last executing test programs: 52.086864287s ago: executing program 4 (id=237): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 51.711036496s ago: executing program 4 (id=244): r0 = socket(0xa, 0x5, 0x0) setsockopt(r0, 0x84, 0x83, 0x0, 0x0) 51.274131738s ago: executing program 4 (id=250): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000400000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a01040000ff83000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004540000000c0a090000000000000000000a0000060900020073797a31000000000900010073797a310000000028000380180000800c00018006000100d103000008000340000000010c00008008000340000000022c0000000e0a010200000000000000000a0000000900020073797a31000000000900010073797a31"], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 50.990190636s ago: executing program 4 (id=252): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000006040)=[{{&(0x7f0000001140)={0xa, 0x4e24, 0x0, @private2, 0x4}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000010c0)="b3", 0x1}], 0x1}}], 0x400000000000266, 0x44051) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000001040), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x70bd26, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0x800}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000200)="5d6b607ff6fcaebb160865f6992170177663c717175d0e245a0fc1618fb3662a8aefc43f6426646f458fa0f96f8efd1ab24a9ce3334b73bc0adab0374113ac84e9393c1eba4641d14026cc7389c8c2ce0ab136495d888fe7834426d0b813fc3680f7", 0x62}, {&(0x7f00000002c0)="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", 0xff}, {&(0x7f0000000480)="ff57d833c4aed81f2155097a81c12d5fe171c8f6213aaef331b3298769fc6dcf1669d0befac4af319c0c7a4c95bf4ed38c77ca14cc05c2effe3390d76db82c9ab5c0e1422f8647a83948379077dd437b6a8629a93ea9e3cd8547e94570d7835ac27d96975241c15cc7ddecd059085778e1e8f17a9c589c3fd6ef3963057b9a210666e2d8206b571e00829807d1ca5bcd877a91daf7730909fa9e0a5f9942367eb7604d45ebbf4af6e96f75d20a1fba5be623d1a2869a2e4382e703254b71806944fea211227c50b8ea3375f05dab52d831783b581ee138077470a2", 0xdb}, {&(0x7f0000000580)}], 0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xda32}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={r7, 0x3b64}, &(0x7f0000000600)=0x8) r8 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e46, 0x1f400, 0x8, 0xc1}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004bc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x200}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x401c040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r10}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000012c0)={r10, 0x1000, "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"}, &(0x7f0000002300)=0x1008) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="8fd3"], 0x14}, 0x1, 0x0, 0x0, 0x24044051}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}}, 0x20008005) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="2000005087a16ba5f31817be4aaa1290e585d9c7b9297cbffa444f54f44a90d5b1dfd897fef9ee17bb1ac61020b46d36269b9af500ed8426987e6ab90b25fdfef508218a7399134d03000000ce51b1865538def4ab5027ded4d837b0a35759aeae65bb11ee22990888c90d2c48021eb9841d6eed1d357a382a1bafd5bafb98983b53df2a"], 0x28}}, 0x0) 50.896238338s ago: executing program 4 (id=255): mkdir(&(0x7f0000001700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001800)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) write(r0, &(0x7f0000001d00)='0 4 0 2', 0x7) r1 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) wait4(r1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180500000800000000000000000000008500000075000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newqdisc={0x2c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$rtl8150(0x0, 0x2e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r6, 0x4004550f, 0x0) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x800) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) 49.763391989s ago: executing program 4 (id=265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 34.531981663s ago: executing program 32 (id=265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 14.867838005s ago: executing program 2 (id=454): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x48, r1, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) 14.829648516s ago: executing program 2 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x1000000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x1000000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000040)='T', 0x1, 0x4008910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x26, 0x0}, 0x1}, 0x1c) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x100, 0x6, 0x7, 0x41, 0x9, 0xe}, &(0x7f00000003c0)=0x9c) r4 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x104) sendfile(r4, r4, 0x0, 0xe3aa6ea) (async) sendfile(r4, r4, 0x0, 0xe3aa6ea) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) 14.289713981s ago: executing program 2 (id=460): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x2, 0x3, 0x9, 0x0, 0x4800000}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.220147092s ago: executing program 2 (id=462): socket$kcm(0x10, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0xc343}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x3, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x800) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r1 = add_key$user(&(0x7f00000005c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0)="7f", 0x1, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000000a00)='c', 0x1) mount(&(0x7f0000000300)=@filename='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180e373398e50b73c2a997b207b2973a6c2000000a538ae46463208004500001c0000000000029078ac1e0001e000000111009078e0000001ac22f24901b941897433f35e17cd5c70ad80a07d876a54e75f72b40cb252020260c7e206d6433e43364205d1865d367225c39973b08ae8c68cb3b35b930b9dd4ac6554187f6521e15f9d8ebc065bab2b48cc03b2ac237e7cf370967be72e6dcbc27bb5240e044493773dc5952b93f1fea6d302ce730cc967562a151c1c2d3f5e6a9baf31577adcb709933dddd93e"], 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@util={0x25, "8d817e270325cf364bb70c1cab5f272a"}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)="dc530aae81608aa5a9281c1b30958823b7a5ada40369ad5373220b39dc8c76aba223de4da05508b3e97fd96f830f106b3be41320712f08bb17ffa88e9ef18d6aa68dedeff926ee41073162c21461479b43fb54839c7b2a2842b8216a4c8652ee5fd698dcd77cc3d14db3721ca8d89fc52878e4f45d36476c1795618213416c206e7f590d19de5082e7f653d1b18d960f3f781ce5232929314144f1ee33280f137df8311b16728e3ca860d1eb2fafc962c8d31538d21f853a88c8faf1d5ebbc63049a0eda607a13e85a48156202656bd070a11ffdb21c8996a0a5", 0xda}], 0x1, 0x0, 0x0, 0x11000000}, 0x18884) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x7, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) setsockopt$inet6_buf(r2, 0x29, 0x32, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xfffff801, @local, 0x8}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, &(0x7f0000000340)="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", 0x12e) chroot(&(0x7f0000000240)='./config\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000010900027a30000000001c000380180003801400010067656e65766530000000000000000000140000001100010000000000000000000000000a"], 0x70}}, 0x24040884) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) 13.741875825s ago: executing program 2 (id=470): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x113, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200018e7db1f09a"], 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000020103000000005f04868f5a627b6e"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4008000) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/4068, 0xfe4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=@tcp, 0x1}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, 0x0, 0x0, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) fcntl$notify(r2, 0x402, 0x3) connect$pppoe(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, {0x2, @empty, 'batadv_slave_1\x00'}}, 0x1e) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r5, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0xf0ffffff, 0x11}, 0x4000044) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x13, 0x0) 13.430541384s ago: executing program 2 (id=477): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000140)=@random={'user.', './0,,{@-*(\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x30}], 0x1, 0x0) rseq(0x0, 0x20, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000000)={0x6, 'netdevsim0\x00', {0x1}, 0x2}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x7fffffffffffffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @remote}, 0x4}) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bind$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="85100000ffffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004f24b1b98500000082000000185b00000c00000000000000000000001834000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086040000"], &(0x7f00000004c0)='syzkaller\x00', 0x619, 0x23, &(0x7f0000000500)=""/35, 0x41000, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xa, 0x3, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 13.430204333s ago: executing program 33 (id=477): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000140)=@random={'user.', './0,,{@-*(\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x30}], 0x1, 0x0) rseq(0x0, 0x20, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000000)={0x6, 'netdevsim0\x00', {0x1}, 0x2}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x7fffffffffffffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @remote}, 0x4}) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bind$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="85100000ffffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004f24b1b98500000082000000185b00000c00000000000000000000001834000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086040000"], &(0x7f00000004c0)='syzkaller\x00', 0x619, 0x23, &(0x7f0000000500)=""/35, 0x41000, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xa, 0x3, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 5.275747849s ago: executing program 1 (id=591): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x2, 0x3, 0x9, 0x0, 0x7000000}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.204357302s ago: executing program 1 (id=593): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) 5.138765404s ago: executing program 1 (id=595): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r7, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) io_uring_enter(r4, 0x482a, 0xe991, 0x44, &(0x7f0000000640)={[0x1]}, 0x8) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r7, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x805) splice(r3, 0x0, r5, 0x0, 0x8000000000f3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r5, 0x0, 0x80, 0x8) write(r2, 0x0, 0x0) 4.924038269s ago: executing program 6 (id=598): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x2, 0x2bc, &(0x7f0000000980)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@newtfilter={0x48, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS={0x8, 0x8, 0x400000}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000040601010000faffffff0000010000070500010007000000c070135d278a3f0c506dcffcfaca5e5d96b7fb3fcc2083730d4225467e411863b21aa2514edc98fc05aef236f2dfce1bd1fe0566ff5f8e9b182e5748ce24885c490666624fe10470788ba46334c4d80e975c4b89e05a85257fe781205b326175328b4d99002df4071dc2a93ec59c1680961ca2c90fba14bdac1ffe2fb6e22babdb352718bcae5e46936d0c04ec81643d2950625becd82fe91e80875c5aa9b7f1bff8a0e5ccd489eab7ebd12c6b9853a2d02447f14f7bfee4e056319d54f0ea37dda811dba1bd70da5e4f6d"], 0x1c}, 0x1, 0x0, 0x0, 0x20008100}, 0x4800) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0xd3}}}, &(0x7f0000000040)='GPL\x00'}, 0x94) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r11 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r10, &(0x7f0000000200)="90f1d318a8c9d35ec3392f7d37c4d9544d23be796b1126cf08f94fe1863ff151908f9127859e0475c63ef53c9632f8732d4117093feea4af6ec5cbbfd7bf06ab0f162c920a5c87d4d62dc7fbe5eca5ba972176daa8f160fbad9f606d3f9788f43d261344a634eb5641bbf48bfb6f", &(0x7f0000000280)=@buf="029fe1853a3d27effe455ea7f5a98b48dfd42e85961cb7b242e81794ad8471ae5ffc4248b17dcd02cca5b009d8f67215ecf4f68ed32c5a4b18aaa8a7ceaad2a2436330d40a451c67b7a5d86903b5576437e30aaed0d1f4cf10a2dbe5643d9e743d3b79b7f0f176753639b34f4fe65e6d57b410d8e2a88b7675752ea891294d59c0528f7d858b35186578ee23dec95452222fc7f1df869d3c049240", 0x4}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r11, 0x894b, &(0x7f0000000140)) r12 = memfd_secret(0x0) ioctl$EVIOCSREP(r12, 0x40084503, &(0x7f0000000000)=[0x5, 0x8000]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) 4.265944327s ago: executing program 1 (id=604): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a3ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000500)={0x4009, 0x400008, 0x3, 0x797a, 0x3, "00a6400d00000000000000f8ffffff00"}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02037f02210000000000000000000000030006000000000002000000ac14142e00000000000000000200010020000000100000007fffffff030005002b00000002000000ac1414aa000000000000000017000800"], 0x108}, 0x1, 0x7}, 0x0) 4.112430751s ago: executing program 1 (id=606): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) 4.096554801s ago: executing program 1 (id=608): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140), 0x0, 0xe7c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='pagemap\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_subtree(r5, 0x0, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x21, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 4.008121214s ago: executing program 0 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='pagemap\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_subtree(r4, 0x0, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x21, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.308463812s ago: executing program 3 (id=613): socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, 0x0, 0x4044094) 2.766432986s ago: executing program 3 (id=614): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r7, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) io_uring_enter(r4, 0x482a, 0xe991, 0x44, &(0x7f0000000640)={[0x1]}, 0x8) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r7, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x805) splice(r3, 0x0, r5, 0x0, 0x8000000000f3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r5, 0x0, 0x80, 0x8) write(r2, 0x0, 0x0) 2.62573407s ago: executing program 6 (id=615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.189156582s ago: executing program 5 (id=617): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000020000000000f9ffff00feffdfff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000f9ffff00000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 2.089993625s ago: executing program 0 (id=618): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) 2.024147186s ago: executing program 0 (id=619): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x74b36ae850024e60) (async) fcntl$notify(r0, 0x402, 0x74b36ae850024e60) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r1, 0xffffffffffffffff, 0x43) (async) getdents64(r1, 0xffffffffffffffff, 0x43) socket$inet6_udp(0xa, 0x2, 0x0) gettid() (async) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$TIOCSCTTY(r4, 0x127c, 0x6) close(0x3) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x100066, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r7, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r6}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f0000000400), &(0x7f0000000040)}, 0x30) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f0000000400), &(0x7f0000000040)}, 0x30) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2.014700196s ago: executing program 5 (id=620): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000e00)=@newqdisc={0xc0, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xcb, 0x85, 0x8389, 0xc0a1, 0x2, 0x6567, 0x27, 0x2}}, {0x8, 0x2, [0x7fff, 0x9]}}, {{0x1c, 0x1, {0x2, 0x9, 0x2, 0xbd9, 0x1, 0x1, 0x2, 0x7}}, {0x12, 0x2, [0x3, 0x6, 0x5, 0x8, 0x3, 0xe13, 0x1]}}, {{0x1c, 0x1, {0x0, 0xf8, 0x2980, 0x7, 0x0, 0x2, 0x200}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x9, 0x9, 0x100, 0x2, 0x7, 0xe, 0x1}}, {0x6, 0x2, [0x1efd]}}]}]}, 0xc0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000feffffff000000000100000018110000", @ANYRES32], &(0x7f00000000c0)='syzkaller\x00', 0x80, 0x18, &(0x7f0000000100)=""/24, 0x41000, 0x9, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xa, 0xc, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f0000000200)=[{0x3, 0x1, 0xf}], 0x10, 0x4}, 0x94) syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c672c4e23832f90150ab8568d0c31651713ca5f4a7614bcb04bac8a32f90ae8411029580dec30eaeb30d4500a00000000000007e9d7b285bfc87f477d90463153fb255ba"], 0x1, 0x1045, &(0x7f0000001140)="$eJzs3Vl0nGd9+PHfTLxMbBYDxnHyD2RwSHCMcbQkNsZhUbQ4CrIVLDnEbMGxZSMi28EOS8wWln/3DWhL6V5aqLuRUkrpLXdtL3rR03O46W25LOpGS0uh5zd6JCuObcnYslw/n48OaDzzzLzvOD76vs+rmXkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIhG/0BXV3cjRob37n+kfWH9A/tG91zk9tnH+0aj86jfWHC7EY38X7RasXHmqo3Pa8zd+oL8/02xfubR1kcrv7fi9NoN63a9ZEVz9v4X2aGr4tRTpx8/ODU1cXK5d2SZ7B7cOzw2Orynb/dge3hstL1z+/auux8YGmsPDY8Mjh0YGx/c0+7fN9g3Prqvvbn/rnb3zp297cFtB0b379090DcyOHvljtf0dHVtbz+47aHBvn1jo3vvfnDbWP8DwyMjw3t3d8bkzTlmR/5DfPPweHt8sG9Pu31kcmqid6GdzEHdixnUs9Cgnq6enu7unp7u7ffuvHdHV9eK51zRdY54zojl/0fL8lqSn+Pwo2iW/sdIDMfe2B+PRPu8X/0xEPtiNPZc4PZitv933D140e3O7/+tM1fduu5s/18cnf5vmHm0DRfq/wX25ep9nYqn4nQ8HgdjKqZiIk4u+x5d3a/dMRh7YzjGYjSGY0/0da5pl2vasTO2x/boikfjgRiKsWjHUAzHSAzGWByIsRiPwc6/qP7YF4PRF+MxGvuiHZujP+6KdnTHztgZvdGOwdgWB2I09sfe2B0D0dd5lCMx2fl7773IPs4N6l7MoJ6LDNJ/Lt9S/SiHS/bD2f4DAPW4f7BP/wGgMnvH9nX16D8AVGXc/B8AAAAAAAAAAAAAAAAAAAAAAAAAAACutEY04x8i4ot3Tjfmr0zZ6iz4f8G7rWp07tmMxsxavtHa3rujf6h7aKCrq6uru3uw+6rs/ZwXxejYeF+7/8SxJ05OnDo1cbi9//jkoROHJxb9CJd7/0t037pvr167Yd2unfmHLUcnjk+eOjF57ODRJdsgAMyzIprx7Yi47ZnpxitKy2PL/oGh9sjD7eHjR07MG9ucXSbgMlu5wLHFUlt1Vbem7QBcg1ZGM3oj4puPTDc2ZePLMUDz1Z2FAZd79y6oc96hEdE5Z6GxAHBJVkUzRiPi8Iu+0rg9Im6I62B+38pjgs6T2D8w1HkiU5MHjz8ZnXMYN8yMWnfunWbPfVzjxxLrIt6U+7rKmo0A/OhWRzO+GhHHXtiKV3Z+HwAAXO9a0Zw5hx7TjTuWe2cAAAAAAAAAAAAAAAAAAAAAAAAAAADgOtGIZuyIiNba6UbXvOsvb/3/3qGBq7L3c6z/DwCXYEU047tl/f9u6/9fedoOwDVoZTSjv6z/32P9fwCowqpoxqNl/f9e6/9f+8cS1v8H4ApYHc34Zln//x7r/wNAFVrRjJnX/U037l3unQEAAAAAAAAAAAAAAAAAAAAAAAAAAIDrxI3RjNUR0Rz4QGddmfnr0s9fYeZ5Cyw3kzdvK5cXsybfyrLWYLORX1fwCQEAC2pFM+7rXJpu9C33zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXtGY0428jovGt6UY0IuLpiHbMfO9a7p0DAJZGoxn/GBEv+/vprH/ct+7bq9duWLdrZ0TcEDd0Dgka88ePjo33tftPHHvi5MSpUxOH2/uPTx46cXhisZtr9Q/sG92zFE9kUVYt8f6vuuw9bOUx2TxbOju8f2Cos9NTkwePP5lXNxs3XPamAKhXK5rx/c6l6UZjuXcGALgqVjaa8fyIeOx7Z+bmnStm5vwrZv7U1fxh8aX1Z+emrXKwMHvMMHve4CUXuXze44stRyeOT546MXns4NGFJuGtsl0zXwC4PI1GM/4qInY/trHT1Uasee456DLuOxGx4zPtMi7W5LjZE96rO3FvHZmcmth26MTU4Rz/2Yj46y/fWsY3V+X4clARK8+O78qxz0TEt74+OzY6Y1eXsa2zY7tz7I6IOPi1Z49tlbE3nh3bk2M3RcTU55499sYyds3Zsb1L+7cMANeWnP9/MCI+v/XMXJsvNv+fncOPl+9LPf9fOe9OrbLdlVfqyQNApXKO/Ddl/r9ygfn/30XEMz+4tYybmUuvKbevnTefv/rPAgC4FDn/fyh7/oUzc+fyy/y/TLPPzv8/ve7sHP5w+b7U8//V58z/c7s3XaknDwCVyv7fHxE9B87M/b59Mf2fnfcvdf9b5/Q/t7vxSj15AKhU9v/tETH20Jm519Atpv+bby/3L39eqv7feE7/c7s3X7FnDwB1yv7nfPrhG8/MvS7+Wur/Gv0HgCsu+/+qiPj6X56ZO6e/mP7fUt4dsNTn/9ee0//c7suv2LMHgDo1Yn1jpswr46WdS0PDI4Newg8AAADXk876PutnT/c3XhoN838AAAC43jRiQ/n9/5q4aebSkZiMqZiw/D8AAABcLzq//98ws5xfROOmaJj/AwAAwPVmU+f9/533AHQ+/rcVpzsf17Oi2Tk30GgsPKKxNTbOjNhYVgU6XEbMnF9orBkaHhnc1j86sqs77ux8ykDnnQbnfbSVnbcfbImbZ0bdXD6TaM2zH7GVo7q37eqOLXHLzMhbZj6R8PbN5xnZs+iRvTkSAK53mxbo8WL6vyVumxlx28ynAq645Txl7VJWALhWbOq8/r/zGoAL9n+BEY17Fpj/v3juJQXb4lCciKk4HFs77zbovOLgvI+6Zt7LELYucDbg7Nju2LrALP/s2J5LGNt71f+7AMBS2rRAhxfT/60LzP/XeEkhAFxTTj11+vGDU1MTJ5fwwnI/RwDg2VQaAAAAAAAAAAAAAACufVfj/X8uuODC/7ULy/2TCVhqzWjGP0VE41vTjXYjIp6OaMfMd5/WAwDXp+z/d0r/X6H/AFCF7P906f8m/QeAKmT//7n0/3b9B4AqZP//pfT/lfoPAFXI/v9r6f8d+g8AVcj+/1vp/536DwBVyP7/e+n/q/QfAKqQ/f9u6f9m/QeAKmT//6P0/y79B4AqZP//s/R/i/4DQBWy/98r/X+1/gNAFbL//1X6v1X/AaAK2f//Lv1/jf4DQBWy/98v/d+m/wBQhez//5T+363/AFCF7P8PSv+79B8AqpD9/2Hpf7f+A0AVsv9R+t+j/wBQhex/o/S/V/8BoArNcgYg+3+P/gNAFbL+N5T+36v/AFCF7P+K0v/t+g8AVcj+ryz936H/AFCF7P+q0v/X6j8AVCH7v7r0f6f+A0AVsv+t0v/X6T8AVCH7f2Pp/y79B4AqZP/XlP7fp/8AUIXs/9rS/9frPwBUIfv/vNL/N+g/AFQh+//80v836j8AVCH7/4LS/zfpPwBUIfv/wtL/Pv0HgCpk/9eV/t+v/wBQhez/i0r/+/UfAKqQ/X9x6f+A/gNAFbL/Lyn9H9R/AKhC9n996f+Q/gNAFbL/Ly39363/AFCF7P+G0v8H9B8AqpD9v6n0f1j/AaAK2f+Npf8P6j8AVCH7f3Pp/5v1HwCqkP2/pfR/RP8BoArZ//9X+r9H/wGgCtn/W0v/9+o/AFQh+/+y0v9R/QeAKmT/X176/5D+A0AVsv+3lf6/Rf8BoArZ/3bp/z79B4AqZP9fUfo/pv8AUIXs/6bS/3H9B4AqZP9vL/3fr/8AUIXs/ytL/x/WfwCoQvb/jtL/t+o/AFQh+39n6f8j+g8AVcj+v6r0/4D+A0AVsv+bS//fpv8AUIXs/12l/2/XfwCoQvZ/S+n/O/QfAKqQ/X916f879R8AqpD931r6/y79B4AqZP9fU/r/qP4DQBWy/9tK/9+t/wBQhez/3aX/B/UfAKqQ/e8q/X9M/wGgCtn/7tL/Q/oPAFXI/veU/h/WfwCoQva/t/R/Qv8BoArZ/3tK/4/oPwBUIft/b+n/Uf0HgCpk/7eX/r9H/wGgCtn/HaX/k/oPAFXI/r+29P+9+g8AVcj+7yz9f1z/AaAK2f/Xlf5P6T8AVCH7v6v0/5j+A0AVsv/3lf4f138AqEL2//Wl/yf0HwCqkP1/Q+n/E/oPAFXI/r+x9P99+g8AVcj+v6n0/6T+A0AVsv99pf+n9B8AqpD9v7/0/0n9B4AqZP/7S//fr/8AUIXs/0Dp/wf0HwCqkP0fLP3/oP4DQBWy/0Ol/x/SfwCoQvZ/d+n/U/oPAFXI/j9Q+n9a/wGgCtn/4dL/D+s/AFQh+/9g6f9H9B8AqpD9f3Pp/0f1HwCqkP0fKf3/mP4DQBWy/3tK/z+u/wBQhez/3tL/p/UfAKqQ/R8t/f+E/gNAFbL/D5X+f1L/AaAK2f+3lP5/Sv8BoArZ/32l/5/WfwCoQvZ/rPT//+s/AFQh+z9e+v9j+g8AVcj+7y/9/3H9B4AqZP8fLv3/Cf0HgCpk/99a+v+T+g8AVcj+P1L6/1P6DwBVyP4fKP3/af0HgCpk/99W+v8z+g8AVcj+v730/2f1HwCqkP1/R+n/z+k/AFQh+//O0v+f138AqEL2/12l/7+g/wBQhez/o6X/n9F/AKhC9v/dpf+f1X8AqEL2/2Dp/+f0HwCqkP1/rPT/F/UfAKqQ/T9U+v9L+g8AVcj+Hy79/2X9B4AqZP8nSv8/r/8AUIXs/5HS/1/RfwCoQvb/aOn/F/QfAKqQ/X9P6f+v6j8AVCH7P1n6/2v6DwBVyP6/t/T/1/UfAKqQ/X+89P839B8AqpD9nyr9/039B4AqZP+Plf7/lv4DQBWy/8dL/39b/wGgCtn/E6X/v6P/AFCF7P8Tpf9f1H8AqEL2/32l/7+r/wBQhez/ydL/39N/AKhC9v9U6f+X9B8AqpD9f7L0/8v6DwBVyP6/v/T/9/UfAKqQ/f9A6f8Z/QeAKmT/P1j6/wf6DwBVyP5/qPT/D/UfAKqQ/X+q9P+P9B8AqpD9P136/8f6DwBVyP5/uPT/T/QfAKqQ/f9I6f9X9B8AqpD9/2jp/zP6DwBVyP5/rPT/T/UfAKqQ/f946f9X9R8AqpD9f7r0/8/0HwCqkP3/ROn/1/QfAKqQ/f9k6f+f6z8AVCH7/6nS/6/rPwBUIfv/6dL/v9B/AKjC/wYAAP//aB9Xnw==") r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x2, &(0x7f00000001c0)) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffc) 2.004608656s ago: executing program 0 (id=621): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x50, r1, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) (fail_nth: 3) 1.758557873s ago: executing program 0 (id=622): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x4000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x80049370, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpid() r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000400000000000000100000008000100020000002c0004800500030005000000050003000000000000000300010000000500030005000000050003000200000008000200020000006ae06abea7c574f583c9ebf8cc4bf793fa82272f89f89854500fc8acc375c7b5f07f3a3a5934d609cf8642c9b4cae4cdfa63418a7677ed0b1d8e3b554442e11a86c0d41075af3fa86f1f60bec9cce27e88e8ce4ec4ddc0ad6e4054f484c48fec9b0f2291e339b434cfcff64daf00"/193], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) 1.757788423s ago: executing program 3 (id=623): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x8, 0xa4580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x7, 0xb}, 0x10ece9, 0x401, 0x0, 0x5, 0x6, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2000021020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xcb) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) getsockname(r0, &(0x7f0000000100)=@generic, &(0x7f0000000180)=0x80) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xa4, 0x0, 0x0) 1.734671164s ago: executing program 6 (id=624): socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, 0x0, 0x4044094) 1.648175236s ago: executing program 6 (id=625): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x55, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket(0xa, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000000)='#\x00', 0x121080, &(0x7f0000000140)={@_ha_fsid={[0x9]}, {0x200, 0x9, 0x2, 0x7}}, 0x100, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x83, 0x35) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="200000005a000d030000000000000000040000800c0023000c000000000000008435263efb5aa836c22b431459283b03e9a1ebc13fd9d850762cfd9d70eaee8b"], 0x20}], 0x1}, 0x0) 1.592071558s ago: executing program 5 (id=626): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@grpid}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4f3, &(0x7f0000000580)="$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") 1.562874379s ago: executing program 6 (id=627): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x8, 0x8}, 0x10c8ec, 0x0, 0xffffffff, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) read$char_usb(r0, &(0x7f0000000280)=""/138, 0x8a) r1 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x63f6, 0x100, 0x5, 0x12}, &(0x7f00000000c0), &(0x7f0000000300), &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1200200007000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r4, &(0x7f000000ae00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000480), &(0x7f0000000280)=@udp=r4, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r3, &(0x7f0000000380), 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_NAPI(r2, 0x1c, &(0x7f0000001080), 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='.\x02\x00', 0x200080, &(0x7f0000000180), 0x3, 0x57c, &(0x7f0000000380)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={0x0, 0x4}, 0x8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC=0x0, @ANYRES64], 0x1, 0x1f8, &(0x7f0000000e00)="$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") setresuid(0xee01, 0x0, 0x0) symlink(0x0, &(0x7f00000002c0)='.\x02\x00') socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r6, 0x8}, 0x8) 1.230938427s ago: executing program 0 (id=628): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000180)={0x1, 0x0, [0x0]}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x10, 0x1, 0x1, 0x2, 0x0, 0x7}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xb1bd, 0x0, 0xfffffffffffffffc, 0x0, 0x1b}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x21, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r7 = getpgrp(0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.155927789s ago: executing program 6 (id=629): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='pagemap\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_subtree(r4, 0x0, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x21, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 961.541484ms ago: executing program 5 (id=630): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) 448.048208ms ago: executing program 3 (id=631): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x716e) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165cc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) listen(r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000060000000000", 0x58}], 0x1) 364.3281ms ago: executing program 5 (id=632): r0 = socket(0xa, 0x5, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf250600000008000004", @ANYRES32=r2, @ANYBLOB="f0ff0500000000000500530000000000050053000000000008001780040003001c00e700e460bf5bffa1de43e25a8059c41cc41c15766ff2a89e3f281c00e70027c66567930c3f16bbd528e2c86571eca4c71cd39542f1681c00e7008a126b1be8650e01b9ea6b0ffd5ed66c40643f80808537e41c00e70007cf7d8c4aa9e3c779a0ef41415e6c66d83f1e6d9c15c598080005000c0000000500530001000000080005000600000005005300000000000500530001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x5}, 0x895) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xba, 0x6}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x468}]}, 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x20000844) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000240)) listen(r0, 0x100) r3 = dup(r0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000400)='%', 0x1}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18}, 0x8050) 165.421866ms ago: executing program 3 (id=633): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x2, 0x3, 0x9, 0x0, 0x8000000}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.94205ms ago: executing program 3 (id=634): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000480)="ec2945c87fc3613be84d287a6c5a4eb1091cc82e84a4633b7a02edd5c1ec76bf5d9eb79766807382495453d54da61df691f855f3a065c4f23ee8b322ac44d94aef72e0b1115e110e28dadb6fb90bfa7953aecec5270f2bdf1fe1e375c009f44c309390d27bc84fbd7d8019e2ec80db5f7562fb692f1395461326371fe3a4de63a8de49a2648a79699f43a9284619b58ac71bf5edbc84410c8a4e5db73b1bf861f9a027af8507c3", 0xa7}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r7, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) io_uring_enter(r4, 0x482a, 0xe991, 0x44, &(0x7f0000000640)={[0x1]}, 0x8) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r7, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x805) splice(r3, 0x0, r5, 0x0, 0x8000000000f3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r5, 0x0, 0x80, 0x8) write(r2, 0x0, 0x0) 0s ago: executing program 5 (id=635): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x109000, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4c011}, 0xf0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x1, 0x2, 0x2a000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="000000002400000000000000000000000000000096b20a7e40d6aea1b3c73d49dd44a53c9696ca165eb632fe9e2300679e0a82305283e3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000067da000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xfb}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x2, 0xfff1}, {0xffff, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x4040000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000c40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x11c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040040) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) unshare(0x2c020400) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xfffffffffffffffc, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x84, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b93, 0xef}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5, 0x4, 0x1}, @IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x8}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}, @IFLA_BRPORT_BACKUP_PORT={0x8}, @IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x9}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) syz_genetlink_get_family_id$nl80211(0x0, r1) socket$rds(0x15, 0x5, 0x0) kernel console output (not intermixed with test programs): 345084][ T3680] get_tree_bdev+0x1f/0x30 [ 54.349648][ T3680] ext4_get_tree+0x1c/0x30 [ 54.354123][ T3680] vfs_get_tree+0x57/0x1d0 [ 54.358589][ T3680] do_new_mount+0x288/0x8d0 [ 54.363184][ T3680] path_mount+0x4ad/0xb90 [ 54.363948][ T28] audit: type=1400 audit(1785683360.864:247): avc: denied { read } for pid=3682 comm="syz.3.47" path="socket:[5179]" dev="sockfs" ino=5179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.367672][ T3680] __se_sys_mount+0x28c/0x2e0 [ 54.395380][ T3680] __x64_sys_mount+0x67/0x80 [ 54.400077][ T3680] x64_sys_call+0x2d61/0x3020 [ 54.404793][ T3680] do_syscall_64+0x136/0x3c0 [ 54.409474][ T3680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.410880][ T3691] loop0: detected capacity change from 0 to 512 [ 54.415402][ T3680] RIP: 0033:0x7fed7b39f28a [ 54.426160][ T3680] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.445911][ T3680] RSP: 002b:00007fed79df6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.454486][ T3680] RAX: ffffffffffffffda RBX: 00007fed79df6ee0 RCX: 00007fed7b39f28a [ 54.456285][ T3691] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.462545][ T3680] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fed79df6ea0 [ 54.479693][ T3680] RBP: 00002000000009c0 R08: 00007fed79df6ee0 R09: 0000000000800718 [ 54.487710][ T3680] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 54.495796][ T3680] R13: 00007fed79df6ea0 R14: 000000000000048d R15: 0000200000000200 [ 54.503858][ T3680] [ 54.506974][ T3680] ---[ end trace 0000000000000000 ]--- [ 54.575996][ T3691] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.49: bad orphan inode 13 [ 54.589440][ T3691] loop0: lost filesystem error report for type 5 error -117 [ 54.589597][ T3691] ext4_test_bit(bit=12, block=18) = 1 [ 54.602464][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 54.602485][ C0] EXT4-fs (loop0): last error at time 1785683361: ext4_orphan_get:1425 [ 54.617760][ T3691] is_bad_inode(inode)=0 [ 54.622467][ T3691] NEXT_ORPHAN(inode)=0 [ 54.626586][ T3691] max_ino=32 [ 54.630120][ T3691] i_nlink=1 [ 54.633682][ T3691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 54.652109][ T3680] EXT4-fs (loop2): 1 orphan inode deleted [ 54.663960][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.673162][ T3680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.744596][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 54.782270][ T3702] mmap: syz.4.51 (3702) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.857892][ T3707] syzkaller0: entered promiscuous mode [ 54.864573][ T3707] syzkaller0: entered allmulticast mode [ 54.877695][ T3710] loop1: detected capacity change from 0 to 512 [ 54.904069][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.928150][ T3710] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.962563][ T3712] netlink: 128 bytes leftover after parsing attributes in process `syz.2.54'. [ 54.978713][ T283] IPVS: starting estimator thread 0... [ 54.994963][ T3710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.023450][ T3710] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.051378][ T3717] bridge0: port 3(vlan2) entered blocking state [ 55.069562][ T3715] IPVS: using max 1680 ests per chain, 84000 per kthread [ 55.100722][ T3717] bridge0: port 3(vlan2) entered disabled state [ 55.111214][ T3724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 55.121456][ T3717] vlan2: entered allmulticast mode [ 55.143558][ T3717] bridge0: entered allmulticast mode [ 55.152499][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.183306][ T3717] vlan2: left allmulticast mode [ 55.199480][ T3717] bridge0: left allmulticast mode [ 55.242044][ T3704] loop3: detected capacity change from 0 to 32768 [ 55.267671][ T3730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.59'. [ 55.321910][ T3704] loop3: p1 p2 p3 < p5 p6 > p4 < p7 p8 p9 p10 > [ 55.333946][ T3704] loop3: p2 start 524288 is beyond EOD, truncated [ 55.350823][ T3704] loop3: p5 start 16783416 is beyond EOD, truncated [ 55.370970][ T3704] loop3: p6 size 218103808 extends beyond EOD, truncated [ 55.395609][ T3704] loop3: p8 start 524288 is beyond EOD, truncated [ 55.402352][ T3704] loop3: p9 start 16783416 is beyond EOD, truncated [ 55.411997][ T3704] loop3: p10 size 218103808 extends beyond EOD, truncated [ 55.418155][ T3734] loop4: detected capacity change from 0 to 512 [ 55.647632][ T3744] Zero length message leads to an empty skb [ 55.768539][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 55.784829][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 55.785150][ T3738] udevd[3738]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 55.804534][ T3739] udevd[3739]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 55.813354][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop3p10, 10) failed: No such file or directory [ 55.815466][ T3734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.867912][ T3746] loop3: detected capacity change from 0 to 512 [ 55.902764][ T3746] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.64: inode has both inline data and extents flags [ 55.922971][ T3746] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.923153][ T3746] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.64: couldn't read orphan inode 15 (err -117) [ 55.932460][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 55.932481][ C0] EXT4-fs (loop3): initial error at time 1785683362: ext4_orphan_get:1399: inode 15 [ 55.932517][ C0] EXT4-fs (loop3): last error at time 1785683362: ext4_orphan_get:1399: inode 15 [ 55.937625][ T3734] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.944795][ T3746] loop3: lost filesystem error report for type 5 error -117 [ 55.945969][ T3746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.020473][ T3746] netlink: 88 bytes leftover after parsing attributes in process `syz.3.64'. [ 56.049349][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.130270][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.148093][ T3752] loop0: detected capacity change from 0 to 512 [ 56.212841][ T3754] loop3: detected capacity change from 0 to 512 [ 56.356380][ T3754] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 56.364524][ T3754] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 56.374152][ T3754] EXT4-fs (loop3): 1 truncate cleaned up [ 56.381039][ T3754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.416129][ T3752] EXT4-fs (loop0): 1 orphan inode deleted [ 56.481472][ T3765] ======================================================= [ 56.481472][ T3765] WARNING: The mand mount option has been deprecated and [ 56.481472][ T3765] and is ignored by this kernel. Remove the mand [ 56.481472][ T3765] option from the mount to silence this warning. [ 56.481472][ T3765] ======================================================= [ 56.516673][ T3765] EXT4-fs: quotafile must be on filesystem root [ 56.599615][ T3752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.779345][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.861415][ T3769] syz.1.70 (3769) used greatest stack depth: 10744 bytes left [ 56.979279][ T3772] netlink: 104 bytes leftover after parsing attributes in process `syz.1.72'. [ 57.402525][ T3774] loop0: detected capacity change from 0 to 512 [ 57.444100][ T3774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.485338][ T3774] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm syz.0.71: bg 0: bad block bitmap checksum [ 57.522175][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.940391][ T3804] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.82: corrupted in-inode xattr: invalid size in ea xattr [ 58.006019][ T3804] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.006726][ T3804] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.82: couldn't read orphan inode 15 (err -117) [ 58.015983][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 58.016014][ C1] EXT4-fs (loop1): initial error at time 1785683365: ext4_iget_extra_inode:5180: inode 15 [ 58.016052][ C1] EXT4-fs (loop1): last error at time 1785683365: ext4_iget_extra_inode:5180: inode 15 [ 58.091271][ T3804] loop1: lost filesystem error report for type 5 error -117 [ 58.092614][ T3804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.156322][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.196938][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.235993][ T3814] netlink: 10 bytes leftover after parsing attributes in process `syz.0.87'. [ 58.275345][ T154] bond0: (slave bond_slave_0): interface is now down [ 58.285804][ T154] bond0: (slave bond_slave_1): interface is now down [ 58.298843][ T154] bond0: now running without any active interface! [ 58.349735][ T3820] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.90: inode has both inline data and extents flags [ 58.363333][ T3820] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.363452][ T3820] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.90: couldn't read orphan inode 15 (err -117) [ 58.372925][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 58.372948][ C1] EXT4-fs (loop0): initial error at time 1785683365: ext4_orphan_get:1399: inode 15 [ 58.372998][ C1] EXT4-fs (loop0): last error at time 1785683365: ext4_orphan_get:1399: inode 15 [ 58.411215][ T3820] loop0: lost filesystem error report for type 5 error -117 [ 58.411717][ T3820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.433587][ T3820] netlink: 88 bytes leftover after parsing attributes in process `syz.0.90'. [ 58.433824][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 58.433866][ T28] audit: type=1400 audit(1785683365.474:286): avc: denied { create } for pid=3816 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.516172][ T3818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 58.537802][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.550577][ T28] audit: type=1400 audit(1785683365.524:287): avc: denied { bind } for pid=3816 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.585020][ T28] audit: type=1400 audit(1785683365.624:288): avc: denied { create } for pid=3813 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 58.605290][ T28] audit: type=1400 audit(1785683365.644:289): avc: denied { write } for pid=3813 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 58.647124][ T28] audit: type=1400 audit(1785683365.684:290): avc: denied { write } for pid=3813 comm="syz.2.88" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.674883][ T3548] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.679565][ T3831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.707265][ T28] audit: type=1400 audit(1785683365.714:291): avc: denied { read write } for pid=3830 comm="syz.1.92" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.727740][ T3548] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 54 with error 28 [ 58.748506][ T3834] capability: warning: `syz.0.93' uses 32-bit capabilities (legacy support in use) [ 58.754173][ T3831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.778784][ T3548] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.778784][ T3548] [ 58.778771][ T28] audit: type=1400 audit(1785683365.714:292): avc: denied { open } for pid=3830 comm="syz.1.92" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.808101][ T3548] EXT4-fs (loop2): Total free blocks count 0 [ 58.823355][ T3548] EXT4-fs (loop2): Free/Dirty block details [ 58.862788][ T3548] EXT4-fs (loop2): free_blocks=2415919104 [ 58.868806][ T28] audit: type=1400 audit(1785683365.714:293): avc: denied { ioctl } for pid=3830 comm="syz.1.92" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.877380][ T3548] EXT4-fs (loop2): dirty_blocks=592 [ 58.900978][ T3548] EXT4-fs (loop2): Block reservation details [ 58.907048][ T3548] EXT4-fs (loop2): i_reserved_data_blocks=37 [ 58.914378][ T28] audit: type=1400 audit(1785683365.814:294): avc: denied { read } for pid=3833 comm="syz.0.93" path="socket:[6407]" dev="sockfs" ino=6407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.920638][ T3842] netlink: 'syz.3.96': attribute type 1 has an invalid length. [ 58.945277][ T68] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 54 with max blocks 524 with error 28 [ 58.945798][ T3831] set_capacity_and_notify: 3 callbacks suppressed [ 58.945841][ T3831] loop1: detected capacity change from 0 to 512 [ 58.993767][ T3844] loop3: detected capacity change from 0 to 128 [ 59.036254][ T3844] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.047801][ T28] audit: type=1400 audit(1785683365.854:295): avc: denied { setattr } for pid=3813 comm="syz.2.88" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.065587][ T3831] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 59.107093][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 59.170236][ T3854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57308 sclass=netlink_route_socket pid=3854 comm=syz.0.100 [ 59.270233][ T3869] netlink: 104 bytes leftover after parsing attributes in process `syz.4.105'. [ 59.291607][ T3831] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 59.408234][ T3818] syz.2.88 (3818) used greatest stack depth: 10264 bytes left [ 59.493550][ T3887] loop0: detected capacity change from 0 to 512 [ 59.529896][ T3887] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.569547][ T3887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.594134][ T3887] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.699292][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.713193][ T3815] syz.2.88 (3815) used greatest stack depth: 9184 bytes left [ 60.455711][ T3929] loop2: detected capacity change from 0 to 512 [ 60.535599][ T3929] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 60.543752][ T3929] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 60.555588][ T3929] EXT4-fs (loop2): 1 truncate cleaned up [ 60.562028][ T3929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.690163][ T3936] EXT4-fs: quotafile must be on filesystem root [ 60.728499][ T3935] loop4: detected capacity change from 0 to 512 [ 60.777531][ T3935] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.125: inode has both inline data and extents flags [ 60.905003][ T3935] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.907124][ T3935] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.125: couldn't read orphan inode 15 (err -117) [ 60.916375][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 60.916400][ C1] EXT4-fs (loop4): initial error at time 1785683367: ext4_orphan_get:1399: inode 15 [ 60.916438][ C1] EXT4-fs (loop4): last error at time 1785683367: ext4_orphan_get:1399: inode 15 [ 61.227872][ T3935] loop4: lost filesystem error report for type 5 error -117 [ 61.228584][ T3935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.294889][ T3935] netlink: 88 bytes leftover after parsing attributes in process `syz.4.125'. [ 61.359106][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.549929][ T3939] loop3: detected capacity change from 0 to 512 [ 61.695719][ T3943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 61.737370][ T3943] batadv0: entered promiscuous mode [ 61.746086][ T3939] EXT4-fs (loop3): inodes count not valid: 6144 vs 32 [ 61.755370][ T3943] macsec1: entered promiscuous mode [ 61.764657][ T3943] macsec1: entered allmulticast mode [ 61.776173][ T3943] batadv0: entered allmulticast mode [ 61.788843][ T3943] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 61.807169][ T3943] batadv0: left allmulticast mode [ 61.812602][ T3943] batadv0: left promiscuous mode [ 61.835799][ T3945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3945 comm=syz.0.129 [ 62.284482][ T3955] loop4: detected capacity change from 0 to 512 [ 62.388274][ T3955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.417708][ T3955] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.444775][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.559996][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.587102][ T3979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 62.613127][ T3979] batadv0: entered promiscuous mode [ 62.632948][ T3979] macsec1: entered promiscuous mode [ 62.643255][ T3979] macsec1: entered allmulticast mode [ 62.656291][ T3979] batadv0: entered allmulticast mode [ 62.671833][ T3979] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 62.696073][ T3979] batadv0: left allmulticast mode [ 62.719613][ T3979] batadv0: left promiscuous mode [ 63.046384][ T3991] loop0: detected capacity change from 0 to 512 [ 63.394735][ T4017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 63.410842][ T4022] loop3: detected capacity change from 0 to 512 [ 63.413061][ T4017] batadv0: entered promiscuous mode [ 63.430859][ T4022] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.154: inode has both inline data and extents flags [ 63.444776][ T4024] loop1: detected capacity change from 0 to 1024 [ 63.447392][ T4017] macsec1: entered promiscuous mode [ 63.453039][ T4022] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.456687][ T4022] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.154: couldn't read orphan inode 15 (err -117) [ 63.460742][ T4024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.466306][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 63.490845][ C1] EXT4-fs (loop3): initial error at time 1785683370: ext4_orphan_get:1399: inode 15 [ 63.500307][ C1] EXT4-fs (loop3): last error at time 1785683370: ext4_orphan_get:1399: inode 15 [ 63.509654][ T4022] loop3: lost filesystem error report for type 5 error -117 [ 63.509857][ T4017] macsec1: entered allmulticast mode [ 63.510736][ T4022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.517186][ T4017] batadv0: entered allmulticast mode [ 63.519059][ T4017] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 63.541365][ T4024] EXT4-fs: Ignoring removed orlov option [ 63.555548][ T4022] netlink: 88 bytes leftover after parsing attributes in process `syz.3.154'. [ 63.564903][ T4017] batadv0: left allmulticast mode [ 63.570316][ T4017] batadv0: left promiscuous mode [ 63.591127][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.603980][ T4024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.621944][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 63.621962][ T28] audit: type=1400 audit(1785683370.664:314): avc: denied { write } for pid=4023 comm="syz.1.155" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.649613][ T28] audit: type=1400 audit(1785683370.664:315): avc: denied { create } for pid=4023 comm="syz.1.155" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 63.691993][ T28] audit: type=1400 audit(1785683370.714:316): avc: denied { read } for pid=4023 comm="syz.1.155" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 63.736010][ T28] audit: type=1400 audit(1785683370.764:317): avc: denied { append } for pid=4023 comm="syz.1.155" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.796995][ T28] audit: type=1400 audit(1785683370.834:318): avc: denied { mount } for pid=4031 comm="syz.3.157" name="/" dev="rpc_pipefs" ino=6743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 63.856467][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.861080][ T28] audit: type=1400 audit(1785683370.894:319): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 63.899186][ T4040] netlink: 52 bytes leftover after parsing attributes in process `syz.4.164'. [ 63.919435][ T28] audit: type=1400 audit(1785683370.954:320): avc: denied { create } for pid=4041 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.946284][ T4038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 63.961288][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 63.967791][ T28] audit: type=1400 audit(1785683370.954:321): avc: denied { write } for pid=4041 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.991295][ T28] audit: type=1400 audit(1785683370.954:322): avc: denied { associate } for pid=4041 comm="syz.2.163" name=".log" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.012168][ T4038] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.012222][ T28] audit: type=1400 audit(1785683371.004:323): avc: denied { getopt } for pid=4041 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.067832][ T4038] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.160: bg 0: block 112: padding at end of block bitmap is not set [ 64.095137][ T4038] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.160: Freeing blocks not in datazone - block = 0, count = 16 [ 64.101435][ T4056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 64.151656][ T4038] netlink: 'syz.0.160': attribute type 61 has an invalid length. [ 64.154393][ T4062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 64.181414][ T4062] batadv0: entered promiscuous mode [ 64.186733][ T4062] macsec1: entered promiscuous mode [ 64.188881][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 64.192913][ T4062] macsec1: entered allmulticast mode [ 64.206741][ T4062] batadv0: entered allmulticast mode [ 64.213357][ T4062] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 64.236995][ T4066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.248202][ T4062] batadv0: left allmulticast mode [ 64.254772][ T4066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.262776][ T4062] batadv0: left promiscuous mode [ 64.289998][ T4066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.298638][ T4066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.308666][ T4066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.313697][ T4070] set_capacity_and_notify: 1 callbacks suppressed [ 64.313806][ T4070] loop4: detected capacity change from 0 to 512 [ 64.317256][ T4066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.366287][ T4070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.380001][ T4070] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.431383][ T4079] loop3: detected capacity change from 0 to 512 [ 64.448894][ T4079] ext4: Unknown parameter 'dont_hash' [ 64.543671][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.554188][ T4077] loop0: detected capacity change from 0 to 512 [ 64.594803][ T4082] loop3: detected capacity change from 0 to 512 [ 64.605324][ T4082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.615487][ T4077] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.174: Directory hole found for htree index block 0 [ 64.629127][ T4077] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 64.631517][ T4077] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 64.633729][ T4082] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 64.641756][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 64.665546][ C1] EXT4-fs (loop0): initial error at time 1785683371: dx_probe:791: inode 2 [ 64.675115][ C1] EXT4-fs (loop0): last error at time 1785683371: dx_probe:791: inode 2 [ 64.697852][ T4082] EXT4-fs (loop3): invalid journal inode [ 64.703044][ T4077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.703603][ T4082] EXT4-fs (loop3): can't get journal size [ 64.732648][ T4082] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a046c118, mo2=0002] [ 64.749524][ T4082] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.177: blocks 4-4 from inode overlap system zone [ 64.763601][ T4082] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 64.764182][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.779438][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 64.784856][ T4082] EXT4-fs (loop3): failed to initialize system zone (-117) [ 64.788724][ C1] EXT4-fs (loop3): initial error at time 1785683371: ext4_protect_reserved_inode:182: inode 2 [ 64.796956][ T4082] EXT4-fs (loop3): mount failed [ 64.806217][ C1] EXT4-fs (loop3): last error at time 1785683371: ext4_protect_reserved_inode:182: inode 2 [ 64.847461][ T4092] capability: warning: `syz.0.179' uses deprecated v2 capabilities in a way that may be insecure [ 64.850661][ T4082] loop3: detected capacity change from 0 to 512 [ 64.894174][ T4082] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 64.912489][ T4082] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 64.929921][ T4082] System zones: 0-1, 15-15, 18-18, 34-34 [ 64.941884][ T4082] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.948380][ T4082] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 64.963618][ T4082] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 64.972394][ T4082] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.177: bad orphan inode 16 [ 64.977086][ T3548] bond0: (slave bond_slave_0): interface is now down [ 64.984908][ T4082] loop3: lost filesystem error report for type 5 error -117 [ 64.989408][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 64.989723][ T3548] bond0: (slave bond_slave_1): interface is now down [ 64.996818][ C1] EXT4-fs (loop3): initial error at time 1785683372: ext4_orphan_get:1425 [ 65.009601][ T4082] ext4_test_bit(bit=15, block=18) = 1 [ 65.009982][ C1] [ 65.009988][ C1] EXT4-fs (loop3): last error at time 1785683372: ext4_orphan_get:1425 [ 65.035819][ T4104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4104 comm=syz.1.181 [ 65.052955][ T3548] bond0: now running without any active interface! [ 65.068890][ T4082] is_bad_inode(inode)=0 [ 65.079512][ T4082] NEXT_ORPHAN(inode)=0 [ 65.085864][ T4082] max_ino=32 [ 65.089147][ T4082] i_nlink=2 [ 65.092906][ T4082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.144403][ T4111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.186'. [ 65.154058][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.207867][ T4111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.186'. [ 65.391588][ T4125] netlink: 36 bytes leftover after parsing attributes in process `syz.4.192'. [ 65.412348][ T4127] netlink: 10 bytes leftover after parsing attributes in process `syz.3.193'. [ 65.471330][ T35] IPVS: starting estimator thread 0... [ 65.508213][ T4131] loop0: detected capacity change from 0 to 512 [ 65.544323][ T4131] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.559536][ T4134] IPVS: using max 2256 ests per chain, 112800 per kthread [ 65.875852][ T4162] loop0: detected capacity change from 0 to 512 [ 65.917938][ T4162] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.208: iget: bad extra_isize 90 (inode size 256) [ 65.964095][ T4162] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 65.965627][ T4162] EXT4-fs (loop0): Remounting filesystem read-only [ 65.974863][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 65.974904][ C1] EXT4-fs (loop0): initial error at time 1785683373: ext4_xattr_inode_iget:441: inode 11 [ 65.974936][ C1] EXT4-fs (loop0): last error at time 1785683373: ext4_xattr_inode_iget:441: inode 11 [ 66.016039][ T4162] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 66.026432][ T4162] EXT4-fs (loop0): 1 orphan inode deleted [ 66.032661][ T4162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.057665][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.357847][ T4188] loop4: detected capacity change from 0 to 512 [ 67.576563][ T4188] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.217: Directory hole found for htree index block 0 [ 67.636312][ T4188] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 67.639069][ T4188] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 67.639538][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 67.639659][ C1] EXT4-fs (loop4): initial error at time 1785683374: dx_probe:791: inode 2 [ 67.639967][ C1] EXT4-fs (loop4): last error at time 1785683374: dx_probe:791: inode 2 [ 67.783010][ T4188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.846277][ T4177] bond1: option arp_all_targets: invalid value (2030174209) [ 67.854536][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.865197][ T4177] bond1 (unregistering): Released all slaves [ 67.889083][ T4203] __nla_validate_parse: 1 callbacks suppressed [ 67.889102][ T4203] netlink: 10 bytes leftover after parsing attributes in process `syz.2.223'. [ 67.937409][ T4213] netlink: 104 bytes leftover after parsing attributes in process `syz.4.226'. [ 67.988160][ T4221] netlink: 'syz.3.230': attribute type 30 has an invalid length. [ 68.137446][ T4234] netlink: 52 bytes leftover after parsing attributes in process `syz.2.236'. [ 68.159036][ T4236] loop4: detected capacity change from 0 to 512 [ 68.191091][ T4236] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.193569][ T4238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 68.219666][ T4236] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.237: bad orphan inode 13 [ 68.240962][ T4236] loop4: lost filesystem error report for type 5 error -117 [ 68.241141][ T4236] ext4_test_bit(bit=12, block=18) = 1 [ 68.253946][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 68.253983][ C0] EXT4-fs (loop4): last error at time 1785683375: ext4_orphan_get:1425 [ 68.276468][ T4236] is_bad_inode(inode)=0 [ 68.284514][ T4244] loop3: detected capacity change from 0 to 512 [ 68.291033][ T4236] NEXT_ORPHAN(inode)=0 [ 68.295759][ T4244] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.305971][ T4236] max_ino=32 [ 68.322103][ T4244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.322360][ T4236] i_nlink=1 [ 68.338296][ T4236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 68.351090][ T4244] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.371469][ T4236] syzkaller1: entered promiscuous mode [ 68.387052][ T4236] syzkaller1: entered allmulticast mode [ 68.396884][ T4236] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 68.412050][ T4236] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.237: bg 0: block 248: padding at end of block bitmap is not set [ 68.414709][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.436070][ T4236] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.237: Failed to acquire dquot type 1 [ 68.517641][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 68.531366][ T4253] FAULT_INJECTION: forcing a failure. [ 68.531366][ T4253] name failslab, interval 1, probability 0, space 0, times 1 [ 68.551708][ T4253] CPU: 1 UID: 0 PID: 4253 Comm: syz.2.243 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 68.551760][ T4253] Tainted: [W]=WARN [ 68.551768][ T4253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.551784][ T4253] Call Trace: [ 68.551792][ T4253] [ 68.551803][ T4253] __dump_stack+0x1d/0x30 [ 68.551883][ T4253] dump_stack_lvl+0x95/0xd0 [ 68.551911][ T4253] dump_stack+0x15/0x1b [ 68.551936][ T4253] should_fail_ex+0x25e/0x270 [ 68.552085][ T4253] should_failslab+0x8c/0xb0 [ 68.552109][ T4253] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 68.552139][ T4253] ? _sctp_make_chunk+0xbf/0x210 [ 68.552168][ T4253] ? _sctp_make_chunk+0xbf/0x210 [ 68.552253][ T4253] _sctp_make_chunk+0xbf/0x210 [ 68.552323][ T4253] sctp_make_shutdown+0x67/0x210 [ 68.552352][ T4253] sctp_sf_do_9_2_start_shutdown+0x27/0x280 [ 68.552458][ T4253] sctp_sf_do_9_2_prm_shutdown+0x95/0xc0 [ 68.552537][ T4253] sctp_do_sm+0xcb/0x3350 [ 68.552578][ T4253] ? lockref_put_return+0xf7/0x130 [ 68.552699][ T4253] sctp_primitive_SHUTDOWN+0x74/0x90 [ 68.552733][ T4253] sctp_close+0x268/0x560 [ 68.552765][ T4253] ? ip_mc_drop_socket+0x1b8/0x1e0 [ 68.552872][ T4253] inet_release+0xcd/0xf0 [ 68.552910][ T4253] inet6_release+0x3e/0x60 [ 68.552938][ T4253] sock_close+0x6b/0x150 [ 68.552967][ T4253] ? __pfx_sock_close+0x10/0x10 [ 68.553076][ T4253] __fput+0x29e/0x630 [ 68.553113][ T4253] fput_close_sync+0xad/0x190 [ 68.553152][ T4253] __x64_sys_close+0x55/0xf0 [ 68.553192][ T4253] x64_sys_call+0x275d/0x3020 [ 68.553224][ T4253] do_syscall_64+0x136/0x3c0 [ 68.553317][ T4253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.553342][ T4253] RIP: 0033:0x7fed7b39e019 [ 68.553360][ T4253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.553384][ T4253] RSP: 002b:00007fed79df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 68.553469][ T4253] RAX: ffffffffffffffda RBX: 00007fed7b625fa0 RCX: 00007fed7b39e019 [ 68.553488][ T4253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 68.553503][ T4253] RBP: 00007fed79df7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.553520][ T4253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.553535][ T4253] R13: 00007fed7b626038 R14: 00007fed7b625fa0 R15: 00007ffc923a9fb8 [ 68.553567][ T4253] [ 68.869289][ T4227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.882339][ T68] bond0: (slave bond_slave_0): interface is now down [ 68.889215][ T68] bond0: (slave bond_slave_1): interface is now down [ 68.897287][ T4262] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.247: corrupted in-inode xattr: invalid size in ea xattr [ 68.915164][ T28] kauditd_printk_skb: 139 callbacks suppressed [ 68.915200][ T28] audit: type=1400 audit(1785683375.954:460): avc: denied { setopt } for pid=4266 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.982404][ T4262] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.982569][ T4262] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.247: couldn't read orphan inode 15 (err -117) [ 68.991866][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 68.991888][ C1] EXT4-fs (loop3): initial error at time 1785683376: ext4_iget_extra_inode:5180: inode 15 [ 68.991921][ C1] EXT4-fs (loop3): last error at time 1785683376: ext4_iget_extra_inode:5180: inode 15 [ 69.041306][ T68] bond0: now running without any active interface! [ 69.071722][ T28] audit: type=1400 audit(1785683376.014:461): avc: denied { write } for pid=4226 comm="syz.1.233" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.093367][ T28] audit: type=1400 audit(1785683376.074:462): avc: denied { write } for pid=4226 comm="syz.1.233" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.114927][ T28] audit: type=1400 audit(1785683376.074:463): avc: denied { read append open } for pid=4226 comm="syz.1.233" path="/42/file0/cpuacct.usage_sys" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.139910][ T4262] loop3: lost filesystem error report for type 5 error -117 [ 69.144622][ T28] audit: type=1400 audit(1785683376.184:464): avc: denied { write } for pid=4226 comm="syz.1.233" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.231445][ T4274] sctp: [Deprecated]: syz.4.252 (pid 4274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 69.231445][ T4274] Use struct sctp_sack_info instead [ 69.268523][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'. [ 69.342824][ T4280] vhci_hcd vhci_hcd.0: failed to lookup sock [ 69.562261][ T28] audit: type=1400 audit(1785683376.604:465): avc: denied { read } for pid=4279 comm="syz.4.255" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 69.618758][ T28] audit: type=1400 audit(1785683376.604:466): avc: denied { open } for pid=4279 comm="syz.4.255" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 69.683453][ T28] audit: type=1400 audit(1785683376.604:467): avc: denied { read } for pid=4279 comm="syz.4.255" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.728440][ T28] audit: type=1400 audit(1785683376.604:468): avc: denied { open } for pid=4279 comm="syz.4.255" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.776745][ T4293] set_capacity_and_notify: 2 callbacks suppressed [ 69.776815][ T4293] loop1: detected capacity change from 0 to 512 [ 69.792301][ T4280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.801948][ T4280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.821381][ T28] audit: type=1400 audit(1785683376.864:469): avc: denied { relabelfrom } for pid=4279 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 69.897621][ T4293] EXT4-fs mount: 3 callbacks suppressed [ 69.897646][ T4293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.918668][ T4293] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.956944][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.988256][ T4297] loop1: detected capacity change from 0 to 1024 [ 70.010997][ T4297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.023477][ T4297] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.087700][ T4300] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.258: lblock 0 mapped to illegal pblock 0 (length 6) [ 70.141022][ T4300] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 70.185813][ T4300] EXT4-fs (loop1): This should not happen!! Data will be lost [ 70.185813][ T4300] [ 70.234495][ T4301] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.258: lblock 0 mapped to illegal pblock 0 (length 1) [ 70.294822][ T4301] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.258: lblock 0 mapped to illegal pblock 0 (length 1) [ 70.310075][ T4301] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.258: lblock 0 mapped to illegal pblock 0 (length 1) [ 70.324240][ T4301] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.258: lblock 0 mapped to illegal pblock 0 (length 1) [ 70.338082][ T4301] EXT4-fs error (device loop1): ext4_ext_remove_space:2969: inode #15: comm syz.1.258: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 70.356964][ T4300] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.258: lblock 3 mapped to illegal pblock 3 (length 2) [ 70.394382][ T154] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 70.408950][ T154] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 70.421684][ T154] EXT4-fs (loop1): This should not happen!! Data will be lost [ 70.421684][ T154] [ 70.443738][ T154] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 70.458966][ T154] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 117 [ 70.473021][ T154] EXT4-fs (loop1): This should not happen!! Data will be lost [ 70.473021][ T154] [ 70.491234][ T4315] loop3: detected capacity change from 0 to 512 [ 70.502503][ T3298] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 70.514199][ T4315] EXT4-fs: Ignoring removed bh option [ 70.533358][ T4315] EXT4-fs: inline encryption not supported [ 70.541270][ T4315] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.565365][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.576068][ T4315] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 70.602689][ T4315] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.263: bg 0: block 248: padding at end of block bitmap is not set [ 70.620566][ T4315] loop3: lost filesystem error report for type 5 error -117 [ 70.620845][ T4315] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.263: Failed to acquire dquot type 1 [ 70.639332][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 70.639374][ C1] EXT4-fs (loop3): last error at time 1785683377: ext4_validate_block_bitmap:441 [ 70.655041][ T4315] loop3: lost filesystem error report for type 5 error -28 [ 70.659329][ T4315] EXT4-fs (loop3): 1 truncate cleaned up [ 70.672839][ T4315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 71.037338][ T4337] loop1: detected capacity change from 0 to 512 [ 71.065493][ T4337] EXT4-fs: Ignoring removed oldalloc option [ 71.092859][ T4337] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.118034][ T4337] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 71.129652][ T4337] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 71.157396][ T4337] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.180656][ T4337] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 71.207395][ T4337] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 71.221318][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 71.234190][ T4337] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.273: bg 0: block 40: padding at end of block bitmap is not set [ 71.254159][ T4337] loop1: lost filesystem error report for type 5 error -117 [ 71.255531][ T4337] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 71.262929][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 71.262944][ C0] EXT4-fs (loop1): initial error at time 1785683378: ext4_validate_block_bitmap:441 [ 71.262963][ C0] EXT4-fs (loop1): last error at time 1785683378: ext4_validate_block_bitmap:441 [ 71.329820][ T4337] loop1: lost filesystem error report for type 5 error -117 [ 71.330172][ T4337] EXT4-fs (loop1): 1 truncate cleaned up [ 71.352575][ T4337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.385591][ T4337] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.273: bad symlink. [ 71.411524][ T4337] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.273: bad symlink. [ 71.491080][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.523717][ T4361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 71.543747][ T4360] loop1: detected capacity change from 0 to 512 [ 71.547850][ T4360] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.579550][ T4360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.579720][ T4360] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.651652][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.686909][ T4366] loop1: detected capacity change from 0 to 512 [ 71.728040][ T4366] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.281: iget: bad extra_isize 90 (inode size 256) [ 71.759488][ T4366] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.759717][ T4366] EXT4-fs (loop1): Remounting filesystem read-only [ 71.775488][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 71.775505][ C1] EXT4-fs (loop1): initial error at time 1785683378: ext4_xattr_inode_iget:441: inode 11 [ 71.775555][ C1] EXT4-fs (loop1): last error at time 1785683378: ext4_xattr_inode_iget:441: inode 11 [ 71.882822][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 71.924750][ T4372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 71.931184][ T4366] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 71.983440][ T4366] EXT4-fs (loop1): 1 orphan inode deleted [ 72.001631][ T4366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.064067][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.333203][ T4379] syzkaller0: entered promiscuous mode [ 72.339421][ T4379] syzkaller0: entered allmulticast mode [ 72.560997][ T4390] loop0: detected capacity change from 0 to 512 [ 72.588784][ T4390] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.288: corrupted in-inode xattr: invalid size in ea xattr [ 72.615125][ T4390] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.616421][ T4390] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.288: couldn't read orphan inode 15 (err -117) [ 72.629760][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 72.643918][ C1] EXT4-fs (loop0): initial error at time 1785683379: ext4_iget_extra_inode:5180: inode 15 [ 72.653976][ C1] EXT4-fs (loop0): last error at time 1785683379: ext4_iget_extra_inode:5180: inode 15 [ 72.757463][ T4390] loop0: lost filesystem error report for type 5 error -117 [ 72.758230][ T4390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.870453][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.040777][ T4410] macsec1: entered allmulticast mode [ 73.060046][ T4410] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 73.076440][ T4410] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 73.081388][ T4401] loop1: detected capacity change from 0 to 512 [ 73.091788][ T4410] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 73.113235][ T4410] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 73.134867][ T283] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 73.241504][ T4401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.272605][ T4401] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.375715][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.392654][ T4428] loop2: detected capacity change from 0 to 512 [ 73.428938][ T4428] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.300: inode has both inline data and extents flags [ 73.469588][ T4428] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.479418][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 73.487724][ T4428] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.300: couldn't read orphan inode 15 (err -117) [ 73.488616][ C0] EXT4-fs (loop2): initial error at time 1785683380: ext4_orphan_get:1399: inode 15 [ 73.488646][ C0] EXT4-fs (loop2): last error at time 1785683380: ext4_orphan_get:1399: inode 15 [ 73.535975][ T4428] loop2: lost filesystem error report for type 5 error -117 [ 73.542527][ T4428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.928254][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 73.928272][ T28] audit: type=1400 audit(1785683380.964:485): avc: denied { wake_alarm } for pid=4435 comm="syz.1.302" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.138197][ T28] audit: type=1400 audit(1785683381.174:486): avc: denied { read } for pid=4435 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.218541][ T28] audit: type=1400 audit(1785683381.254:487): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.243132][ T28] audit: type=1400 audit(1785683381.254:488): avc: denied { remove_name } for pid=3303 comm="syz-executor" name="sys" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.267406][ T28] audit: type=1400 audit(1785683381.254:489): avc: denied { rmdir } for pid=3303 comm="syz-executor" name="sys" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 74.270872][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.327570][ T28] audit: type=1400 audit(1785683381.254:490): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.384283][ T28] audit: type=1400 audit(1785683381.254:491): avc: denied { unlink } for pid=3303 comm="syz-executor" name="file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 74.443915][ T28] audit: type=1400 audit(1785683381.484:492): avc: denied { connect } for pid=4443 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.483559][ T4447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.306'. [ 74.628097][ T28] audit: type=1400 audit(1785683381.664:493): avc: denied { read } for pid=3019 comm="dhcpcd" name="n52" dev="tmpfs" ino=2637 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.692235][ T28] audit: type=1400 audit(1785683381.664:494): avc: denied { open } for pid=3019 comm="dhcpcd" path="/run/udev/data/n52" dev="tmpfs" ino=2637 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.995126][ T3019] veth0_vlan: left promiscuous mode [ 75.005251][ T283] veth0_vlan: entered promiscuous mode [ 75.737828][ T4492] syzkaller0: entered promiscuous mode [ 75.744345][ T4492] syzkaller0: entered allmulticast mode [ 76.714323][ T4495] loop0: detected capacity change from 0 to 4096 [ 76.770294][ T4495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.793264][ T4456] loop1: detected capacity change from 0 to 1024 [ 76.945189][ T4456] EXT4-fs: Ignoring removed orlov option [ 76.973335][ T4456] EXT4-fs: inline encryption not supported [ 77.019795][ T4456] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 77.062299][ T4456] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 77.149175][ T4456] EXT4-fs (loop1): invalid journal inode [ 77.174758][ T4456] EXT4-fs (loop1): can't get journal size [ 77.243574][ T4456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.377071][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.386606][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.585768][ T4514] loop3: detected capacity change from 0 to 736 [ 77.605007][ T4514] iso9660: Unknown parameter 'sbsector0x0P00000000000003' [ 78.030792][ T4522] syzkaller0: entered promiscuous mode [ 78.037062][ T4522] syzkaller0: entered allmulticast mode [ 78.370773][ T4514] loop3: detected capacity change from 0 to 1024 [ 78.427621][ T4514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.456965][ T4514] EXT4-fs: Ignoring removed oldalloc option [ 78.488389][ T4514] ext4: Unknown parameter 'obj_role' [ 78.807362][ T4514] loop3: detected capacity change from 0 to 256 [ 78.861922][ T4514] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 79.000474][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 79.000491][ T28] audit: type=1400 audit(1785683386.044:513): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 79.253563][ T28] audit: type=1400 audit(1785683386.294:514): avc: denied { mounton } for pid=4539 comm="syz.0.325" path="/78/file0" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.428441][ T4544] loop1: detected capacity change from 0 to 512 [ 79.454119][ T28] audit: type=1400 audit(1785683386.314:515): avc: denied { shutdown } for pid=4539 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.650926][ T4548] syzkaller0: entered promiscuous mode [ 79.657567][ T4548] syzkaller0: entered allmulticast mode [ 79.778251][ T4544] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.326: corrupted in-inode xattr: invalid size in ea xattr [ 79.893091][ T4544] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.894067][ T4544] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.326: couldn't read orphan inode 15 (err -117) [ 79.903315][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 79.903333][ C0] EXT4-fs (loop1): initial error at time 1785683386: ext4_iget_extra_inode:5180: inode 15 [ 79.903370][ C0] EXT4-fs (loop1): last error at time 1785683386: ext4_iget_extra_inode:5180: inode 15 [ 80.413917][ T4524] loop2: detected capacity change from 0 to 8192 [ 80.472856][ T4544] loop1: lost filesystem error report for type 5 error -117 [ 80.473543][ T4544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.501071][ T4524] msdos: Unknown parameter 'showexeËÅÒ ' [ 80.520092][ T28] audit: type=1400 audit(1785683387.544:516): avc: denied { write } for pid=4554 comm="syz.0.328" path="socket:[7600]" dev="sockfs" ino=7600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.631405][ T28] audit: type=1400 audit(1785683387.544:517): avc: denied { connect } for pid=4554 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.675163][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.724732][ T28] audit: type=1400 audit(1785683387.544:518): avc: denied { read } for pid=4554 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.813212][ T4558] loop2: detected capacity change from 0 to 512 [ 80.862965][ T4558] EXT4-fs: Ignoring removed oldalloc option [ 80.922157][ T4558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.982122][ T4558] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.034136][ T28] audit: type=1400 audit(1785683388.074:519): avc: denied { write } for pid=4557 comm="syz.2.330" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.153892][ T4568] 9pnet_fd: p9_fd_create_unix (4568): problem connecting socket: ./file1: -111 [ 81.332471][ T28] audit: type=1400 audit(1785683388.374:520): avc: denied { mount } for pid=4570 comm="syz.0.332" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 81.452687][ T28] audit: type=1400 audit(1785683388.494:521): avc: denied { setopt } for pid=4572 comm="syz.3.333" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.594225][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.568044][ T28] audit: type=1400 audit(1785683389.604:522): avc: denied { append } for pid=4587 comm="syz.2.335" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.520559][ T4617] loop0: detected capacity change from 0 to 128 [ 83.541615][ T4619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 83.626497][ T4621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 83.640350][ T4623] loop1: detected capacity change from 0 to 512 [ 83.655224][ T4621] batadv0: entered promiscuous mode [ 83.661741][ T4621] macsec1: entered promiscuous mode [ 83.667328][ T4621] macsec1: entered allmulticast mode [ 83.673455][ T4621] batadv0: entered allmulticast mode [ 83.684673][ T4621] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 83.693599][ T4621] batadv0: left allmulticast mode [ 83.698906][ T4623] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.712434][ T4621] batadv0: left promiscuous mode [ 83.717593][ T4623] EXT4-fs (loop1): 1 orphan inode deleted [ 83.735912][ T4623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.155534][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.218105][ T4636] syzkaller0: entered promiscuous mode [ 84.225307][ T4636] syzkaller0: entered allmulticast mode [ 85.134121][ T4642] loop3: detected capacity change from 0 to 1024 [ 85.159793][ T4642] EXT4-fs: Ignoring removed orlov option [ 85.166861][ T4642] EXT4-fs: inline encryption not supported [ 85.181810][ T4642] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 85.193025][ T4642] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 85.238996][ T4642] EXT4-fs (loop3): invalid journal inode [ 85.247128][ T4642] EXT4-fs (loop3): can't get journal size [ 85.385811][ T4642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.406999][ T4652] loop1: detected capacity change from 0 to 512 [ 85.451862][ T4652] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.359: inode has both inline data and extents flags [ 85.485299][ T4652] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.485431][ T4652] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.359: couldn't read orphan inode 15 (err -117) [ 85.494698][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 85.494716][ C0] EXT4-fs (loop1): initial error at time 1785683392: ext4_orphan_get:1399: inode 15 [ 85.494749][ C0] EXT4-fs (loop1): last error at time 1785683392: ext4_orphan_get:1399: inode 15 [ 85.606337][ T4652] loop1: lost filesystem error report for type 5 error -117 [ 85.606909][ T4652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.637940][ T4652] netlink: 88 bytes leftover after parsing attributes in process `syz.1.359'. [ 85.660932][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.720138][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.875053][ T4673] loop3: detected capacity change from 0 to 512 [ 85.964700][ T4673] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 85.972804][ T4673] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 85.982560][ T4673] EXT4-fs (loop3): 1 truncate cleaned up [ 85.989836][ T4673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.037803][ T4678] netlink: 104 bytes leftover after parsing attributes in process `syz.1.366'. [ 86.085579][ T4684] EXT4-fs: quotafile must be on filesystem root [ 86.164607][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.247393][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.271923][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 86.271937][ T28] audit: type=1400 audit(1785683393.314:525): avc: denied { write } for pid=4657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.355332][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.384256][ T28] audit: type=1400 audit(1785683393.424:526): avc: denied { write } for pid=4690 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.422302][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.637649][ T12] bridge_slave_1: left allmulticast mode [ 86.649478][ T12] bridge_slave_1: left promiscuous mode [ 86.659423][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.668498][ T12] bridge_slave_0: left allmulticast mode [ 86.674427][ T12] bridge_slave_0: left promiscuous mode [ 86.681693][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.738868][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.752450][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.763251][ T12] bond0 (unregistering): Released all slaves [ 86.841621][ T12] hsr_slave_0: left promiscuous mode [ 86.859606][ T4654] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 86.862700][ T12] hsr_slave_1: left promiscuous mode [ 86.905451][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.924556][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.938398][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.959622][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.004699][ T12] veth1_macvtap: left promiscuous mode [ 87.016305][ T12] veth0_macvtap: left promiscuous mode [ 87.035041][ T12] veth1_vlan: left promiscuous mode [ 87.061917][ T12] veth0_vlan: left promiscuous mode [ 87.317797][ T12] team0 (unregistering): Port device team_slave_1 removed [ 87.341009][ T12] team0 (unregistering): Port device team_slave_0 removed [ 87.545762][ T28] audit: type=1400 audit(1785683394.574:527): avc: denied { read } for pid=4712 comm="syz.1.371" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 87.639907][ T28] audit: type=1400 audit(1785683394.574:528): avc: denied { read open } for pid=4712 comm="syz.1.371" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 87.754135][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.888501][ T28] audit: type=1400 audit(1785683394.924:529): avc: denied { write } for pid=4700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.953549][ T28] audit: type=1400 audit(1785683394.984:530): avc: denied { write } for pid=4739 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.001454][ T4709] loop2: detected capacity change from 0 to 1024 [ 88.023157][ T4709] EXT4-fs: Ignoring removed orlov option [ 88.043877][ T4709] EXT4-fs: inline encryption not supported [ 88.092333][ T4709] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 88.121645][ T4709] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 88.155122][ T4709] EXT4-fs (loop2): invalid journal inode [ 88.162537][ T4709] EXT4-fs (loop2): can't get journal size [ 88.183590][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.192542][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.025813][ T4669] bridge_slave_0: entered allmulticast mode [ 89.032749][ T4669] bridge_slave_0: entered promiscuous mode [ 89.039985][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.047365][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.066673][ T4709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.324759][ T4669] bridge_slave_1: entered allmulticast mode [ 89.344847][ T4669] bridge_slave_1: entered promiscuous mode [ 90.083973][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.700900][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 91.875470][ T4669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.972671][ T4669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.095512][ T4669] team0: Port device team_slave_0 added [ 92.104104][ T4669] team0: Port device team_slave_1 added [ 92.129045][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.136181][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.121708][ T4669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.136686][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.148041][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.346869][ T4669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.067772][ T28] audit: type=1400 audit(1785683401.104:531): avc: denied { write } for pid=4773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.112297][ T4669] hsr_slave_0: entered promiscuous mode [ 94.126301][ T4669] hsr_slave_1: entered promiscuous mode [ 94.164665][ T4669] debugfs: 'hsr0' already exists in 'hsr' [ 94.188030][ T4669] Cannot create hsr debugfs directory [ 94.203572][ T4803] loop0: detected capacity change from 0 to 128 [ 94.239049][ T4803] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.292838][ T4808] loop3: detected capacity change from 0 to 512 [ 94.325043][ T4803] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.343653][ T4808] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.381872][ T4808] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #17: comm syz.3.391: inode has both inline data and extents flags [ 94.426478][ T4808] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 94.426848][ T4808] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.391: couldn't read orphan inode 17 (err -117) [ 94.436108][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 94.436131][ C0] EXT4-fs (loop3): initial error at time 1785683401: ext4_orphan_get:1399: inode 17 [ 94.436159][ C0] EXT4-fs (loop3): last error at time 1785683401: ext4_orphan_get:1399: inode 17 [ 94.536056][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 94.606134][ T4820] loop1: detected capacity change from 0 to 1756 [ 94.618654][ T4808] loop3: lost filesystem error report for type 5 error -117 [ 94.619264][ T4808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.645615][ T4669] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.655370][ T4820] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 94.695886][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.732112][ T4669] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.767280][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.798433][ T4669] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.834602][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.866329][ T4669] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.900390][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.119060][ T28] audit: type=1400 audit(1785683402.154:532): avc: denied { write } for pid=4833 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.531745][ T4838] syzkaller0: entered promiscuous mode [ 95.537962][ T4838] syzkaller0: entered allmulticast mode [ 95.668583][ T4669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.734202][ T4822] loop0: detected capacity change from 0 to 512 [ 95.755557][ T28] audit: type=1400 audit(1785683402.694:533): avc: denied { setattr } for pid=4807 comm="syz.3.391" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.867126][ T4669] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.945160][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.952325][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.010479][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.017630][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.096212][ T4822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.157580][ T4822] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.272771][ T28] audit: type=1400 audit(1785683403.284:534): avc: denied { write } for pid=4842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.364263][ T28] audit: type=1400 audit(1785683403.404:535): avc: denied { write } for pid=4862 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.402315][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.412025][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.470761][ T4669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.510267][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 96.669609][ T4669] veth0_vlan: entered promiscuous mode [ 96.692408][ T4669] veth1_vlan: entered promiscuous mode [ 96.724364][ T28] audit: type=1400 audit(1785683403.764:536): avc: denied { write } for pid=4877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.749184][ T4669] veth0_macvtap: entered promiscuous mode [ 96.767960][ T4669] veth1_macvtap: entered promiscuous mode [ 96.791192][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.801402][ T28] audit: type=1400 audit(1785683403.844:537): avc: denied { write } for pid=4894 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.826908][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.854003][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 96.881346][ T3548] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.896270][ T28] audit: type=1400 audit(1785683403.934:538): avc: denied { mounton } for pid=4669 comm="syz-executor" path="/root/syzkaller.8gPGHq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 96.925651][ T3548] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.959449][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.977256][ T28] audit: type=1400 audit(1785683403.964:539): avc: denied { mounton } for pid=4669 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 97.004602][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.031642][ T4900] loop5: detected capacity change from 0 to 1024 [ 97.056032][ T4900] EXT4-fs: Ignoring removed nobh option [ 97.110584][ T4900] EXT4-fs: Ignoring removed bh option [ 97.167201][ T4900] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 97.202293][ T4900] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 97.249079][ T28] audit: type=1400 audit(1785683404.284:540): avc: denied { write } for pid=4903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.290002][ T4900] System zones: 0-1, 3-12 [ 97.294888][ T4900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.503273][ T4932] syzkaller0: entered promiscuous mode [ 97.508801][ T4932] syzkaller0: entered allmulticast mode [ 97.546478][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 97.672857][ T4943] syzkaller0: entered promiscuous mode [ 97.678401][ T4943] syzkaller0: entered allmulticast mode [ 97.796903][ T4950] loop0: detected capacity change from 0 to 512 [ 97.818017][ T4950] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.405: ea_inode file size=458758 entry size=16777216 [ 97.853188][ T4950] EXT4-fs (loop0): 1 orphan inode deleted [ 97.864805][ T4950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.874840][ T4948] loop2: detected capacity change from 0 to 1024 [ 97.908146][ T4948] EXT4-fs: Ignoring removed orlov option [ 97.915927][ T4948] EXT4-fs: inline encryption not supported [ 97.931553][ T4948] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 97.957068][ T4948] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 97.975194][ T4948] EXT4-fs (loop2): invalid journal inode [ 97.982222][ T4948] EXT4-fs (loop2): can't get journal size [ 97.999682][ T4948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.044328][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.090355][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.492445][ T4963] syzkaller0: entered promiscuous mode [ 98.498558][ T4963] syzkaller0: entered allmulticast mode [ 98.876590][ T4954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 99.144240][ T4669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.597962][ T4972] loop2: detected capacity change from 0 to 512 [ 99.775390][ T4972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.812435][ T4972] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.975450][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.017188][ T4983] loop3: detected capacity change from 0 to 1024 [ 100.048785][ T4983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.107971][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 100.107986][ T28] audit: type=1400 audit(1785683407.144:543): avc: denied { write } for pid=4982 comm="syz.3.416" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.226338][ T28] audit: type=1400 audit(1785683407.144:544): avc: denied { map } for pid=4982 comm="syz.3.416" path="/83/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.249302][ T28] audit: type=1400 audit(1785683407.144:545): avc: denied { execute } for pid=4982 comm="syz.3.416" path="/83/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.487312][ T4995] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 100.499040][ T4995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.733210][ T4998] syzkaller0: entered promiscuous mode [ 100.739340][ T4998] syzkaller0: entered allmulticast mode [ 101.673670][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.950832][ T5001] loop1: detected capacity change from 0 to 512 [ 102.035445][ T5001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.050757][ T5001] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.571899][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.623753][ T5011] syzkaller0: entered promiscuous mode [ 102.659533][ T5013] netlink: 104 bytes leftover after parsing attributes in process `syz.0.425'. [ 102.669674][ T5011] syzkaller0: entered allmulticast mode [ 102.898359][ T5032] loop2: detected capacity change from 0 to 512 [ 102.912078][ T28] audit: type=1400 audit(1785683409.954:546): avc: denied { name_bind } for pid=5029 comm="syz.5.432" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 102.970839][ T5032] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.431: corrupted in-inode xattr: invalid size in ea xattr [ 102.997519][ T5032] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.997692][ T5032] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.431: couldn't read orphan inode 15 (err -117) [ 103.007067][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 103.007083][ C0] EXT4-fs (loop2): initial error at time 1785683410: ext4_iget_extra_inode:5180: inode 15 [ 103.007122][ C0] EXT4-fs (loop2): last error at time 1785683410: ext4_iget_extra_inode:5180: inode 15 [ 103.059473][ T5032] loop2: lost filesystem error report for type 5 error -117 [ 103.060764][ T5032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.203121][ T5039] syzkaller0: entered promiscuous mode [ 103.209351][ T5039] syzkaller0: entered allmulticast mode [ 103.445383][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.851634][ T28] audit: type=1400 audit(1785683410.894:547): avc: denied { create } for pid=5043 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.937943][ T28] audit: type=1400 audit(1785683410.974:548): avc: denied { write } for pid=5043 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.965047][ T5044] lo speed is unknown, defaulting to 1000 [ 103.982152][ T5044] lo speed is unknown, defaulting to 1000 [ 104.000912][ T5044] lo speed is unknown, defaulting to 1000 [ 104.035738][ T5045] netlink: 168 bytes leftover after parsing attributes in process `syz.0.435'. [ 104.221334][ T5057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 104.232112][ T28] audit: type=1400 audit(1785683411.254:549): avc: denied { block_suspend } for pid=5052 comm="syz.5.437" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.300461][ T28] audit: type=1400 audit(1785683411.314:550): avc: denied { create } for pid=5052 comm="syz.5.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 104.359103][ T28] audit: type=1400 audit(1785683411.324:551): avc: denied { setopt } for pid=5052 comm="syz.5.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 104.385807][ T5061] netlink: 52 bytes leftover after parsing attributes in process `syz.1.439'. [ 104.397993][ T5058] loop2: detected capacity change from 0 to 1024 [ 104.410776][ T5058] EXT4-fs: Ignoring removed orlov option [ 104.444793][ T5058] EXT4-fs: inline encryption not supported [ 104.479746][ T5058] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 104.508136][ T5064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.440'. [ 104.520639][ T5058] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 104.548884][ T5058] EXT4-fs (loop2): invalid journal inode [ 104.568978][ T5058] EXT4-fs (loop2): can't get journal size [ 104.583600][ T5058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.617564][ T5044] infiniband sz1: set active [ 104.622582][ T3350] lo speed is unknown, defaulting to 1000 [ 104.629333][ T5044] infiniband sz1: added lo [ 104.672233][ T5044] RDS/IB: sz1: added [ 104.694560][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.708603][ T5044] smc: adding ib device sz1 with port count 1 [ 104.721648][ T5044] smc: ib device sz1 port 1 has no pnetid [ 104.738210][ T5044] lo speed is unknown, defaulting to 1000 [ 104.752283][ T35] lo speed is unknown, defaulting to 1000 [ 104.867792][ T5044] lo speed is unknown, defaulting to 1000 [ 104.974443][ T5044] lo speed is unknown, defaulting to 1000 [ 105.030860][ T5070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5070 comm=syz.1.443 [ 105.155808][ T28] audit: type=1400 audit(1785683412.194:552): avc: denied { write } for pid=5080 comm="syz.5.446" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.200995][ T5044] lo speed is unknown, defaulting to 1000 [ 105.219815][ T28] audit: type=1400 audit(1785683412.194:553): avc: denied { ioctl } for pid=5080 comm="syz.5.446" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.250696][ T28] audit: type=1400 audit(1785683412.254:554): avc: denied { map } for pid=5085 comm="syz.2.448" path="socket:[9588]" dev="sockfs" ino=9588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.320190][ T5099] netlink: 36 bytes leftover after parsing attributes in process `syz.2.452'. [ 105.461661][ T5092] loop5: detected capacity change from 0 to 512 [ 105.473706][ T5107] loop3: detected capacity change from 0 to 1024 [ 105.528712][ T5107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.568561][ T5044] lo speed is unknown, defaulting to 1000 [ 105.683583][ T5112] sctp: [Deprecated]: syz.2.455 (pid 5112) Use of int in max_burst socket option. [ 105.683583][ T5112] Use struct sctp_assoc_value instead [ 105.686319][ T5092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.716512][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.732608][ T5092] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.769572][ T5115] loop3: detected capacity change from 0 to 512 [ 105.790265][ T5115] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.823720][ T5115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.837788][ T4669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.856405][ T5115] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.871780][ T5117] loop0: detected capacity change from 0 to 512 [ 105.902516][ T5117] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.458: iget: bad i_size value: 38620345925642 [ 105.927326][ T5117] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.929223][ T5117] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.458: couldn't read orphan inode 15 (err -117) [ 105.938535][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 105.938579][ C0] EXT4-fs (loop0): initial error at time 1785683412: ext4_orphan_get:1399: inode 15 [ 105.938727][ C0] EXT4-fs (loop0): last error at time 1785683412: ext4_orphan_get:1399: inode 15 [ 105.985169][ T5123] loop5: detected capacity change from 0 to 512 [ 106.005394][ T5129] netlink: 10 bytes leftover after parsing attributes in process `syz.1.461'. [ 106.020208][ T5123] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.459: inode has both inline data and extents flags [ 106.033595][ T5117] loop0: lost filesystem error report for type 5 error -117 [ 106.038235][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.051618][ T5123] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.056291][ T28] audit: type=1400 audit(1785683413.084:555): avc: denied { mount } for pid=5126 comm="syz.2.462" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 106.094698][ T5123] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.459: couldn't read orphan inode 15 (err -117) [ 106.106527][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 106.106564][ C1] EXT4-fs (loop5): initial error at time 1785683413: ext4_orphan_get:1399: inode 15 [ 106.106600][ C1] EXT4-fs (loop5): last error at time 1785683413: ext4_orphan_get:1399: inode 15 [ 106.131751][ T5123] loop5: lost filesystem error report for type 5 error -117 [ 106.135208][ T5117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.159937][ T28] audit: type=1400 audit(1785683413.194:556): avc: denied { search } for pid=5126 comm="syz.2.462" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.182689][ T5123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.205184][ T5133] loop1: detected capacity change from 0 to 512 [ 106.212142][ T5134] netlink: 40 bytes leftover after parsing attributes in process `syz.2.462'. [ 106.233717][ T5123] netlink: 88 bytes leftover after parsing attributes in process `syz.5.459'. [ 106.251871][ T28] audit: type=1400 audit(1785683413.194:557): avc: denied { search } for pid=5126 comm="syz.2.462" name="usb_gadget" dev="configfs" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.288825][ T5133] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.464: iget: bad extra_isize 90 (inode size 256) [ 106.307228][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.346627][ T5133] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 106.346888][ T5133] EXT4-fs (loop1): Remounting filesystem read-only [ 106.349466][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 106.369163][ C0] EXT4-fs (loop1): initial error at time 1785683413: ext4_xattr_inode_iget:441: inode 11 [ 106.379060][ C0] EXT4-fs (loop1): last error at time 1785683413: ext4_xattr_inode_iget:441: inode 11 [ 106.388686][ T5133] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 106.397000][ T28] audit: type=1400 audit(1785683413.204:558): avc: denied { write } for pid=5116 comm="syz.0.458" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.422058][ T4669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.431152][ T28] audit: type=1400 audit(1785683413.224:559): avc: denied { search } for pid=5126 comm="syz.2.462" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.431189][ T28] audit: type=1400 audit(1785683413.224:560): avc: denied { search } for pid=5126 comm="syz.2.462" name="usb_gadget" dev="configfs" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.476987][ T28] audit: type=1400 audit(1785683413.254:561): avc: denied { search } for pid=5126 comm="syz.2.462" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.483611][ T5133] EXT4-fs (loop1): 1 orphan inode deleted [ 106.531931][ T5133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.587248][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.863724][ T5174] netlink: 104 bytes leftover after parsing attributes in process `syz.1.480'. [ 106.872888][ T5154] loop5: detected capacity change from 0 to 512 [ 106.876150][ T5162] loop0: detected capacity change from 0 to 512 [ 107.019660][ T5171] lo speed is unknown, defaulting to 1000 [ 107.033365][ T5162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.072158][ T5162] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.076389][ T5154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.142363][ T5154] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.162031][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.253961][ T4669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.265762][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.275009][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.283082][ T5171] bridge_slave_0: entered allmulticast mode [ 107.303419][ T5171] bridge_slave_0: entered promiscuous mode [ 107.314534][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.321784][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.329278][ T5171] bridge_slave_1: entered allmulticast mode [ 107.336398][ T5171] bridge_slave_1: entered promiscuous mode [ 107.355670][ T5211] vhci_hcd vhci_hcd.4: invalid port number 255 [ 107.362112][ T5211] vhci_hcd vhci_hcd.4: invalid port number 255 [ 107.384446][ T5211] netlink: 'syz.0.488': attribute type 7 has an invalid length. [ 107.394679][ T5211] netlink: 'syz.0.488': attribute type 8 has an invalid length. [ 107.415329][ T5171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.442092][ T5171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.492678][ T5217] batadv_slave_1: entered promiscuous mode [ 107.520740][ T5171] team0: Port device team_slave_0 added [ 107.528130][ T5171] team0: Port device team_slave_1 added [ 107.546744][ T5171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.553968][ T5171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.587119][ T5171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.604588][ T5171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.620889][ T5171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.655876][ T5229] FAULT_INJECTION: forcing a failure. [ 107.655876][ T5229] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.664964][ T5171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.686849][ T5229] CPU: 0 UID: 0 PID: 5229 Comm: syz.5.496 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 107.686880][ T5229] Tainted: [W]=WARN [ 107.686932][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.686944][ T5229] Call Trace: [ 107.686949][ T5229] [ 107.687021][ T5229] __dump_stack+0x1d/0x30 [ 107.687118][ T5229] dump_stack_lvl+0x95/0xd0 [ 107.687209][ T5229] dump_stack+0x15/0x1b [ 107.687225][ T5229] should_fail_ex+0x25e/0x270 [ 107.687258][ T5229] should_fail+0xb/0x20 [ 107.687280][ T5229] should_fail_usercopy+0x1a/0x20 [ 107.687307][ T5229] _copy_from_user+0x1c/0xb0 [ 107.687328][ T5229] sctp_setsockopt+0x161/0xea0 [ 107.687390][ T5229] sock_common_setsockopt+0x69/0x80 [ 107.687415][ T5229] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 107.687440][ T5229] __sys_setsockopt+0x184/0x200 [ 107.687522][ T5229] __x64_sys_setsockopt+0x64/0x80 [ 107.687552][ T5229] x64_sys_call+0x2327/0x3020 [ 107.687573][ T5229] do_syscall_64+0x136/0x3c0 [ 107.687615][ T5229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.687634][ T5229] RIP: 0033:0x7f70010be019 [ 107.687648][ T5229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.687663][ T5229] RSP: 002b:00007f6fffb17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.687711][ T5229] RAX: ffffffffffffffda RBX: 00007f7001345fa0 RCX: 00007f70010be019 [ 107.687723][ T5229] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000003 [ 107.687733][ T5229] RBP: 00007f6fffb17090 R08: 0000000000000008 R09: 0000000000000000 [ 107.687744][ T5229] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.687755][ T5229] R13: 00007f7001346038 R14: 00007f7001345fa0 R15: 00007ffcaf7e1748 [ 107.687802][ T5229] [ 107.945338][ T5171] hsr_slave_0: entered promiscuous mode [ 107.951528][ T5171] hsr_slave_1: entered promiscuous mode [ 107.970635][ T5171] debugfs: 'hsr0' already exists in 'hsr' [ 107.974351][ T5244] loop3: detected capacity change from 0 to 4096 [ 107.976648][ T5171] Cannot create hsr debugfs directory [ 108.002530][ T5244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.179997][ T5249] loop5: detected capacity change from 0 to 512 [ 108.187351][ T5267] __nla_validate_parse: 3 callbacks suppressed [ 108.187368][ T5267] netlink: 160 bytes leftover after parsing attributes in process `syz.3.498'. [ 108.211240][ T5269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.503'. [ 108.241106][ T5171] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 108.253794][ T5171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.279266][ T5171] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 108.280227][ T5249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.302803][ T5171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.310714][ T5171] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 108.334114][ T5249] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.338333][ T5171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.354046][ T5171] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 108.365513][ T5171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.373029][ T5279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.505'. [ 108.469603][ T5171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.506820][ T4669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.523358][ T5171] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.538023][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.545138][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.574424][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.581707][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.638755][ T5304] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.676931][ T5304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.717553][ T5304] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.767801][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.870173][ T4669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.890762][ T5331] tipc: Started in network mode [ 108.905161][ T5331] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 108.921886][ T5331] tipc: Enabled bearer , priority 0 [ 108.936756][ T5335] FAULT_INJECTION: forcing a failure. [ 108.936756][ T5335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.961486][ T5171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.983372][ T5335] CPU: 1 UID: 0 PID: 5335 Comm: syz.3.511 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 108.983407][ T5335] Tainted: [W]=WARN [ 108.983416][ T5335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.983505][ T5335] Call Trace: [ 108.983532][ T5335] [ 108.983543][ T5335] __dump_stack+0x1d/0x30 [ 108.983575][ T5335] dump_stack_lvl+0x95/0xd0 [ 108.983603][ T5335] dump_stack+0x15/0x1b [ 108.983628][ T5335] should_fail_ex+0x25e/0x270 [ 108.983691][ T5335] should_fail+0xb/0x20 [ 108.983725][ T5335] should_fail_usercopy+0x1a/0x20 [ 108.983785][ T5335] _copy_from_user+0x1c/0xb0 [ 108.983813][ T5335] ___sys_sendmsg+0xc1/0x1e0 [ 108.983872][ T5335] __x64_sys_sendmsg+0xd4/0x160 [ 108.983902][ T5335] x64_sys_call+0x194c/0x3020 [ 108.983931][ T5335] do_syscall_64+0x136/0x3c0 [ 108.984025][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.984157][ T5335] RIP: 0033:0x7f13129de019 [ 108.984176][ T5335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.984194][ T5335] RSP: 002b:00007f1311437028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.984213][ T5335] RAX: ffffffffffffffda RBX: 00007f1312c65fa0 RCX: 00007f13129de019 [ 108.984227][ T5335] RDX: 0000000020004080 RSI: 0000200000000200 RDI: 0000000000000004 [ 108.984286][ T5335] RBP: 00007f1311437090 R08: 0000000000000000 R09: 0000000000000000 [ 108.984304][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.984320][ T5335] R13: 00007f1312c66038 R14: 00007f1312c65fa0 R15: 00007ffeed261608 [ 108.984398][ T5335] [ 109.371420][ T5382] netlink: 68 bytes leftover after parsing attributes in process `syz.5.519'. [ 109.380701][ T5376] netlink: 'syz.3.518': attribute type 58 has an invalid length. [ 109.424776][ T5376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.518'. [ 109.447476][ T5171] veth0_vlan: entered promiscuous mode [ 109.457620][ T5171] veth1_vlan: entered promiscuous mode [ 109.494567][ T5171] veth0_macvtap: entered promiscuous mode [ 109.525010][ T5171] veth1_macvtap: entered promiscuous mode [ 109.556767][ T5171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.584413][ T5171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.649572][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.659058][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.671644][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.699602][ T3548] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.765911][ T5399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.955647][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.031498][ T23] tipc: Node number set to 11578026 [ 110.123161][ T5421] netlink: 52 bytes leftover after parsing attributes in process `syz.6.530'. [ 110.127245][ T5395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.135864][ T5397] EXT4-fs: Ignoring removed orlov option [ 110.175782][ T5397] EXT4-fs: inline encryption not supported [ 110.199747][ T28] kauditd_printk_skb: 333 callbacks suppressed [ 110.199761][ T28] audit: type=1400 audit(1785683417.244:733): avc: denied { mounton } for pid=5422 comm="syz.3.531" path="/tracing" dev="ramfs" ino=11289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 110.236705][ T5395] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.251578][ T5397] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 110.265585][ T5397] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 110.291881][ T28] audit: type=1400 audit(1785683417.324:734): avc: denied { ioctl } for pid=5422 comm="syz.3.531" path="socket:[11294]" dev="sockfs" ino=11294 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.348455][ T5397] EXT4-fs (loop1): invalid journal inode [ 110.374478][ T4669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.379915][ T5397] EXT4-fs (loop1): can't get journal size [ 110.625696][ T5397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.708705][ T5446] FAULT_INJECTION: forcing a failure. [ 110.708705][ T5446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.984774][ T5446] CPU: 0 UID: 0 PID: 5446 Comm: syz.6.540 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 110.984882][ T5446] Tainted: [W]=WARN [ 110.984889][ T5446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.984901][ T5446] Call Trace: [ 110.984908][ T5446] [ 110.984917][ T5446] __dump_stack+0x1d/0x30 [ 110.984945][ T5446] dump_stack_lvl+0x95/0xd0 [ 110.984972][ T5446] dump_stack+0x15/0x1b [ 110.985043][ T5446] should_fail_ex+0x25e/0x270 [ 110.985111][ T5446] should_fail+0xb/0x20 [ 110.985157][ T5446] should_fail_usercopy+0x1a/0x20 [ 110.985259][ T5446] _copy_to_user+0x20/0xa0 [ 110.985284][ T5446] simple_read_from_buffer+0xb5/0x130 [ 110.985311][ T5446] proc_fail_nth_read+0x10e/0x150 [ 110.985336][ T5446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.985436][ T5446] vfs_read+0x18e/0x7c0 [ 110.985460][ T5446] ? __rcu_read_unlock+0x4e/0x70 [ 110.985514][ T5446] ? __fget_files+0x184/0x1c0 [ 110.985540][ T5446] ? mutex_lock+0x57/0x90 [ 110.985576][ T5446] ksys_read+0xdc/0x1a0 [ 110.985600][ T5446] __x64_sys_read+0x40/0x50 [ 110.985693][ T5446] x64_sys_call+0x2886/0x3020 [ 110.985718][ T5446] do_syscall_64+0x136/0x3c0 [ 110.985744][ T5446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.985846][ T5446] RIP: 0033:0x7fb80b3fe84e [ 110.985865][ T5446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.985888][ T5446] RSP: 002b:00007fb809e96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.985913][ T5446] RAX: ffffffffffffffda RBX: 00007fb809e976c0 RCX: 00007fb80b3fe84e [ 110.986006][ T5446] RDX: 000000000000000f RSI: 00007fb809e970a0 RDI: 0000000000000004 [ 110.986024][ T5446] RBP: 00007fb809e97090 R08: 0000000000000000 R09: 0000000000000000 [ 110.986040][ T5446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.986056][ T5446] R13: 00007fb80b6c6038 R14: 00007fb80b6c5fa0 R15: 00007ffe159cb9a8 [ 110.986093][ T5446] [ 111.373723][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.467528][ T5457] set_capacity_and_notify: 4 callbacks suppressed [ 111.467550][ T5457] loop1: detected capacity change from 0 to 512 [ 111.549206][ T5462] netlink: 36 bytes leftover after parsing attributes in process `syz.6.546'. [ 111.579791][ T28] audit: type=1400 audit(1785683418.614:735): avc: denied { read } for pid=5463 comm="syz.3.547" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.693659][ T28] audit: type=1400 audit(1785683418.614:736): avc: denied { open } for pid=5463 comm="syz.3.547" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.801950][ T28] audit: type=1400 audit(1785683418.624:737): avc: denied { ioctl } for pid=5463 comm="syz.3.547" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 112.043942][ T5489] loop5: detected capacity change from 0 to 1024 [ 112.065486][ T5489] EXT4-fs: Ignoring removed orlov option [ 112.081426][ T5489] EXT4-fs: inline encryption not supported [ 112.097776][ T5489] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 112.114787][ T5489] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 112.142361][ T5489] EXT4-fs (loop5): invalid journal inode [ 112.155944][ T5492] loop1: detected capacity change from 0 to 512 [ 112.159642][ T5489] EXT4-fs (loop5): can't get journal size [ 112.171368][ T5492] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.558: inode has both inline data and extents flags [ 112.190015][ T5489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.206421][ T5492] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.207799][ T5492] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.558: couldn't read orphan inode 15 (err -117) [ 112.217012][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 112.217036][ C0] EXT4-fs (loop1): initial error at time 1785683419: ext4_orphan_get:1399: inode 15 [ 112.217087][ C0] EXT4-fs (loop1): last error at time 1785683419: ext4_orphan_get:1399: inode 15 [ 112.254572][ T4669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.256438][ T5492] loop1: lost filesystem error report for type 5 error -117 [ 112.264792][ T5492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.303249][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.365078][ T5502] netlink: 52 bytes leftover after parsing attributes in process `syz.5.562'. [ 112.369415][ T5501] netlink: 'syz.1.561': attribute type 1 has an invalid length. [ 112.376852][ T28] audit: type=1400 audit(1785683419.404:738): avc: denied { ioctl } for pid=5499 comm="syz.1.561" path="socket:[11364]" dev="sockfs" ino=11364 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.401447][ T5501] netlink: 'syz.1.561': attribute type 1 has an invalid length. [ 112.500876][ T28] audit: type=1400 audit(1785683419.544:739): avc: denied { write } for pid=5475 comm="syz.6.551" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.880616][ T5522] loop5: detected capacity change from 0 to 1024 [ 112.914185][ T5522] EXT4-fs: Ignoring removed orlov option [ 112.920882][ T5522] EXT4-fs: inline encryption not supported [ 112.938252][ T5522] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 112.950308][ T5522] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 112.970950][ T5522] EXT4-fs (loop5): invalid journal inode [ 112.979120][ T5522] EXT4-fs (loop5): can't get journal size [ 113.003259][ T5522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.048163][ T4669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.132544][ T28] audit: type=1400 audit(1785683420.174:740): avc: denied { create } for pid=5529 comm="syz.5.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.256692][ T5540] netlink: 104 bytes leftover after parsing attributes in process `syz.5.575'. [ 113.337826][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 113.596414][ T5556] loop5: detected capacity change from 0 to 512 [ 114.027093][ T5561] syzkaller0: entered promiscuous mode [ 114.033270][ T5561] syzkaller0: entered allmulticast mode [ 114.543620][ T5556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.631936][ T5556] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.650303][ T5569] loop3: detected capacity change from 0 to 1756 [ 114.668722][ T5569] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 114.750079][ T5575] netlink: 36 bytes leftover after parsing attributes in process `syz.6.587'. [ 114.848803][ T4669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.916861][ T5582] loop6: detected capacity change from 0 to 512 [ 114.983918][ T5582] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 115.025371][ T5582] EXT4-fs (loop6): orphan cleanup on readonly fs [ 115.043607][ T5582] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 115.067451][ T5582] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 115.106557][ T5582] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.590: Failed to acquire dquot type 1 [ 115.127114][ T5582] loop6: lost filesystem error report for type 5 error -5 [ 115.127325][ T5582] EXT4-fs (loop6): Remounting filesystem read-only [ 115.134532][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 115.134547][ C0] EXT4-fs (loop6): initial error at time 1785683422: ext4_acquire_dquot:7041 [ 115.134567][ C0] EXT4-fs (loop6): last error at time 1785683422: ext4_acquire_dquot:7041 [ 115.198449][ T5582] EXT4-fs (loop6): 1 truncate cleaned up [ 115.209003][ T5582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.255503][ T5171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.306224][ T5606] loop6: detected capacity change from 0 to 256 [ 115.348859][ T5606] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.417858][ T28] audit: type=1400 audit(1785683422.454:741): avc: denied { ioctl } for pid=5605 comm="syz.6.598" path="socket:[12652]" dev="sockfs" ino=12652 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.582691][ T28] audit: type=1400 audit(1785683422.464:742): avc: denied { ioctl } for pid=5605 comm="syz.6.598" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=12654 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.672958][ T5611] loop0: detected capacity change from 0 to 512 [ 115.683152][ T5611] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.601: inode has both inline data and extents flags [ 115.714734][ T5611] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.714933][ T5611] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.601: couldn't read orphan inode 15 (err -117) [ 115.724171][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 115.724204][ C0] EXT4-fs (loop0): initial error at time 1785683422: ext4_orphan_get:1399: inode 15 [ 115.724230][ C0] EXT4-fs (loop0): last error at time 1785683422: ext4_orphan_get:1399: inode 15 [ 115.844998][ T5611] loop0: lost filesystem error report for type 5 error -117 [ 115.845630][ T5611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.919873][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.988065][ T5622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.603'. [ 116.030949][ T5623] loop5: detected capacity change from 0 to 512 [ 116.262711][ T5640] netlink: 10 bytes leftover after parsing attributes in process `syz.5.610'. [ 116.361167][ T5614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.376272][ T5614] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.664273][ T5646] syzkaller0: entered promiscuous mode [ 116.671069][ T5646] syzkaller0: entered allmulticast mode [ 116.928567][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.483628][ T5651] syzkaller0: entered promiscuous mode [ 117.502918][ T5651] syzkaller0: entered allmulticast mode [ 117.924405][ T5666] set_capacity_and_notify: 1 callbacks suppressed [ 117.924427][ T5666] loop5: detected capacity change from 0 to 1024 [ 117.951539][ T5666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.019565][ T4669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.154467][ T28] audit: type=1400 audit(1785683425.194:743): avc: denied { watch } for pid=5672 comm="syz.0.619" path="/proc/408" dev="proc" ino=11617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 118.225067][ T5679] FAULT_INJECTION: forcing a failure. [ 118.225067][ T5679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.240314][ T5679] CPU: 1 UID: 0 PID: 5679 Comm: syz.0.621 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 118.240386][ T5679] Tainted: [W]=WARN [ 118.240393][ T5679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.240409][ T5679] Call Trace: [ 118.240416][ T5679] [ 118.240426][ T5679] __dump_stack+0x1d/0x30 [ 118.240458][ T5679] dump_stack_lvl+0x95/0xd0 [ 118.240484][ T5679] dump_stack+0x15/0x1b [ 118.240575][ T5679] should_fail_ex+0x25e/0x270 [ 118.240609][ T5679] should_fail+0xb/0x20 [ 118.240642][ T5679] should_fail_usercopy+0x1a/0x20 [ 118.240697][ T5679] _copy_from_iter+0xcc/0xe70 [ 118.240805][ T5679] ? __alloc_skb+0x511/0x6f0 [ 118.240835][ T5679] ? __alloc_skb+0x205/0x6f0 [ 118.240874][ T5679] netlink_sendmsg+0x4a4/0x6f0 [ 118.240945][ T5679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.240978][ T5679] ____sys_sendmsg+0x532/0x580 [ 118.241007][ T5679] ___sys_sendmsg+0x195/0x1e0 [ 118.241106][ T5679] __x64_sys_sendmsg+0xd4/0x160 [ 118.241135][ T5679] x64_sys_call+0x194c/0x3020 [ 118.241164][ T5679] do_syscall_64+0x136/0x3c0 [ 118.241197][ T5679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.241264][ T5679] RIP: 0033:0x7f0aca2ce019 [ 118.241279][ T5679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.241356][ T5679] RSP: 002b:00007f0ac8d27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.241376][ T5679] RAX: ffffffffffffffda RBX: 00007f0aca555fa0 RCX: 00007f0aca2ce019 [ 118.241389][ T5679] RDX: 0000000020004080 RSI: 0000200000000200 RDI: 0000000000000004 [ 118.241432][ T5679] RBP: 00007f0ac8d27090 R08: 0000000000000000 R09: 0000000000000000 [ 118.241448][ T5679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.241463][ T5679] R13: 00007f0aca556038 R14: 00007f0aca555fa0 R15: 00007ffe7e7eb928 [ 118.241553][ T5679] [ 118.517409][ T5677] loop5: detected capacity change from 0 to 1756 [ 118.518085][ T28] audit: type=1400 audit(1785683425.554:744): avc: denied { mount } for pid=5680 comm="syz.0.622" name="/" dev="autofs" ino=12775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 118.546477][ T5677] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 118.850002][ T5699] loop6: detected capacity change from 0 to 1024 [ 118.888699][ T5694] loop5: detected capacity change from 0 to 512 [ 118.901850][ T5683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.622'. [ 118.934236][ T5699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.007838][ T5694] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.626: Directory hole found for htree index block 0 [ 119.042891][ T5171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.052239][ T5694] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 119.053477][ T5694] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 119.063128][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 119.063328][ C0] EXT4-fs (loop5): initial error at time 1785683426: dx_probe:791: inode 2 [ 119.063557][ C0] EXT4-fs (loop5): last error at time 1785683426: dx_probe:791: inode 2 [ 119.170398][ T5694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.256610][ T4669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.619983][ T5710] syzkaller0: entered promiscuous mode [ 119.625960][ T5710] syzkaller0: entered allmulticast mode [ 119.863628][ T5709] gretap0: entered promiscuous mode [ 119.928590][ T28] audit: type=1400 audit(1785683426.964:745): avc: denied { create } for pid=5704 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.997491][ T5709] vlan2: entered promiscuous mode [ 120.249677][ T2980] ================================================================== [ 120.257872][ T2980] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 120.265902][ T2980] [ 120.268254][ T2980] write to 0xffff88811b0e5cf0 of 8 bytes by task 3288 on cpu 0: [ 120.275912][ T2980] dentry_unlink_inode+0x65/0x260 [ 120.280994][ T2980] d_delete+0x164/0x180 [ 120.285238][ T2980] d_delete_notify+0x32/0x100 [ 120.289951][ T2980] vfs_unlink+0x287/0x490 [ 120.294315][ T2980] filename_unlinkat+0x1dc/0x410 [ 120.299289][ T2980] __se_sys_unlink+0x2b/0xe0 [ 120.303913][ T2980] __x64_sys_unlink+0x1f/0x30 [ 120.308618][ T2980] x64_sys_call+0x2eb6/0x3020 [ 120.313320][ T2980] do_syscall_64+0x136/0x3c0 [ 120.317932][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.323843][ T2980] [ 120.326181][ T2980] read to 0xffff88811b0e5cf0 of 8 bytes by task 2980 on cpu 1: [ 120.333738][ T2980] step_into_slowpath+0x12c/0x4c0 [ 120.338792][ T2980] path_lookupat+0x2eb/0x4c0 [ 120.343443][ T2980] filename_lookup+0x18f/0x390 [ 120.348232][ T2980] do_readlinkat+0x74/0x2f0 [ 120.352763][ T2980] __x64_sys_readlink+0x47/0x60 [ 120.357641][ T2980] x64_sys_call+0x2b51/0x3020 [ 120.362350][ T2980] do_syscall_64+0x136/0x3c0 [ 120.366968][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.372965][ T2980] [ 120.375353][ T2980] value changed: 0xffff88811bcade68 -> 0x0000000000000000 [ 120.382473][ T2980] [ 120.384804][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 120.390982][ T2980] CPU: 1 UID: 0 PID: 2980 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 120.401417][ T2980] Tainted: [W]=WARN [ 120.405240][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.415309][ T2980] ==================================================================