ 511.802790][ T361] generic_perform_write+0x2c4/0x490 [ 511.808064][ T361] __generic_file_write_iter+0x9e/0x120 [ 511.813590][ T361] generic_file_write_iter+0x77/0x1f0 [ 511.819042][ T361] iter_file_splice_write+0x6a0/0xa60 [ 511.824413][ T361] direct_splice_actor+0x156/0x280 [ 511.829610][ T361] splice_direct_to_actor+0x2f9/0x680 [ 511.834967][ T361] do_splice_direct+0x119/0x1a0 [ 511.839816][ T361] do_sendfile+0x37d/0x640 [ 511.844221][ T361] __x64_sys_sendfile64+0x105/0x150 [ 511.849402][ T361] x64_sys_call+0x2dc4/0x3020 [ 511.854066][ T361] do_syscall_64+0x136/0x3c0 [ 511.858642][ T361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.864535][ T361] [ 511.866844][ T361] read to 0xffff888128cbc200 of 512 bytes by task 361 on cpu 1: [ 511.874456][ T361] copy_folio_from_iter_atomic+0x728/0x10a0 [ 511.880338][ T361] generic_perform_write+0x2c4/0x490 [ 511.885610][ T361] shmem_file_write_iter+0xc5/0xf0 [ 511.890764][ T361] lo_rw_aio+0x6a9/0x760 [ 511.895001][ T361] loop_process_work+0x567/0xac0 [ 511.899947][ T361] loop_workfn+0x31/0x40 [ 511.904181][ T361] process_scheduled_works+0x4d4/0x9a0 [ 511.909628][ T361] worker_thread+0x569/0x750 [ 511.914204][ T361] kthread+0x221/0x270 [ 511.918256][ T361] ret_from_fork+0x146/0x330 [ 511.922841][ T361] ret_from_fork_asm+0x1a/0x30 [ 511.927590][ T361] [ 511.929987][ T361] Reported by Kernel Concurrency Sanitizer on: [ 511.936139][ T361] CPU: 1 UID: 0 PID: 361 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(lazy) [ 511.945491][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 511.955618][ T361] Workqueue: loop7 loop_workfn [ 511.960384][ T361] ================================================================== [ 512.030825][T17344] loop5: detected capacity change from 0 to 512 [ 512.061522][T17344] EXT4-fs: test_dummy_encryption option not supported