last executing test programs: 6m47.380494619s ago: executing program 4 (id=268): ptrace$setopts(0x4206, 0xffffffffffffffff, 0x4, 0x8) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xff21, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x10}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000200), 0x11, 0x553, &(0x7f0000001080)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0x4a2) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xf}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x3}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x42}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x35}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x40080) 6m46.33701141s ago: executing program 4 (id=274): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) 6m45.964135389s ago: executing program 4 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r4, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x15, 0x5, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) getsockopt(r5, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r7 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 6m43.886599945s ago: executing program 4 (id=281): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00921dfb9400000000000000000000000000000000f50000000000001e69236c80d20b786e832eed3e869d4b6de406d922c87f2206247d4349beb2"], 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x390, 0x2e8, 0x218, 0xfeffffff, 0x2e8, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x2e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x4, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 6m41.068419568s ago: executing program 4 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x15, 0x5, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) getsockopt(r4, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r6 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 6m36.828740371s ago: executing program 4 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, 0x0, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) gettid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 6m21.628607975s ago: executing program 32 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, 0x0, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) gettid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2m55.650511285s ago: executing program 5 (id=3221): prlimit64(0x0, 0x4, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0x0) 2m55.615168057s ago: executing program 5 (id=3223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x2400c800) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408", 0x56}], 0x1}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x11, 0x0, 0x2, {[@exp_fastopen={0xfe, 0xb, 0xf989, "35625accc31569"}]}}}}}}}}, 0x0) 2m55.189399597s ago: executing program 5 (id=3229): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 2m54.676600328s ago: executing program 5 (id=3231): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m54.663427684s ago: executing program 5 (id=3232): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) accept(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xbb7, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m54.21658987s ago: executing program 5 (id=3237): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x400c010}, 0x4) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x86) r1 = eventfd2(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 2m54.198572786s ago: executing program 33 (id=3237): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x400c010}, 0x4) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x86) r1 = eventfd2(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 1m25.670471069s ago: executing program 0 (id=4016): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f00000007c0)='./bus\x00', 0x182) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x115081, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x8640, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x16a) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000740)={0xc, r0, 0x6, 0x0, 0xa697, 0x3}) 1m25.440872135s ago: executing program 0 (id=4020): ptrace$setopts(0x4206, 0xffffffffffffffff, 0x4, 0x8) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xff21, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x10}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000200), 0x11, 0x553, &(0x7f0000001080)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0x4a2) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xf}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x3}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x42}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x35}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x40080) 1m24.487952022s ago: executing program 0 (id=4026): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x7}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @mcast2, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x67ed, 0x4) sendmmsg$inet6(r1, 0x0, 0x0, 0x400c844) write(r1, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x2021, 0x0, 0x0) 1m24.315902601s ago: executing program 0 (id=4027): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x94) syz_socket_connect_nvme_tcp() perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x101d0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000080000000000000000000000095000000000000009f870d484f25252acfab48de8536060639a5ae5c957fa957049540ddc1901878a59cb285ddca8c091e7c4498b151e97cd4fe6c3dba0e07e50ef31924e6e66c0ffe0d58cc6130f853ad6a384ac6762c94"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x100, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xe, 0x1) ioctl$TCSETSW(r3, 0x5403, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) 1m22.617250164s ago: executing program 0 (id=4036): pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0), &(0x7f0000000480)={0x0, 0xfb, 0x1015, 0x3, 0x1, "05000000934518f42f26003500", "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"}, 0x41e, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m22.544337607s ago: executing program 0 (id=4039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cc, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1m7.102277423s ago: executing program 34 (id=4039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cc, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 12.428057258s ago: executing program 6 (id=4740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) 12.289196176s ago: executing program 6 (id=4741): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1}, 0x1fc}], 0x400000000000207, 0x4, 0x0) 11.437279747s ago: executing program 6 (id=4748): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) 11.405954759s ago: executing program 6 (id=4749): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) epoll_create1(0x80000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r3, &(0x7f0000000180)={0x24, @short={0x2, 0xffff}}, 0x14) sendmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}}], 0x3fffffffffffe47, 0xc090) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.028071569s ago: executing program 7 (id=4849): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0) 2.959866712s ago: executing program 2 (id=4850): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0x465d, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x110}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 2.893077077s ago: executing program 1 (id=4851): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.809123518s ago: executing program 1 (id=4852): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x20c89}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000600)={0x0, 0xfb, 0x66, 0x4, 0x7, "5c057d7b09dc28d3dcc4af2fa10e5064", "fda4b3937e9ba67d11e539d2d7994d8e8e97380240920b955da21ca018c38510984872a7ae15cde47efe82761c8ce8ad4ed508f9e8741aec8e59f828ff989188aa6a84dfcfd1f9505af32525467bdea76f"}, 0x66, 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 2.775179799s ago: executing program 7 (id=4854): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r2], 0x9) 2.738348021s ago: executing program 1 (id=4855): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xe2e, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x40000000015, 0x5, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) msgsnd(0x0, &(0x7f0000000000)={0x1}, 0x8, 0x800) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r4 = dup2(r3, r3) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) 2.681365037s ago: executing program 7 (id=4856): syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsopen(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001c40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="aa345d3b1232ac2882c30296304464eae66fe8a5c104a0f1bf8ba06eb0a2ef4343a60d9e284eadb2bfdc9190e341b1668e57bcd4e42d11de4c83d952ce703955990c40c6106c8d3d0f9ebb26e5dbfd19a2e76e06000a383d63dad66461d73c3ba0277cd9323f81a74452c96c97d9624e9d3c7b7b267c467d9d756710a0458fdc1aa1defd34bb96ad621aa2713d9cabcb15855b05854fb5d8f199128e76b62c47ec18", @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRESOCT, @ANYRES64=0x0], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) io_destroy(0x0) 2.681196088s ago: executing program 2 (id=4857): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x40000000000009, 0xc1748, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102e11, 0x10000, 0x0, 0x6, 0x8, 0xfffffff9, 0x4, 0x0, 0xfffffffc, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) r0 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x66ab, 0x4, 0x2, 0x0, 0x0) 2.048074059s ago: executing program 7 (id=4860): ptrace$setopts(0x4206, 0xffffffffffffffff, 0x4, 0x8) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xff21, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x10}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000200), 0x11, 0x553, &(0x7f0000001080)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0x4a2) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xf}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x44, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x3}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x42}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x35}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x40080) 1.784623908s ago: executing program 1 (id=4861): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYBLOB="69692bb4065b9daba03afb5b38a81bf9515e015e8aa3f7681cc81656441c6f8d6d9b7bded3"], 0x1, 0x296, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) 1.696571617s ago: executing program 1 (id=4862): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xa0}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1.559675005s ago: executing program 2 (id=4863): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd06, 0x4}, 0x6057, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@noquota}, {@noblock_validity}, {@nodioread_nolock}, {@nolazytime}]}, 0xfe, 0x275, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7000, 0x0, 0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.167214803s ago: executing program 3 (id=4865): syz_open_dev$evdev(0x0, 0x2, 0x2002) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) chroot(&(0x7f0000000a40)='./file0\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c5fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") llistxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.048670665s ago: executing program 3 (id=4866): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0x465d, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x110}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 864.141302ms ago: executing program 3 (id=4867): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x400, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r1}, 0x10) 713.949057ms ago: executing program 3 (id=4868): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") creat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001f80)=""/4102, 0x1006) 607.715562ms ago: executing program 3 (id=4869): socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$tipc(0x1e, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4044081}, 0x40004010) 547.475578ms ago: executing program 2 (id=4870): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x10000002, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0xe, 0x2, 0x9, 0x6, 0x5, 0x0, 0x7, 0x0, 0x200b}, 0x0, 0x6, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x566, &(0x7f00000015c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010"], 0x24, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000440)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 517.998082ms ago: executing program 3 (id=4871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x200080, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 477.025932ms ago: executing program 7 (id=4872): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002a00)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) 277.724905ms ago: executing program 2 (id=4873): unshare(0x20000400) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000ac0)={0x0, 0xfffffffd, 0x100, 0xfffffffe, 0xca}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) 0s ago: executing program 1 (id=4874): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x30) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) kernel console output (not intermixed with test programs): al. Quota mode: none. [ 395.839712][T14470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3770'. [ 395.855830][T14474] netlink: 'syz.6.3772': attribute type 4 has an invalid length. [ 395.895812][T14472] loop0: detected capacity change from 0 to 1024 [ 395.927242][T14472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.115643][T14481] loop6: detected capacity change from 0 to 512 [ 396.135447][T14481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.150623][T14481] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.180417][T14481] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 396.189795][T14470] netlink: 83 bytes leftover after parsing attributes in process `syz.2.3770'. [ 396.446100][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.491965][ T28] audit: type=1400 audit(1772353781.082:953): avc: denied { map } for pid=14503 comm="syz.3.3780" path="socket:[38229]" dev="sockfs" ino=38229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 396.527384][T14505] loop2: detected capacity change from 0 to 512 [ 396.594233][T14505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.607719][T14505] ext4 filesystem being mounted at /773/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.645248][T14499] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 396.663102][T14499] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 396.998098][T12667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.141298][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.267342][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.702127][T14524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3786'. [ 397.755145][T14521] lo speed is unknown, defaulting to 1000 [ 397.761384][T14521] lo speed is unknown, defaulting to 1000 [ 397.829662][T14528] ÿÿÿÿÿÿ: renamed from vlan0 (while UP) [ 397.943161][T14526] netlink: 83 bytes leftover after parsing attributes in process `syz.2.3786'. [ 398.107535][T14533] loop2: detected capacity change from 0 to 1024 [ 398.237776][T14533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.329337][T14548] loop0: detected capacity change from 0 to 1024 [ 398.399982][T14548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.499610][T14546] loop6: detected capacity change from 0 to 512 [ 398.555184][T14546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.598224][T14546] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.630979][T14546] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 398.687151][T14560] loop3: detected capacity change from 0 to 512 [ 398.707549][T14560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.724623][T14560] ext4 filesystem being mounted at /761/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.736242][T14560] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 399.105930][T14572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3800'. [ 399.135050][T12667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.142573][T13381] batadv0: left promiscuous mode [ 399.178538][ T28] audit: type=1326 audit(1772353783.762:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14573 comm="syz.6.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed4d8c799 code=0x7ffc0000 [ 399.203549][T14576] loop6: detected capacity change from 0 to 1024 [ 399.235114][T14576] EXT4-fs: Ignoring removed orlov option [ 399.252389][ T28] audit: type=1326 audit(1772353783.762:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14573 comm="syz.6.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7feed4d8c799 code=0x7ffc0000 [ 399.263095][T14572] netlink: 83 bytes leftover after parsing attributes in process `syz.1.3800'. [ 399.294016][ T28] audit: type=1326 audit(1772353783.762:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14573 comm="syz.6.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed4d8c799 code=0x7ffc0000 [ 399.320043][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.329659][T14576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.353920][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.371944][T14576] Trying to write to read-only block-device loop6 [ 399.396194][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.443363][T14581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.455069][T12667] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 399.578799][T14589] EXT4-fs error (device loop0): __ext4_iget:5378: inode #12: block 2: comm syz.0.3804: invalid block [ 399.583798][T12667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.614911][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.890066][T14598] lo speed is unknown, defaulting to 1000 [ 400.035242][T14598] lo speed is unknown, defaulting to 1000 [ 400.136016][T14601] lo speed is unknown, defaulting to 1000 [ 400.147045][T14605] EXT4-fs: Ignoring removed bh option [ 400.163445][ T28] audit: type=1400 audit(1772353784.742:957): avc: denied { mounton } for pid=14604 comm="syz.3.3811" path="/file1" dev="autofs" ino=38526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 400.245550][T14601] lo speed is unknown, defaulting to 1000 [ 400.268059][T14605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.363235][T14605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.386070][T14607] set_capacity_and_notify: 2 callbacks suppressed [ 400.386085][T14607] loop6: detected capacity change from 0 to 512 [ 400.827903][T14618] loop3: detected capacity change from 0 to 1024 [ 400.864512][T14618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.881600][T14620] loop0: detected capacity change from 0 to 1024 [ 401.173783][T14628] loop6: detected capacity change from 0 to 512 [ 401.316444][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3818'. [ 401.473396][T14639] netlink: 83 bytes leftover after parsing attributes in process `syz.2.3818'. [ 401.635080][T14652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3824'. [ 401.648486][T14643] loop2: detected capacity change from 0 to 512 [ 401.675925][T14643] ext4 filesystem being mounted at /780/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.693374][T14643] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 401.712955][T14643] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 403.200197][T14690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3832'. [ 403.217246][ T28] audit: type=1400 audit(1772353787.812:958): avc: denied { name_bind 0x1000000 } for pid=14692 comm="syz.3.3839" path="socket:[38740]" dev="sockfs" ino=38740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 403.332268][T14697] loop0: detected capacity change from 0 to 512 [ 403.393785][T14697] EXT4-fs mount: 5 callbacks suppressed [ 403.393814][T14697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.456939][T14703] loop3: detected capacity change from 0 to 1024 [ 403.466368][T14697] ext4 filesystem being mounted at /758/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.507770][T14703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.557365][T14688] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 403.716585][T14707] loop2: detected capacity change from 0 to 512 [ 403.754246][T14707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.794411][T14707] ext4 filesystem being mounted at /782/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.831583][T14707] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 403.915868][T14709] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 403.961626][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.072995][T14715] loop6: detected capacity change from 0 to 512 [ 404.132068][T14724] loop0: detected capacity change from 0 to 512 [ 404.164119][T14724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.177443][T14724] ext4 filesystem being mounted at /761/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 404.199631][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.273294][T14732] IPv4: Oversized IP packet from 172.20.20.24 [ 404.279557][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 404.285748][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 404.396980][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.419084][T14738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3853'. [ 404.498151][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3854'. [ 404.510562][T14740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3854'. [ 404.526315][T13387] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.535254][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3854'. [ 404.544773][T13387] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.568486][T14740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3854'. [ 404.586745][T13387] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.611727][T13387] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.648552][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.971313][T14754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 405.137150][T14754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.175681][T14754] ext4 filesystem being mounted at /773/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 405.313276][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.385031][T14765] team0: Device gtp0 is of different type [ 405.731197][T14773] set_capacity_and_notify: 1 callbacks suppressed [ 405.731217][T14773] loop2: detected capacity change from 0 to 1024 [ 405.773693][T14773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.838804][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3868'. [ 406.377382][T14787] loop0: detected capacity change from 0 to 1024 [ 406.397702][T14787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.420103][T14791] loop3: detected capacity change from 0 to 4096 [ 406.428642][T14791] EXT4-fs: Ignoring removed bh option [ 406.461883][T14786] loop6: detected capacity change from 0 to 512 [ 406.480008][T14791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.533844][T14791] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3872: corrupted inode contents [ 406.553374][T14791] EXT4-fs (loop3): Remounting filesystem read-only [ 406.571896][ T28] audit: type=1400 audit(1772353791.162:959): avc: denied { link } for pid=14790 comm="syz.3.3872" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 406.602795][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.612122][T13387] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 406.632300][T13387] Quota error (device loop3): write_blk: dquota write failed [ 406.639853][T13387] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 406.933641][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.541136][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.670493][T14818] loop2: detected capacity change from 0 to 512 [ 407.682352][T14826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3883'. [ 407.780300][T14818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.824333][T14818] ext4 filesystem being mounted at /786/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.857499][T14818] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 407.880512][T14832] loop3: detected capacity change from 0 to 512 [ 407.923572][T14832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.937289][T14832] ext4 filesystem being mounted at /780/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.949676][T14824] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 408.544679][T14832] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 408.561197][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.607843][T14840] syzkaller0: entered promiscuous mode [ 408.613826][T14840] syzkaller0: entered allmulticast mode [ 408.640924][T14847] loop0: detected capacity change from 0 to 2048 [ 408.679722][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.690133][T14847] loop0: p1 p2 p3 [ 408.714927][T14847] loop0: p3 start 8388352 is beyond EOD, truncated [ 408.743611][T14855] loop3: detected capacity change from 0 to 1024 [ 408.775068][T14855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.836540][T14861] loop2: detected capacity change from 0 to 1024 [ 408.857633][T14854] loop6: detected capacity change from 0 to 512 [ 408.914683][T14861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.104789][T14869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.738299][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.789131][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.854693][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.994788][T14893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.026621][T14893] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 410.265043][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.785484][T14904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3907'. [ 411.052463][T14908] xt_hashlimit: size too large, truncated to 1048576 [ 412.034132][T14914] set_capacity_and_notify: 2 callbacks suppressed [ 412.034151][T14914] loop2: detected capacity change from 0 to 512 [ 412.102708][T14914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.144225][T14914] ext4 filesystem being mounted at /792/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.188001][T14914] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 412.220221][T14924] loop0: detected capacity change from 0 to 1024 [ 412.230366][T14914] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 412.267582][T14924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.646267][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.716046][T14931] loop6: detected capacity change from 0 to 512 [ 412.795832][T14934] loop2: detected capacity change from 0 to 512 [ 412.824233][T14934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.844957][T14934] ext4 filesystem being mounted at /793/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.857091][T14934] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 412.873181][T14934] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 413.134681][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.317903][T14944] loop0: detected capacity change from 0 to 512 [ 413.345501][T14944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.358120][T14944] ext4 filesystem being mounted at /775/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.372886][T14944] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 413.412655][T14944] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 413.544256][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.589534][T14961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3919'. [ 414.124109][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.935933][T14978] loop0: detected capacity change from 0 to 512 [ 415.068307][T14978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.191392][T14978] ext4 filesystem being mounted at /778/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.382714][T14978] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 415.765874][T14990] loop2: detected capacity change from 0 to 1024 [ 415.784168][T14980] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 415.880163][T14990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.074015][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.201875][T14995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14995 comm=syz.0.3928 [ 417.306628][T15000] loop3: detected capacity change from 0 to 512 [ 417.334633][T15000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.348585][T15000] ext4 filesystem being mounted at /789/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.360647][T15000] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 417.371805][T15002] loop0: detected capacity change from 0 to 512 [ 417.388494][T15000] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 417.422769][T15002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.435459][T15002] ext4 filesystem being mounted at /780/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.447630][T15002] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 417.472876][T15002] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 417.522734][T15016] loop6: detected capacity change from 0 to 1024 [ 417.753834][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.849698][ T28] audit: type=1400 audit(1772353802.442:960): avc: denied { write } for pid=15020 comm="syz.2.3934" path="socket:[40225]" dev="sockfs" ino=40225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 418.035041][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.067904][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.210394][T15031] loop3: detected capacity change from 0 to 512 [ 418.225214][T15031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.238329][T15031] ext4 filesystem being mounted at /790/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.250142][T15031] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 418.651546][T15035] loop2: detected capacity change from 0 to 512 [ 419.460122][T15049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15049 comm=syz.1.3941 [ 419.694761][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.613770][T15035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.627185][T15035] ext4 filesystem being mounted at /800/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.639502][T15035] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 420.652789][T15035] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 421.281699][T15062] loop6: detected capacity change from 0 to 1024 [ 421.324808][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.423412][ T28] audit: type=1400 audit(1772353806.012:961): avc: denied { module_load } for pid=15067 comm="syz.0.3948" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=39691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 421.472409][T15070] loop2: detected capacity change from 0 to 1024 [ 421.579757][T15068] Invalid ELF header magic: != ELF [ 421.591726][T15070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.685071][T15083] loop0: detected capacity change from 0 to 1024 [ 421.701866][T15073] loop3: detected capacity change from 0 to 512 [ 421.721213][T15083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.752071][T15073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.784783][T15073] ext4 filesystem being mounted at /792/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.814438][T15073] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 421.844308][T15073] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 422.358783][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.442263][T15102] loop6: detected capacity change from 0 to 512 [ 422.538384][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.555022][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.764764][T15110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15110 comm=syz.0.3957 [ 425.282438][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3962'. [ 425.606592][T15127] loop3: detected capacity change from 0 to 1024 [ 425.654342][T15127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.773109][T15128] loop2: detected capacity change from 0 to 512 [ 425.806540][T15137] loop6: detected capacity change from 0 to 1024 [ 425.852620][T15139] loop0: detected capacity change from 0 to 1024 [ 425.853645][T15128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.879200][T15128] ext4 filesystem being mounted at /804/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.903999][T15139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.920848][T15128] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 425.960297][T15128] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 426.433178][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.569780][T15151] loop2: detected capacity change from 0 to 512 [ 426.583929][T15151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.602461][T15151] ext4 filesystem being mounted at /805/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.636007][T15151] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 426.655225][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.665146][T15151] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 426.810685][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.929090][T15166] loop6: detected capacity change from 0 to 512 [ 426.949512][T15175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15175 comm=syz.0.3974 [ 427.978744][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.979359][T15191] loop3: detected capacity change from 0 to 1024 [ 430.023520][T15191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.130122][T15200] loop6: detected capacity change from 0 to 512 [ 430.140686][T15188] loop0: detected capacity change from 0 to 512 [ 430.207645][T15203] loop2: detected capacity change from 0 to 1024 [ 430.217535][T15188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.242437][T15188] ext4 filesystem being mounted at /790/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.287116][T15188] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 430.350619][T15188] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 430.377664][T15212] loop6: detected capacity change from 0 to 1024 [ 430.725213][T15224] loop0: detected capacity change from 0 to 512 [ 430.752023][T15224] ext4 filesystem being mounted at /792/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.764221][T15221] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 430.792726][T15221] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 431.198464][T15232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15232 comm=syz.2.3990 [ 431.240958][T15229] loop3: detected capacity change from 0 to 512 [ 431.305966][T15237] ieee802154 phy0 wpan0: encryption failed: -22 [ 431.359748][T15229] ext4 filesystem being mounted at /799/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.472232][T15229] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 432.510672][ T28] audit: type=1400 audit(1772353817.102:962): avc: denied { create } for pid=15249 comm="syz.0.3995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 432.514943][T15233] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 433.495408][ T28] audit: type=1400 audit(1772353818.082:963): avc: denied { bind } for pid=15249 comm="syz.0.3995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 433.515308][ T28] audit: type=1400 audit(1772353818.082:964): avc: denied { listen } for pid=15249 comm="syz.0.3995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 433.535389][ T28] audit: type=1400 audit(1772353818.082:965): avc: denied { accept } for pid=15249 comm="syz.0.3995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 434.253428][ T3312] EXT4-fs unmount: 7 callbacks suppressed [ 434.253444][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.444599][T15261] loop0: detected capacity change from 0 to 1024 [ 434.463438][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.488808][T15261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.506140][T15264] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3997'. [ 434.518753][T15250] loop6: detected capacity change from 0 to 512 [ 434.578232][T15258] loop2: detected capacity change from 0 to 512 [ 434.660434][T15258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.720513][T15258] ext4 filesystem being mounted at /811/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.789255][T15258] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 434.825759][T15258] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 434.867609][T15272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.894745][T15272] ext4 filesystem being mounted at /801/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.922106][T15272] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 434.942628][T15272] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 435.199417][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.248696][T15289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15289 comm=syz.2.4005 [ 435.433219][T15291] set_capacity_and_notify: 2 callbacks suppressed [ 435.433239][T15291] loop2: detected capacity change from 0 to 512 [ 435.474151][T15291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.486873][T15291] ext4 filesystem being mounted at /814/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.501633][T15291] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 435.518195][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.535480][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.557928][T15291] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 436.695882][T15299] loop3: detected capacity change from 0 to 512 [ 436.705397][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.756568][T15299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.811103][T15299] ext4 filesystem being mounted at /802/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.695669][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.715912][T15326] loop0: detected capacity change from 0 to 512 [ 438.737241][T15328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4017'. [ 438.782246][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 438.797353][T15326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.833336][T15319] loop6: detected capacity change from 0 to 512 [ 438.854219][T15326] ext4 filesystem being mounted at /796/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.912266][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.925588][T15340] loop2: detected capacity change from 0 to 1024 [ 438.967654][T15340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.992866][T15336] loop3: detected capacity change from 0 to 512 [ 439.025553][T15346] loop0: detected capacity change from 0 to 1024 [ 439.056864][T15336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.070166][T15336] ext4 filesystem being mounted at /803/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.082942][T15346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.096304][T15336] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 439.122614][T15336] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 439.500503][T15358] loop6: detected capacity change from 0 to 1024 [ 439.619108][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.774674][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.850305][T15367] loop3: detected capacity change from 0 to 512 [ 439.861856][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.873562][T15367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.886294][T15367] ext4 filesystem being mounted at /805/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.909555][T15367] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 439.931361][T15371] loop2: detected capacity change from 0 to 512 [ 439.943273][T15367] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 439.963627][T15371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.977497][T15371] ext4 filesystem being mounted at /818/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.989247][T15371] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 440.666333][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.756119][T15392] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4030'. [ 440.785603][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.797532][T15409] loop6: detected capacity change from 0 to 1024 [ 441.804773][ T28] audit: type=1400 audit(1772353826.402:966): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 441.890060][T15413] loop3: detected capacity change from 0 to 1024 [ 441.945225][T15413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.055888][T15415] loop2: detected capacity change from 0 to 512 [ 442.132566][T15415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.174720][T15415] ext4 filesystem being mounted at /820/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.192415][T15415] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 442.221388][T15415] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 442.752581][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.884838][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.929569][T15438] loop5: detected capacity change from 0 to 7 [ 442.935919][T15431] loop2: detected capacity change from 0 to 512 [ 442.967313][T15431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.987797][T15431] ext4 filesystem being mounted at /821/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.009485][T15431] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 443.018900][T15443] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4046'. [ 443.042652][T15431] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 443.733923][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.223447][T15461] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 444.252280][T12025] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 444.359359][T15468] loop6: detected capacity change from 0 to 1024 [ 444.662097][T15469] loop2: detected capacity change from 0 to 512 [ 444.821589][T15469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.905927][T15469] ext4 filesystem being mounted at /823/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.939467][T15482] loop3: detected capacity change from 0 to 1024 [ 444.962200][T15469] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 444.987565][T15482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.004268][T15475] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 445.023001][T12025] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.215628][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.412239][T15488] loop2: detected capacity change from 0 to 512 [ 445.473671][T15488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.486470][T15488] ext4 filesystem being mounted at /824/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.498843][T15488] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 445.512635][T15488] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 445.841182][T15499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4061'. [ 445.899209][T15496] loop6: detected capacity change from 0 to 512 [ 445.985539][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.097876][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.193413][T15505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.219541][ T28] audit: type=1400 audit(1772353830.812:967): avc: denied { setopt } for pid=15513 comm="syz.2.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 446.222494][T15505] ext4 filesystem being mounted at /811/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.274677][T15505] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 446.292568][T15505] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 447.043333][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.144922][T15528] set_capacity_and_notify: 1 callbacks suppressed [ 447.144940][T15528] loop6: detected capacity change from 0 to 512 [ 447.671868][T15537] loop6: detected capacity change from 0 to 1024 [ 447.804694][T15539] loop3: detected capacity change from 0 to 1024 [ 447.853382][T15539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.363441][T15546] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4074'. [ 449.404832][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.117202][T15567] loop3: detected capacity change from 0 to 128 [ 450.284087][T14033] kworker/u8:28: attempt to access beyond end of device [ 450.284087][T14033] loop3: rw=1, sector=129, nr_sectors = 8 limit=128 [ 450.344004][T14033] kworker/u8:28: attempt to access beyond end of device [ 450.344004][T14033] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 450.412237][T14033] kworker/u8:28: attempt to access beyond end of device [ 450.412237][T14033] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 450.452369][T14033] kworker/u8:28: attempt to access beyond end of device [ 450.452369][T14033] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 450.524028][T14033] kworker/u8:28: attempt to access beyond end of device [ 450.524028][T14033] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 450.553374][T15571] loop6: detected capacity change from 0 to 512 [ 450.580363][T14033] kworker/u8:28: attempt to access beyond end of device [ 450.580363][T14033] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 450.637620][T14033] kworker/u8:28: attempt to access beyond end of device [ 450.637620][T14033] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 450.703679][T14033] kworker/u8:28: attempt to access beyond end of device [ 450.703679][T14033] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 450.738771][T14033] kworker/u8:28: attempt to access beyond end of device [ 450.738771][T14033] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 450.752351][T14033] kworker/u8:28: attempt to access beyond end of device [ 450.752351][T14033] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 450.788089][T15579] loop2: detected capacity change from 0 to 1024 [ 450.828464][T15579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.952926][T15586] loop3: detected capacity change from 0 to 512 [ 450.990694][T15586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.022323][T15586] ext4 filesystem being mounted at /815/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.044313][T15581] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 451.078612][T15581] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 451.119770][T15592] loop6: detected capacity change from 0 to 1024 [ 451.243400][T15594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4088'. [ 451.292522][T15594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4088'. [ 451.359075][T15597] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4089'. [ 451.630947][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.811142][T15602] loop3: detected capacity change from 0 to 512 [ 451.836102][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.859248][T15602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.875549][T15602] ext4 filesystem being mounted at /816/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.921507][T15602] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 451.952470][T15602] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 452.375570][ T28] audit: type=1400 audit(1772353836.972:968): avc: denied { mounton } for pid=15619 comm="syz.6.4096" path="/file0" dev="ramfs" ino=41599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 452.549387][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.312478][T15643] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 454.319054][T15643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 454.330243][T15647] loop3: detected capacity change from 0 to 1024 [ 454.342301][T15643] vhci_hcd vhci_hcd.0: Device attached [ 454.362237][T15650] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 454.368823][T15650] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 454.394588][T15654] loop2: detected capacity change from 0 to 1024 [ 454.403902][T15650] vhci_hcd vhci_hcd.0: Device attached [ 454.404116][T15647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.449433][T15654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.472384][T15643] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(5) [ 454.479011][T15643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 454.502678][T15643] vhci_hcd vhci_hcd.0: Device attached [ 454.508577][T15650] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(10) [ 454.515304][T15650] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 454.542360][T15650] vhci_hcd vhci_hcd.0: Device attached [ 454.562912][T15643] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 454.592902][ T3850] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 454.602183][T15643] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(12) [ 454.608876][T15643] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 454.642958][T15643] vhci_hcd vhci_hcd.0: Device attached [ 454.662784][T15664] vhci_hcd: connection closed [ 454.662814][T15662] vhci_hcd: connection closed [ 454.667753][T14029] vhci_hcd vhci_hcd.6: stop threads [ 454.672772][T15651] vhci_hcd: connection closed [ 454.678568][T15660] vhci_hcd: connection closed [ 454.683651][T15644] vhci_hcd: connection reset by peer [ 454.694599][T14029] vhci_hcd vhci_hcd.6: release socket [ 454.700179][T14029] vhci_hcd vhci_hcd.6: disconnect device [ 454.712454][T14029] vhci_hcd vhci_hcd.6: stop threads [ 454.722204][T14029] vhci_hcd vhci_hcd.6: release socket [ 454.733126][T14029] vhci_hcd vhci_hcd.6: disconnect device [ 454.751943][T14029] vhci_hcd vhci_hcd.6: stop threads [ 454.757282][T14029] vhci_hcd vhci_hcd.6: release socket [ 454.772485][T14029] vhci_hcd vhci_hcd.6: disconnect device [ 454.778372][T14029] vhci_hcd vhci_hcd.6: stop threads [ 454.788604][T14029] vhci_hcd vhci_hcd.6: release socket [ 454.800691][T14029] vhci_hcd vhci_hcd.6: disconnect device [ 454.814777][T14029] vhci_hcd vhci_hcd.6: stop threads [ 454.820136][T14029] vhci_hcd vhci_hcd.6: release socket [ 454.826713][T14029] vhci_hcd vhci_hcd.6: disconnect device [ 455.554798][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.591116][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.666454][ T28] audit: type=1326 audit(1772353840.262:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.6.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed4d8c799 code=0x7ffc0000 [ 455.690632][T15682] loop2: detected capacity change from 0 to 512 [ 455.710727][ T28] audit: type=1326 audit(1772353840.292:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.6.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7feed4d8c799 code=0x7ffc0000 [ 455.733692][T15682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.735394][ T28] audit: type=1326 audit(1772353840.292:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.6.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed4d8c799 code=0x7ffc0000 [ 455.792224][ T28] audit: type=1326 audit(1772353840.292:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.6.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed4d8c799 code=0x7ffc0000 [ 455.818007][T15682] ext4 filesystem being mounted at /836/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.922290][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.934761][T15678] loop3: detected capacity change from 0 to 512 [ 456.016501][T15678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.072282][T15678] ext4 filesystem being mounted at /819/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.112385][T15678] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 456.145012][T15678] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 456.513959][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.708363][T15735] loop6: detected capacity change from 0 to 1024 [ 456.815751][T15738] loop2: detected capacity change from 0 to 1024 [ 457.026720][T15738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.862958][T15746] lo speed is unknown, defaulting to 1000 [ 457.874619][T15746] lo speed is unknown, defaulting to 1000 [ 457.975724][T13381] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.997622][T13381] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.074118][T13381] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.098614][T13381] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.169961][T15746] chnl_net:caif_netlink_parms(): no params data found [ 458.195435][T13381] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.216016][T13381] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.277197][T13381] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.297264][T13381] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.355123][T15746] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.382285][T15746] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.422367][T15746] bridge_slave_0: entered allmulticast mode [ 458.441745][T15746] bridge_slave_0: entered promiscuous mode [ 458.502877][T15746] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.541252][T15746] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.568705][T15746] bridge_slave_1: entered allmulticast mode [ 458.575642][T15746] bridge_slave_1: entered promiscuous mode [ 458.605687][T15746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.642170][T15746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.883680][T13381] bond0 (unregistering): Released all slaves [ 458.897041][T15746] team0: Port device team_slave_0 added [ 458.904466][T15746] team0: Port device team_slave_1 added [ 458.921086][T13381] hsr_slave_0: left promiscuous mode [ 458.926818][T13381] hsr_slave_1: left promiscuous mode [ 458.936430][T13381] veth1_macvtap: left promiscuous mode [ 458.942032][T13381] veth0_macvtap: left promiscuous mode [ 458.947798][T13381] veth1_vlan: left promiscuous mode [ 458.953298][T13381] veth0_vlan: left promiscuous mode [ 459.116804][T15746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.124240][T15746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.150680][T15746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.163939][T15746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.170933][T15746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.202177][T15746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.251490][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.254071][T15746] hsr_slave_0: entered promiscuous mode [ 459.267490][T15746] hsr_slave_1: entered promiscuous mode [ 459.273802][T15746] debugfs: 'hsr0' already exists in 'hsr' [ 459.281294][T15746] Cannot create hsr debugfs directory [ 459.382083][T13381] IPVS: stop unused estimator thread 0... [ 459.595964][T15746] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 459.612698][T15746] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 459.623872][T15746] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 459.654778][T15746] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 459.662229][ T3850] usb 13-1: enqueue for inactive port 0 [ 459.670513][ T3850] usb 13-1: enqueue for inactive port 0 [ 459.696958][ T28] audit: type=1326 audit(1772353844.282:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c89ec799 code=0x7ffc0000 [ 459.726729][ T28] audit: type=1326 audit(1772353844.282:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c89ec799 code=0x7ffc0000 [ 459.752340][ T3850] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 459.774810][ T28] audit: type=1326 audit(1772353844.282:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fb6c89ec799 code=0x7ffc0000 [ 459.798819][ T28] audit: type=1326 audit(1772353844.282:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c89ec799 code=0x7ffc0000 [ 459.822472][ T28] audit: type=1326 audit(1772353844.282:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c89ec799 code=0x7ffc0000 [ 460.101351][T15746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.117738][T15874] loop3: detected capacity change from 0 to 1024 [ 460.234906][T15746] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.287820][T15874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.322363][T13387] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.329556][T13387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.465886][T13387] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.473039][T13387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.578960][T15887] loop6: detected capacity change from 0 to 1024 [ 460.618517][T15746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.702222][T15746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.871828][T15746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.270180][T15746] veth0_vlan: entered promiscuous mode [ 461.306073][T15746] veth1_vlan: entered promiscuous mode [ 461.374149][T15746] veth0_macvtap: entered promiscuous mode [ 461.397124][T15746] veth1_macvtap: entered promiscuous mode [ 461.421434][T15746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.442510][T15746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.457327][T14025] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.480931][T14025] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.496800][T14025] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.518672][T14025] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.701883][T15919] loop7: detected capacity change from 0 to 512 [ 461.722237][T15919] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.735022][T15919] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.755612][T15919] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 461.768779][T15939] loop2: detected capacity change from 0 to 512 [ 461.776297][T15919] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 461.806401][T15939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.819703][T15939] ext4 filesystem being mounted at /847/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.836545][T15926] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 461.852793][T15926] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 461.933199][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.402038][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.447024][ T28] audit: type=1326 audit(1772353847.042:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f2dec799 code=0x7ffc0000 [ 462.474298][ T28] audit: type=1326 audit(1772353847.042:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f2dec799 code=0x7ffc0000 [ 462.501186][ T28] audit: type=1326 audit(1772353847.042:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f46f2dec799 code=0x7ffc0000 [ 462.535685][ T28] audit: type=1326 audit(1772353847.042:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f2dec799 code=0x7ffc0000 [ 462.562358][ T28] audit: type=1326 audit(1772353847.042:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f2dec799 code=0x7ffc0000 [ 462.591315][T15962] loop6: detected capacity change from 0 to 512 [ 462.624632][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.708287][T15974] loop7: detected capacity change from 0 to 1024 [ 462.750696][T15974] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.777636][T15979] loop2: detected capacity change from 0 to 1024 [ 462.976696][T15979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.542905][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.555207][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.812179][T16021] geneve2: entered promiscuous mode [ 464.834687][ T3448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.851178][ T3448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.573780][T16033] loop2: detected capacity change from 0 to 128 [ 465.615789][T16033] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 465.702546][T13383] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 465.774260][T16042] loop2: detected capacity change from 0 to 1024 [ 465.834703][T16042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.901981][T16030] pim6reg1: entered promiscuous mode [ 465.915239][T16030] pim6reg1: entered allmulticast mode [ 465.943853][ T3448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.972663][ T3448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.927329][T16074] loop7: detected capacity change from 0 to 512 [ 466.953861][T16074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.966696][T16074] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.978927][T16070] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 466.992812][T16070] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 467.134038][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.186940][T16086] loop6: detected capacity change from 0 to 1024 [ 467.286198][T16092] loop3: detected capacity change from 0 to 1024 [ 467.302736][T16092] EXT4-fs: Ignoring removed orlov option [ 467.312900][T16092] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 467.345521][T16092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.466415][T16097] netlink: 'syz.1.4205': attribute type 1 has an invalid length. [ 467.501507][T16097] bond5: entered promiscuous mode [ 467.507860][T16097] 8021q: adding VLAN 0 to HW filter on device bond5 [ 467.523617][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4205'. [ 467.533536][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4205'. [ 467.590673][T16097] bond5: (slave bridge2): making interface the new active one [ 467.599856][T16097] bridge2: entered promiscuous mode [ 467.628558][T16097] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 467.678569][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.764522][T16103] loop5: detected capacity change from 0 to 7 [ 468.088348][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.154242][T16117] loop7: detected capacity change from 0 to 4096 [ 468.163239][T16124] loop3: detected capacity change from 0 to 1024 [ 468.169925][T16117] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.205708][T16124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.250188][T16132] loop6: detected capacity change from 0 to 1024 [ 468.257621][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.458628][T16134] loop7: detected capacity change from 0 to 512 [ 468.487003][T16134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.506677][T16134] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.520576][T16134] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 468.533680][T16134] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 468.983701][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.009544][T16148] netlink: 'syz.3.4218': attribute type 1 has an invalid length. [ 469.032988][T16148] bond1: entered promiscuous mode [ 469.038244][T16148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.066510][T16148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4218'. [ 469.110224][T16148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4218'. [ 469.154220][T16156] bond1: (slave bridge1): making interface the new active one [ 469.171998][T16156] bridge1: entered promiscuous mode [ 469.178933][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.183632][T16156] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 469.259246][T16162] EXT4-fs: Ignoring removed orlov option [ 469.278517][T16162] EXT4-fs (loop7): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 469.327062][T16162] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.481629][ T28] audit: type=1326 audit(1772353854.072:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16169 comm="syz.6.4226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feed4d8c799 code=0x0 [ 469.716721][T16176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.908214][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.958690][T16188] lo speed is unknown, defaulting to 1000 [ 469.964970][T16188] lo speed is unknown, defaulting to 1000 [ 470.273733][T16194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.286858][T16194] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.298849][T16194] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 470.316386][T16194] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 470.415436][T16204] netlink: 'syz.6.4237': attribute type 1 has an invalid length. [ 470.429149][T16204] bond1: entered promiscuous mode [ 470.434648][T16204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.447991][T16204] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4237'. [ 470.457141][T16204] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4237'. [ 470.478394][T16204] bond1: (slave bridge1): making interface the new active one [ 470.485966][T16204] bridge1: entered promiscuous mode [ 470.493114][T16204] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 470.532574][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.649410][T16225] netlink: 'syz.3.4240': attribute type 1 has an invalid length. [ 470.660417][T16227] set_capacity_and_notify: 4 callbacks suppressed [ 470.660495][T16227] loop2: detected capacity change from 0 to 1024 [ 470.680269][T16225] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.694850][T16227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.740328][T16225] bond2: (slave veth5): Enslaving as an active interface with a down link [ 470.760663][T16225] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 470.770637][T16225] bond2: (slave batadv1): making interface the new active one [ 470.779598][T16225] batadv1: entered promiscuous mode [ 470.785497][T16225] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 470.977588][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.062045][T16265] lo speed is unknown, defaulting to 1000 [ 471.073795][T16265] lo speed is unknown, defaulting to 1000 [ 471.231621][T16274] loop3: detected capacity change from 0 to 8192 [ 471.530361][T16327] netlink: 'syz.7.4249': attribute type 1 has an invalid length. [ 471.570710][T16327] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4249'. [ 471.581691][T16327] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4249'. [ 471.752871][T16339] loop7: detected capacity change from 0 to 1024 [ 471.782836][T16339] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.904980][T16348] loop6: detected capacity change from 0 to 1024 [ 471.916606][T16346] loop3: detected capacity change from 0 to 1024 [ 471.931342][T16346] EXT4-fs: inline encryption not supported [ 471.942018][T16346] EXT4-fs: Ignoring removed nobh option [ 471.947929][T16346] EXT4-fs: Ignoring removed nobh option [ 471.953585][T16346] EXT4-fs: Ignoring removed bh option [ 471.993712][T16346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.045417][T16346] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.4256: Allocating blocks 385-513 which overlap fs metadata [ 472.094603][T16346] EXT4-fs (loop3): pa ffff888107c0ad20: logic 16, phys. 129, len 24 [ 472.102792][T16346] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 472.123784][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.185266][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.214583][T16369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4261'. [ 472.306944][T16383] netlink: 'syz.1.4263': attribute type 27 has an invalid length. [ 472.420574][T16383] wg1: left promiscuous mode [ 472.436159][T16383] wg1: left allmulticast mode [ 472.533288][T16383] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 472.552424][T16383] bond1: left allmulticast mode [ 472.564480][T16383] bond5: left promiscuous mode [ 472.569439][T16383] bridge2: left promiscuous mode [ 472.579466][ T3421] lo speed is unknown, defaulting to 1000 [ 472.601613][T16387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.610179][T16387] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.621271][T16387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.696965][ T3390] syz1: Port: 1 Link DOWN [ 472.697220][T14029] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.712000][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.712776][T14029] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.712823][T12026] lo speed is unknown, defaulting to 1000 [ 472.722776][T14029] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.722813][T14029] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.723239][T14029] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.723272][T14029] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.723655][T14029] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.723763][T14029] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.844984][T16413] loop2: detected capacity change from 0 to 1024 [ 472.892570][T16413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.978881][T16431] Set syz1 is full, maxelem 2 reached [ 473.436154][T16448] loop6: detected capacity change from 0 to 128 [ 473.505842][T16444] loop3: detected capacity change from 0 to 512 [ 473.538985][T16458] netlink: 'syz.6.4280': attribute type 27 has an invalid length. [ 473.573790][T16444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.586528][T16444] ext4 filesystem being mounted at /863/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.600957][T16444] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 473.615834][T16458] bond1: left promiscuous mode [ 473.642928][T16458] bridge1: left promiscuous mode [ 473.654954][T16444] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 473.715296][T16464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.754686][T16464] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.785190][T16464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.818551][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.883666][T16473] loop2: detected capacity change from 0 to 512 [ 473.914469][T16473] EXT4-fs: Ignoring removed bh option [ 473.945960][T16473] EXT4-fs: Ignoring removed oldalloc option [ 473.959667][T16473] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 473.961388][T16473] EXT4-fs (loop2): 1 truncate cleaned up [ 473.961849][T16473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.056373][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.094856][T16489] loop2: detected capacity change from 0 to 128 [ 474.108960][T16489] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 474.177577][T16489] ext4 filesystem being mounted at /865/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 474.332440][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.369648][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 475.414944][T16522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4292'. [ 475.516008][T16524] HÊRA: renamed from vlan0 [ 476.154452][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4299'. [ 476.165536][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4299'. [ 476.530097][T16559] set_capacity_and_notify: 1 callbacks suppressed [ 476.530114][T16559] loop2: detected capacity change from 0 to 4096 [ 476.556378][T16559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.658862][T16559] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 476.707673][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.730531][ T28] audit: type=1400 audit(1772353861.322:984): avc: denied { name_bind } for pid=16568 comm="syz.7.4313" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 476.769540][ T28] audit: type=1400 audit(1772353861.322:985): avc: denied { name_connect } for pid=16568 comm="syz.7.4313" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 477.187995][T16584] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4319'. [ 477.318187][T16595] loop7: detected capacity change from 0 to 1024 [ 477.383028][T16595] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.404120][T16597] syzkaller0: entered promiscuous mode [ 477.409642][T16597] syzkaller0: entered allmulticast mode [ 477.439551][T16597] syzkaller0: tun_net_xmit 1280 [ 477.453403][T16597] syzkaller0: create flow: hash 1517395356 index 1 [ 477.468664][T16596] syzkaller0: delete flow: hash 1517395356 index 1 [ 477.486271][T16602] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.4323: Allocating blocks 385-513 which overlap fs metadata [ 477.567001][T16602] EXT4-fs (loop7): shut down requested (0) [ 477.622893][T14033] EXT4-fs (loop7): pa ffff888107c0ad20: logic 16, phys. 129, len 24 [ 477.631054][T14033] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 477.659899][T16606] syzkaller0: entered promiscuous mode [ 477.666025][T16606] syzkaller0: entered allmulticast mode [ 477.683079][T16609] loop6: detected capacity change from 0 to 512 [ 477.767249][T16614] loop2: detected capacity change from 0 to 512 [ 477.771272][T16616] loop6: detected capacity change from 0 to 1024 [ 478.101306][ T28] audit: type=1400 audit(1772353862.692:986): avc: denied { write } for pid=16627 comm="syz.2.4335" lport=48285 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 478.144637][ T28] audit: type=1400 audit(1772353862.702:987): avc: denied { setopt } for pid=16627 comm="syz.2.4335" lport=48285 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 478.202215][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.220248][ T28] audit: type=1400 audit(1772353862.812:988): avc: denied { name_bind 0x1000000 } for pid=16633 comm="syz.2.4339" path="socket:[44334]" dev="sockfs" ino=44334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 478.760859][ T28] audit: type=1400 audit(1772353863.352:989): avc: denied { setopt } for pid=16657 comm="syz.2.4349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 478.940320][ T28] audit: type=1400 audit(1772353863.532:990): avc: denied { read } for pid=16671 comm="syz.3.4354" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 478.988075][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4354'. [ 479.032833][ T28] audit: type=1400 audit(1772353863.532:991): avc: denied { open } for pid=16671 comm="syz.3.4354" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 479.256011][T16679] netlink: 'syz.7.4356': attribute type 29 has an invalid length. [ 479.289747][T16679] netlink: 'syz.7.4356': attribute type 29 has an invalid length. [ 479.442256][T16688] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4359'. [ 479.464744][T16688] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4359'. [ 480.033502][T16698] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 480.070278][T16698] SELinux: failed to load policy [ 480.230731][T16704] loop7: detected capacity change from 0 to 8192 [ 480.240218][T16704] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 480.357505][T16706] 9pnet_fd: Insufficient options for proto=fd [ 480.515301][T16709] loop7: detected capacity change from 0 to 1024 [ 480.533741][T16709] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.235743][ T28] audit: type=1400 audit(1772353865.832:992): avc: denied { bind } for pid=16733 comm="syz.3.4377" lport=52367 faddr=::ffff:100.1.1.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 481.268511][ T28] audit: type=1400 audit(1772353865.832:993): avc: denied { name_bind } for pid=16733 comm="syz.3.4377" src=20003 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 481.440070][T16753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4383'. [ 483.286256][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 483.286275][ T28] audit: type=1400 audit(1772353867.872:995): avc: denied { name_bind } for pid=16759 comm="syz.6.4385" src=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 483.325827][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.347082][T16765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4387'. [ 483.393757][T16770] loop7: detected capacity change from 0 to 512 [ 483.429827][T16770] EXT4-fs: Ignoring removed mblk_io_submit option [ 483.457645][T16770] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 483.466284][T16770] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.4388: attempt to clear invalid blocks 2 len 1 [ 483.480380][T16770] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 483.480773][T16770] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, [ 483.489953][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 483.489979][ C0] EXT4-fs (loop7): initial error at time 1772353868: ext4_clear_blocks:876: inode 13 [ 483.490013][ C0] EXT4-fs (loop7): last error at time 1772353868: ext4_clear_blocks:876: inode 13 [ 483.523768][T16770] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 483.533007][T16770] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4388: invalid indirect mapped block 1819239214 (level 0) [ 483.552166][T16770] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 483.554366][T16770] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4388: invalid indirect mapped block 1819239214 (level 1) [ 483.575695][T16785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4389'. [ 483.601408][ T70] batadv1: left promiscuous mode [ 483.636787][T16770] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 483.645160][T16770] EXT4-fs (loop7): 1 truncate cleaned up [ 483.661918][T16770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.693179][T16788] loop3: detected capacity change from 0 to 1024 [ 483.738498][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.749821][T16788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.806585][T16800] loop7: detected capacity change from 0 to 1024 [ 483.842592][T16800] EXT4-fs: Ignoring removed orlov option [ 483.911423][T16800] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.026680][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.116735][T16818] loop7: detected capacity change from 0 to 1024 [ 484.179539][T16818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.419687][T16835] syzkaller0: entered promiscuous mode [ 484.425290][T16835] syzkaller0: entered allmulticast mode [ 484.478871][ T28] audit: type=1400 audit(1772353869.072:996): avc: denied { append } for pid=16838 comm="syz.6.4407" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 484.547658][T16843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=16843 comm=syz.6.4408 [ 484.709752][T16847] 9pnet_fd: Insufficient options for proto=fd [ 484.763211][T16853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.783018][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.792751][T16853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.123930][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.225495][T16862] loop7: detected capacity change from 0 to 1024 [ 485.255913][T16862] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.989639][T16890] loop2: detected capacity change from 0 to 1024 [ 486.053669][T16890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.071579][T16894] xt_hashlimit: size too large, truncated to 1048576 [ 486.280907][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.782599][T16911] loop6: detected capacity change from 0 to 128 [ 486.995148][ T28] audit: type=1400 audit(1772353871.592:997): avc: denied { mount } for pid=16913 comm="syz.6.4435" name="/" dev="configfs" ino=2104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 487.052226][ T28] audit: type=1400 audit(1772353871.592:998): avc: denied { search } for pid=16913 comm="syz.6.4435" name="/" dev="configfs" ino=2104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 487.102390][ T28] audit: type=1400 audit(1772353871.592:999): avc: denied { search } for pid=16913 comm="syz.6.4435" name="/" dev="configfs" ino=2104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 487.152407][ T28] audit: type=1400 audit(1772353871.592:1000): avc: denied { watch watch_reads } for pid=16913 comm="syz.6.4435" path="/" dev="configfs" ino=2104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 487.192453][ T28] audit: type=1400 audit(1772353871.592:1001): avc: denied { search } for pid=16913 comm="syz.6.4435" name="/" dev="configfs" ino=2104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 487.232859][ T28] audit: type=1400 audit(1772353871.592:1002): avc: denied { read open } for pid=16913 comm="syz.6.4435" path="/" dev="configfs" ino=2104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 487.315582][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.449570][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4436'. [ 487.684753][T16904] loop7: detected capacity change from 0 to 1024 [ 487.715817][T16904] ext4: Bad value for 'mb_optimize_scan' [ 488.611138][T16942] xt_hashlimit: size too large, truncated to 1048576 [ 488.806946][ T28] audit: type=1400 audit(1772353873.402:1003): avc: denied { read } for pid=16946 comm="syz.7.4445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 488.867914][T16949] loop7: detected capacity change from 0 to 1024 [ 488.893845][T16949] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.242967][T16960] usb usb8: usbfs: process 16960 (syz.2.4450) did not claim interface 0 before use [ 489.320485][T16967] loop2: detected capacity change from 0 to 2048 [ 489.373510][T16967] loop2: p1 p2 p3 [ 489.379204][T16967] loop2: p3 start 8388352 is beyond EOD, truncated [ 489.671999][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 489.676356][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 489.916756][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.953069][T16985] netlink: 'syz.7.4457': attribute type 27 has an invalid length. [ 490.093162][T16985] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.100494][T16985] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.254801][T16985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.285580][T16985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.438763][T16989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.447278][T16989] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.462318][T16989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.531170][ T3537] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.550576][ T3537] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.580056][ T3537] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.593875][T17009] loop6: detected capacity change from 0 to 512 [ 490.610530][ T3537] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.672974][T17013] loop3: detected capacity change from 0 to 512 [ 490.693543][T17013] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 490.716720][T17013] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 490.739589][T17013] System zones: 1-2, 4-12, 8-8 [ 490.753348][T17013] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.4466: iget: bad i_size value: 38620345925642 [ 490.772442][T17013] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 490.772624][T17013] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4466: couldn't read orphan inode 15 (err -117) [ 490.793854][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 490.793877][ C0] EXT4-fs (loop3): initial error at time 1772353875: ext4_orphan_get:1391: inode 15 [ 490.793908][ C0] EXT4-fs (loop3): last error at time 1772353875: ext4_orphan_get:1391: inode 15 [ 490.819419][T17013] loop3: lost filesystem error report for type 5 error -117 [ 490.820007][T17013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.858710][T17018] loop6: detected capacity change from 0 to 1024 [ 490.954869][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4473'. [ 491.026804][T17012] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4466: bg 0: block 5: invalid block bitmap [ 491.069787][T17012] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1088 with max blocks 64 with error 28 [ 491.084841][T17033] lo speed is unknown, defaulting to 1000 [ 491.091104][T17033] lo speed is unknown, defaulting to 1000 [ 491.099441][T17012] EXT4-fs (loop3): This should not happen!! Data will be lost [ 491.099441][T17012] [ 491.130021][T17012] EXT4-fs (loop3): Total free blocks count 0 [ 491.145314][T17012] EXT4-fs (loop3): Free/Dirty block details [ 491.165891][T17012] EXT4-fs (loop3): free_blocks=0 [ 491.176755][T17012] EXT4-fs (loop3): dirty_blocks=64 [ 491.187455][T17012] EXT4-fs (loop3): Block reservation details [ 491.194589][T17012] EXT4-fs (loop3): i_reserved_data_blocks=64 [ 491.225657][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.302534][T17043] SELinux: unknown common r [ 491.313283][T17043] SELinux: failed to load policy [ 491.327789][T17047] loop2: detected capacity change from 0 to 512 [ 491.350395][T17047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.372437][T17047] ext4 filesystem being mounted at /923/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.379050][ T28] audit: type=1400 audit(1772353875.962:1004): avc: denied { read } for pid=17048 comm="syz.3.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 491.406122][T17047] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 491.460379][T17057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4484'. [ 491.475865][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.529861][T17063] loop2: detected capacity change from 0 to 7 [ 491.623409][T17065] loop3: detected capacity change from 0 to 512 [ 491.636415][T17065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.649585][T17065] ext4 filesystem being mounted at /891/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.678261][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.742258][ T28] audit: type=1326 audit(1772353876.332:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17069 comm="syz.1.4490" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5f03fc799 code=0x0 [ 492.825216][T17091] loop6: detected capacity change from 0 to 128 [ 492.857574][ T28] audit: type=1400 audit(1772353877.442:1006): avc: denied { cmd } for pid=17092 comm="syz.1.4497" path="socket:[50386]" dev="sockfs" ino=50386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 493.544681][T17105] loop2: detected capacity change from 0 to 4096 [ 493.563566][T17105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.736207][T17109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4503'. [ 493.771081][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.878711][ T28] audit: type=1400 audit(1772353878.472:1007): avc: denied { setopt } for pid=17116 comm="syz.2.4507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 493.899265][T17119] loop6: detected capacity change from 0 to 128 [ 493.899756][ T28] audit: type=1400 audit(1772353878.472:1008): avc: denied { listen } for pid=17116 comm="syz.2.4507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 494.070170][T17129] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 494.081701][T17129] syzkaller0: entered promiscuous mode [ 494.088793][T17129] syzkaller0: entered allmulticast mode [ 494.208912][T17137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4516'. [ 494.361566][T17142] xt_hashlimit: size too large, truncated to 1048576 [ 495.102272][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 495.364325][T17160] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 495.927852][T17166] loop7: detected capacity change from 0 to 32768 [ 495.975731][T17166] loop7: p1 < > p3 < p5 > [ 495.997769][T17166] loop7: partition table partially beyond EOD, truncated [ 496.013972][T17174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.044072][T17174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.061527][T17177] syzkaller0: entered promiscuous mode [ 496.067536][T17177] syzkaller0: entered allmulticast mode [ 496.196922][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 496.745789][T17189] loop2: detected capacity change from 0 to 512 [ 496.853042][T17189] EXT4-fs: Ignoring removed i_version option [ 496.911320][T17189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.974702][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.356148][T17206] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4540'. [ 497.419509][T17215] xt_hashlimit: size too large, truncated to 1048576 [ 497.660421][ T28] audit: type=1400 audit(1772353882.252:1009): avc: denied { kexec_image_load } for pid=17226 comm="syz.7.4547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 497.843196][T17233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4548'. [ 497.949449][T17237] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 498.217468][T17210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.281905][ T28] audit: type=1400 audit(1772353882.852:1010): avc: denied { read } for pid=3422 comm="kworker/1:3" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=50659 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 498.452575][ T28] audit: type=1400 audit(1772353883.042:1011): avc: denied { lock } for pid=17252 comm="syz.2.4556" path="socket:[50690]" dev="sockfs" ino=50690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 498.627310][T17261] loop6: detected capacity change from 0 to 1024 [ 498.753996][T17267] syzkaller0: entered promiscuous mode [ 498.759868][T17267] syzkaller0: entered allmulticast mode [ 498.869565][T17275] loop7: detected capacity change from 0 to 512 [ 498.899042][T17275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.922483][T17275] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.969077][T17269] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 499.100016][T17269] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 499.112668][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4567'. [ 499.132220][T17284] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4567'. [ 499.336293][T17292] lo speed is unknown, defaulting to 1000 [ 499.342612][T17292] lo speed is unknown, defaulting to 1000 [ 499.544320][ T28] audit: type=1400 audit(1772353884.142:1012): avc: denied { wake_alarm } for pid=17307 comm="syz.2.4577" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 499.604133][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.656297][T17310] loop7: detected capacity change from 0 to 1024 [ 499.708686][T17310] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.094992][T17320] loop3: detected capacity change from 0 to 2048 [ 500.119110][T17320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.370734][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.463669][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.542824][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.591544][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.696839][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 500.709667][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.737103][T17342] lo speed is unknown, defaulting to 1000 [ 500.745539][T17342] lo speed is unknown, defaulting to 1000 [ 500.862366][ T4333] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 500.935364][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.011480][ T70] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 501.104355][ T70] bond0 (unregistering): Released all slaves [ 501.119752][ T70] bond1 (unregistering): Released all slaves [ 501.142817][ T70] bond2 (unregistering): (slave veth3): Releasing active interface [ 501.160566][ T70] batadv0: entered promiscuous mode [ 501.170619][ T70] bond2 (unregistering): (slave batadv0): Releasing active interface [ 501.179925][ T70] bond2 (unregistering): Released all slaves [ 501.237480][ T70] hsr_slave_0: left promiscuous mode [ 501.243200][ T70] hsr_slave_1: left promiscuous mode [ 501.276739][T17373] loop6: detected capacity change from 0 to 512 [ 501.607734][T17342] chnl_net:caif_netlink_parms(): no params data found [ 501.759119][T17342] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.768659][T17342] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.782483][T17342] bridge_slave_0: entered allmulticast mode [ 501.789290][T17342] bridge_slave_0: entered promiscuous mode [ 501.808005][T17342] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.828680][T17342] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.858249][T17342] bridge_slave_1: entered allmulticast mode [ 501.885276][T17433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4596'. [ 501.896099][T17342] bridge_slave_1: entered promiscuous mode [ 501.948028][T17433] 8021q: adding VLAN 0 to HW filter on device team1 [ 502.004651][ T70] IPVS: stop unused estimator thread 0... [ 502.028885][T17342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.061850][T17342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.130686][T17342] team0: Port device team_slave_0 added [ 502.138219][T17342] team0: Port device team_slave_1 added [ 502.177628][T17342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.188077][T17342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.228750][T17342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.282835][T17342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.296428][T17342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.378457][T17342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.530769][T17342] hsr_slave_0: entered promiscuous mode [ 502.567916][T17342] hsr_slave_1: entered promiscuous mode [ 502.598283][T17342] debugfs: 'hsr0' already exists in 'hsr' [ 502.614485][T17342] Cannot create hsr debugfs directory [ 503.080922][T17490] loop6: detected capacity change from 0 to 512 [ 503.138228][T17342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 503.170862][T17342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 503.197426][T17342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 503.220368][T17342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 503.369021][T17342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.413880][T17342] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.443086][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.450224][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.475143][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.482266][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.537031][T17342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 503.563144][T17342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.718296][T17342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.878964][ T28] audit: type=1326 audit(1772353888.462:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.3.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c89ec799 code=0x7fc00000 [ 503.936050][T17342] veth0_vlan: entered promiscuous mode [ 503.962382][T17342] veth1_vlan: entered promiscuous mode [ 504.024376][T17342] veth0_macvtap: entered promiscuous mode [ 504.033749][T17342] veth1_macvtap: entered promiscuous mode [ 504.084061][T17342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.116601][T17342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.147958][T14033] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.187278][T14033] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.227775][T14033] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.253274][T14033] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.506764][ T28] audit: type=1400 audit(1772353889.102:1014): avc: denied { bind } for pid=17607 comm="syz.2.4624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 504.559623][T17610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.602528][T17610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.813184][ T28] audit: type=1400 audit(1772353889.412:1015): avc: denied { execute } for pid=17614 comm="syz.3.4627" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=51949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 505.198507][T17626] loop6: detected capacity change from 0 to 128 [ 505.265248][T17629] loop6: detected capacity change from 0 to 1024 [ 505.377609][ T28] audit: type=1400 audit(1772353889.972:1016): avc: denied { ioctl } for pid=17632 comm="syz.6.4634" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54394 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 505.474946][T17636] loop5: detected capacity change from 0 to 7 [ 505.864325][ T28] audit: type=1400 audit(1772353890.462:1017): avc: denied { setopt } for pid=17643 comm="syz.7.4649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 506.016180][ T28] audit: type=1400 audit(1772353890.612:1018): avc: denied { ioctl } for pid=17652 comm="syz.1.4641" path="socket:[56513]" dev="sockfs" ino=56513 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 506.410635][T17693] lo speed is unknown, defaulting to 1000 [ 506.417478][T17693] lo speed is unknown, defaulting to 1000 [ 507.498011][ T28] audit: type=1326 audit(1772353892.042:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17723 comm="syz.6.4665" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feed4d8c799 code=0x0 [ 507.532891][T17725] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 507.539455][T17725] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 507.550304][T17725] vhci_hcd vhci_hcd.0: Device attached [ 507.672913][T17734] netlink: 'syz.2.4668': attribute type 4 has an invalid length. [ 507.752167][T16391] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 507.824097][T16391] usb 13-1: new full-speed USB device number 3 using vhci_hcd [ 508.002674][T17746] loop2: detected capacity change from 0 to 1024 [ 508.017070][T17746] EXT4-fs: inline encryption not supported [ 508.025430][T17746] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 508.038311][T17746] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.4673: lblock 2 mapped to illegal pblock 2 (length 1) [ 508.052942][T17746] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 508.053140][T17746] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 508.062217][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 508.062238][ C1] EXT4-fs (loop2): initial error at time 1772353892: ext4_map_blocks:776: inode 3: block 2 [ 508.062299][ C1] EXT4-fs (loop2): last error at time 1772353892: ext4_map_blocks:776: inode 3: block 2 [ 508.096828][T17746] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.4673: lblock 0 mapped to illegal pblock 48 (length 1) [ 508.110949][T17746] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 508.111127][T17746] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 508.129140][T17746] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.4673: Failed to acquire dquot type 0 [ 508.140494][T17746] loop2: lost filesystem error report for type 5 error -117 [ 508.142172][T17746] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 508.159253][T17746] loop2: lost filesystem error report for type 5 error -117 [ 508.162069][T17746] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.4673: mark_inode_dirty error [ 508.180801][T17746] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 508.180934][T17746] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 508.200502][T17746] EXT4-fs (loop2): 1 orphan inode deleted [ 508.206941][T17746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.212415][T14029] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 508.240997][T14029] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 508.249770][T14029] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:26: Failed to release dquot type 0 [ 508.262590][T17746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.271987][T17726] vhci_hcd: connection reset by peer [ 508.273740][T17746] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.4673: Invalid inode table block 1 in block_group 0 [ 508.290059][T14033] vhci_hcd vhci_hcd.6: stop threads [ 508.290780][T17746] loop2: lost filesystem error report for type 5 error -117 [ 508.295456][T14033] vhci_hcd vhci_hcd.6: release socket [ 508.296834][T17746] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 508.304463][T14033] vhci_hcd vhci_hcd.6: disconnect device [ 508.311645][T17746] loop2: lost filesystem error report for type 5 error -117 [ 508.323722][T17746] EXT4-fs error (device loop2): ext4_quota_off:7285: inode #3: comm syz.2.4673: mark_inode_dirty error [ 508.342449][T17746] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 508.479186][T17757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.508959][T17757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.537106][T17759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.546871][T17759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.558374][T17759] loop2: detected capacity change from 0 to 512 [ 508.591009][T17759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.603915][T17759] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 508.820881][T17768] loop6: detected capacity change from 0 to 4096 [ 509.569400][T17342] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.002840][T17811] syzkaller0: entered promiscuous mode [ 510.010653][T17811] syzkaller0: entered allmulticast mode [ 510.556888][T17853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4711'. [ 510.566958][T17853] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17853 comm=syz.2.4711 [ 510.679296][ T28] audit: type=1400 audit(1772353895.272:1020): avc: denied { listen } for pid=17857 comm="syz.2.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 510.938698][T17860] loop2: detected capacity change from 0 to 1024 [ 510.954008][T17860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.022553][T17867] EXT4-fs (loop2): shut down requested (0) [ 511.070548][T17342] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.317251][T17878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4720'. [ 511.349864][T17878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17878 comm=syz.3.4720 [ 511.385149][T17882] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4722'. [ 511.935300][T17930] tipc: Started in network mode [ 511.940291][T17930] tipc: Node identity 864b8dad0f3b, cluster identity 4711 [ 511.948017][T17930] tipc: Enabled bearer , priority 0 [ 511.981862][T17930] syzkaller0: entered promiscuous mode [ 511.987485][T17930] syzkaller0: entered allmulticast mode [ 511.993750][T17930] tipc: Resetting bearer [ 512.008225][T17929] tipc: Resetting bearer [ 512.021671][T17929] tipc: Disabling bearer [ 512.381360][T17941] lo speed is unknown, defaulting to 1000 [ 512.397613][T17941] lo speed is unknown, defaulting to 1000 [ 512.445740][T17943] lo speed is unknown, defaulting to 1000 [ 512.451937][T17943] lo speed is unknown, defaulting to 1000 [ 512.862271][T16391] usb 13-1: enqueue for inactive port 0 [ 512.872360][T16391] usb 13-1: enqueue for inactive port 0 [ 512.942821][T16391] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 512.985701][T17964] lo speed is unknown, defaulting to 1000 [ 512.999793][T17964] lo speed is unknown, defaulting to 1000 [ 513.064915][T17966] syzkaller0: entered promiscuous mode [ 513.070493][T17966] syzkaller0: entered allmulticast mode [ 513.132083][T17970] loop6: detected capacity change from 0 to 128 [ 513.160988][T17970] vfat: Bad value for 'uid' [ 513.173896][T17970] vfat: Bad value for 'uid' [ 513.241637][T17974] loop2: detected capacity change from 0 to 8192 [ 513.250736][T17974] msdos: Unknown parameter 'noLots' [ 513.269996][T17974] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 513.563869][ T28] audit: type=1400 audit(1772353898.162:1021): avc: denied { read } for pid=17980 comm="syz.3.4759" path="socket:[57129]" dev="sockfs" ino=57129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 513.650594][T16392] IPVS: starting estimator thread 0... [ 513.729367][T17990] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4762'. [ 513.744840][T17990] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4762'. [ 513.774301][T17992] lo speed is unknown, defaulting to 1000 [ 513.781134][T17992] lo speed is unknown, defaulting to 1000 [ 513.786982][T17986] IPVS: using max 1920 ests per chain, 96000 per kthread [ 513.973286][T18003] loop7: detected capacity change from 0 to 128 [ 514.405007][T18011] syzkaller0: entered promiscuous mode [ 514.422201][T18011] syzkaller0: entered allmulticast mode [ 514.716828][T18029] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4777'. [ 515.115075][T18042] netlink: 'syz.2.4782': attribute type 3 has an invalid length. [ 515.129711][T18043] loop7: detected capacity change from 0 to 1024 [ 515.137809][T18042] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4782'. [ 515.148872][T18043] EXT4-fs: Ignoring removed oldalloc option [ 515.155236][T18043] EXT4-fs: Ignoring removed bh option [ 515.167177][T18043] EXT4-fs (loop7): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 515.215075][T18043] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.350062][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.531631][T18069] loop7: detected capacity change from 0 to 164 [ 515.578631][T18070] loop2: detected capacity change from 0 to 1764 [ 515.812526][T18073] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 515.890161][ T28] audit: type=1400 audit(1772353900.482:1022): avc: denied { map } for pid=18074 comm="syz.2.4795" path="socket:[57308]" dev="sockfs" ino=57308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 515.918757][T18075] loop2: detected capacity change from 0 to 512 [ 515.927727][ T28] audit: type=1400 audit(1772353900.512:1023): avc: denied { accept } for pid=18074 comm="syz.2.4795" path="socket:[57308]" dev="sockfs" ino=57308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 515.966377][T18075] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 516.006165][T18075] EXT4-fs (loop2): 1 truncate cleaned up [ 516.018177][T18075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.072651][T17342] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.179053][T18085] syzkaller0: entered promiscuous mode [ 516.188997][T18085] syzkaller0: entered allmulticast mode [ 516.657837][T18101] loop2: detected capacity change from 0 to 128 [ 516.748287][T18103] bio_check_eod: 38 callbacks suppressed [ 516.748347][T18103] syz.2.4803: attempt to access beyond end of device [ 516.748347][T18103] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 516.783225][T18103] syz.2.4803: attempt to access beyond end of device [ 516.783225][T18103] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 516.817303][T18103] syz.2.4803: attempt to access beyond end of device [ 516.817303][T18103] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 516.861188][T18103] syz.2.4803: attempt to access beyond end of device [ 516.861188][T18103] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 516.899988][T18103] syz.2.4803: attempt to access beyond end of device [ 516.899988][T18103] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 516.913917][T18103] syz.2.4803: attempt to access beyond end of device [ 516.913917][T18103] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 516.927598][T18103] syz.2.4803: attempt to access beyond end of device [ 516.927598][T18103] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 516.941284][T18103] syz.2.4803: attempt to access beyond end of device [ 516.941284][T18103] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 516.956099][T18103] syz.2.4803: attempt to access beyond end of device [ 516.956099][T18103] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 516.969822][T18103] syz.2.4803: attempt to access beyond end of device [ 516.969822][T18103] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 517.277974][T18124] syzkaller0: entered promiscuous mode [ 517.302196][T18124] syzkaller0: entered allmulticast mode [ 517.344336][T18131] syzkaller0: entered promiscuous mode [ 517.352230][T18131] syzkaller0: entered allmulticast mode [ 517.722157][ T28] audit: type=1326 audit(1772353902.302:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18146 comm="syz.1.4818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5f03fc799 code=0x0 [ 518.066417][T18161] loop2: detected capacity change from 0 to 512 [ 518.112576][T18161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.125254][T18161] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.138404][T18161] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4823: corrupted xattr block 33: invalid checksum [ 518.159735][T18161] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 518.172386][T18161] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4823: corrupted xattr block 33: invalid checksum [ 518.223012][T18161] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 518.252273][ T28] audit: type=1400 audit(1772353902.822:1025): avc: denied { execute } for pid=18160 comm="syz.2.4823" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 518.285206][T18161] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4823: corrupted xattr block 33: invalid checksum [ 518.332593][T18161] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 518.342027][T18161] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4823: corrupted xattr block 33: invalid checksum [ 518.355790][ T28] audit: type=1400 audit(1772353902.932:1026): avc: denied { read open } for pid=18160 comm="syz.2.4823" path="/49/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 518.427019][T18161] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 518.452504][T18161] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4823: corrupted xattr block 33: invalid checksum [ 518.466904][ T28] audit: type=1400 audit(1772353903.052:1027): avc: denied { execute_no_trans } for pid=18160 comm="syz.2.4823" path="/49/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 518.491951][T18161] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 518.633714][T17342] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.945958][T18182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4830'. [ 519.032201][T18183] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18183 comm=syz.3.4830 [ 519.146378][T18186] lo speed is unknown, defaulting to 1000 [ 519.153014][T18186] lo speed is unknown, defaulting to 1000 [ 521.344863][T18232] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4849'. [ 521.362228][T18230] IPv4: Oversized IP packet from 127.202.26.0 [ 521.431531][T18232] vlan3: entered allmulticast mode [ 521.451329][T18232] bridge0: entered allmulticast mode [ 521.479012][T18232] bridge1: port 1(vlan3) entered blocking state [ 521.494971][T18232] bridge1: port 1(vlan3) entered disabled state [ 521.503256][T18232] vlan3: entered promiscuous mode [ 521.521550][T18232] bridge0: entered promiscuous mode [ 521.706811][T18249] loop7: detected capacity change from 0 to 128 [ 521.816801][T18249] bio_check_eod: 34 callbacks suppressed [ 521.816819][T18249] syz.7.4856: attempt to access beyond end of device [ 521.816819][T18249] loop7: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 521.871938][T18249] syz.7.4856: attempt to access beyond end of device [ 521.871938][T18249] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 521.901587][T18249] syz.7.4856: attempt to access beyond end of device [ 521.901587][T18249] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 521.944967][T18249] syz.7.4856: attempt to access beyond end of device [ 521.944967][T18249] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 521.979251][T18249] syz.7.4856: attempt to access beyond end of device [ 521.979251][T18249] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 522.009702][T18249] syz.7.4856: attempt to access beyond end of device [ 522.009702][T18249] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 522.032407][T18249] syz.7.4856: attempt to access beyond end of device [ 522.032407][T18249] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 522.102223][T18249] syz.7.4856: attempt to access beyond end of device [ 522.102223][T18249] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 522.142269][T18249] syz.7.4856: attempt to access beyond end of device [ 522.142269][T18249] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 522.187826][T18249] syz.7.4856: attempt to access beyond end of device [ 522.187826][T18249] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 522.360300][T18259] loop7: detected capacity change from 0 to 1024 [ 522.403742][T18259] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.833953][T18268] loop2: detected capacity change from 0 to 128 [ 522.885747][T18268] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 522.982447][T18268] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 523.097533][T18272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4864'. [ 523.804732][T17342] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 523.865817][T15746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.902691][T18292] loop2: detected capacity change from 0 to 1024 [ 523.973433][T18292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.063692][T17342] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.242538][ T28] audit: type=1326 audit(1772353908.482:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.2.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0840dc799 code=0x7ffc0000 [ 524.266181][ T28] audit: type=1326 audit(1772353908.482:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.2.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0840dc799 code=0x7ffc0000 [ 524.289961][ T28] audit: type=1326 audit(1772353908.492:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.2.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc0840dc799 code=0x7ffc0000 [ 524.313733][ T28] audit: type=1326 audit(1772353908.492:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.2.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0840dc799 code=0x7ffc0000 [ 524.339688][ T28] audit: type=1326 audit(1772353908.492:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.2.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0840dc799 code=0x7ffc0000 [ 524.363633][ T28] audit: type=1326 audit(1772353908.492:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.2.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc0840dc799 code=0x7ffc0000 [ 524.387507][ T28] audit: type=1326 audit(1772353908.492:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.2.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0840dc799 code=0x7ffc0000 [ 524.421016][ T2999] ================================================================== [ 524.429158][ T2999] BUG: KCSAN: data-race in d_delete / path_lookupat [ 524.435804][ T2999] [ 524.438153][ T2999] read-write to 0xffff888107f3acc0 of 4 bytes by task 3304 on cpu 0: [ 524.446221][ T28] audit: type=1326 audit(1772353908.492:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.2.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0840dc799 code=0x7ffc0000 [ 524.446240][ T2999] d_delete+0xbe/0xe0 [ 524.469802][ T2999] d_delete_notify+0x32/0x100 [ 524.469829][ T2999] vfs_unlink+0x289/0x490 [ 524.469852][ T2999] filename_unlinkat+0x1e2/0x410 [ 524.469876][ T2999] __se_sys_unlink+0x2b/0xe0 [ 524.469898][ T2999] __x64_sys_unlink+0x1f/0x30 [ 524.497133][ T2999] x64_sys_call+0x2eb6/0x3020 [ 524.501854][ T2999] do_syscall_64+0x12c/0x370 [ 524.506472][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.512312][ T28] audit: type=1326 audit(1772353908.492:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.2.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc0840dc799 code=0x7ffc0000 [ 524.512398][ T2999] [ 524.512410][ T2999] read to 0xffff888107f3acc0 of 4 bytes by task 2999 on cpu 1: [ 524.512445][ T28] audit: type=1326 audit(1772353908.492:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.2.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0840dc502 code=0x7ffc0000 [ 524.535866][ T2999] path_lookupat+0x1d8/0x500 [ 524.535902][ T2999] filename_lookup+0x190/0x390 [ 524.535933][ T2999] do_readlinkat+0x74/0x2f0 [ 524.535965][ T2999] __x64_sys_readlink+0x47/0x60 [ 524.587932][ T2999] x64_sys_call+0x2b51/0x3020 [ 524.592651][ T2999] do_syscall_64+0x12c/0x370 [ 524.597273][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.603196][ T2999] [ 524.605546][ T2999] value changed: 0x00300180 -> 0x00004080 [ 524.611291][ T2999] [ 524.613639][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 524.619826][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 524.630446][ T2999] Tainted: [W]=WARN [ 524.634273][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.644525][ T2999] ==================================================================