last executing test programs: 5.164369101s ago: executing program 4 (id=613): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) eventfd(0x0) eventfd2(0xfffffe01, 0x801) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 5.067633156s ago: executing program 4 (id=615): socket$nl_netfilter(0x10, 0x3, 0xc) fchmod(0xffffffffffffffff, 0x20) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) gettid() setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="0843055ed6e465f3d712e0f59c693507", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) mmap(&(0x7f0000065000/0x2000)=nil, 0x2000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x485b, 0x1000, 0x3, 0x40004330}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd, 0x1, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.043318377s ago: executing program 4 (id=616): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x1}, 0x100118, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x10d4, 0x0, &(0x7f00000000c0), 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.56146378s ago: executing program 3 (id=618): socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 3.748462829s ago: executing program 4 (id=621): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="ec", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0"], 0xb0}, 0x0, 0x8400, 0x1}) socket$igmp6(0xa, 0x3, 0x2) r2 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbe15, 0x10, 0x3, 0x30e}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0) 3.010846415s ago: executing program 3 (id=623): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x1, 0x22f}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xab6e67d80d01c4af, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.855882462s ago: executing program 1 (id=624): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f00000005c0)={[{@rodir}, {@utf8}, {@shortname_lower}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@shortname_winnt}, {@shortname_win95}, {@shortname_winnt}]}, 0xfc, 0x2b8, &(0x7f0000000300)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4820, &(0x7f0000000100)={0x0, 0xa398, 0x2, 0x3, 0xfd}) socket$rds(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0x2000c89f, 0xc000, 0x4, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) 2.855284372s ago: executing program 4 (id=634): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_open_dev$loop(0x0, 0xf01b, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) msgctl$IPC_SET(0x0, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x63, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) recvmmsg(r2, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12112, 0x0) 2.70795365s ago: executing program 3 (id=626): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x8, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2.533562908s ago: executing program 1 (id=627): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) pipe(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x9) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000014c0)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x2}) 2.531730788s ago: executing program 0 (id=629): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c73686f72746e616d653d77696e6e742c726f6469722c757365667265652c756e695f786c6174653d312c756e695f786c6174653d302c7379735f696d6d757461626c652c73686f72746e616d653d6d697865642c64656275672c73686f72746e616d653d6d697865642c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c005f4fdcb949f1b307c681757e4d37f076e8888e72d8ba2981e9c760808d39e3a1342fe08c25c467b2cc55a850b41e0b6fd0df78bc6e9e34afce632e077a3eef838056f180f84615b56acdb0ac851c3b1c7d9d0a00a6837df1c1a84bab1923ae0be0a50902b5974cd1ae9cc735dc55f665b233a51b2f6677265c79bfcddd714809221136e333a8b47eef8fe2e316fae8b78d7cddb7342f87ecc4b61f274a677c75ca8a7665d44d9dc61c43ce6d61df50768334bad7b40e35beda2bc3"], 0x1, 0x2b4, &(0x7f0000000e40)="$eJzs3cFr024YwPFn7bZ2HVt7GIPfD8QHveglbPUvKLKBWFDmOqYHIXOplsZmNLVSEbeb1/0dw6MnBfUf2GU38SpeiiB42UGsrEm2rqu4ztVM8/1Aydv3fZ/kTd60PAk0bS5vPiwXXaNo1iSWVImJbMiuSGav5Bvyl7F2eVQ6bcjl8a/vz926fed6Lp+fW1Cdzy1eyarq5Pk3j5++uPCuNr70cvJ1QrYzd5tfsh+3p7f/a35fDNbuiJi64jg1c8W2dLXklg3Vm7ZlupaWKq5VrWlHe9F21tYaalZWJ1JrVct11aw0tGw1tOZordpQ875ZqqhhGDqRkqiJ9x1R2FpYMHMDGQzCMNarslrNmfGejYWtPzEoAABwtjSXN+Nh5P8PSq6WXK04h/L7o/l/TPrI/0Uinf/3j/w/Cvby/5T/+T2M/B8AAAAAAAAAAAAAAAAAAAAAgL/BbquVbrVa6WAZvBIikhSR4H3Y48RgMP/R1vHDvaSI/bxeqBe8pdeeK0pJbLFkZkTkW/t88Hnl+Wv5uRltm5a39rofv14vxCURxAcyveNnvXjtjF+XEUl1bj8raZnqHZ/tEV8vjMqli62Ev2VLDEnLzj1xxJbV9nl9EP9sVvXqjXxX/Fi7HwAAAAAA/wJD92W6r9/b7YYGjw3pavcqD+4PSPoX9we6rq+H5f/h8PYbAAAAAIAocRtPyqZtW9UIFIL/PziVFYZ/6JLH7TwsIn7Nq7MyFweFoQ1vVo42xUTkpGuO/94sfxaRQzVToU/3aRQ+PfKO9X7Nh593XpoI7UsJAAAAwEAESf9Q35GFnYEMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACDruw8OC/id59ljH5uLh7CUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNvwIAAD//5jbFjk=") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r5, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) 1.935039597s ago: executing program 3 (id=630): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) 1.932384956s ago: executing program 0 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000000c0)=[{0x1, 0x1, {0x1, 0x0, 0x4}, {0x95d3957c306c7534, 0xf0, 0x1}, 0x2, 0xfe}], 0x20) 1.931415236s ago: executing program 2 (id=632): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.769250295s ago: executing program 0 (id=633): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x1}, 0x100118, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x10d4, 0x0, &(0x7f00000000c0), 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.551959675s ago: executing program 1 (id=635): socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.273796718s ago: executing program 2 (id=636): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 1.175309883s ago: executing program 0 (id=637): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 1.175070113s ago: executing program 2 (id=638): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000000)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@data_journal}, {@usrjquota}, {}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xe99, 0x0, 0x0, 0x0, 0xd56, 0x80}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.065360029s ago: executing program 0 (id=639): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x1, 0x22f}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xab6e67d80d01c4af, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 923.496376ms ago: executing program 2 (id=640): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) close(r2) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffffffff2834) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x21, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 922.091505ms ago: executing program 3 (id=641): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r5, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) 750.499384ms ago: executing program 0 (id=642): socket(0x1a, 0x5, 0x7fffffff) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_open_dev$evdev(0x0, 0x4, 0x74c42) r1 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x4c7d, 0x760d, 0x4, 0x0, 0x0) 750.260684ms ago: executing program 2 (id=643): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x8, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 498.293826ms ago: executing program 1 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000000c0)=[{0x1, 0x1, {0x1, 0x0, 0x4}, {0x95d3957c306c7534, 0xf0, 0x1}, 0x2, 0xfe}], 0x20) 309.177265ms ago: executing program 3 (id=645): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) pipe(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x9) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000014c0)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x2}) 308.965215ms ago: executing program 4 (id=646): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x45, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x9}, 0x419, 0x40000000, 0x4000000, 0x8, 0x103fb, 0x401ff, 0x1ff, 0x0, 0x0, 0x0, 0x40000000000000b}, 0x0, 0x100001, 0xffffffffffffffff, 0xb) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8c1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb, 0x69018, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xfe1}, 0x9, 0x0, 0x800004, 0x3, 0x2, 0x407, 0x0, 0x0, 0xfffffff6, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x5, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x9, @empty, 0x3}], 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 308.728405ms ago: executing program 1 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000000c0)=[{0x1, 0x1, {0x1, 0x0, 0x4}, {0x95d3957c306c7534, 0xf0, 0x1}, 0x2, 0xfe}], 0x20) 606.49µs ago: executing program 2 (id=647): r0 = socket$kcm(0x21, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@delalloc}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x2d1}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 0s ago: executing program 1 (id=658): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000020013"], 0x70}}, 0x0) kernel console output (not intermixed with test programs): 07248][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.438958][ T3310] veth0_macvtap: entered promiscuous mode [ 28.455700][ T3310] veth1_macvtap: entered promiscuous mode [ 28.469300][ T3321] veth0_vlan: entered promiscuous mode [ 28.490240][ T3313] veth0_vlan: entered promiscuous mode [ 28.498377][ T3321] veth1_vlan: entered promiscuous mode [ 28.514368][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.527165][ T3313] veth1_vlan: entered promiscuous mode [ 28.538307][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.546475][ T3321] veth0_macvtap: entered promiscuous mode [ 28.559617][ T3318] veth0_vlan: entered promiscuous mode [ 28.570124][ T3321] veth1_macvtap: entered promiscuous mode [ 28.579789][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.596473][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.609030][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.624749][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.634667][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.646665][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.659850][ T3313] veth0_macvtap: entered promiscuous mode [ 28.676789][ T3318] veth1_vlan: entered promiscuous mode [ 28.683549][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.698322][ T3313] veth1_macvtap: entered promiscuous mode [ 28.714810][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.724241][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.732465][ T3479] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 28.746185][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.759853][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.773138][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.792567][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.813866][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.825921][ T3482] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3482 comm=syz.1.2 [ 28.832611][ T3318] veth0_macvtap: entered promiscuous mode [ 28.864067][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.875204][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.901189][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.922647][ T3318] veth1_macvtap: entered promiscuous mode [ 28.957579][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.983883][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.008908][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.035954][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.060936][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.085611][ T3496] loop0: detected capacity change from 0 to 1764 [ 29.108758][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.132760][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 29.132775][ T28] audit: type=1400 audit(1774617299.538:126): avc: denied { create } for pid=3493 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 29.199243][ T28] audit: type=1400 audit(1774617299.548:127): avc: denied { name_bind } for pid=3493 comm="syz.0.8" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 29.233465][ T28] audit: type=1400 audit(1774617299.548:128): avc: denied { node_bind } for pid=3493 comm="syz.0.8" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 30.019211][ T28] audit: type=1400 audit(1774617300.428:129): avc: denied { create } for pid=3508 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.044572][ T3496] syz.0.8 (3496) used greatest stack depth: 10296 bytes left [ 30.082437][ T28] audit: type=1400 audit(1774617300.438:130): avc: denied { setopt } for pid=3508 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.132857][ T3511] loop3: detected capacity change from 0 to 512 [ 30.142867][ T3509] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.155559][ T28] audit: type=1400 audit(1774617300.448:131): avc: denied { allowed } for pid=3506 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 30.190364][ T3513] loop0: detected capacity change from 0 to 512 [ 30.217479][ T3515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 30.343927][ T3520] loop1: detected capacity change from 0 to 512 [ 30.362555][ T3517] syzkaller0: entered promiscuous mode [ 30.368095][ T3517] syzkaller0: entered allmulticast mode [ 30.376842][ T28] audit: type=1400 audit(1774617300.458:132): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 30.405476][ T3511] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 30.436535][ T3527] 0: reclassify loop, rule prio 0, protocol 800 [ 30.443078][ T3520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 30.457781][ T3522] tipc: Started in network mode [ 30.472294][ T3522] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 30.479765][ T3520] System zones: 1-12 [ 30.481064][ T28] audit: type=1400 audit(1774617300.478:133): avc: denied { create } for pid=3506 comm="syz.2.10" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.494056][ T3522] tipc: Enabled bearer , priority 12 [ 30.509602][ T28] audit: type=1400 audit(1774617300.478:134): avc: denied { map } for pid=3506 comm="syz.2.10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.536378][ T3520] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.13: corrupted in-inode xattr: e_value size too large [ 30.536984][ T28] audit: type=1400 audit(1774617300.478:135): avc: denied { read write } for pid=3506 comm="syz.2.10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.561003][ T3511] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 30.583129][ T3520] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 30.583369][ T3520] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.13: couldn't read orphan inode 15 (err -117) [ 30.592531][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 30.592551][ C1] EXT4-fs (loop1): initial error at time 1774617300: ext4_iget_extra_inode:5025: inode 15 [ 30.592582][ C1] EXT4-fs (loop1): last error at time 1774617300: ext4_iget_extra_inode:5025: inode 15 [ 30.633866][ T3520] loop1: lost filesystem error report for type 5 error -117 [ 30.635498][ T3520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.671173][ T3530] syzkaller0: entered promiscuous mode [ 30.676694][ T3530] syzkaller0: entered allmulticast mode [ 30.700856][ T3511] EXT4-fs (loop3): 1 truncate cleaned up [ 30.707607][ T3511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.707980][ T3520] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.13: Unrecognised inode hash code 4 [ 30.742754][ C1] hrtimer: interrupt took 57543 ns [ 30.745187][ T3520] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.13: Corrupt directory, running e2fsck is recommended [ 30.790223][ T3520] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.13: Unrecognised inode hash code 4 [ 30.813198][ T3520] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.13: Corrupt directory, running e2fsck is recommended [ 30.892295][ T3544] syzkaller0: entered promiscuous mode [ 30.902141][ T3544] syzkaller0: entered allmulticast mode [ 30.936978][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.997054][ T3549] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 31.089737][ T3556] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=3556 comm=syz.3.12 [ 31.148452][ T3549] Zero length message leads to an empty skb [ 31.264626][ T3560] capability: warning: `syz.1.23' uses deprecated v2 capabilities in a way that may be insecure [ 31.297331][ T3560] loop1: detected capacity change from 0 to 512 [ 31.545491][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.573384][ T3566] Cannot find set identified by id 3 to match [ 31.586787][ T3511] syz.3.12 (3511) used greatest stack depth: 10120 bytes left [ 31.619207][ T3498] tipc: Node number set to 15444650 [ 31.842749][ T3577] mmap: syz.1.30 (3577) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.095387][ T3583] netlink: 'syz.1.32': attribute type 3 has an invalid length. [ 32.103875][ T3583] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 32.112236][ T3583] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.32'. [ 32.517757][ T3588] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.646573][ T3592] loop3: detected capacity change from 0 to 1024 [ 32.673494][ T3593] loop4: detected capacity change from 0 to 4096 [ 32.683264][ T3593] EXT4-fs: Ignoring removed bh option [ 32.688750][ T3593] ext4: Unknown parameter 'measure' [ 32.832239][ T3592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.095881][ T3604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'. [ 33.282239][ T3600] cgroup: fork rejected by pids controller in /syz2 [ 33.290067][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.377774][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.614317][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.774650][ T3667] loop4: detected capacity change from 0 to 128 [ 33.803665][ T3667] FAT-fs (loop4): Directory bread(block 524322) failed [ 33.839301][ T3667] FAT-fs (loop4): Directory bread(block 524323) failed [ 34.110484][ T3667] FAT-fs (loop4): Directory bread(block 524324) failed [ 34.124032][ T3667] FAT-fs (loop4): Directory bread(block 524325) failed [ 34.132304][ T3667] FAT-fs (loop4): Directory bread(block 524326) failed [ 34.139259][ T3667] FAT-fs (loop4): Directory bread(block 524327) failed [ 34.144722][ T3676] loop0: detected capacity change from 0 to 512 [ 34.153912][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 34.153927][ T28] audit: type=1400 audit(1774617304.568:186): avc: denied { write } for pid=3677 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.182915][ T3678] tipc: Started in network mode [ 34.187770][ T3678] tipc: Node identity 67f, cluster identity 4711 [ 34.194239][ T3678] tipc: Node number set to 1663 [ 34.199221][ T3678] tipc: Cannot configure node identity twice [ 34.212241][ T3676] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.225836][ T3667] FAT-fs (loop4): Directory bread(block 524328) failed [ 34.244374][ T28] audit: type=1400 audit(1774617304.648:187): avc: denied { bind } for pid=3677 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.270732][ T3676] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.273169][ T3667] FAT-fs (loop4): Directory bread(block 524329) failed [ 34.287774][ T3675] loop2: detected capacity change from 0 to 8192 [ 34.299707][ T3676] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.326325][ T3676] EXT4-fs (loop0): 1 truncate cleaned up [ 34.336025][ T3676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.412151][ T28] audit: type=1400 audit(1774617304.828:188): avc: denied { sqpoll } for pid=3666 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 34.436587][ T3667] FAT-fs (loop4): Directory bread(block 524322) failed [ 34.443548][ T3667] FAT-fs (loop4): Directory bread(block 524323) failed [ 34.452494][ T28] audit: type=1400 audit(1774617304.848:189): avc: denied { getopt } for pid=3666 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.600736][ T28] audit: type=1400 audit(1774617304.958:190): avc: denied { map } for pid=3670 comm="syz.0.42" path="/9/file2/cpuacct.usage_percpu" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.915586][ T28] audit: type=1400 audit(1774617304.958:191): avc: denied { execute } for pid=3670 comm="syz.0.42" path="/9/file2/cpuacct.usage_percpu" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.138534][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.147655][ T28] audit: type=1400 audit(1774617305.538:192): avc: denied { mounton } for pid=3690 comm="syz.3.48" path="/5/file0" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.228340][ T28] audit: type=1400 audit(1774617305.638:193): avc: denied { read } for pid=3498 comm="kworker/1:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5401 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.299200][ T28] audit: type=1400 audit(1774617305.708:194): avc: denied { create } for pid=3700 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.392181][ T3705] syz.4.52 uses obsolete (PF_INET,SOCK_PACKET) [ 35.402450][ T28] audit: type=1400 audit(1774617305.808:195): avc: denied { ioctl } for pid=3704 comm="syz.4.52" path="socket:[6198]" dev="sockfs" ino=6198 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.593292][ T3714] loop3: detected capacity change from 0 to 128 [ 35.632034][ T3714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 36.576553][ T3722] : port 1(veth0_to_bridge) entered blocking state [ 36.606314][ T3722] : port 1(veth0_to_bridge) entered disabled state [ 36.627710][ T3722] veth0_to_bridge: entered allmulticast mode [ 36.658975][ T3722] veth0_to_bridge: entered promiscuous mode [ 36.684042][ T3728] : port 2(veth0_to_team) entered blocking state [ 36.696184][ T3726] loop3: detected capacity change from 0 to 8192 [ 36.726194][ T3728] : port 2(veth0_to_team) entered disabled state [ 36.779353][ T3728] veth0_to_team: entered allmulticast mode [ 36.818254][ T3728] veth0_to_team: entered promiscuous mode [ 36.957909][ T3738] loop3: detected capacity change from 0 to 512 [ 36.978543][ T3739] loop0: detected capacity change from 0 to 1024 [ 37.011671][ T3738] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 37.030076][ T3739] ======================================================= [ 37.030076][ T3739] WARNING: The mand mount option has been deprecated and [ 37.030076][ T3739] and is ignored by this kernel. Remove the mand [ 37.030076][ T3739] option from the mount to silence this warning. [ 37.030076][ T3739] ======================================================= [ 37.087869][ T3738] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.126687][ T3738] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 37.152210][ T3739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.183471][ T3738] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 37.246292][ T3738] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.62: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 37.314787][ T3738] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 37.315034][ T3738] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.62: couldn't read orphan inode 13 (err -117) [ 37.324406][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 37.324438][ C1] EXT4-fs (loop3): last error at time 1774617307: ext4_ext_check_inode:521: inode 13 [ 37.361202][ T3738] loop3: lost filesystem error report for type 5 error -117 [ 37.371887][ T3738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.399563][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.616262][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.789762][ T3771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 37.885652][ T3771] bond_slave_0: entered promiscuous mode [ 37.891506][ T3771] bond_slave_1: entered promiscuous mode [ 37.971829][ T3771] macvlan2: entered promiscuous mode [ 38.013933][ T3771] bond0: entered promiscuous mode [ 38.061818][ T3771] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 38.124561][ T3770] loop3: detected capacity change from 0 to 512 [ 38.200844][ T3770] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.72: corrupted in-inode xattr: e_value out of bounds [ 38.417102][ T3770] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.417826][ T3770] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.72: couldn't read orphan inode 15 (err -117) [ 38.427589][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 38.427606][ C0] EXT4-fs (loop3): initial error at time 1774617308: ext4_iget_extra_inode:5025: inode 15 [ 38.427631][ C0] EXT4-fs (loop3): last error at time 1774617308: ext4_iget_extra_inode:5025: inode 15 [ 38.466401][ T3770] loop3: lost filesystem error report for type 5 error -117 [ 38.507041][ T3770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.780794][ T3602] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 38.799099][ T3797] vlan2: entered promiscuous mode [ 38.935412][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.202165][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 39.202183][ T28] audit: type=1400 audit(1774617309.618:223): avc: denied { setopt } for pid=3802 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.442097][ T28] audit: type=1400 audit(1774617309.638:224): avc: denied { name_connect } for pid=3802 comm="syz.0.84" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 39.691734][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 39.759695][ T3825] netlink: 'syz.0.88': attribute type 1 has an invalid length. [ 39.896822][ T3827] erspan1: entered allmulticast mode [ 39.917585][ T3825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 40.274156][ T3838] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.298515][ T3835] loop0: detected capacity change from 0 to 8192 [ 40.324230][ T3839] loop2: detected capacity change from 0 to 512 [ 40.334929][ T3838] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.401359][ T3839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.414291][ T3839] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.427850][ T3838] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.544889][ T3838] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.570124][ T3849] loop1: detected capacity change from 0 to 512 [ 41.086726][ T28] audit: type=1400 audit(1774617311.498:225): avc: denied { create } for pid=3853 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 41.425814][ T3856] bridge_slave_0: left allmulticast mode [ 41.449184][ T3856] bridge_slave_0: left promiscuous mode [ 41.477812][ T3856] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.508575][ T3856] bridge_slave_1: left allmulticast mode [ 41.514401][ T3856] bridge_slave_1: left promiscuous mode [ 41.532213][ T3858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 41.587531][ T3849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.591023][ T3856] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.610860][ T3849] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.655384][ T35] IPVS: starting estimator thread 0... [ 41.664789][ T3860] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 41.673539][ T28] audit: type=1400 audit(1774617312.078:226): avc: denied { setopt } for pid=3859 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 41.712387][ T3860] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 41.736869][ T3856] bond0: (slave bond_slave_0): Releasing backup interface [ 41.745204][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.760901][ T3861] IPVS: using max 2160 ests per chain, 108000 per kthread [ 41.774261][ T3856] bond0: (slave bond_slave_1): Releasing backup interface [ 41.816186][ T3856] team0: Port device team_slave_0 removed [ 41.839485][ T3856] team0: Port device team_slave_1 removed [ 41.856685][ T3856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.876397][ T3856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.026934][ T3856] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 42.044108][ T3857] team0: Mode changed to "loadbalance" [ 42.054436][ T3781] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.293166][ T3871] process 'syz.0.100' launched '/dev/fd/4' with NULL argv: empty string added [ 42.308233][ T28] audit: type=1400 audit(1774617312.718:227): avc: denied { execute_no_trans } for pid=3867 comm="syz.0.100" path=2F6D656D66643A5B0BDB58AE5B1AADD16D64C8854858A9250C1A2CE29CB4D7BCF1B386E22F4F70D0A2821E623B28B5E16AC80CE58917EE7C4A903D35EDCFD3AED20711A9A55EFFF595D271258ADA05202864656C6574656429 dev="tmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.355976][ T3781] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.392092][ T3781] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.431194][ T3781] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.562514][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.647014][ T28] audit: type=1400 audit(1774617313.058:228): avc: denied { shutdown } for pid=3873 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.668708][ T3875] netlink: 'syz.1.108': attribute type 27 has an invalid length. [ 42.886682][ T3879] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 42.913107][ T3874] loop2: detected capacity change from 0 to 8192 [ 42.933357][ T3875] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.940600][ T3875] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.120384][ T3875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.142454][ T3875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.206549][ T3875] macvlan2: left promiscuous mode [ 43.213430][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.230762][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.260417][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.289912][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.816568][ T28] audit: type=1400 audit(1774617314.228:229): avc: denied { name_bind } for pid=3888 comm="syz.3.106" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 44.011457][ T28] audit: type=1400 audit(1774617314.418:230): avc: denied { firmware_load } for pid=3893 comm="syz.1.107" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 44.327036][ T28] audit: type=1400 audit(1774617314.738:231): avc: denied { setopt } for pid=3897 comm="syz.3.109" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.369820][ T3898] netlink: 'syz.3.109': attribute type 7 has an invalid length. [ 44.490545][ T3894] syz.1.107 (3894) used greatest stack depth: 8688 bytes left [ 44.510051][ T28] audit: type=1400 audit(1774617314.918:232): avc: denied { write } for pid=3903 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.555611][ T28] audit: type=1400 audit(1774617314.918:233): avc: denied { accept } for pid=3903 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.161413][ T3923] loop2: detected capacity change from 0 to 512 [ 45.202436][ T3923] EXT4-fs: Ignoring removed bh option [ 45.252611][ T3923] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 45.278919][ T3923] EXT4-fs (loop2): 1 truncate cleaned up [ 45.291191][ T3923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.371442][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.505397][ T28] audit: type=1400 audit(1774617315.918:234): avc: denied { module_request } for pid=3931 comm="syz.2.118" kmod=6E65746465762D03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.545077][ T3930] loop1: detected capacity change from 0 to 8192 [ 45.922902][ T3946] capability: warning: `syz.1.123' uses 32-bit capabilities (legacy support in use) [ 45.986359][ T28] audit: type=1400 audit(1774617316.398:235): avc: denied { listen } for pid=3949 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.003416][ T3948] netlink: 'syz.4.124': attribute type 2 has an invalid length. [ 46.021536][ T3948] netlink: 14 bytes leftover after parsing attributes in process `syz.4.124'. [ 46.072572][ T28] audit: type=1400 audit(1774617316.488:236): avc: denied { accept } for pid=3949 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.094820][ T3951] loop1: detected capacity change from 0 to 512 [ 46.119197][ T3951] EXT4-fs: Ignoring removed bh option [ 46.127499][ T3952] loop0: detected capacity change from 0 to 512 [ 46.138245][ T3952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.168810][ T3951] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 46.183437][ T3952] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.125: iget: bad i_size value: 38620345925642 [ 46.206812][ T3952] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.207165][ T3952] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.125: couldn't read orphan inode 15 (err -117) [ 46.212987][ T3951] EXT4-fs (loop1): 1 truncate cleaned up [ 46.216341][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 46.216359][ C0] EXT4-fs (loop0): initial error at time 1774617316: ext4_orphan_get:1391: inode 15 [ 46.216394][ C0] EXT4-fs (loop0): last error at time 1774617316: ext4_orphan_get:1391: inode 15 [ 46.216990][ T3952] loop0: lost filesystem error report for type 5 error -117 [ 46.236065][ T3951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.260856][ T3952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.319686][ T28] audit: type=1400 audit(1774617316.728:237): avc: denied { write } for pid=3945 comm="syz.1.123" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.331693][ T3951] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 46.331693][ T3951] program syz.1.123 not setting count and/or reply_len properly [ 46.343778][ T28] audit: type=1400 audit(1774617316.728:238): avc: denied { open } for pid=3945 comm="syz.1.123" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.417669][ T28] audit: type=1400 audit(1774617316.828:239): avc: denied { create } for pid=3959 comm="syz.4.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 46.467968][ T3950] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.125: bg 0: block 5: invalid block bitmap [ 46.484181][ T3950] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1768 with error 28 [ 46.497051][ T28] audit: type=1400 audit(1774617316.908:240): avc: denied { setattr } for pid=3962 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 46.511242][ T3950] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.511242][ T3950] [ 46.539931][ T3950] EXT4-fs (loop0): Total free blocks count 0 [ 46.546350][ T3950] EXT4-fs (loop0): Free/Dirty block details [ 46.552817][ T3950] EXT4-fs (loop0): free_blocks=0 [ 46.557833][ T3950] EXT4-fs (loop0): dirty_blocks=1768 [ 46.563513][ T3950] EXT4-fs (loop0): Block reservation details [ 46.569783][ T3950] EXT4-fs (loop0): i_reserved_data_blocks=1768 [ 46.637330][ T3967] netlink: 'syz.3.130': attribute type 32 has an invalid length. [ 46.655957][ T3967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 46.671550][ T3967] bond1: Setting coupled_control to off (0) [ 46.675817][ T3971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 46.696223][ T3971] veth1_macvtap: left promiscuous mode [ 46.717603][ T3967] loop3: detected capacity change from 0 to 512 [ 46.752981][ T3967] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.781636][ T3967] EXT4-fs (loop3): 1 truncate cleaned up [ 46.787775][ T3967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.801543][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.928016][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.970366][ T3981] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 47.006653][ T3981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 47.062095][ T3981] vlan2: entered allmulticast mode [ 47.067308][ T3981] bond2: entered allmulticast mode [ 47.084089][ T3981] bond2: (slave geneve2): making interface the new active one [ 47.092429][ T3981] geneve2: entered allmulticast mode [ 47.099410][ T3981] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 47.248965][ T3987] loop3: detected capacity change from 0 to 512 [ 47.259319][ T3987] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.266475][ T3987] ext4: Unknown parameter 'fsmagic' [ 48.957603][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.983530][ T4002] loop4: detected capacity change from 0 to 1024 [ 49.045461][ T4004] loop2: detected capacity change from 0 to 128 [ 49.088790][ T4002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.133261][ T4002] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.146933][ T4011] loop3: detected capacity change from 0 to 512 [ 49.175334][ T4011] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.261207][ T4011] EXT4-fs (loop3): orphan file too big: 4294967295 [ 49.268128][ T4018] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4018 comm=syz.0.146 [ 49.278018][ T4011] EXT4-fs (loop3): mount failed [ 49.338403][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 49.338418][ T28] audit: type=1400 audit(1774617319.748:306): avc: denied { search } for pid=4020 comm="syz.2.148" name="/" dev="configfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.378609][ T28] audit: type=1400 audit(1774617319.748:307): avc: denied { read open } for pid=4020 comm="syz.2.148" path="/" dev="configfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.445704][ T4024] netlink: 'syz.0.149': attribute type 1 has an invalid length. [ 49.511345][ T4024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.538037][ T4029] loop3: detected capacity change from 0 to 4096 [ 49.555416][ T4031] bond1: (slave gretap1): making interface the new active one [ 49.591321][ T4031] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 49.602473][ T4029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.622295][ T4024] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4024 comm=syz.0.149 [ 49.636036][ T28] audit: type=1400 audit(1774617320.058:308): avc: denied { bind } for pid=4027 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.682617][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.990171][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.432249][ T4057] netlink: 9 bytes leftover after parsing attributes in process `syz.0.154'. [ 50.569766][ T4057] netlink: 9 bytes leftover after parsing attributes in process `syz.0.154'. [ 50.662278][ T4061] syzkaller0: entered promiscuous mode [ 50.667876][ T4061] syzkaller0: entered allmulticast mode [ 50.764351][ T28] audit: type=1326 audit(1774617321.178:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4062 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 50.802303][ T28] audit: type=1326 audit(1774617321.208:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4062 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 50.831396][ T28] audit: type=1326 audit(1774617321.208:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4062 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 50.856987][ T28] audit: type=1326 audit(1774617321.208:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4062 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 50.913968][ T4068] loop2: detected capacity change from 0 to 512 [ 50.932752][ T4068] ext4: Bad value for 'sb' [ 50.970774][ T28] audit: type=1326 audit(1774617321.208:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4062 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 50.999601][ T28] audit: type=1326 audit(1774617321.248:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4062 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 51.022924][ T4071] audit: audit_backlog=65 > audit_backlog_limit=64 [ 51.339972][ T4100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 51.374893][ T4099] netlink: 'syz.0.174': attribute type 1 has an invalid length. [ 51.393761][ T4099] netlink: 'syz.0.174': attribute type 2 has an invalid length. [ 51.427034][ T4099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 51.506405][ T4107] smc: net device gretap0 applied user defined pnetid SYZ0 [ 51.546469][ T4109] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 51.750204][ T4118] loop2: detected capacity change from 0 to 512 [ 51.761383][ T4118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.782436][ T4118] EXT4-fs (loop2): 1 truncate cleaned up [ 51.788547][ T4118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.363057][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.543326][ T4133] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4133 comm=syz.0.183 [ 52.577480][ T4129] loop1: detected capacity change from 0 to 512 [ 53.145506][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 53.152693][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 53.159390][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 53.166301][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 53.191082][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 53.210385][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 53.232521][ T4137] xt_CT: No such helper "snmp_trap" [ 53.328005][ T4150] IPv6: NLM_F_CREATE should be specified when creating new route [ 53.392986][ T4150] loop4: detected capacity change from 0 to 256 [ 53.499391][ T4148] loop1: detected capacity change from 0 to 1024 [ 53.550864][ T4148] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 53.563061][ T4148] System zones: 0-1, 3-36 [ 53.761229][ T4148] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.187: bad orphan inode 134217728 [ 53.786208][ T4148] loop1: lost filesystem error report for type 5 error -117 [ 53.822894][ T4148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.894938][ T4161] loop3: detected capacity change from 0 to 1024 [ 53.956377][ T4161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.990813][ T4161] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.005150][ T4161] 9p: Bad value for 'rfdno' [ 54.013476][ T4161] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 3: comm syz.3.191: lblock 3 mapped to illegal pblock 3 (length 3) [ 54.075282][ T4171] syzkaller0: entered promiscuous mode [ 54.080906][ T4171] syzkaller0: entered allmulticast mode [ 54.098323][ T4161] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 54.110982][ T4161] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.110982][ T4161] [ 54.121612][ T4170] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.191: Freeing blocks not in datazone - block = 3, count = 3 [ 54.135476][ T4170] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.191: Freeing blocks not in datazone - block = 0, count = 16 [ 54.159843][ T84] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 54.234841][ T84] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 38 with error 28 [ 54.329213][ T84] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.329213][ T84] [ 54.339572][ T84] EXT4-fs (loop3): Total free blocks count 0 [ 54.346093][ T84] EXT4-fs (loop3): Free/Dirty block details [ 54.352585][ T84] EXT4-fs (loop3): free_blocks=0 [ 54.357875][ T84] EXT4-fs (loop3): dirty_blocks=64 [ 54.364355][ T84] EXT4-fs (loop3): Block reservation details [ 54.402660][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.486934][ T4179] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 54.493581][ T4179] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.575636][ T4179] vhci_hcd vhci_hcd.0: Device attached [ 54.637111][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 54.637126][ T28] audit: type=1400 audit(1774617325.048:398): avc: denied { create } for pid=4178 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 54.663591][ T4179] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 54.670680][ T4179] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 54.700220][ T4179] vhci_hcd vhci_hcd.0: Device attached [ 54.707803][ T4180] vhci_hcd: connection closed [ 54.707813][ T4187] vhci_hcd: connection closed [ 54.708106][ T49] vhci_hcd vhci_hcd.1: stop threads [ 54.735005][ T49] vhci_hcd vhci_hcd.1: release socket [ 54.750801][ T3367] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 54.757410][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 54.767541][ T49] vhci_hcd vhci_hcd.1: stop threads [ 54.860758][ T28] audit: type=1400 audit(1774617325.268:399): avc: denied { read } for pid=4191 comm="syz.0.199" path="socket:[7068]" dev="sockfs" ino=7068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.882337][ T3367] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 54.891957][ T3367] usb 3-1: enqueue for inactive port 0 [ 54.897449][ T3367] usb 3-1: enqueue for inactive port 0 [ 54.903718][ T3367] usb 3-1: enqueue for inactive port 0 [ 54.909315][ T49] vhci_hcd vhci_hcd.1: release socket [ 54.915073][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 54.957384][ T28] audit: type=1400 audit(1774617325.268:400): avc: denied { unmount } for pid=4191 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.980803][ T3367] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 54.984035][ T28] audit: type=1400 audit(1774617325.308:401): avc: denied { associate } for pid=4191 comm="syz.0.199" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.379141][ T4205] tipc: Started in network mode [ 55.410765][ T4205] tipc: Node identity c6061703f16f, cluster identity 4711 [ 55.417981][ T4205] tipc: Enabled bearer , priority 0 [ 55.728497][ T4205] tipc: Resetting bearer [ 55.765927][ T4210] syzkaller0: entered allmulticast mode [ 55.963328][ T4204] tipc: Resetting bearer [ 55.993868][ T4204] tipc: Disabling bearer [ 56.076148][ T4214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 56.105066][ T28] audit: type=1400 audit(1774617326.508:402): avc: denied { connect } for pid=4215 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.137482][ T28] audit: type=1400 audit(1774617326.508:403): avc: denied { create } for pid=4215 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.157107][ T28] audit: type=1400 audit(1774617326.508:404): avc: denied { connect } for pid=4215 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.282690][ T28] audit: type=1400 audit(1774617326.648:405): avc: denied { read write } for pid=4217 comm="syz.2.208" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 56.445105][ T4224] loop1: detected capacity change from 0 to 512 [ 56.540195][ T4224] EXT4-fs (loop1): 1 truncate cleaned up [ 56.553539][ T28] audit: type=1400 audit(1774617326.648:406): avc: denied { open } for pid=4217 comm="syz.2.208" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 56.604126][ T4224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.745803][ T28] audit: type=1400 audit(1774617326.648:407): avc: denied { read } for pid=4217 comm="syz.2.208" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.812945][ T4228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 56.850802][ T4228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 57.843762][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.730640][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 59.780623][ T28] audit: type=1400 audit(1774617330.138:413): avc: denied { create } for pid=4265 comm="syz.4.223" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.896388][ T28] audit: type=1326 audit(1774617330.228:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 60.050721][ T28] audit: type=1326 audit(1774617330.228:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 60.175121][ T28] audit: type=1326 audit(1774617330.228:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 60.193511][ T4284] netlink: 'syz.2.227': attribute type 27 has an invalid length. [ 60.240856][ T28] audit: type=1326 audit(1774617330.228:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 60.300696][ T28] audit: type=1326 audit(1774617330.228:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 60.365021][ T28] audit: type=1326 audit(1774617330.228:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 60.460712][ T28] audit: type=1326 audit(1774617330.228:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 60.493024][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.500503][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.544794][ T28] audit: type=1326 audit(1774617330.228:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 60.578347][ T28] audit: type=1326 audit(1774617330.228:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 60.744044][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.781366][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.801073][ T4298] netlink: 48 bytes leftover after parsing attributes in process `syz.1.232'. [ 60.945395][ T84] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.955350][ T84] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.971702][ T84] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.007312][ T84] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.102724][ T4309] syzkaller0: entered promiscuous mode [ 61.108262][ T4309] syzkaller0: entered allmulticast mode [ 65.618280][ T4359] loop3: detected capacity change from 0 to 128 [ 65.649676][ T4359] msdos: Unknown parameter 'xMkcUӴ66%+A7F7AvH1X#pKSI"Y3n觘ٕjLL˼0i2LMν%<{?4wN \(|' [ 65.921986][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 65.922008][ T28] audit: type=1400 audit(1774617336.318:466): avc: denied { mount } for pid=4360 comm="syz.3.250" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 65.997518][ T4361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.250'. [ 66.047870][ T28] audit: type=1400 audit(1774617336.328:467): avc: denied { remount } for pid=4360 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 66.163677][ T28] audit: type=1400 audit(1774617336.368:468): avc: denied { unmount } for pid=4360 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 66.235265][ T4367] loop1: detected capacity change from 0 to 1024 [ 66.246844][ T4365] loop3: detected capacity change from 0 to 8192 [ 66.263167][ T4369] loop4: detected capacity change from 0 to 512 [ 66.271303][ T4367] EXT4-fs: inline encryption not supported [ 66.277279][ T4367] EXT4-fs: Ignoring removed nobh option [ 66.340420][ T4369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.360859][ T4367] EXT4-fs: Ignoring removed bh option [ 66.375949][ T4369] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.816409][ T4367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.820155][ T4390] loop3: detected capacity change from 0 to 512 [ 66.835917][ T4390] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.847007][ T28] audit: type=1400 audit(1774617337.268:469): avc: denied { add_name } for pid=4366 comm="syz.1.252" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.855739][ T4390] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 66.902036][ T28] audit: type=1400 audit(1774617337.298:470): avc: denied { name_bind } for pid=4391 comm="syz.2.258" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 66.924815][ T4390] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 66.937466][ T4390] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 66.956808][ T4390] System zones: 0-2, 18-18, 34-35 [ 66.971154][ T4390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.030799][ T28] audit: type=1400 audit(1774617337.448:471): avc: denied { ioctl } for pid=4397 comm="syz.2.260" path="socket:[8013]" dev="sockfs" ino=8013 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.067283][ T28] audit: type=1400 audit(1774617337.478:472): avc: denied { connect } for pid=4389 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.098664][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.115076][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.172385][ T4403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.261'. [ 67.184805][ T4405] xt_NFQUEUE: number of total queues is 0 [ 67.920152][ T4425] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 67.926780][ T4425] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.954739][ T4425] vhci_hcd vhci_hcd.0: Device attached [ 67.969838][ T4425] loop2: detected capacity change from 0 to 1024 [ 67.999289][ T4425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.028001][ T4425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.190764][ T3404] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 68.311916][ T4426] vhci_hcd: connection reset by peer [ 68.317457][ T12] vhci_hcd vhci_hcd.2: stop threads [ 68.322851][ T12] vhci_hcd vhci_hcd.2: release socket [ 68.328318][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 68.545454][ T28] audit: type=1400 audit(1774617338.958:473): avc: denied { bind } for pid=4441 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.839048][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.010543][ T28] audit: type=1400 audit(1774617339.418:474): avc: denied { create } for pid=4447 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 70.816655][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.823840][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.903725][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.917558][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.099273][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.144300][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.184324][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.211584][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.359188][ T4486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.286'. [ 71.436592][ T28] audit: type=1400 audit(1774617341.848:475): avc: denied { bind } for pid=4487 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.456301][ T4488] netlink: 'syz.0.287': attribute type 4 has an invalid length. [ 71.483270][ T4488] netlink: 'syz.0.287': attribute type 4 has an invalid length. [ 71.681079][ T28] audit: type=1400 audit(1774617342.098:476): avc: denied { getopt } for pid=4491 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.728088][ T28] audit: type=1400 audit(1774617342.138:477): avc: denied { bind } for pid=4494 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.876087][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.947010][ T4513] syzkaller0: entered promiscuous mode [ 72.952555][ T4513] syzkaller0: entered allmulticast mode [ 73.148556][ T28] audit: type=1326 audit(1774617343.518:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 73.196604][ T28] audit: type=1326 audit(1774617343.518:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 73.270279][ T4523] loop1: detected capacity change from 0 to 8192 [ 73.270710][ T3404] usb 5-1: enqueue for inactive port 0 [ 73.282410][ T28] audit: type=1326 audit(1774617343.518:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 73.353171][ T4526] loop3: detected capacity change from 0 to 512 [ 73.401039][ T4526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.428776][ T4526] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.299: iget: bad i_size value: 38620345925642 [ 73.451871][ T3404] usb 5-1: enqueue for inactive port 0 [ 73.477798][ T4526] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.480120][ T4526] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.299: couldn't read orphan inode 15 (err -117) [ 73.489301][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 73.489318][ C0] EXT4-fs (loop3): initial error at time 1774617343: ext4_orphan_get:1391: inode 15 [ 73.489355][ C0] EXT4-fs (loop3): last error at time 1774617343: ext4_orphan_get:1391: inode 15 [ 73.531860][ T3404] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 73.538367][ T28] audit: type=1326 audit(1774617343.518:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 73.568673][ T4526] loop3: lost filesystem error report for type 5 error -117 [ 73.569264][ T4526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.605647][ T28] audit: type=1326 audit(1774617343.528:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 73.653443][ T28] audit: type=1326 audit(1774617343.528:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a2d2ae007 code=0x7ffc0000 [ 73.700667][ T28] audit: type=1326 audit(1774617343.558:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4519 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2d2ac799 code=0x7ffc0000 [ 74.062433][ T3781] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 5: invalid block bitmap [ 74.095618][ T3781] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1380 with error 28 [ 74.131813][ T3781] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.131813][ T3781] [ 74.160745][ T3781] EXT4-fs (loop3): Total free blocks count 0 [ 74.176933][ T3781] EXT4-fs (loop3): Free/Dirty block details [ 74.187011][ T3781] EXT4-fs (loop3): free_blocks=0 [ 74.212114][ T3781] EXT4-fs (loop3): dirty_blocks=1384 [ 74.223010][ T3781] EXT4-fs (loop3): Block reservation details [ 74.235481][ T3781] EXT4-fs (loop3): i_reserved_data_blocks=1384 [ 74.244088][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 74.265422][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.335592][ T4543] loop4: detected capacity change from 0 to 512 [ 74.361065][ T4543] EXT4-fs: Ignoring removed orlov option [ 74.366919][ T4543] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 74.392996][ T4545] loop1: detected capacity change from 0 to 128 [ 74.422890][ T4543] EXT4-fs (loop4): orphan cleanup on readonly fs [ 74.439499][ T4543] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.304: bg 0: block 255: padding at end of block bitmap is not set [ 74.480732][ T4543] loop4: lost filesystem error report for type 5 error -117 [ 74.480967][ T4543] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 74.497185][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 74.497205][ C1] EXT4-fs (loop4): initial error at time 1774617344: ext4_validate_block_bitmap:441 [ 74.497236][ C1] EXT4-fs (loop4): last error at time 1774617344: ext4_validate_block_bitmap:441 [ 74.610301][ T4552] netlink: 'syz.0.307': attribute type 1 has an invalid length. [ 74.618162][ T4543] loop4: lost filesystem error report for type 5 error -117 [ 74.618319][ T4549] loop1: detected capacity change from 128 to 0 [ 74.632181][ T4543] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.304: invalid indirect mapped block 1 (level 1) [ 74.659423][ T4543] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.659718][ T4543] EXT4-fs (loop4): 1 truncate cleaned up [ 74.682334][ T4552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.709877][ T4543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.724691][ T4555] bond2: (slave veth3): Enslaving as an active interface with a down link [ 74.750262][ T3310] FAT-fs (loop1): Directory bread(block 40) failed [ 74.760383][ T84] FAT-fs (loop1): bread failed in fat_clusters_flush [ 74.767423][ T3310] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 74.801738][ T4552] bond2: (slave dummy0): making interface the new active one [ 74.812353][ T4559] loop1: detected capacity change from 0 to 128 [ 74.828828][ T4555] netlink: 14 bytes leftover after parsing attributes in process `syz.0.307'. [ 74.829547][ T4552] dummy0: entered promiscuous mode [ 74.868738][ T4552] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 74.916168][ T4555] bond2: (slave dummy0): Releasing active interface [ 74.930711][ T4555] dummy0 (unregistering): left promiscuous mode [ 74.951910][ T4561] syzkaller1: entered promiscuous mode [ 74.957599][ T4561] syzkaller1: entered allmulticast mode [ 75.063213][ T4570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'. [ 75.064430][ T4572] loop2: detected capacity change from 0 to 128 [ 75.089472][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.118339][ T4570] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4570 comm=syz.0.311 [ 75.133663][ T4572] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.150629][ T4572] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.464406][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 76.464422][ T28] audit: type=1400 audit(1774617346.878:549): avc: denied { read } for pid=4589 comm="syz.0.317" path="socket:[9079]" dev="sockfs" ino=9079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.552714][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.708964][ T4600] netlink: 104 bytes leftover after parsing attributes in process `syz.0.322'. [ 76.719424][ T28] audit: type=1400 audit(1774617347.118:550): avc: denied { nlmsg_read } for pid=4599 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.826318][ T4604] syzkaller0: entered promiscuous mode [ 76.840877][ T4604] syzkaller0: entered allmulticast mode [ 76.857960][ T4604] 0: reclassify loop, rule prio 0, protocol 800 [ 77.140494][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 77.150203][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 77.159303][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 77.168438][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 78.013082][ T28] audit: type=1400 audit(1774617348.428:551): avc: denied { create } for pid=4608 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 78.309580][ T4624] loop4: detected capacity change from 0 to 512 [ 78.444230][ T4624] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.329: invalid indirect mapped block 256 (level 2) [ 78.493899][ T4624] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.495653][ T4624] EXT4-fs (loop4): 2 truncates cleaned up [ 78.505351][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 78.505402][ C0] EXT4-fs (loop4): initial error at time 1774617348: ext4_free_branches:1023: inode 11 [ 78.505681][ C0] EXT4-fs (loop4): last error at time 1774617348: ext4_free_branches:1023: inode 11 [ 78.640829][ T28] audit: type=1400 audit(1774617349.048:552): avc: denied { read } for pid=4635 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.678676][ T4624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.870134][ T28] audit: type=1400 audit(1774617349.278:553): avc: denied { append } for pid=4623 comm="syz.4.329" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.317959][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.365154][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 79.407199][ T4646] bridge1: port 1(geneve3) entered blocking state [ 79.414163][ T4646] bridge1: port 1(geneve3) entered disabled state [ 79.421577][ T4646] geneve3: entered allmulticast mode [ 79.427895][ T4646] geneve3: entered promiscuous mode [ 79.611502][ T4648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 79.671964][ T28] audit: type=1400 audit(1774617350.088:554): avc: denied { map } for pid=4653 comm="syz.1.341" path="socket:[10545]" dev="sockfs" ino=10545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.813818][ T28] audit: type=1400 audit(1774617350.228:555): avc: denied { read write } for pid=4659 comm="syz.1.343" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.842485][ T28] audit: type=1400 audit(1774617350.228:556): avc: denied { open } for pid=4659 comm="syz.1.343" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.040670][ T28] audit: type=1400 audit(1774617350.448:557): avc: denied { create } for pid=4674 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.080983][ T28] audit: type=1400 audit(1774617350.478:558): avc: denied { write } for pid=4672 comm="syz.4.347" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.639559][ T4695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.354'. [ 80.775827][ T4695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 81.228520][ T4708] netlink: 172 bytes leftover after parsing attributes in process `syz.3.358'. [ 82.284110][ T4727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 82.301663][ T4727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 82.310846][ T4727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 82.327973][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.497969][ T4727] bond3: (slave bond0): making interface the new active one [ 82.627842][ T4727] bond3: (slave bond0): Enslaving as an active interface with an up link [ 82.813621][ T4729] bond3: (slave bond0): Releasing active interface [ 82.832770][ T4729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.969400][ T4749] x_tables: duplicate entry at hook 2 [ 83.056986][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 83.057009][ T28] audit: type=1400 audit(1774617353.468:623): avc: denied { connect } for pid=4751 comm="syz.2.372" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.090850][ T4752] loop2: detected capacity change from 0 to 164 [ 83.100689][ T4754] loop3: detected capacity change from 0 to 512 [ 83.107942][ T4752] Unable to read rock-ridge attributes [ 83.117062][ T4754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 83.135771][ T4754] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.373: Unimplemented hash flags: 0x0001 [ 83.147261][ T4754] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.373: Corrupt directory, running e2fsck is recommended [ 83.160295][ T4754] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.373: path /73/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 83.213092][ T28] audit: type=1400 audit(1774617353.628:624): avc: denied { listen } for pid=4756 comm="syz.4.374" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 83.265164][ T28] audit: type=1400 audit(1774617353.678:625): avc: denied { accept } for pid=4756 comm="syz.4.374" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 83.272562][ T4754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.304436][ T28] audit: type=1400 audit(1774617353.678:626): avc: denied { map } for pid=4759 comm="syz.2.375" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.335843][ T28] audit: type=1400 audit(1774617353.678:627): avc: denied { read write } for pid=4759 comm="syz.2.375" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.336170][ T4754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.362592][ T28] audit: type=1400 audit(1774617353.678:628): avc: denied { cmd } for pid=4759 comm="syz.2.375" path="socket:[11830]" dev="sockfs" ino=11830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.413832][ T4764] netlink: 'syz.2.377': attribute type 1 has an invalid length. [ 83.456327][ T4764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.478078][ T4764] vlan2: entered promiscuous mode [ 83.483312][ T4764] bond1: entered promiscuous mode [ 83.488640][ T4764] vlan2: entered allmulticast mode [ 83.494230][ T4764] bond1: entered allmulticast mode [ 83.527908][ T4764] netlink: 44 bytes leftover after parsing attributes in process `syz.2.377'. [ 83.541167][ T4764] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 83.549851][ T4764] bond1: (slave batadv1): making interface the new active one [ 83.557418][ T4764] batadv1: entered promiscuous mode [ 83.562870][ T4764] batadv1: entered allmulticast mode [ 83.568868][ T4764] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 84.548514][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.854804][ T28] audit: type=1400 audit(1774617356.268:629): avc: denied { mount } for pid=4791 comm="syz.3.385" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 86.043634][ T4798] loop3: detected capacity change from 0 to 1024 [ 86.084476][ T4798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 86.521170][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.683309][ T4812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 86.713699][ T4814] syzkaller0: entered promiscuous mode [ 86.719213][ T4814] syzkaller0: entered allmulticast mode [ 86.738838][ T4812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.392'. [ 86.914893][ T4820] loop2: detected capacity change from 0 to 512 [ 86.935077][ T4820] vfat: Unknown parameter '' [ 86.940722][ T28] audit: type=1400 audit(1774617357.348:630): avc: denied { create } for pid=4821 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.050694][ T28] audit: type=1400 audit(1774617357.458:631): avc: denied { getopt } for pid=4819 comm="syz.2.395" lport=59190 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 87.083777][ T4826] bridge_slave_0: left allmulticast mode [ 87.091616][ T4826] bridge_slave_0: left promiscuous mode [ 87.097507][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.106401][ T4826] bridge_slave_1: left allmulticast mode [ 87.112185][ T4826] bridge_slave_1: left promiscuous mode [ 87.118000][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.127250][ T4826] bond0: (slave bond_slave_0): Releasing backup interface [ 87.136149][ T4826] bond0: (slave bond_slave_1): Releasing backup interface [ 87.146217][ T4826] team0: Port device team_slave_0 removed [ 87.153503][ T4826] team0: Port device team_slave_1 removed [ 87.159488][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.167144][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.175001][ T4826] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.194788][ T4830] team0: Mode changed to "loadbalance" [ 87.207210][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 87.822002][ T4841] netlink: 'syz.2.402': attribute type 13 has an invalid length. [ 88.112841][ T28] audit: type=1400 audit(1774617358.528:632): avc: denied { write } for pid=4848 comm="syz.4.405" lport=45813 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 88.223866][ T4854] Illegal XDP return value 3665915771 on prog (id 112) dev N/A, expect packet loss! [ 88.235859][ T4853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.406'. [ 88.287533][ T4855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.406'. [ 88.326150][ T4855] veth5: entered promiscuous mode [ 88.339816][ T4855] veth5: entered allmulticast mode [ 88.387010][ T4857] netlink: 76 bytes leftover after parsing attributes in process `syz.3.407'. [ 88.504029][ T28] audit: type=1326 audit(1774617358.918:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 88.725027][ T28] audit: type=1326 audit(1774617358.918:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 88.799167][ T28] audit: type=1326 audit(1774617358.918:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 88.870713][ T28] audit: type=1326 audit(1774617358.918:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 88.930876][ T28] audit: type=1326 audit(1774617358.938:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 88.980693][ T28] audit: type=1326 audit(1774617358.938:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 89.055858][ T28] audit: type=1326 audit(1774617358.938:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 89.088587][ T4870] loop4: detected capacity change from 0 to 1024 [ 89.109277][ T28] audit: type=1326 audit(1774617358.938:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 89.112950][ T4868] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.132718][ T28] audit: type=1326 audit(1774617358.938:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 89.188769][ T4870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 89.276869][ T4876] loop1: detected capacity change from 0 to 164 [ 89.301624][ T4876] Unable to read rock-ridge attributes [ 89.485292][ T4886] syzkaller0: entered promiscuous mode [ 89.513993][ T4886] syzkaller0: entered allmulticast mode [ 89.771667][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.087088][ T4903] loop3: detected capacity change from 0 to 512 [ 90.381446][ T4903] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.420: invalid indirect mapped block 256 (level 2) [ 90.398028][ T4903] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.402835][ T4903] EXT4-fs (loop3): 2 truncates cleaned up [ 90.412474][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 90.412553][ C0] EXT4-fs (loop3): initial error at time 1774617360: ext4_free_branches:1023: inode 11 [ 90.412795][ C0] EXT4-fs (loop3): last error at time 1774617360: ext4_free_branches:1023: inode 11 [ 90.486259][ T4903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.552760][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.584645][ T4914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.605137][ T4914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 90.614122][ T4914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 90.646491][ T4914] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.656667][ T4914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.807382][ T4926] loop1: detected capacity change from 0 to 512 [ 91.769570][ T4926] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 91.780844][ T4926] EXT4-fs (loop1): orphan cleanup on readonly fs [ 91.801633][ T4926] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 91.923399][ T4926] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 91.968095][ T4926] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.426: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 92.083580][ T4926] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 92.090931][ T4926] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.426: couldn't read orphan inode 13 (err -117) [ 92.111980][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 92.112003][ C0] EXT4-fs (loop1): last error at time 1774617362: ext4_ext_check_inode:521: inode 13 [ 92.154090][ T4926] loop1: lost filesystem error report for type 5 error -117 [ 92.167145][ T4926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.647892][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.733633][ T4949] loop2: detected capacity change from 0 to 8192 [ 92.791148][ T3303] loop2: p1 p2 p3 p4[DM] [ 92.795638][ T3303] loop2: p1 size 835329 extends beyond EOD, truncated [ 92.842899][ T4952] loop1: detected capacity change from 0 to 1024 [ 92.852700][ T3303] loop2: p3 start 134217728 is beyond EOD, truncated [ 92.863911][ T3303] loop2: p4 size 262144 extends beyond EOD, truncated [ 92.881851][ T4952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 92.903130][ T4949] loop2: p1 p2 p3 p4[DM] [ 92.907558][ T4949] loop2: p1 size 835329 extends beyond EOD, truncated [ 92.915897][ T4949] loop2: p3 start 134217728 is beyond EOD, truncated [ 92.922735][ T4949] loop2: p4 size 262144 extends beyond EOD, truncated [ 92.940325][ T2999] loop2: p1 p2 p3 p4[DM] [ 92.954687][ T2999] loop2: p1 size 835329 extends beyond EOD, truncated [ 92.971703][ T2999] loop2: p3 start 134217728 is beyond EOD, truncated [ 92.985017][ T2999] loop2: p4 size 262144 extends beyond EOD, truncated [ 93.186620][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 93.344451][ T4963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.438'. [ 93.766078][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 93.768311][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 93.778221][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 93.900787][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.083369][ T4976] netlink: 'syz.0.443': attribute type 3 has an invalid length. [ 94.091305][ T4976] netlink: 'syz.0.443': attribute type 1 has an invalid length. [ 94.099001][ T4976] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.443'. [ 94.127345][ T4979] netlink: 'syz.0.444': attribute type 13 has an invalid length. [ 94.594136][ T4983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.445'. [ 94.735303][ T4979] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.742623][ T4979] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.936682][ T4986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 95.122871][ T4979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.145483][ T4979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.239290][ T4979] tipc: Resetting bearer [ 95.368550][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.400709][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.449291][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.494546][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.715631][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 95.715657][ T28] audit: type=1326 audit(1774617366.128:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98fa8ac799 code=0x7ffc0000 [ 95.745316][ T28] audit: type=1326 audit(1774617366.128:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98fa8ac799 code=0x7ffc0000 [ 95.768637][ T28] audit: type=1326 audit(1774617366.128:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98fa8ac799 code=0x7ffc0000 [ 95.791961][ T28] audit: type=1326 audit(1774617366.128:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98fa8ac799 code=0x7ffc0000 [ 95.815418][ T28] audit: type=1326 audit(1774617366.128:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98fa8ac799 code=0x7ffc0000 [ 95.838845][ T28] audit: type=1326 audit(1774617366.138:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98fa8ac799 code=0x7ffc0000 [ 95.862120][ T28] audit: type=1326 audit(1774617366.138:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98fa8ac799 code=0x7ffc0000 [ 95.900699][ T28] audit: type=1326 audit(1774617366.138:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98fa8ac799 code=0x7ffc0000 [ 95.951447][ T28] audit: type=1326 audit(1774617366.138:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98fa8ac799 code=0x7ffc0000 [ 96.061989][ T28] audit: type=1326 audit(1774617366.148:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98fa8ac799 code=0x7ffc0000 [ 96.440408][ T5005] loop3: detected capacity change from 0 to 8192 [ 96.598160][ T5019] team0: Port device bridge2 added [ 96.624284][ T5019] bridge0: port 3(team0) entered blocking state [ 96.641923][ T5019] bridge0: port 3(team0) entered disabled state [ 96.660827][ T5019] team0: entered allmulticast mode [ 96.669112][ T5019] team_slave_0: entered allmulticast mode [ 96.685277][ T5019] team_slave_1: entered allmulticast mode [ 96.695333][ T5019] bridge2: entered allmulticast mode [ 96.709134][ T5019] team0: entered promiscuous mode [ 96.721504][ T5019] team_slave_0: entered promiscuous mode [ 96.734769][ T5019] team_slave_1: entered promiscuous mode [ 96.748851][ T5019] bridge2: entered promiscuous mode [ 96.834827][ T5025] netlink: 'syz.3.459': attribute type 13 has an invalid length. [ 96.996122][ T5032] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 97.103682][ T5032] 8021q: adding VLAN 0 to HW filter on device bond4 [ 97.113874][ T5039] loop3: detected capacity change from 0 to 128 [ 97.136142][ T5042] ip6erspan0: entered promiscuous mode [ 97.144606][ T5042] bond4: (slave ip6erspan0): making interface the new active one [ 97.153758][ T5042] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 97.181942][ T5032] macvlan1: entered promiscuous mode [ 97.188214][ T5032] bond4: entered promiscuous mode [ 97.194252][ T5032] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 97.204693][ T5032] bond4: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 97.221844][ T5032] bond4: left promiscuous mode [ 97.808190][ T5052] xt_hashlimit: size too large, truncated to 1048576 [ 98.238404][ T5066] loop4: detected capacity change from 0 to 512 [ 98.300582][ T5066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 98.328381][ T5066] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.483: Unimplemented hash flags: 0x0001 [ 98.340169][ T5066] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.483: Corrupt directory, running e2fsck is recommended [ 98.369545][ T5066] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.483: path /90/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 98.500744][ T5072] loop2: detected capacity change from 0 to 1024 [ 98.524838][ T5072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 98.732668][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.869899][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.958248][ T5079] loop1: detected capacity change from 0 to 1024 [ 99.065639][ T5081] netlink: 'syz.4.476': attribute type 13 has an invalid length. [ 99.079767][ T5079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 99.680968][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.950866][ T5099] loop1: detected capacity change from 0 to 1024 [ 100.006337][ T5099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 100.801506][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.076379][ T5117] netlink: 'syz.3.489': attribute type 1 has an invalid length. [ 101.193936][ T5117] bond4: entered promiscuous mode [ 101.199051][ T5117] bond4: entered allmulticast mode [ 101.231167][ T5134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 101.243929][ T5117] 8021q: adding VLAN 0 to HW filter on device bond4 [ 101.263594][ T5119] erspan1: entered allmulticast mode [ 101.274210][ T5119] bond4: (slave erspan1): making interface the new active one [ 101.287520][ T5119] erspan1: entered promiscuous mode [ 101.293953][ T5119] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 101.302855][ T30] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.311507][ T30] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.323605][ T5134] bond4 (unregistering): (slave erspan1): Releasing active interface [ 101.331788][ T5134] erspan1: left promiscuous mode [ 101.337888][ T5134] bond4 (unregistering): Released all slaves [ 101.349168][ T30] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.357708][ T30] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.413425][ T5138] loop4: detected capacity change from 0 to 128 [ 101.582422][ T5143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.493'. [ 101.621460][ T5144] loop4: detected capacity change from 128 to 0 [ 101.624248][ T5143] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5143 comm=syz.2.493 [ 101.640927][ C1] I/O error, dev loop4, sector 32 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.651376][ T5138] FAT-fs (loop4): FAT read failed (blocknr 32) [ 101.662405][ T5138] FAT-fs (loop4): FAT read failed (blocknr 32) [ 101.720870][ T5138] FAT-fs (loop4): FAT read failed (blocknr 32) [ 101.746170][ T5144] FAT-fs (loop4): FAT read failed (blocknr 32) [ 101.761593][ T12] FAT-fs (loop4): unable to read inode block for updating (i_pos 532) [ 101.769813][ T12] FAT-fs (loop4): bread failed in fat_clusters_flush [ 101.821984][ T3318] FAT-fs (loop4): Directory bread(block 33) failed [ 101.829854][ T5147] loop2: detected capacity change from 0 to 512 [ 101.836523][ T3318] FAT-fs (loop4): Directory bread(block 34) failed [ 101.900751][ T3318] FAT-fs (loop4): Directory bread(block 35) failed [ 101.909540][ T30] FAT-fs (loop4): unable to read inode block for updating (i_pos 532) [ 101.921837][ T3318] FAT-fs (loop4): Directory bread(block 36) failed [ 101.936192][ T3318] FAT-fs (loop4): Directory bread(block 37) failed [ 101.952798][ T3318] FAT-fs (loop4): Directory bread(block 38) failed [ 101.970746][ T5147] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 101.991269][ T5147] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.005863][ T5147] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 102.070325][ T3727] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 102.091082][ T5147] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 102.104260][ T5147] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.495: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 102.132165][ T5147] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 102.132334][ T5147] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.495: couldn't read orphan inode 13 (err -117) [ 102.141552][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 102.141568][ C0] EXT4-fs (loop2): last error at time 1774617372: ext4_ext_check_inode:521: inode 13 [ 102.169605][ T5147] loop2: lost filesystem error report for type 5 error -117 [ 102.170145][ T5147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.239472][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.965277][ T5171] bridge_slave_0: left allmulticast mode [ 102.972121][ T5171] bridge_slave_0: left promiscuous mode [ 102.977869][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.986520][ T5171] bridge_slave_1: left allmulticast mode [ 102.993016][ T5171] bridge_slave_1: left promiscuous mode [ 103.005307][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.024008][ T5171] bond0: (slave bond_slave_0): Releasing backup interface [ 103.032193][ T5171] bond_slave_0: left promiscuous mode [ 103.039408][ T5171] bond0: (slave bond_slave_1): Releasing backup interface [ 103.254318][ T5171] bond_slave_1: left promiscuous mode [ 103.281026][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 103.299136][ T5171] team0: Port device team_slave_0 removed [ 103.307847][ T5171] team0: Port device team_slave_1 removed [ 103.315373][ T5171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.323769][ T5171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.338453][ T5171] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 103.950261][ T5173] team0: Mode changed to "loadbalance" [ 104.402871][ T5180] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 104.429983][ T5180] bond2: entered promiscuous mode [ 104.437292][ T5180] bond2: entered allmulticast mode [ 104.442687][ T5180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.466377][ T5180] erspan1: entered allmulticast mode [ 104.493593][ T5180] bond2: (slave erspan1): making interface the new active one [ 104.502971][ T5180] erspan1: entered promiscuous mode [ 104.510970][ T5180] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 104.528770][ T5180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 104.558674][ T5180] bond2 (unregistering): (slave erspan1): Releasing active interface [ 104.569422][ T5180] erspan1: left promiscuous mode [ 104.575752][ T5180] bond2 (unregistering): Released all slaves [ 104.666391][ T5196] veth0_to_bridge: left allmulticast mode [ 104.674851][ T5196] veth0_to_bridge: left promiscuous mode [ 104.681358][ T5196] : port 1(veth0_to_bridge) entered disabled state [ 104.690549][ T5196] bridge_slave_0: left allmulticast mode [ 104.696653][ T5196] bridge_slave_0: left promiscuous mode [ 104.704392][ T5196] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.725676][ T5196] bridge_slave_1: left allmulticast mode [ 104.733272][ T5196] bridge_slave_1: left promiscuous mode [ 104.740105][ T5196] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.762857][ T5196] bond0: (slave bond_slave_0): Releasing backup interface [ 104.771550][ T5196] bond0: (slave bond_slave_1): Releasing backup interface [ 104.774615][ T5202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 104.789319][ T5196] veth0_to_team: left allmulticast mode [ 104.820711][ T5196] veth0_to_team: left promiscuous mode [ 104.826569][ T5196] : port 2(veth0_to_team) entered disabled state [ 104.863841][ T5196] team0: Port device team_slave_0 removed [ 104.880992][ T5196] team0: Port device team_slave_1 removed [ 104.887088][ T5196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.895042][ T5196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.903081][ T5196] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 104.920435][ T5197] team0: Mode changed to "loadbalance" [ 105.089324][ T28] kauditd_printk_skb: 551 callbacks suppressed [ 105.089340][ T28] audit: type=1400 audit(1774617375.498:1253): avc: denied { read } for pid=3039 comm="dhcpcd" name="n25" dev="tmpfs" ino=3456 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.120694][ T28] audit: type=1400 audit(1774617375.498:1254): avc: denied { open } for pid=3039 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=3456 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.144803][ T28] audit: type=1400 audit(1774617375.498:1255): avc: denied { getattr } for pid=3039 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=3456 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.322972][ T30] bond0 (unregistering): Released all slaves [ 105.350787][ T28] audit: type=1400 audit(1774617375.758:1256): avc: denied { create } for pid=5210 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.383812][ T28] audit: type=1400 audit(1774617375.758:1257): avc: denied { write } for pid=5210 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3463 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.387263][ T5198] chnl_net:caif_netlink_parms(): no params data found [ 105.427111][ T28] audit: type=1400 audit(1774617375.758:1258): avc: denied { append } for pid=5210 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3463 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.451476][ T30] hsr_slave_0: left promiscuous mode [ 105.457226][ T30] hsr_slave_1: left promiscuous mode [ 105.476962][ T28] audit: type=1400 audit(1774617375.888:1259): avc: denied { unlink } for pid=5223 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3463 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.675942][ T5198] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.684188][ T5198] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.691771][ T5198] bridge_slave_0: entered allmulticast mode [ 105.714476][ T5198] bridge_slave_0: entered promiscuous mode [ 105.724752][ T5198] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.726609][ T5235] netlink: 'syz.2.512': attribute type 27 has an invalid length. [ 105.732018][ T5198] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.747170][ T5198] bridge_slave_1: entered allmulticast mode [ 105.753715][ T5198] bridge_slave_1: entered promiscuous mode [ 105.771332][ T5198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.781995][ T5198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.802239][ T5198] team0: Port device team_slave_0 added [ 105.808896][ T5198] team0: Port device team_slave_1 added [ 105.814968][ T5235] vlan2: left promiscuous mode [ 105.832258][ T5235] bond1: left promiscuous mode [ 105.837069][ T5235] batadv1: left promiscuous mode [ 105.860957][ T5235] vlan2: left allmulticast mode [ 105.870355][ T5235] bond1: left allmulticast mode [ 105.875447][ T5235] batadv1: left allmulticast mode [ 105.898847][ T5235] erspan1: left allmulticast mode [ 105.933103][ T5198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.947370][ T5198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.112965][ T5198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.161120][ T5198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.168154][ T5198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.200424][ T5198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.412201][ T5198] hsr_slave_0: entered promiscuous mode [ 106.418318][ T5198] hsr_slave_1: entered promiscuous mode [ 106.435484][ T5198] debugfs: 'hsr0' already exists in 'hsr' [ 106.441273][ T5198] Cannot create hsr debugfs directory [ 106.787988][ T5263] loop2: detected capacity change from 0 to 1024 [ 106.874708][ T5263] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 106.884042][ T5263] System zones: 0-1, 3-36 [ 106.951567][ T5263] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.516: bad orphan inode 134217728 [ 106.968982][ T5263] loop2: lost filesystem error report for type 5 error -117 [ 106.977051][ T5263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.140230][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.430096][ T5198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.484529][ T5198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.517611][ T5198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.579102][ T5198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.907993][ T5198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.944421][ T5198] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.023237][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.030432][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.094760][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.101975][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.606653][ T5198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.645626][ T5335] netlink: 'syz.0.526': attribute type 27 has an invalid length. [ 108.647024][ T5198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.699688][ T5335] ip6erspan0: left promiscuous mode [ 108.832835][ T5198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.132967][ T5365] loop2: detected capacity change from 0 to 512 [ 109.163217][ T5198] veth0_vlan: entered promiscuous mode [ 109.173336][ T5198] veth1_vlan: entered promiscuous mode [ 109.211499][ T5198] veth0_macvtap: entered promiscuous mode [ 109.250516][ T5198] veth1_macvtap: entered promiscuous mode [ 109.267971][ T5397] team0: left allmulticast mode [ 109.273776][ T5397] team_slave_0: left allmulticast mode [ 109.279473][ T5397] team_slave_1: left allmulticast mode [ 109.285179][ T5397] bridge2: left allmulticast mode [ 109.290362][ T5397] team0: left promiscuous mode [ 109.295992][ T5397] team_slave_0: left promiscuous mode [ 109.301966][ T5397] team_slave_1: left promiscuous mode [ 109.307481][ T5397] bridge2: left promiscuous mode [ 109.312798][ T5397] bridge0: port 3(team0) entered disabled state [ 109.321546][ T5397] bridge_slave_0: left allmulticast mode [ 109.327911][ T5397] bridge_slave_0: left promiscuous mode [ 109.333995][ T5397] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.342104][ T5397] bridge_slave_1: left allmulticast mode [ 109.352200][ T5397] bridge_slave_1: left promiscuous mode [ 109.369844][ T5397] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.394739][ T5397] bond0: (slave bond_slave_0): Releasing backup interface [ 109.420894][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 109.451744][ T5397] bond0: (slave bond_slave_1): Releasing backup interface [ 109.467678][ T5397] team0: Port device team_slave_0 removed [ 109.491832][ T5397] team0: Port device team_slave_1 removed [ 109.498063][ T5397] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.538482][ T5198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.557082][ T5398] team0: No ports can be present during mode change [ 109.568169][ T5399] team0 (unregistering): Port device bridge2 removed [ 109.653713][ T5198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.674366][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.683325][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.701301][ T5403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.534'. [ 109.715279][ T84] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.736695][ T84] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.824724][ T5408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 109.837662][ T5408] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5408 comm=syz.4.520 [ 110.432609][ T5424] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 111.968340][ T5437] loop1: detected capacity change from 0 to 512 [ 112.076440][ T5437] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.116491][ T5437] EXT4-fs (loop1): 1 truncate cleaned up [ 112.136276][ T5437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.563102][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.076847][ T5450] loop3: detected capacity change from 0 to 128 [ 113.097634][ T5452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.546'. [ 113.129022][ T5450] FAT-fs (loop3): Directory bread(block 524322) failed [ 113.151145][ T5450] FAT-fs (loop3): Directory bread(block 524323) failed [ 113.158057][ T5450] FAT-fs (loop3): Directory bread(block 524324) failed [ 113.189322][ T5450] FAT-fs (loop3): Directory bread(block 524325) failed [ 113.200826][ T5450] FAT-fs (loop3): Directory bread(block 524326) failed [ 113.217855][ T5450] FAT-fs (loop3): Directory bread(block 524327) failed [ 113.230669][ T5450] FAT-fs (loop3): Directory bread(block 524328) failed [ 113.247688][ T5450] FAT-fs (loop3): Directory bread(block 524329) failed [ 113.272406][ T28] audit: type=1400 audit(1774617383.688:1260): avc: denied { sqpoll } for pid=5449 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 113.337236][ T5450] FAT-fs (loop3): Directory bread(block 524322) failed [ 113.344489][ T5450] FAT-fs (loop3): Directory bread(block 524323) failed [ 114.473639][ T5483] loop4: detected capacity change from 0 to 512 [ 114.504385][ T5483] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.578253][ T5483] EXT4-fs (loop4): 1 truncate cleaned up [ 114.603931][ T5483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.765545][ T5495] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.561'. [ 114.790772][ T5495] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 114.877392][ T28] audit: type=1400 audit(1774617385.288:1261): avc: denied { getopt } for pid=5493 comm="syz.0.561" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.953594][ T5198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.008698][ T28] audit: type=1400 audit(1774617385.418:1262): avc: denied { create } for pid=5503 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 115.064483][ T28] audit: type=1400 audit(1774617385.448:1263): avc: denied { write } for pid=5503 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 115.166839][ T5512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 115.313236][ T5530] loop2: detected capacity change from 0 to 128 [ 115.399950][ T5528] loop4: detected capacity change from 0 to 512 [ 115.412952][ T5528] ext4: Bad value for 'sb' [ 115.423502][ T5530] FAT-fs (loop2): Directory bread(block 524322) failed [ 115.450527][ T5530] FAT-fs (loop2): Directory bread(block 524323) failed [ 115.458562][ T5530] FAT-fs (loop2): Directory bread(block 524324) failed [ 115.504574][ T5530] FAT-fs (loop2): Directory bread(block 524325) failed [ 115.521606][ T5530] FAT-fs (loop2): Directory bread(block 524326) failed [ 115.536812][ T5530] FAT-fs (loop2): Directory bread(block 524327) failed [ 115.553398][ T5530] FAT-fs (loop2): Directory bread(block 524328) failed [ 115.561381][ T5530] FAT-fs (loop2): Directory bread(block 524329) failed [ 115.608814][ T5530] FAT-fs (loop2): Directory bread(block 524322) failed [ 115.627016][ T5530] FAT-fs (loop2): Directory bread(block 524323) failed [ 115.797060][ T5544] loop2: detected capacity change from 0 to 1024 [ 115.852736][ T5544] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 115.862332][ T5544] System zones: 0-1, 3-36 [ 115.874869][ T5544] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.570: bad orphan inode 134217728 [ 115.888239][ T5544] loop2: lost filesystem error report for type 5 error -117 [ 115.903201][ T5544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.362136][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.454139][ T5557] : port 1(veth0_to_bridge) entered blocking state [ 116.462381][ T5557] : port 1(veth0_to_bridge) entered disabled state [ 116.469807][ T5557] veth0_to_bridge: entered allmulticast mode [ 116.478231][ T5557] veth0_to_bridge: entered promiscuous mode [ 116.498915][ T5557] : port 2(veth0_to_team) entered blocking state [ 116.946352][ T5557] : port 2(veth0_to_team) entered disabled state [ 116.958361][ T5557] veth0_to_team: entered allmulticast mode [ 116.976429][ T5557] veth0_to_team: entered promiscuous mode [ 117.286565][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 117.408985][ T5562] loop3: detected capacity change from 0 to 1024 [ 117.479051][ T5562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 117.975125][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.085908][ T28] audit: type=1400 audit(1774617388.498:1264): avc: denied { bind } for pid=5581 comm="syz.0.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.141748][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 118.238261][ T5576] xt_CT: No such helper "snmp_trap" [ 118.431059][ T5590] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 118.444396][ T5590] bond2: entered promiscuous mode [ 118.449448][ T5590] bond2: entered allmulticast mode [ 118.461293][ T5590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.499189][ T5590] erspan1: entered allmulticast mode [ 118.518838][ T5590] bond2: (slave erspan1): making interface the new active one [ 118.538355][ T5590] erspan1: entered promiscuous mode [ 118.557748][ T5592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 118.567687][ T5590] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 118.583202][ T5592] bond2 (unregistering): (slave erspan1): Releasing active interface [ 118.607794][ T5592] erspan1: left promiscuous mode [ 118.635585][ T5592] bond2 (unregistering): Released all slaves [ 118.736533][ T5599] loop2: detected capacity change from 0 to 512 [ 118.753329][ T5599] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.759877][ T5599] ext4: Unknown parameter 'fsmagic' [ 118.876965][ T5605] loop4: detected capacity change from 0 to 512 [ 118.887092][ T5605] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.910728][ T5605] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 118.950605][ T5605] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 118.970673][ T5605] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 118.978709][ T5605] System zones: 0-2, 18-18, 34-35 [ 118.995859][ T5605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.043978][ T5198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.233946][ T5611] loop1: detected capacity change from 0 to 1024 [ 119.294316][ T5611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 120.119156][ T5628] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5628 comm=syz.4.602 [ 120.230931][ T5632] netlink: 'syz.4.603': attribute type 1 has an invalid length. [ 120.400480][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 120.434854][ T5632] erspan1: entered allmulticast mode [ 120.446653][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.718793][ T5626] cgroup: fork rejected by pids controller in /syz3 [ 120.744690][ T28] audit: type=1400 audit(1774617391.158:1265): avc: denied { write } for pid=5659 comm="syz.1.614" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 120.824630][ T5633] hsr_slave_1 (unregistering): left promiscuous mode [ 120.894585][ T5664] loop2: detected capacity change from 0 to 512 [ 120.917171][ T5684] netlink: 220 bytes leftover after parsing attributes in process `syz.1.614'. [ 120.950790][ T5664] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.993439][ T28] audit: type=1400 audit(1774617391.158:1266): avc: denied { open } for pid=5659 comm="syz.1.614" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 121.023009][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 121.051048][ T5664] EXT4-fs (loop2): 1 truncate cleaned up [ 121.066885][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 121.082060][ T5664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.108538][ T5684] tipc: MTU too low for tipc bearer [ 121.241662][ T28] audit: type=1326 audit(1774617391.658:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91565c799 code=0x7ffc0000 [ 121.288744][ T28] audit: type=1326 audit(1774617391.658:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91565c799 code=0x7ffc0000 [ 121.313215][ T28] audit: type=1326 audit(1774617391.658:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91565c799 code=0x7ffc0000 [ 121.336811][ T28] audit: type=1326 audit(1774617391.658:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91565c799 code=0x7ffc0000 [ 121.360398][ T28] audit: type=1326 audit(1774617391.658:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fb91565c799 code=0x7ffc0000 [ 121.406130][ T28] audit: type=1326 audit(1774617391.658:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91565c799 code=0x7ffc0000 [ 121.406726][ T5714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 121.430111][ T28] audit: type=1326 audit(1774617391.728:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91565c799 code=0x7ffc0000 [ 121.456104][ T5722] loop4: detected capacity change from 0 to 512 [ 121.462313][ T28] audit: type=1326 audit(1774617391.728:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb91565c502 code=0x7ffc0000 [ 121.501736][ T5723] netlink: 'syz.3.609': attribute type 20 has an invalid length. [ 121.502133][ T5722] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.538509][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.541131][ T5725] : renamed from hsr0 [ 121.553756][ T5722] EXT4-fs (loop4): orphan file too big: 4294967295 [ 121.560401][ T5722] EXT4-fs (loop4): mount failed [ 123.826382][ T5757] loop3: detected capacity change from 0 to 512 [ 123.850118][ T5757] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.892448][ T5757] EXT4-fs (loop3): 1 truncate cleaned up [ 123.909352][ T5757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.958834][ T5761] loop1: detected capacity change from 0 to 128 [ 123.981217][ T5761] FAT-fs (loop1): Directory bread(block 524322) failed [ 124.002111][ T5761] FAT-fs (loop1): Directory bread(block 524323) failed [ 124.061866][ T5761] FAT-fs (loop1): Directory bread(block 524324) failed [ 124.084498][ T5761] FAT-fs (loop1): Directory bread(block 524325) failed [ 124.103559][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.129443][ T5761] FAT-fs (loop1): Directory bread(block 524326) failed [ 124.151039][ T5761] FAT-fs (loop1): Directory bread(block 524327) failed [ 124.158612][ T5761] FAT-fs (loop1): Directory bread(block 524328) failed [ 124.166195][ T5761] FAT-fs (loop1): Directory bread(block 524329) failed [ 124.203041][ T5761] FAT-fs (loop1): Directory bread(block 524322) failed [ 124.238833][ T5761] FAT-fs (loop1): Directory bread(block 524323) failed [ 125.071084][ T5783] loop3: detected capacity change from 0 to 1024 [ 125.113410][ T5783] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 125.139327][ T5783] System zones: 0-1, 3-36 [ 125.289349][ T5783] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.630: bad orphan inode 134217728 [ 125.324552][ T5783] loop3: lost filesystem error report for type 5 error -117 [ 125.330528][ T5783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.655496][ T5797] loop2: detected capacity change from 0 to 512 [ 125.679192][ T5797] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.712212][ T5797] EXT4-fs (loop2): orphan file too big: 4294967295 [ 125.722099][ T5797] EXT4-fs (loop2): mount failed [ 125.886477][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.948294][ T5807] loop3: detected capacity change from 0 to 128 [ 125.991609][ T28] kauditd_printk_skb: 260 callbacks suppressed [ 125.991624][ T28] audit: type=1326 audit(1774617396.398:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 126.056869][ T28] audit: type=1326 audit(1774617396.418:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 126.080198][ T28] audit: type=1326 audit(1774617396.448:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 126.117947][ T28] audit: type=1326 audit(1774617396.458:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 126.190763][ T28] audit: type=1326 audit(1774617396.458:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 126.254704][ T28] audit: type=1326 audit(1774617396.458:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 126.393304][ T28] audit: type=1326 audit(1774617396.458:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 126.439876][ T28] audit: type=1326 audit(1774617396.458:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f4a7c799 code=0x7ffc0000 [ 126.463406][ T28] audit: type=1326 audit(1774617396.458:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f87f4a3cfce code=0x7ffc0000 [ 126.496943][ T28] audit: type=1326 audit(1774617396.468:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f87f4a3cfce code=0x7ffc0000 [ 126.616512][ T5844] netlink: 'syz.4.646': attribute type 20 has an invalid length. [ 126.662876][ T5812] cgroup: fork rejected by pids controller in /syz0 [ 126.818804][ T5873] ================================================================== [ 126.826920][ T5873] BUG: KCSAN: data-race in blkdev_open / queue_limits_commit_update [ 126.834914][ T5873] [ 126.837234][ T5873] read to 0xffff888101c9e308 of 4 bytes by task 3302 on cpu 1: [ 126.844773][ T5873] blkdev_open+0x161/0x290 [ 126.849199][ T5873] do_dentry_open+0x4ca/0xa90 [ 126.853883][ T5873] vfs_open+0x37/0x1e0 [ 126.857963][ T5873] path_openat+0x1b70/0x2050 [ 126.862570][ T5873] do_file_open+0x16c/0x290 [ 126.867091][ T5873] do_sys_openat2+0x94/0x130 [ 126.871697][ T5873] __x64_sys_openat+0xf2/0x120 [ 126.876482][ T5873] x64_sys_call+0x1e39/0x3020 [ 126.881264][ T5873] do_syscall_64+0x12c/0x370 [ 126.885867][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.891995][ T5873] [ 126.894323][ T5873] write to 0xffff888101c9e278 of 192 bytes by task 5873 on cpu 0: [ 126.902126][ T5873] queue_limits_commit_update+0x4b/0x160 [ 126.907772][ T5873] loop_configure+0x78c/0x9c0 [ 126.912474][ T5873] lo_ioctl+0x1e1/0x13a0 [ 126.916739][ T5873] blkdev_ioctl+0x387/0x460 [ 126.921250][ T5873] __se_sys_ioctl+0xce/0x140 [ 126.925841][ T5873] __x64_sys_ioctl+0x43/0x50 [ 126.930435][ T5873] x64_sys_call+0x1563/0x3020 [ 126.935120][ T5873] do_syscall_64+0x12c/0x370 [ 126.939716][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.945620][ T5873] [ 126.947945][ T5873] Reported by Kernel Concurrency Sanitizer on: [ 126.954116][ T5873] CPU: 0 UID: 0 PID: 5873 Comm: syz.2.647 Not tainted syzkaller #0 PREEMPT(full) [ 126.963322][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.973430][ T5873] ================================================================== [ 126.985366][ T5873] loop2: detected capacity change from 0 to 512 [ 127.112925][ T5873] EXT4-fs (loop2): 1 truncate cleaned up [ 127.119043][ T5873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.974895][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.