last executing test programs: 6.387958349s ago: executing program 1 (id=478): socket$packet(0x11, 0x3, 0x300) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) tkill(r0, 0x12) ptrace(0x4208, r0) socket(0x10, 0x800, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42800}, 0x4000000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) 5.507229149s ago: executing program 1 (id=483): socket$packet(0x11, 0x3, 0x300) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) ptrace(0x4206, 0x0) tkill(0x0, 0x12) tkill(0x0, 0x12) ptrace(0x4208, 0x0) socket(0x10, 0x800, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42800}, 0x4000000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) 4.330584747s ago: executing program 1 (id=488): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x1, @perf_bp={0x0}, 0xc234, 0x2, 0x8, 0x7, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]}) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x811) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x70, 0xd8, 0x94}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x4000080) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) creat(0x0, 0x40) mount$bpf(0x0, 0x0, 0x0, 0x1900040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.183889712s ago: executing program 4 (id=489): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@noblock_validity}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@block_validity}]}, 0x1, 0x5d4, &(0x7f00000015c0)="$eJzs3T1sG30ZAPDnznaT9s1LigTiQ+8QAVKRXr3OR1soTOmKqFSpAxILRI4bVXHiKnagiSI13StEBwSoS9lgYAQxMCAWRlYWKDNSRSOQmg5gdP5I08RJnRDbafL7SRf//3dnP8/f5+fiO93JAZxbE9mfNOILEXE7iRjftSwf7YUTrfW2tzZKr7c2Skk0Gnf+mUQSEa+2Nkqd9ZP24wcRsRkRn4+IPxYiPk53XvJCp1FbW1+cq1TKK+3+ZH3p/mRtbf2Te0tzC+WF8vLVr3/j+o1r16dnpnen+7qxu1c42lgf/+3Jjx7/+VvPnvzq1x9tln4yl8RsjLWX7R7HSWq9J4WY3TP/Wj+CDVEy7AQ4lly7zrNS+myMR65d9d00du8cRgaSHtBHjZGIxo5dzcPVn/e6JnCKJT0X/X6dnQjwPup8D8iOfzvTIL9/vLjZOgDJ4m5vbZQeRid+vnVuIkabxyaX/pW8dWSSHW9eHmSinEmbjyJiKp/f//lP2p+/o8u1H6dOKkn65g83Wxtq//ZPd/Y/0WX/M9Y5d/p/6uz/ttv7v+0u8XMH7P9u9xjjP9/9+88PjP9oJL7YNX6yEz/pEj+NiO/3GP/pd35346BljV9EXInu8TuSw88PT969VylPtf52jfH7Kx998+DxR1w6IH7rnO1oM5Hd47/Qzintcfy//dNvvrR5SPyvfvnw7d/t/b8YET/uMf6nX/3y2wcte/EoeZl9Czjq9k+iEM96jP+12Ym/tpvOGgIAAAAAAAAAwAlKm9eyJWlxp52mxWLrHt7PxKW0Uq1NfHy3uro837rm7XIU0s6VVuOtfpL1p9vX43b6M3v6VzsXReYuNvvFUrUyP+SxAwAAAAAAAAAAAAAAAAAAwGnxwZ77//+da97/Pxsx8+GwcwMG4OCf/AbOOvUP59fb9Z8MLQ9g8Pz/h3Orof7h/FL/cH6pfzi/jlv/zhTC+69r/V8cfB7A4O2r/9Hh5AEMnuN/AAAAAAAAAAAAAAAAAAAAAAAAAADoi9u3bmVT4/XWRinrz+fXVherP/hkvlxbLC6tloql6sr94kK1ulApF0vVpXe9XlKt3p+K5dUHk/VyrT5ZW1v/3lJ1dbnzSwHlQt9HBAAAAAAAAAAAAAAAAAAAAO+fseaUpMWIQqufpsVixIcRcTmJ5O69SnkqIj4VEX/JFUay/vSwkwYAAAAAAAAAAAAAAAAAAIAzpra2vjhXqZRX+tfIt0N15kTEZtbv/qzn9b7mkz/Kylmma+uLD08ujewVj/ysQvsNbM4Z7fv2OtuNXJyKNE5FI8kf/uEHAAAAAAAAAAAAAAAAAAAG6s1Nv+9a83PN29Bz8d+B5AUAAAAAAAAAAAAAAAAAAADnS/qPJCKy6cr4V8b2Lr2QbOeajxHxw6d3fvpgrl5fmc7mv9yZX/9Ze/7MMPIHetWp0zQisjoGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3qitrS/OVSrllWM2RnpYZ9hjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiO/wUAAP//+BPDHA==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) pwrite64(r1, &(0x7f0000000140), 0x0, 0xe7c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42042, 0xdea1a290e97695ad) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) r3 = accept(r2, &(0x7f0000000240)=@ethernet={0x0, @local}, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x9}, 0x0, 0x9, 0x8, 0x2, 0xfff, 0x8001, 0x7ffe, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0xa8}}, 0x24, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x8541, 0x1a9) fallocate(r4, 0x8, 0x4000, 0x8000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x8000000, 0x1, 0x1, 0x2, 0x0, 0x97}, 0x20) 4.124533514s ago: executing program 2 (id=491): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x844a}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES64=r1, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, &(0x7f00000002c0)=[{0x0}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}], [{@smackfsroot={'smackfsroot', 0x3d, 'stripe'}}, {@obj_user={'obj_user', 0x3d, 'GPL\x00'}}]}, 0xff, 0x451, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpq5rp3Hj1KX+fKRNZrzj7Hw9O/bsjDcBDKyx7EcSsTkifouIkUb2xgJjjV/Xrpyb+evKuZkk6vU3/kzyclevnJspi5bP29TI1OtFfl2b4154O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TVbfzcX+5jh6ZMNY49Vt66keH6zftjSlk2ofK0JXKhGRNddQ3v9HohIblvaNxMuf9rVywJqq1+v1dp/PhfN14B6WRL9rAPRH+UGfXf+W2x0aetwVLh+OeP9gI/5rxdbYU420KDPUcn3bS2MRceT8319mW6zNPAQAwA2+OxwRz7Ub/6XxYFO5/xVrKKMR8f+IuC8i7o+IrRHxQERe9qGIeLjL47eukNw8/kkv3VZgK5SN/14o1raWxn//1PP4C6OVIrclj38oOXq8NreneE12x9C6LD+5zDG+f+nXzzvtax7/ZVt2/HIs2JBeqrZM0M1OL06vMuwllz+J2F5tiT+XRLmMk0TEtojY3tVfvn6FcfyZr3d0KnXr+JfRg3Wm+lcRTzfa/3y0xF9KOq5PTh48MLV/Yn3U5vZMlGfFzX7+5cLrnY6/qvh7IGv/ja3nf24p/tFkfcTCmbMn8vXahWhdIb6lC79/1vGa5nbP/+HkzTw9XDz24fTi4unJiOHk1Zsfn7r+3CJfbY5/96528af5e1wZ7SMRkZ3EOyPi0Yh4rKj74xHxRETsWib+H1988t3u419mVr6Hsvhnb9X+0dz+3ScqJ374tvv4S1n778tTu4tHVvL+t9IKrua1AwAAgP+KNP8OfJKOL6XTdHy88R3+rbExrc0vLD57dP6DU7ON78qPxlBaznSNNM2HThZzw2V+qiW/t5g3/qKyIc+Pz8zXZvsdPAy4TR36f+aPSr9rB6w592vB4NL/YXDp/zC49H8YXPo/DK52/f/jPtQDuPN8/sPg0v9hcOn/MLj0fxhIHe+NT1d1y7/EPZ+ItPtnVaOvdU66+McQd0+iutZ1Xtd2V7/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj3wAAAP//TonqKA==") r4 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff}, 0x80800) write$P9_RFLUSH(r6, &(0x7f00000002c0)={0x7, 0x6d, 0x1}, 0x7) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x28008a}], 0x4000054, 0x40000022, 0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x0, 0x8) finit_module(r7, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="937b010021000000140012800b0001006d7c6373656300000400028008000500", @ANYRESHEX=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x14068841) 3.807117705s ago: executing program 2 (id=495): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40010) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_gettime(0x9, &(0x7f0000000280)) fchownat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x100) 3.720061347s ago: executing program 0 (id=496): socket$packet(0x11, 0x3, 0x300) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) tkill(r0, 0x12) ptrace(0x4208, r0) socket(0x10, 0x800, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42800}, 0x4000000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) 3.64408036s ago: executing program 4 (id=497): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0xfd, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a901d80e85e1ba265a9837970a9a20940b0208fa916a034be9eb50defe37271f579ecbb2f7e6157f8bac11e6657ddcd368291be85f6fbe3696d907770e9214e33190c4f9d0a048b2442a7dde887cf7c3f2e7fca619e0f1717850a65d661e72c55a293a7e4332309066fc4e40951535235d7a51b3c1bdfc5996f817e817caf5d035e24b79089ab10bf1a15448774f85810bb5276a5f49c64823fa5472ce8f93627cf", 0xdd}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r1, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x0, 0x1}]}, 0x14, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$getflags(r2, 0x401) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nobarrier}, {@noinit_itable}, {@delalloc}, {@init_itable}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, 'max_batch_time'}}]}, 0x1, 0x74f, &(0x7f0000001040)="$eJzs3M9rHOUbAPBnpknTb5t+N4IH8SRUrFC7SVO1JyHiuVDoH1DDZhJCJtmQ3dQmBtp68CAIKoI/etH/wIsieCn9HxTBm4IHQWsaD4KHyGw2id3upqlNOho/H5jM876zM8/7ZIeXHdh3A/jPeqr4k0QMRsSFiKi0+9OIONyKjkRc23jdndWV2trqSi2J9fWLt5PitFbf5rWS9v5YtE6JJyLiVn/EqTfuzdtYWp4Zz/Nsod0ebs7ODzeWlk9Pz45PZVPZ3OjIyNmzL46+8PzIntX69uuf/fLWl698/fG52T9euv3cRBJjrbqjo469tPE/6Y+xjv65/UhWoqTsAQAAsCvF5/xDEdHX+pRaiUOtCAAAADhI1gfWAQAAgAMvibJHAAAAAOyvze8B3FldqW1uj/L7Bz+/HBFD22uL17by97XWEEccif6IOLqW3LUyIdk4DR7KtesRcXOsy/2ftO+/BzSwHXauXLdG+p/nZjH/jHWb/9Kt+Se6zD99m7+d8JA257+1e+a/7fyHesx/F3aZY2Dh5Dc981+PeLKvW/5kK3/SI/+ru8z/+eB33/c6tv5pxMnonv+vuXb4fYjhyek8a//tmuPEF1dP7VT/0V75k53rn99l/T/cGJ3qNZcU+Z89sfP73y1/cU+80x5HGhHvtvdF+72OHM/cGvlop/onetR/v/f/k14XvXp386s3l3/s9VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoJo2IwUjS6lacptVqxLGIeDyOpnm90Tw1WV+cmyiORQxFfzo5nWcjEVHZaCdF+0wr3m6PdrTPRsRjEfF+5X+tdrVWzyfKLh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtxyJiMJK0GhFpRPxWSdNqtexRAQAAAHtuqOwBAAAAAPvO8z8AAAAcfA/y/H99H8cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHGgXzp8vtvW11ZVa0Z64vLQ4U798eiJrzFRnF2vVWn1hvjpVr0/lWbVWn73f9fJ6ff5czC1eGW5mjeZwY2n50mx9ca55aXp2fCq7lPU/kqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4UIOtLUmrEZG24jStViOOR8RQ9CeT03k2EhH/j4hvK/0DRftM2YMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzzWWlmfG8zxbuDs43j7c5ZBAIDj4QckTEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApWgsLc+M53m20Ch7JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQr/SmJiGI7WXl6sPPo4eT3SmsfEa/duPjBlfFmc+FM0f/rVn/zw3b/aBnjBwAAADptPqe3n+PTsscDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8ezSWlmfG8zxb2Meg7BoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/588AAAD//6PjyPE=") socket$l2tp(0x2, 0x2, 0x73) fchown(r1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) sendto$inet(r0, &(0x7f0000000140)="cfdc6054a073397aba2f8439e50eb0bc4a65d3fd1148a8a85559fc1850d8826d9b573176aefbd07a5423a8a76a077e86dd1395dce66c07f15b27a91d2f0a6d6892f2968d8648994a3432c9b648eba18f42b89eb6b9d58f4d453120a581b3b401aa02c94465509e521aa5d298a10c38e177d35b07eac87a707c55b4a304b38a00bc929341bddcd357333798f919a18c8b5161ad9378381789444d9b17a33da6cbc36fdf54799862b9beb0322bc3a348e8e5fc5a3ce498f4ae", 0xfed9, 0x30008087, 0x0, 0x0) 3.182108185s ago: executing program 4 (id=498): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x261, &(0x7f0000000340)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x40000, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000880)={0x9, 0x0, &(0x7f0000000800)}, 0x0) 3.180386185s ago: executing program 2 (id=508): sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x2, 0x0, &(0x7f0000000780)) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2076) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000440)=@sg0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r5 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x11b, 0x2, &(0x7f0000000900)=r4, 0x4) 3.179749985s ago: executing program 3 (id=499): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff9151, 0x7}, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x400, 0x8}, 0x4040, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x2, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r5 = dup(r4) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000280)={{0x4, 0x80000000}, {0xeb4, 0x8007}, 0x10000004, 0x1}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x2, @in6={0xa, 0x4e20, 0x3, @local, 0x9}}}, 0xa0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r6], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.834110996s ago: executing program 0 (id=500): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x0, 0x4a, 0x0, 0x1}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48581, 0x0) r1 = syz_io_uring_setup(0x471, &(0x7f0000000040)={0x0, 0x5a9, 0x1, 0x2, 0x284}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000001c0), 0x37) r2 = getpid() bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b3"], 0x48) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000000)={0x1f, 0x4, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="23961ef823f91c000000000000", @ANYRES32=0x0, @ANYBLOB="0000100a"], 0x1c}}, 0x404001c) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xce) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, &(0x7f0000000880)={0x3, 0x2, 0x1, 0x3}) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) r7 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x5, 0x81, 0x0, 0x0, 0x0, 0xf77, 0x40200, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7f, 0x2, @perf_config_ext={0x1, 0x9}, 0x1224, 0x8, 0x6, 0x1, 0x80, 0xffffffc0, 0x1, 0x0, 0x9, 0x0, 0x6}, r2, 0xc, r3, 0x9) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x6, 0x0, 0x8100, 0x0, {0x1577, 0x3}, {0x3}, {0xe, 0x14}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x40f4) 2.833795906s ago: executing program 1 (id=501): socket$packet(0x11, 0x3, 0x300) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x12) tkill(r0, 0x12) ptrace(0x4208, r0) socket(0x10, 0x800, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42800}, 0x4000000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) 2.833555596s ago: executing program 3 (id=502): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xfff, 0x943e}, 0x400, 0x0, 0x7, 0xe, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @loopback}}}}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x189) mount$bpf(0x200000000000, 0x0, 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x58502, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r0, 0x25, 0x5, @val=@netfilter={0x2, 0x0, 0x2}}, 0x20) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x10001, 0x6, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x66, 0x0, 0xf4, 0x4, 0x0, @private=0xa010102, @remote}}}}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x40f00, 0x9, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540), 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r3, 0x25, 0x9, @val=@netkit={@void, @value=r4}}, 0x1c) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.555646095s ago: executing program 4 (id=503): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xffffffff, 0x6, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listns(&(0x7f0000000b80)={0x20, 0x0, 0x0, 0x8000000}, &(0x7f0000000bc0)=[0x0], 0x1, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000500)={{0x80, 0x9}, 'port0\x00', 0x57, 0x40800, 0x9, 0x10, 0x0, 0x800, 0x8, 0x0, 0x3, 0x7f}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace(0x11, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x2}, 'port0\x00', 0x80, 0x100816, 0x4, 0x9, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) unshare(0x100000) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ptrace(0x10, 0x0) r3 = socket(0xa, 0x3, 0x87) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x60030000, {0x0, 0xff000000}, [@common=@icmp6={{}, {0x10, "3e8e", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x8}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0x100}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x50, 0x8, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x441) getpgid(0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r4, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "a7d43e88fc61c0504fb2dfc95a30f2762500f2"}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, 0x0, 0x14) 2.554264126s ago: executing program 3 (id=514): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x44000106) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) pwrite64(r0, 0x0, 0x0, 0x7) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0xfffffffffffffffb) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000480)}}], 0x1, 0x2090) recvfrom$inet(r3, &(0x7f0000004cc0)=""/4096, 0x1000, 0x102, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0xe22}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) fcntl$getflags(r1, 0x3) 2.376092452s ago: executing program 4 (id=504): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x3c}}, 0x8084) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) tkill(0x0, 0x40) ustat(0x7, &(0x7f0000000240)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) rt_tgsigqueueinfo(r3, 0x0, 0x11, &(0x7f0000000200)={0x25, 0x140, 0x8001}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4, 0x18}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xdc}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000d, 0x3b071, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0], &(0x7f0000000000)=0x10, 0x0) 2.303634104s ago: executing program 3 (id=505): socket$nl_route(0x10, 0x3, 0x0) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x3, 0x8080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xa976a000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 2.240798926s ago: executing program 2 (id=506): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000002c0)='./file1\x00', 0x2480444, &(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYBLOB="5e2606a1d171520e16b7c9e4ec15e25d80b3daf85d96f421cebf37e5c5da8c32071ed8def0ffb25e45954c8bf2f87fa14a4a8cfae085a775dbf46d9a85cd7d7d89becbe82a1ce55a28c1fe119b7ebd102f6df8d258130a01b9e06af6e43d07889be9ceebce3f3d6d88edbb9c4c8fd27912d334656e4ba6209033b5ba66d5a844af3b983dc6", @ANYRES32, @ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYBLOB="a23b938eabd9436fab39ce57cea13a51c01bc66294352ad6bef3146e17bc31a3747487afeec021ffa241286224d8d7f7acaeb35caad3706b002845f7c1845411ea21248adb20921e0b92a930f3d70e26d279b8ee4a98ff473a41141674200dea402768967bc703cfef6f354f6770c8c9fde0d34d2072bd7ddcd262fbf1bbbf36045c00000000000000"], 0x1, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x888) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x3, 0x8080) 1.187057091s ago: executing program 1 (id=507): r0 = socket$igmp(0x2, 0x3, 0x2) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'decodes', ' ', 'mem'}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x202002, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8e0}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0x10, 0x0, @vifc_lcl_addr=@multicast1, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @empty, 0x0, "614afa85791a63abd0f993af8096b504000000000000003fdc3fd440829c98ae", 0x3, 0xffffffff}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x2}, 0x94) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000580)={&(0x7f00000000c0)=0x5, 0x4, &(0x7f0000000300)=[{}, {}], &(0x7f0000000540)}) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) close(0x3) 928.681349ms ago: executing program 0 (id=509): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000400)=""/82, 0x33e000, 0x1000, 0xfffffffb, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x39045, 0x2) bind$xdp(r3, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) perf_event_open(0x0, 0x0, 0x7, r0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") getpgid(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x1000, 0x2, 0x1003, 0x1, 0x4000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 749.325305ms ago: executing program 2 (id=510): unshare(0x200) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x26) fcntl$notify(r0, 0x402, 0x80000016) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="10fbdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4040009}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000006c0)=ANY=[@ANYBLOB="100000000c140102"], 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000a00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010"], 0x20}, 0x0) ioctl$FITRIM(r2, 0x40e8662e, &(0x7f0000000080)={0xae, 0xd000007}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x100, 0x3, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@grpquota}, {@init_itable}, {@norecovery}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4be, &(0x7f0000000980)="$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") sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 711.645376ms ago: executing program 3 (id=511): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c206}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000000d00)="ae37", 0x2) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x400}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) flock(0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x420c4}, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195012, 0x0, 0x40, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000340)={0x8abacaf3a7ea49c9, 0x80, 0x64, 0x9, 0x0, 0xfc, 0x0, 0xc, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x6, 0x8}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mremap(&(0x7f0000e9b000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) 396.367487ms ago: executing program 3 (id=512): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff25, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100004800c00068008"], 0x34}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fcntl$setlease(r9, 0x400, 0x1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) splice(r6, 0x0, r0, 0x0, 0x317e, 0x4) 381.830447ms ago: executing program 0 (id=513): io_uring_setup(0x2628, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x805, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() timerfd_create(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3fe, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000006}, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg$sock(r1, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000003800)=[{0x0}, {&(0x7f0000002780)="9832", 0x2}], 0x2}}], 0x1, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_config_ext={0x4b, 0x4168}, 0x10c8ea, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000011c0)={&(0x7f0000001080), 0x10, &(0x7f0000001180)={&(0x7f0000001100)={0x4, 0x800, 0x8, {}, {r2, r3/1000+10000}, {0x0, 0x1}, 0x1, @can={{}, 0x2, 0x2, 0x0, 0x0, "f8a7dbb4a01b9db7"}}, 0x48}, 0x1, 0x0, 0x0, 0x8980}, 0x40) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) write$sndseq(r5, &(0x7f0000000080)=[{0x23, 0x0, 0x0, 0xfd, @time, {}, {}, @result={0x0, 0x7a120}}], 0x1c) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x200040c0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820f522e5bab4e21000fff0058006f543bc2945f640094f96a0325010ebc000000000014008000f0fffeff0180004000fff5dd0000000a0002000400080004000000224e0000", 0x58}], 0x1) 314.499189ms ago: executing program 4 (id=515): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0x5}, {0xc, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setresuid(0xee01, 0x0, 0x0) getegid() write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4e, 0x2, {0x3, 0x6, 0x80}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c840) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) close(0x3) 240.938772ms ago: executing program 2 (id=516): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x8}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x1c000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair(0x21, 0x6, 0x800, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="000002000638000024001280090001007866726d000000001400028008000100030000000800020001000000140003007866726d30"], 0x58}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0], 0x16c}}, 0x0) 239.364892ms ago: executing program 0 (id=517): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xffffffff, 0x6, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listns(&(0x7f0000000b80)={0x20, 0x0, 0x0, 0x8000000}, &(0x7f0000000bc0)=[0x0], 0x1, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000500)={{0x80, 0x9}, 'port0\x00', 0x57, 0x40800, 0x9, 0x10, 0x0, 0x800, 0x8, 0x0, 0x3, 0x7f}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace(0x11, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x2}, 'port0\x00', 0x80, 0x100816, 0x4, 0x9, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) unshare(0x100000) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ptrace(0x10, 0x0) r3 = socket(0xa, 0x3, 0x87) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x60030000, {0x0, 0xff000000}, [@common=@icmp6={{}, {0x10, "3e8e", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x8}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0x100}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x50, 0x8, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x441) getpgid(0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r4, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "a7d43e88fc61c0504fb2dfc95a30f2762500f2"}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, 0x0, 0x14) 0s ago: executing program 0 (id=518): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008050) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/738], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): .96" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 52.905151][ T28] audit: type=1400 audit(1780445496.286:440): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 52.983791][ T3906] loop4: detected capacity change from 0 to 512 [ 53.006774][ T28] audit: type=1400 audit(1780445496.476:441): avc: denied { getopt } for pid=3903 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.036787][ T28] audit: type=1400 audit(1780445496.506:442): avc: denied { getopt } for pid=3903 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.037201][ T3906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.085611][ T3906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.085792][ T3906] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.094333][ T28] audit: type=1400 audit(1780445496.566:443): avc: denied { write } for pid=3905 comm="syz.4.93" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.094394][ T28] audit: type=1400 audit(1780445496.566:444): avc: denied { create } for pid=3905 comm="syz.4.93" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.121057][ T3906] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.93: bg 0: block 217: padding at end of block bitmap is not set [ 53.134106][ T3906] EXT4-fs (loop4): Remounting filesystem read-only [ 53.317261][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.344358][ T28] audit: type=1400 audit(1780445496.816:445): avc: denied { read write } for pid=3917 comm="syz.2.101" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 53.344439][ T28] audit: type=1400 audit(1780445496.816:446): avc: denied { open } for pid=3917 comm="syz.2.101" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 53.346470][ T28] audit: type=1400 audit(1780445496.816:447): avc: denied { ioctl } for pid=3917 comm="syz.2.101" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 53.346630][ T3918] syz.2.101 uses obsolete (PF_INET,SOCK_PACKET) [ 53.377169][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.969775][ T3927] loop2: detected capacity change from 0 to 256 [ 54.012728][ T3927] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.189049][ T3924] loop0: detected capacity change from 0 to 256 [ 54.365145][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 54.424244][ T3938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 55.315548][ T3949] netlink: 'syz.1.110': attribute type 4 has an invalid length. [ 55.362310][ T3949] netlink: 'syz.1.110': attribute type 4 has an invalid length. [ 55.410854][ T3950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.109'. [ 55.461111][ T3949] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.468444][ T3949] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.494818][ T3952] loop3: detected capacity change from 0 to 1024 [ 55.534917][ T3950] 9p: Bad value for 'wfdno' [ 55.556729][ T3945] loop0: detected capacity change from 0 to 512 [ 55.565762][ T3945] EXT4-fs: Ignoring removed oldalloc option [ 55.584956][ T3952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.599573][ T3945] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.108: corrupted in-inode xattr: invalid ea_ino [ 55.637121][ T3945] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.637328][ T3945] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.108: couldn't read orphan inode 15 (err -117) [ 55.658320][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 55.658342][ C0] EXT4-fs (loop0): initial error at time 1780445499: ext4_iget_extra_inode:5128: inode 15 [ 55.658372][ C0] EXT4-fs (loop0): last error at time 1780445499: ext4_iget_extra_inode:5128: inode 15 [ 55.662756][ T3949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.678907][ T3945] loop0: lost filesystem error report for type 5 error -117 [ 55.694841][ T3949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.735247][ T3945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.737672][ T3963] loop2: detected capacity change from 0 to 512 [ 55.757372][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.810449][ T3963] EXT4-fs: Ignoring removed orlov option [ 55.840800][ T3963] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 55.862353][ T3963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 55.880469][ T3931] aD: renamed from lo (while UP) [ 55.895907][ T3963] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.112: corrupted in-inode xattr: e_value size too large [ 55.947193][ T3963] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.956866][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 55.960397][ T3963] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.112: couldn't read orphan inode 15 (err -117) [ 55.966056][ C1] EXT4-fs (loop2): initial error at time 1780445499: ext4_iget_extra_inode:5128: inode 15 [ 55.994430][ C1] EXT4-fs (loop2): last error at time 1780445499: ext4_iget_extra_inode:5128: inode 15 [ 55.999463][ T2101] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.022677][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.043855][ T3963] loop2: lost filesystem error report for type 5 error -117 [ 56.044553][ T3963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.067197][ T2101] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.076709][ T2101] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.087572][ T2101] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.215708][ T3971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 56.248808][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.326458][ T3980] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 56.395625][ T3976] loop1: detected capacity change from 0 to 512 [ 56.487799][ T3976] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.117: iget: bad i_size value: 38620345925642 [ 56.515237][ T3987] loop0: detected capacity change from 0 to 128 [ 56.534817][ T3987] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.547386][ T3976] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.552314][ T3976] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.117: couldn't read orphan inode 15 (err -117) [ 56.562030][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 56.562073][ C1] EXT4-fs (loop1): initial error at time 1780445500: ext4_orphan_get:1397: inode 15 [ 56.562147][ C1] EXT4-fs (loop1): last error at time 1780445500: ext4_orphan_get:1397: inode 15 [ 56.578984][ T3968] loop3: detected capacity change from 0 to 1024 [ 56.580894][ T3976] loop1: lost filesystem error report for type 5 error -117 [ 56.619880][ T3976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.647545][ T3987] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.706077][ T3987] netlink: 36 bytes leftover after parsing attributes in process `syz.0.119'. [ 56.708300][ T3968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.878705][ T3990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 56.972707][ T3968] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 57.139805][ T3431] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.183727][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.307816][ T3993] netlink: 68 bytes leftover after parsing attributes in process `syz.3.120'. [ 57.360868][ T3960] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 57.685614][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.215510][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 58.266002][ T28] audit: type=1400 audit(2000000000.540:476): avc: denied { connect } for pid=4000 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 58.349257][ T4009] capability: warning: `syz.3.125' uses 32-bit capabilities (legacy support in use) [ 58.391302][ T4009] program syz.3.125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.533499][ T4017] loop0: detected capacity change from 0 to 1024 [ 58.557643][ T4017] ext4: Bad value for 'init_itable' [ 58.822897][ T4005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4005 comm=syz.2.124 [ 58.850358][ T4005] loop2: detected capacity change from 0 to 512 [ 58.864378][ T4005] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.696947][ T4013] loop4: detected capacity change from 0 to 512 [ 59.713629][ T4013] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.921111][ T4005] EXT4-fs (loop2): 1 truncate cleaned up [ 60.674496][ T4005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.702319][ T28] audit: type=1400 audit(2000000003.030:477): avc: denied { write } for pid=4004 comm="syz.2.124" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.292979][ T4013] EXT4-fs (loop4): 1 orphan inode deleted [ 61.311155][ T4013] EXT4-fs (loop4): 1 truncate cleaned up [ 61.317343][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 61.329651][ T28] audit: type=1400 audit(2000000003.660:478): avc: denied { firmware_load } for pid=4019 comm="syz.1.129" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 61.330607][ T4013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.384073][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.400699][ T28] audit: type=1400 audit(2000000003.730:479): avc: denied { sqpoll } for pid=4033 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.524732][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.614471][ T4042] loop1: detected capacity change from 0 to 1024 [ 61.821728][ T4042] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.954230][ T28] audit: type=1400 audit(2000000004.220:480): avc: denied { create } for pid=4046 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.009103][ T4038] loop3: detected capacity change from 0 to 256 [ 62.287285][ T4042] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.135: Invalid block bitmap block 0 in block_group 0 [ 62.338700][ T4042] loop1: lost filesystem error report for type 5 error -117 [ 62.346873][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 62.360801][ C0] EXT4-fs (loop1): initial error at time 2000000004: ext4_read_block_bitmap_nowait:483 [ 62.370525][ C0] EXT4-fs (loop1): last error at time 2000000004: ext4_read_block_bitmap_nowait:483 [ 62.380637][ T4042] Quota error (device loop1): write_blk: dquota write failed [ 62.389016][ T4042] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 62.400399][ T4042] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.135: Failed to acquire dquot type 0 [ 62.412939][ T4042] loop1: lost filesystem error report for type 5 error -117 [ 62.414276][ T4042] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.135: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.436038][ T4042] loop1: lost filesystem error report for type 5 error -117 [ 62.437580][ T4042] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.135: Invalid inode bitmap blk 0 in block_group 0 [ 62.458268][ T12] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 62.467418][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 62.481577][ T4042] loop1: lost filesystem error report for type 5 error -117 [ 62.483874][ T12] loop1: lost filesystem error report for type 5 error -117 [ 62.530709][ T4042] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 62.620179][ T4042] loop1: lost filesystem error report for type 5 error -117 [ 62.632047][ T4042] EXT4-fs (loop1): 1 orphan inode deleted [ 62.675794][ T28] audit: type=1400 audit(2000000005.000:481): avc: denied { shutdown } for pid=4056 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.711397][ T4060] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 62.730419][ T4042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.755218][ T4060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.803269][ T4062] bond1: (slave ip6erspan0): making interface the new active one [ 62.828085][ T4065] loop0: detected capacity change from 0 to 1024 [ 62.837699][ T4062] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 62.881685][ T4065] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 62.890683][ T4066] SELinux: policydb magic number 0x746c6966 does not match expected magic number 0xf97cff8c [ 62.949658][ T28] audit: type=1400 audit(2000000005.280:482): avc: denied { create } for pid=4064 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.961156][ T4066] SELinux: failed to load policy [ 62.988157][ T4065] loop0: detected capacity change from 0 to 512 [ 63.022864][ T4065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.040109][ T4068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.141'. [ 63.075468][ T4065] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.078338][ T4042] ucma_write: process 91 (syz.1.135) changed security contexts after opening file descriptor, this is not allowed. [ 63.109702][ T4071] loop3: detected capacity change from 0 to 512 [ 63.116546][ T4071] EXT4-fs: Ignoring removed nobh option [ 63.124190][ T4071] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.151156][ T4071] EXT4-fs error (device loop3): __ext4_iget:5481: inode #11: block 1: comm syz.3.141: invalid block [ 63.170083][ T4042] syz.1.135 (4042) used greatest stack depth: 8640 bytes left [ 63.186535][ T4071] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.186865][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 63.202745][ C1] EXT4-fs (loop3): initial error at time 2000000005: __ext4_iget:5481: inode 11: block 1 [ 63.212632][ C1] EXT4-fs (loop3): last error at time 2000000005: __ext4_iget:5481: inode 11: block 1 [ 63.225945][ T4071] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.141: couldn't read orphan inode 11 (err -117) [ 63.237843][ T4071] loop3: lost filesystem error report for type 5 error -117 [ 63.239120][ T4071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.259034][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 63.259052][ T28] audit: type=1400 audit(2000000005.570:488): avc: denied { read } for pid=4064 comm="syz.0.140" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.275021][ T4071] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.301946][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.379076][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.492926][ T4078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.516758][ T4078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.578553][ T4078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 63.655228][ T4078] team0: Port device team_slave_0 removed [ 63.672099][ T4076] loop1: detected capacity change from 0 to 512 [ 63.715147][ T4076] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.717535][ T28] audit: type=1326 audit(2000000006.040:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.3.144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7bcace59 code=0x7ffc0000 [ 63.737125][ T4076] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.142: corrupted in-inode xattr: invalid ea_ino [ 63.759043][ T28] audit: type=1326 audit(2000000006.040:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.3.144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7bcace59 code=0x7ffc0000 [ 63.784549][ T4076] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.786745][ T28] audit: type=1326 audit(2000000006.040:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.3.144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7bcace59 code=0x7ffc0000 [ 63.796124][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 63.796146][ C0] EXT4-fs (loop1): initial error at time 2000000006: ext4_iget_extra_inode:5128: inode 15 [ 63.796192][ C0] EXT4-fs (loop1): last error at time 2000000006: ext4_iget_extra_inode:5128: inode 15 [ 63.828380][ T4076] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.142: couldn't read orphan inode 15 (err -117) [ 63.838672][ T28] audit: type=1326 audit(2000000006.040:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.3.144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7bcace59 code=0x7ffc0000 [ 63.885946][ T4076] loop1: lost filesystem error report for type 5 error -117 [ 63.890714][ T4076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.917833][ T28] audit: type=1326 audit(2000000006.040:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.3.144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7bcace59 code=0x7ffc0000 [ 63.970101][ T28] audit: type=1326 audit(2000000006.080:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.3.144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed7bcace59 code=0x7ffc0000 [ 64.030409][ T28] audit: type=1326 audit(2000000006.080:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.3.144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7bcace59 code=0x7ffc0000 [ 64.097601][ T28] audit: type=1326 audit(2000000006.080:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.3.144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7bcace59 code=0x7ffc0000 [ 64.158402][ T28] audit: type=1326 audit(2000000006.080:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.3.144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7bcace59 code=0x7ffc0000 [ 64.614448][ T4086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 64.752431][ T4092] loop3: detected capacity change from 0 to 1024 [ 64.875734][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.098629][ T4106] loop0: detected capacity change from 0 to 2048 [ 65.131786][ T4103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 65.169742][ T4106] loop0: p4 < > [ 65.194845][ T2981] loop0: p4 < > [ 65.351030][ T4111] 9pnet_fd: p9_fd_create_unix (4111): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 65.385112][ T4106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 65.419990][ T4113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.539177][ T4113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.552338][ T4109] loop1: detected capacity change from 0 to 764 [ 65.744122][ T4111] loop4: detected capacity change from 0 to 256 [ 65.877061][ T4113] loop3: detected capacity change from 0 to 512 [ 65.905190][ T4113] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 65.933705][ T4113] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 65.948863][ T4109] Symlink component flag not implemented [ 65.954765][ T4113] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.154: Corrupt directory, running e2fsck is recommended [ 65.969472][ T4109] Symlink component flag not implemented (116) [ 66.243402][ T4113] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 66.319005][ T4122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.152'. [ 66.328624][ T4113] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.154: corrupted in-inode xattr: e_name out of bounds [ 66.434058][ T4113] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.436857][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 66.452759][ C0] EXT4-fs (loop3): initial error at time 2000000008: ext4_iget_extra_inode:5128: inode 15 [ 66.462787][ C0] EXT4-fs (loop3): last error at time 2000000008: ext4_iget_extra_inode:5128: inode 15 [ 66.478487][ T4113] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.154: couldn't read orphan inode 15 (err -117) [ 66.538908][ T4113] loop3: lost filesystem error report for type 5 error -117 [ 66.582848][ T4113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.663750][ T4127] loop4: detected capacity change from 0 to 512 [ 66.779802][ T4132] netlink: 'syz.2.157': attribute type 4 has an invalid length. [ 66.831612][ T4131] netlink: 'syz.2.157': attribute type 4 has an invalid length. [ 66.844479][ T4134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.158'. [ 66.967290][ T4131] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.974707][ T4131] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.994968][ T4143] 9p: Bad value for 'wfdno' [ 67.121518][ T4151] loop0: detected capacity change from 0 to 512 [ 67.130937][ T4131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.138410][ T4131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.138853][ T4151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.161963][ T4151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.162241][ T4151] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.184844][ T4151] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.159: bg 0: block 217: padding at end of block bitmap is not set [ 67.188330][ T4151] EXT4-fs (loop0): Remounting filesystem read-only [ 67.240227][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.255319][ T68] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.255427][ T68] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.255470][ T68] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.255550][ T68] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.469638][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.752870][ T4168] loop1: detected capacity change from 0 to 512 [ 67.803257][ T4168] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.164: corrupted in-inode xattr: invalid ea_ino [ 67.852653][ T4168] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.856875][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 67.873010][ C0] EXT4-fs (loop1): initial error at time 2000000010: ext4_iget_extra_inode:5128: inode 15 [ 67.883419][ C0] EXT4-fs (loop1): last error at time 2000000010: ext4_iget_extra_inode:5128: inode 15 [ 67.888096][ T4168] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.164: couldn't read orphan inode 15 (err -117) [ 67.946250][ T4168] loop1: lost filesystem error report for type 5 error -117 [ 67.946747][ T4168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.010949][ T4164] loop0: detected capacity change from 0 to 1024 [ 68.043416][ T4164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.073603][ T4164] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 68.175628][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.282996][ T4167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 68.367529][ T4146] EXT4-fs: Ignoring removed oldalloc option [ 68.443853][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.536186][ T4178] netlink: 'syz.1.168': attribute type 2 has an invalid length. [ 68.551108][ T4176] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 68.560567][ T4171] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 68.576326][ T4178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 68.585979][ T4171] System zones: 0-1, 3-36 [ 68.624830][ T4174] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.646559][ T4174] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.166: bad orphan inode 131083 [ 68.670381][ T4174] loop0: lost filesystem error report for type 5 error -117 [ 68.676258][ T4174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.688378][ T4146] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.160: corrupted in-inode xattr: invalid ea_ino [ 68.713101][ T4171] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.165: bad orphan inode 134217728 [ 68.713366][ T4171] loop2: lost filesystem error report for type 5 error -117 [ 68.717426][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 68.717591][ C1] EXT4-fs (loop2): initial error at time 2000000011: ext4_orphan_get:1423 [ 68.717861][ C1] EXT4-fs (loop2): last error at time 2000000011: ext4_orphan_get:1423 [ 68.820794][ T4171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.827945][ T4146] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.846867][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 68.865025][ C0] EXT4-fs (loop4): initial error at time 2000000011: ext4_iget_extra_inode:5128: inode 15 [ 68.880704][ C0] EXT4-fs (loop4): last error at time 2000000011: ext4_iget_extra_inode:5128: inode 15 [ 68.896945][ T28] kauditd_printk_skb: 261 callbacks suppressed [ 68.896962][ T28] audit: type=1400 audit(2000000011.170:757): avc: denied { create } for pid=4173 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.932741][ T4174] netlink: zone id is out of range [ 68.942298][ T4146] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.160: couldn't read orphan inode 15 (err -117) [ 68.949903][ T4174] netlink: zone id is out of range [ 68.962692][ T4174] netlink: zone id is out of range [ 68.969080][ T4174] netlink: zone id is out of range [ 68.971149][ T4185] set_capacity_and_notify: 4 callbacks suppressed [ 68.971163][ T4185] loop3: detected capacity change from 0 to 256 [ 68.974870][ T4174] netlink: zone id is out of range [ 68.991879][ T4146] loop4: lost filesystem error report for type 5 error -117 [ 68.993522][ T4174] netlink: zone id is out of range [ 68.994031][ T4174] netlink: zone id is out of range [ 68.994097][ T4174] netlink: zone id is out of range [ 68.994146][ T4174] netlink: zone id is out of range [ 68.994178][ T4174] netlink: zone id is out of range [ 69.082567][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.134609][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.143236][ T4146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.426866][ T28] audit: type=1400 audit(2000000011.750:758): avc: denied { write } for pid=4144 comm="syz.4.160" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.664981][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.194751][ T4195] loop0: detected capacity change from 0 to 512 [ 71.210126][ T4195] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.250189][ T4195] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.181: corrupted in-inode xattr: invalid ea_ino [ 71.398228][ T4195] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.399825][ T4195] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.181: couldn't read orphan inode 15 (err -117) [ 71.409461][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 71.409543][ C0] EXT4-fs (loop0): initial error at time 2000000013: ext4_iget_extra_inode:5128: inode 15 [ 71.409659][ C0] EXT4-fs (loop0): last error at time 2000000013: ext4_iget_extra_inode:5128: inode 15 [ 71.669480][ T4195] loop0: lost filesystem error report for type 5 error -117 [ 72.204375][ T4212] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 72.283149][ T4195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.501046][ T4212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.510830][ T4221] loop1: detected capacity change from 0 to 512 [ 72.543882][ T4221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.584463][ T4218] bond1: (slave ip6erspan0): making interface the new active one [ 72.613859][ T4218] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 72.706797][ T4221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.720337][ T4221] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.792200][ T4221] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.175: bg 0: block 217: padding at end of block bitmap is not set [ 72.816945][ T28] audit: type=1400 audit(2000000015.120:759): avc: denied { write } for pid=4220 comm="syz.1.175" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.892640][ T4221] EXT4-fs (loop1): Remounting filesystem read-only [ 72.913520][ T28] audit: type=1400 audit(2000000015.240:760): avc: denied { setopt } for pid=4231 comm="syz.2.178" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.232025][ T28] audit: type=1400 audit(2000000015.460:761): avc: denied { getopt } for pid=4231 comm="syz.2.178" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.353041][ T28] audit: type=1400 audit(2000000015.460:762): avc: denied { ioctl } for pid=4231 comm="syz.2.178" path="socket:[7339]" dev="sockfs" ino=7339 ioctlcmd=0x6f02 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.510877][ T4217] loop3: detected capacity change from 0 to 512 [ 73.541433][ T4217] EXT4-fs: Ignoring removed oldalloc option [ 73.634212][ T4217] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.692295][ T4217] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.176: invalid indirect mapped block 83886080 (level 1) [ 73.708100][ T4217] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.711330][ T4217] EXT4-fs (loop3): Remounting filesystem read-only [ 73.721682][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 73.721862][ C1] EXT4-fs (loop3): initial error at time 2000000016: ext4_free_branches:1023: inode 16 [ 73.722071][ C1] EXT4-fs (loop3): last error at time 2000000016: ext4_free_branches:1023: inode 16 [ 73.863232][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.902569][ T4217] EXT4-fs (loop3): 1 orphan inode deleted [ 73.912381][ T4217] EXT4-fs (loop3): 1 truncate cleaned up [ 73.948409][ T4217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.107678][ T28] audit: type=1400 audit(2000000016.430:763): avc: denied { accept } for pid=4244 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.134985][ T4245] netlink: 40 bytes leftover after parsing attributes in process `syz.0.180'. [ 74.555206][ T28] audit: type=1400 audit(2000000016.880:764): avc: denied { write } for pid=4216 comm="syz.3.176" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.584552][ T4247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 74.621753][ T28] audit: type=1400 audit(2000000016.910:765): avc: denied { setattr } for pid=4216 comm="syz.3.176" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.745523][ T4217] veth3: entered promiscuous mode [ 74.764283][ T4249] loop4: detected capacity change from 0 to 128 [ 74.783299][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.795328][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.807499][ T310] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 74.826011][ T4249] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.860020][ T310] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 74.869115][ T4249] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.337482][ T4255] loop3: detected capacity change from 0 to 764 [ 75.571337][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.850044][ T4256] macvtap1: entered promiscuous mode [ 75.870134][ T4255] Symlink component flag not implemented [ 75.875718][ T4256] macvtap1: entered allmulticast mode [ 75.883348][ T4255] Symlink component flag not implemented (116) [ 75.890123][ T4256] veth1_vlan: entered allmulticast mode [ 76.106999][ T4255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.183'. [ 77.170680][ T4287] loop4: detected capacity change from 0 to 1024 [ 77.179730][ T4289] loop2: detected capacity change from 0 to 512 [ 77.200460][ T4287] ext4: Unknown parameter 'hash' [ 77.268205][ T4289] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 77.289448][ T4289] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 77.409174][ T4289] EXT4-fs (loop2): 1 truncate cleaned up [ 78.578381][ T4289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.594312][ T4286] loop0: detected capacity change from 0 to 512 [ 78.869203][ T4296] loop3: detected capacity change from 0 to 512 [ 78.920682][ T4296] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.969056][ T4296] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.196: bad orphan inode 131083 [ 78.983587][ T4286] EXT4-fs: Ignoring removed oldalloc option [ 79.008970][ T4296] loop3: lost filesystem error report for type 5 error -117 [ 79.013346][ T4296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.045376][ T4286] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.134409][ T4289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.195'. [ 79.168959][ T4296] net_ratelimit: 70 callbacks suppressed [ 79.169003][ T4296] netlink: zone id is out of range [ 79.182975][ T4304] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 79.204976][ T28] audit: type=1400 audit(2000000021.510:766): avc: denied { write } for pid=4288 comm="syz.2.195" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.234689][ T4296] netlink: zone id is out of range [ 79.245433][ T4286] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.194: invalid indirect mapped block 83886080 (level 1) [ 79.263678][ T4296] netlink: zone id is out of range [ 79.274621][ T4296] netlink: zone id is out of range [ 79.282853][ T28] audit: type=1400 audit(2000000021.510:767): avc: denied { create } for pid=4288 comm="syz.2.195" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 79.331162][ T4296] netlink: zone id is out of range [ 79.341784][ T4296] netlink: zone id is out of range [ 79.347429][ T4296] netlink: zone id is out of range [ 79.356191][ T4296] netlink: zone id is out of range [ 79.361775][ T4296] netlink: zone id is out of range [ 79.367975][ T4296] netlink: zone id is out of range [ 79.515207][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.516281][ T4286] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 79.526845][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 79.545762][ C0] EXT4-fs (loop0): initial error at time 2000000021: ext4_free_branches:1023: inode 16 [ 79.558870][ C0] EXT4-fs (loop0): last error at time 2000000021: ext4_free_branches:1023: inode 16 [ 79.692814][ T4286] EXT4-fs (loop0): Remounting filesystem read-only [ 79.709327][ T4286] EXT4-fs (loop0): 1 orphan inode deleted [ 79.720729][ T4286] EXT4-fs (loop0): 1 truncate cleaned up [ 79.792359][ T4286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.837886][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.986868][ T4314] xt_hashlimit: max too large, truncated to 1048576 [ 79.995855][ T4314] ipt_REJECT: TCP_RESET invalid for non-tcp [ 80.110774][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 80.120032][ T28] audit: type=1400 audit(2000000022.440:768): avc: denied { write } for pid=4284 comm="syz.0.194" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.144044][ T4307] macvtap1: entered promiscuous mode [ 80.171504][ T4307] macvtap1: entered allmulticast mode [ 80.185598][ T4307] veth1_vlan: entered allmulticast mode [ 80.363876][ T4312] loop1: detected capacity change from 0 to 1024 [ 80.410914][ T4319] veth3: entered promiscuous mode [ 80.415024][ T4312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.443163][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.478720][ T4312] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 80.554536][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.586234][ T4331] loop1: detected capacity change from 0 to 128 [ 80.665519][ T28] audit: type=1400 audit(2000000022.990:769): avc: denied { validate_trans } for pid=4330 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 80.827655][ T28] audit: type=1400 audit(2000000023.160:770): avc: denied { read } for pid=3020 comm="dhcpcd" name="n25" dev="tmpfs" ino=2728 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.868334][ T28] audit: type=1400 audit(2000000023.160:771): avc: denied { open } for pid=3020 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2728 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.898950][ T4329] loop0: detected capacity change from 0 to 256 [ 80.917901][ T28] audit: type=1400 audit(2000000023.160:772): avc: denied { getattr } for pid=3020 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2728 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.023740][ T4342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 81.059422][ T28] audit: type=1400 audit(2000000023.380:773): avc: denied { write } for pid=4334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.084658][ T4353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 81.125002][ T28] audit: type=1400 audit(2000000023.380:774): avc: denied { create } for pid=4334 comm="dhcpcd-run-hook" name="resolv.conf.ip6gretap0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.149333][ T28] audit: type=1400 audit(2000000023.380:775): avc: denied { write } for pid=4334 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.ip6gretap0.link" dev="tmpfs" ino=2746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.518655][ T4362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 81.726638][ T4392] loop1: detected capacity change from 0 to 512 [ 81.883843][ T4392] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 82.027729][ T4349] loop2: detected capacity change from 0 to 512 [ 82.051926][ T4391] loop4: detected capacity change from 0 to 512 [ 82.263641][ T4349] EXT4-fs: Ignoring removed oldalloc option [ 82.383187][ T4349] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.208: corrupted in-inode xattr: invalid ea_ino [ 82.401858][ T3431] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 82.441278][ T4349] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.448325][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 82.454060][ T4391] EXT4-fs: Ignoring removed oldalloc option [ 82.459477][ C0] EXT4-fs (loop2): initial error at time 2000000024: ext4_iget_extra_inode:5128: inode 15 [ 82.459907][ C0] EXT4-fs (loop2): last error at time 2000000024: ext4_iget_extra_inode:5128: inode 15 [ 82.511482][ T4349] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.208: couldn't read orphan inode 15 (err -117) [ 82.511514][ T4349] loop2: lost filesystem error report for type 5 error -117 [ 82.573895][ T4391] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.636640][ T4349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.790037][ T4403] loop0: detected capacity change from 0 to 764 [ 82.838934][ T4391] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.213: invalid indirect mapped block 83886080 (level 1) [ 82.862072][ T4391] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.874309][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 82.891879][ C0] EXT4-fs (loop4): initial error at time 2000000025: ext4_free_branches:1023: inode 16 [ 82.905159][ C0] EXT4-fs (loop4): last error at time 2000000025: ext4_free_branches:1023: inode 16 [ 82.925856][ T4391] EXT4-fs (loop4): Remounting filesystem read-only [ 82.941685][ T4391] EXT4-fs (loop4): 1 orphan inode deleted [ 82.950557][ T4391] EXT4-fs (loop4): 1 truncate cleaned up [ 83.001710][ T4403] Symlink component flag not implemented [ 83.001988][ T4403] Symlink component flag not implemented (116) [ 83.080113][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.105371][ T4412] netlink: 'syz.2.216': attribute type 2 has an invalid length. [ 83.118372][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 83.132056][ T4391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.210692][ T4403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.225'. [ 83.242703][ T4415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.256342][ T4415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.278973][ T4417] loop0: detected capacity change from 0 to 128 [ 83.478449][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 83.544118][ T4415] loop1: detected capacity change from 0 to 512 [ 83.618636][ T4391] veth3: entered promiscuous mode [ 83.649246][ T4415] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 83.692204][ T4415] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 83.730887][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.744291][ T4415] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.217: Corrupt directory, running e2fsck is recommended [ 83.830038][ T4415] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 83.847396][ T4415] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.217: corrupted in-inode xattr: e_name out of bounds [ 83.872219][ T4415] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.873891][ T4415] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.217: couldn't read orphan inode 15 (err -117) [ 83.883169][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 83.883252][ C1] EXT4-fs (loop1): initial error at time 2000000026: ext4_iget_extra_inode:5128: inode 15 [ 83.883416][ C1] EXT4-fs (loop1): last error at time 2000000026: ext4_iget_extra_inode:5128: inode 15 [ 83.926558][ T4415] loop1: lost filesystem error report for type 5 error -117 [ 83.949867][ T4415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.509723][ T4431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 84.567882][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 84.726192][ T4434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 85.078508][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.528266][ T4447] loop3: detected capacity change from 0 to 512 [ 85.545741][ T4447] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 85.677069][ T3431] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 86.076230][ T4453] loop3: detected capacity change from 0 to 512 [ 86.113357][ T4453] EXT4-fs: Ignoring removed oldalloc option [ 86.220040][ T4453] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.229: corrupted in-inode xattr: invalid ea_ino [ 86.269317][ T4453] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.278746][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 86.295818][ C1] EXT4-fs (loop3): initial error at time 2000000028: ext4_iget_extra_inode:5128: inode 15 [ 86.307215][ C1] EXT4-fs (loop3): last error at time 2000000028: ext4_iget_extra_inode:5128: inode 15 [ 86.344499][ T4453] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.229: couldn't read orphan inode 15 (err -117) [ 86.379257][ T4453] loop3: lost filesystem error report for type 5 error -117 [ 86.535751][ T4453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.721347][ T4460] xt_hashlimit: max too large, truncated to 1048576 [ 86.734251][ T4460] ipt_REJECT: TCP_RESET invalid for non-tcp [ 86.821244][ T4468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.822790][ T4451] loop2: detected capacity change from 0 to 1024 [ 86.836872][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 86.836887][ T28] audit: type=1400 audit(2000000029.160:787): avc: denied { write } for pid=4452 comm="syz.3.229" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.839899][ T4468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.845935][ T4469] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.229: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 86.928599][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 86.959043][ T4468] team0: Port device team_slave_0 removed [ 86.960843][ T4451] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 87.039830][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.066213][ T28] audit: type=1400 audit(2000000029.390:788): avc: denied { ioctl } for pid=4470 comm="syz.3.234" path="socket:[7003]" dev="sockfs" ino=7003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.132923][ T4471] loop3: detected capacity change from 0 to 8192 [ 87.166793][ T4473] loop2: detected capacity change from 0 to 1024 [ 87.179697][ T4471] loop3: p1 < > p2 p4 < p5 > [ 87.186336][ T4471] loop3: partition table partially beyond EOD, truncated [ 87.193942][ T4471] loop3: p1 start 134217728 is beyond EOD, truncated [ 87.201106][ T4471] loop3: p2 size 591360 extends beyond EOD, truncated [ 87.203661][ T4473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.211286][ T4471] loop3: p5 size 591360 extends beyond EOD, truncated [ 87.241929][ T4473] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 87.307419][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.341829][ T4478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.351747][ T4478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.460131][ T4478] loop4: detected capacity change from 0 to 512 [ 87.484939][ T4478] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 87.497563][ T4478] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 87.516575][ T4478] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.237: Corrupt directory, running e2fsck is recommended [ 87.532084][ T4478] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 87.541469][ T4478] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.237: corrupted in-inode xattr: e_name out of bounds [ 87.555893][ T4478] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.556633][ T4478] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.237: couldn't read orphan inode 15 (err -117) [ 87.565907][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 87.565957][ C0] EXT4-fs (loop4): initial error at time 2000000029: ext4_iget_extra_inode:5128: inode 15 [ 87.566090][ C0] EXT4-fs (loop4): last error at time 2000000029: ext4_iget_extra_inode:5128: inode 15 [ 87.616857][ T4478] loop4: lost filesystem error report for type 5 error -117 [ 87.621571][ T4478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.666543][ T4488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.238'. [ 87.754367][ T4488] 9p: Bad value for 'wfdno' [ 87.786934][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 87.841850][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 87.845401][ T28] audit: type=1400 audit(2000000030.170:789): avc: denied { create } for pid=4496 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.891303][ T28] audit: type=1400 audit(2000000030.220:790): avc: denied { bind } for pid=4496 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.942985][ T4503] 9pnet_fd: p9_fd_create_unix (4503): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 87.988278][ T4505] loop2: detected capacity change from 0 to 128 [ 88.192997][ T4503] loop1: detected capacity change from 0 to 256 [ 88.296134][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.899461][ T4518] loop4: detected capacity change from 0 to 1024 [ 88.908332][ T4518] ext4: Bad value for 'init_itable' [ 89.067750][ T4524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.079799][ T4524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.168233][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 89.182657][ T4528] netlink: 'syz.0.252': attribute type 2 has an invalid length. [ 89.192475][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 89.251678][ T4524] team0: Port device team_slave_0 removed [ 89.754368][ T4531] loop3: detected capacity change from 0 to 256 [ 89.935260][ T4531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.982028][ T4531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.564906][ T4543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.598987][ T4543] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.845787][ T4516] set_capacity_and_notify: 1 callbacks suppressed [ 90.845823][ T4516] loop1: detected capacity change from 0 to 1024 [ 90.913025][ T4516] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 90.925614][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.476672][ T4560] loop1: detected capacity change from 0 to 512 [ 91.703943][ T4560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.070253][ T4560] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.152578][ T28] audit: type=1400 audit(2000000034.480:791): avc: denied { write } for pid=4557 comm="syz.1.260" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.174224][ T28] audit: type=1400 audit(2000000034.480:792): avc: denied { write } for pid=4557 comm="syz.1.260" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.196039][ T28] audit: type=1400 audit(2000000034.480:793): avc: denied { remove_name } for pid=4557 comm="syz.1.260" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.416485][ T4558] pim6reg: entered allmulticast mode [ 92.962663][ T28] audit: type=1400 audit(2000000034.480:794): avc: denied { rename } for pid=4557 comm="syz.1.260" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.985220][ T28] audit: type=1400 audit(2000000034.480:795): avc: denied { unlink } for pid=4557 comm="syz.1.260" name="file3" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.007634][ T28] audit: type=1400 audit(2000000034.970:796): avc: denied { write } for pid=4567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.030793][ T28] audit: type=1400 audit(2000000035.030:797): avc: denied { write } for pid=4578 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.090771][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.202550][ T4590] loop1: detected capacity change from 0 to 256 [ 93.208959][ T28] audit: type=1400 audit(2000000035.520:798): avc: denied { read } for pid=4587 comm="syz.1.263" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 93.456768][ T28] audit: type=1400 audit(2000000035.520:799): avc: denied { open } for pid=4587 comm="syz.1.263" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 93.593235][ T4593] loop0: detected capacity change from 0 to 512 [ 93.698225][ T28] audit: type=1400 audit(2000000035.700:800): avc: denied { ioctl } for pid=4587 comm="syz.1.263" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 93.738410][ T4593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.765994][ T4593] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.818627][ T4601] netlink: 'syz.4.265': attribute type 1 has an invalid length. [ 93.841665][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 93.865611][ T4601] netlink: 'syz.4.265': attribute type 10 has an invalid length. [ 93.887420][ T4586] pim6reg: entered allmulticast mode [ 93.952325][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.062140][ T4601] team0: Device wg2 is of different type [ 94.139571][ T4608] loop3: detected capacity change from 0 to 512 [ 95.307385][ T4629] aD: renamed from lo [ 95.319382][ T4646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.272'. [ 97.479690][ T4650] loop2: detected capacity change from 0 to 512 [ 97.539969][ T4650] EXT4-fs: Ignoring removed oldalloc option [ 97.597915][ T4650] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.832056][ T4650] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.276: invalid indirect mapped block 83886080 (level 1) [ 97.869463][ T4650] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 97.872908][ T4650] EXT4-fs (loop2): Remounting filesystem read-only [ 97.883661][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 97.883890][ C1] EXT4-fs (loop2): initial error at time 2000000040: ext4_free_branches:1023: inode 16 [ 97.884675][ C1] EXT4-fs (loop2): last error at time 2000000040: ext4_free_branches:1023: inode 16 [ 97.988423][ T4650] EXT4-fs (loop2): 1 orphan inode deleted [ 98.006469][ T4650] EXT4-fs (loop2): 1 truncate cleaned up [ 98.091003][ T4650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.362560][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 98.362579][ T28] audit: type=1400 audit(2000000040.690:805): avc: denied { write } for pid=4649 comm="syz.2.276" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.399546][ T4674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 98.424948][ T4675] loop3: detected capacity change from 0 to 512 [ 98.939517][ T4675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.967155][ T4675] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.979512][ T4650] veth3: entered promiscuous mode [ 99.017704][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.037894][ T28] audit: type=1400 audit(2000000041.370:806): avc: denied { write } for pid=4665 comm="syz.3.278" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.289672][ T4686] loop1: detected capacity change from 0 to 512 [ 99.297556][ T28] audit: type=1400 audit(2000000041.370:807): avc: denied { write } for pid=4665 comm="syz.3.278" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.313126][ T4681] netlink: 56 bytes leftover after parsing attributes in process `syz.1.280'. [ 99.391187][ T4686] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.836575][ T4686] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.280: corrupted xattr entries [ 99.883868][ T4686] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.884253][ T4686] EXT4-fs (loop1): 1 truncate cleaned up [ 99.893545][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 99.893570][ C1] EXT4-fs (loop1): initial error at time 2000000042: xattr_find_entry:337: inode 15 [ 99.893602][ C1] EXT4-fs (loop1): last error at time 2000000042: xattr_find_entry:337: inode 15 [ 100.079678][ T4686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.165508][ T4692] loop2: detected capacity change from 0 to 512 [ 100.201426][ T4666] pim6reg: entered allmulticast mode [ 100.343395][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.442830][ T4699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.284'. [ 100.819940][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.026390][ T4708] netlink: 56 bytes leftover after parsing attributes in process `syz.0.297'. [ 101.040754][ T4714] loop0: detected capacity change from 0 to 512 [ 101.041381][ T4714] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.043228][ T4714] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.297: corrupted xattr entries [ 101.043256][ T4714] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.043499][ T4714] EXT4-fs (loop0): 1 truncate cleaned up [ 101.044021][ T4714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.842865][ T28] audit: type=1400 audit(2000000045.160:808): avc: denied { ioctl } for pid=4735 comm="syz.3.293" path="socket:[8304]" dev="sockfs" ino=8304 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 104.482397][ T4745] loop2: detected capacity change from 0 to 512 [ 104.589671][ T4745] EXT4-fs (loop2): 1 orphan inode deleted [ 104.613633][ T4745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.638370][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.672007][ T4757] loop3: detected capacity change from 0 to 512 [ 104.682259][ T4758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.299'. [ 104.709126][ T4757] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 104.814963][ T4757] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 104.826542][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.604199][ T4772] netlink: 'syz.0.305': attribute type 10 has an invalid length. [ 105.615835][ T4770] loop2: detected capacity change from 0 to 1024 [ 105.630360][ T4772] netlink: 168 bytes leftover after parsing attributes in process `syz.0.305'. [ 105.666649][ T4770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.684157][ T4776] loop0: detected capacity change from 0 to 128 [ 105.816667][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.904219][ T4768] loop1: detected capacity change from 0 to 512 [ 105.925043][ T4768] EXT4-fs: Ignoring removed oldalloc option [ 105.941946][ T4768] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.303: corrupted in-inode xattr: invalid ea_ino [ 105.955956][ T4768] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.956726][ T4768] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.303: couldn't read orphan inode 15 (err -117) [ 105.956836][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 105.957326][ C0] EXT4-fs (loop1): initial error at time 2000000048: ext4_iget_extra_inode:5128: inode 15 [ 105.957416][ C0] EXT4-fs (loop1): last error at time 2000000048: ext4_iget_extra_inode:5128: inode 15 [ 106.006366][ T4768] loop1: lost filesystem error report for type 5 error -117 [ 106.011341][ T4768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.044805][ T28] audit: type=1400 audit(2000000048.370:809): avc: denied { write } for pid=4767 comm="syz.1.303" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.084587][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.209690][ T4792] loop3: detected capacity change from 0 to 512 [ 106.222292][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 106.251509][ T4792] EXT4-fs: Ignoring removed oldalloc option [ 106.303121][ T4792] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.319: corrupted in-inode xattr: invalid ea_ino [ 106.304488][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 106.353999][ T4792] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.366870][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 106.382775][ C1] EXT4-fs (loop3): initial error at time 2000000048: ext4_iget_extra_inode:5128: inode 15 [ 106.393198][ C1] EXT4-fs (loop3): last error at time 2000000048: ext4_iget_extra_inode:5128: inode 15 [ 106.412887][ T4792] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.319: couldn't read orphan inode 15 (err -117) [ 106.425840][ T4792] loop3: lost filesystem error report for type 5 error -117 [ 106.427045][ T4792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.621368][ T4791] loop2: detected capacity change from 0 to 764 [ 106.990710][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.444870][ T4791] Symlink component flag not implemented [ 107.458435][ T4791] Symlink component flag not implemented (116) [ 107.544711][ T4791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.309'. [ 107.681541][ T4815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.724319][ T4815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.780245][ T4815] loop2: detected capacity change from 0 to 512 [ 107.831139][ T4815] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 107.843040][ T4815] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 107.966977][ T4815] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.312: Corrupt directory, running e2fsck is recommended [ 107.984508][ T4815] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 107.998215][ T4815] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.312: corrupted in-inode xattr: e_name out of bounds [ 108.022488][ T4815] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.023134][ T4815] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.312: couldn't read orphan inode 15 (err -117) [ 108.032424][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 108.032472][ C1] EXT4-fs (loop2): initial error at time 2000000050: ext4_iget_extra_inode:5128: inode 15 [ 108.032604][ C1] EXT4-fs (loop2): last error at time 2000000050: ext4_iget_extra_inode:5128: inode 15 [ 108.117957][ T4815] loop2: lost filesystem error report for type 5 error -117 [ 108.124113][ T4815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.528119][ T4827] loop4: detected capacity change from 0 to 1024 [ 108.588518][ T4827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.647019][ T4827] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 108.710732][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.770779][ T4833] loop4: detected capacity change from 0 to 1024 [ 108.812161][ T4833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.873694][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.984040][ T4839] netlink: 'syz.4.321': attribute type 10 has an invalid length. [ 108.996092][ T4839] netlink: 168 bytes leftover after parsing attributes in process `syz.4.321'. [ 109.041215][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.391474][ T4851] netlink: 'syz.3.324': attribute type 17 has an invalid length. [ 111.497657][ T4851] bridge0: port 3(batadv1) entered blocking state [ 111.504184][ T4851] bridge0: port 3(batadv1) entered listening state [ 111.536930][ T4851] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 111.737772][ T4859] set_capacity_and_notify: 2 callbacks suppressed [ 111.737792][ T4859] loop4: detected capacity change from 0 to 512 [ 111.813029][ T4864] random: crng reseeded on system resumption [ 111.822284][ T28] audit: type=1400 audit(2000000054.140:810): avc: denied { write } for pid=4861 comm="syz.0.326" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 112.083123][ T4859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.108435][ T4859] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.119420][ T28] audit: type=1400 audit(2000000054.140:811): avc: denied { open } for pid=4861 comm="syz.0.326" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 112.320779][ T28] audit: type=1400 audit(2000000054.630:812): avc: denied { write } for pid=4854 comm="syz.4.325" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.499359][ T28] audit: type=1400 audit(2000000054.630:813): avc: denied { write } for pid=4854 comm="syz.4.325" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.587773][ T4855] pim6reg: entered allmulticast mode [ 113.609976][ T4884] loop1: detected capacity change from 0 to 256 [ 113.718965][ T4888] loop0: detected capacity change from 0 to 1024 [ 113.748186][ T4888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.794084][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.573419][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.112061][ T4906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.340'. [ 115.170463][ T4907] loop2: detected capacity change from 0 to 512 [ 115.198897][ T4907] EXT4-fs (loop2): fragment/cluster size (4096) != block size (1024) [ 115.277252][ T28] audit: type=1400 audit(2000000057.610:814): avc: denied { ioctl } for pid=4912 comm="syz.1.341" path="socket:[9596]" dev="sockfs" ino=9596 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.350464][ T4915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 115.401512][ T4921] loop1: detected capacity change from 0 to 4096 [ 115.409500][ T4921] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 115.440338][ T28] audit: type=1400 audit(2000000057.770:815): avc: denied { execute } for pid=4904 comm="syz.0.339" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 115.838893][ T4932] netlink: 'syz.2.344': attribute type 1 has an invalid length. [ 115.857820][ T4932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 115.879498][ T4932] netlink: 'syz.2.344': attribute type 10 has an invalid length. [ 115.898903][ T4932] team0: Device wg2 is of different type [ 116.062285][ T4941] loop1: detected capacity change from 0 to 512 [ 116.092666][ T4941] EXT4-fs (loop1): 1 orphan inode deleted [ 116.099436][ T4941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.111777][ T4941] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.217909][ T28] audit: type=1400 audit(2000000058.380:816): avc: denied { write } for pid=4931 comm="syz.1.354" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.593843][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 116.621770][ T4953] netlink: 40 bytes leftover after parsing attributes in process `syz.3.349'. [ 116.669291][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 116.705475][ T4959] tipc: Started in network mode [ 116.710541][ T4959] tipc: Node identity 52c7075b3a9e, cluster identity 4711 [ 116.727453][ T4959] tipc: Enabled bearer , priority 0 [ 116.749067][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.950906][ T4940] syzkaller0: entered promiscuous mode [ 116.989855][ T4940] syzkaller0: entered allmulticast mode [ 117.035462][ T4940] tipc: Resetting bearer [ 117.056279][ T4937] tipc: Resetting bearer [ 117.092389][ T4937] tipc: Disabling bearer [ 117.846941][ T4966] loop3: detected capacity change from 0 to 256 [ 117.896467][ T4955] loop2: detected capacity change from 0 to 1024 [ 118.291684][ T4955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.348608][ T4955] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 118.443007][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.521193][ T4986] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 118.527870][ T4986] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 118.557620][ T4986] vhci_hcd vhci_hcd.0: Device attached [ 118.587329][ T4989] vhci_hcd vhci_hcd.0: port 0 already used [ 118.627574][ T28] audit: type=1400 audit(2000000060.950:817): avc: denied { getopt } for pid=4985 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.713208][ T4989] loop2: detected capacity change from 0 to 512 [ 118.728654][ T4989] EXT4-fs: Ignoring removed nobh option [ 118.749909][ T4989] EXT4-fs (loop2): orphan cleanup on readonly fs [ 118.775076][ T4989] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.357: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 118.826934][ T4145] usb 6-1: SetAddress Request (2) to port 0 [ 118.832981][ T4145] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 118.843391][ T4989] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 118.843747][ T4989] EXT4-fs (loop2): Remounting filesystem read-only [ 118.853016][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 118.853040][ C1] EXT4-fs (loop2): initial error at time 2000000061: ext4_xattr_inode_update_ref:1037: inode 11 [ 118.853088][ C1] EXT4-fs (loop2): last error at time 2000000061: ext4_xattr_inode_update_ref:1037: inode 11 [ 118.894452][ T4989] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.357: ea_inode dec ref err=-117 [ 118.907425][ T4989] EXT4-fs (loop2): 1 orphan inode deleted [ 118.919921][ T4989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 118.943431][ T4987] vhci_hcd: connection reset by peer [ 118.949241][ T49] vhci_hcd vhci_hcd.2: stop threads [ 118.954501][ T49] vhci_hcd vhci_hcd.2: release socket [ 118.961512][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 119.040270][ T5007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 119.805009][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.890454][ T5021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 119.904341][ T5026] netlink: 'syz.4.367': attribute type 2 has an invalid length. [ 119.914136][ T5026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 119.943018][ T5028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.952086][ T5028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.000848][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 120.056290][ T5028] team0: Port device team_slave_0 removed [ 121.424161][ T5053] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 121.900845][ T5053] bond1 (unregistering): Released all slaves [ 122.144869][ T28] audit: type=1400 audit(2000000064.470:818): avc: denied { accept } for pid=5067 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.251608][ T5069] loop2: detected capacity change from 0 to 256 [ 122.389479][ T5069] FAT-fs (loop2): Directory bread(block 64) failed [ 122.415766][ T5069] FAT-fs (loop2): Directory bread(block 65) failed [ 122.454249][ T5069] FAT-fs (loop2): Directory bread(block 66) failed [ 122.485926][ T5069] FAT-fs (loop2): Directory bread(block 67) failed [ 122.514814][ T5069] FAT-fs (loop2): Directory bread(block 68) failed [ 122.538516][ T5069] FAT-fs (loop2): Directory bread(block 69) failed [ 122.565803][ T5069] FAT-fs (loop2): Directory bread(block 70) failed [ 122.581817][ T5069] FAT-fs (loop2): Directory bread(block 71) failed [ 122.601245][ T5069] FAT-fs (loop2): Directory bread(block 72) failed [ 122.622992][ T5069] FAT-fs (loop2): Directory bread(block 73) failed [ 122.783174][ T5072] loop0: detected capacity change from 0 to 512 [ 122.804254][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop0 [ 122.820259][ T5072] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 123.040111][ T5080] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 123.060282][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 123.072206][ T5083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.092016][ T5080] netlink: 'syz.3.383': attribute type 10 has an invalid length. [ 123.104368][ T5083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.129548][ T5083] loop0: detected capacity change from 0 to 512 [ 123.147028][ T5080] team0: Device wg2 is of different type [ 123.163566][ T5092] loop1: detected capacity change from 0 to 512 [ 123.176439][ T5083] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 123.330912][ T5092] EXT4-fs: Ignoring removed oldalloc option [ 123.518205][ T5092] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.393: corrupted in-inode xattr: invalid ea_ino [ 123.556244][ T5097] loop2: detected capacity change from 0 to 512 [ 123.563322][ T5092] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.563802][ T5092] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.393: couldn't read orphan inode 15 (err -117) [ 123.573007][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 123.573027][ C1] EXT4-fs (loop1): initial error at time 2000000065: ext4_iget_extra_inode:5128: inode 15 [ 123.573059][ C1] EXT4-fs (loop1): last error at time 2000000065: ext4_iget_extra_inode:5128: inode 15 [ 123.629480][ T5083] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 123.719060][ T5083] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.382: Corrupt directory, running e2fsck is recommended [ 123.732732][ T5097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 123.778740][ T5097] System zones: 1-12 [ 123.793813][ T5097] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.387: corrupted in-inode xattr: e_value size too large [ 123.839853][ T5097] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.846833][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 123.862448][ C1] EXT4-fs (loop2): initial error at time 2000000066: ext4_iget_extra_inode:5128: inode 15 [ 123.872504][ C1] EXT4-fs (loop2): last error at time 2000000066: ext4_iget_extra_inode:5128: inode 15 [ 124.186132][ T4145] usb 6-1: device descriptor read/8, error -110 [ 124.198004][ T5083] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 124.206769][ T5083] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.382: corrupted in-inode xattr: e_name out of bounds [ 124.207310][ T5092] loop1: lost filesystem error report for type 5 error -117 [ 124.221332][ T5083] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.247185][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 124.265181][ C0] EXT4-fs (loop0): initial error at time 2000000066: ext4_iget_extra_inode:5128: inode 15 [ 124.276534][ C0] EXT4-fs (loop0): last error at time 2000000066: ext4_iget_extra_inode:5128: inode 15 [ 124.307563][ T4145] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 124.797148][ T5083] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.382: couldn't read orphan inode 15 (err -117) [ 124.810110][ T5092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.823082][ T5097] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.387: couldn't read orphan inode 15 (err -117) [ 124.835283][ T5097] loop2: lost filesystem error report for type 5 error -117 [ 124.837705][ T5083] loop0: lost filesystem error report for type 5 error -117 [ 124.892435][ T5097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.912419][ T4145] usb 6-1: enqueue for inactive port 0 [ 124.918219][ T4145] usb 6-1: enqueue for inactive port 0 [ 124.923910][ T4145] usb 6-1: enqueue for inactive port 0 [ 124.936845][ T28] audit: type=1400 audit(2000000067.260:819): avc: denied { write } for pid=5095 comm="syz.2.387" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.959215][ T5092] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.393: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 124.991905][ T28] audit: type=1400 audit(2000000067.290:820): avc: denied { write } for pid=5084 comm="syz.1.393" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.017774][ T5097] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.387: Unrecognised inode hash code 4 [ 125.040515][ T5083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.057216][ T5097] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.387: Corrupt directory, running e2fsck is recommended [ 125.075035][ T28] audit: type=1400 audit(2000000067.320:821): avc: denied { create } for pid=5095 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.104242][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.127793][ T28] audit: type=1400 audit(2000000067.340:822): avc: denied { write } for pid=5095 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.153643][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.170568][ T28] audit: type=1400 audit(2000000067.340:823): avc: denied { write } for pid=5095 comm="syz.2.387" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.193266][ T28] audit: type=1400 audit(2000000067.340:824): avc: denied { write } for pid=5095 comm="syz.2.387" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.215231][ T28] audit: type=1400 audit(2000000067.350:825): avc: denied { write } for pid=5095 comm="syz.2.387" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.237301][ T28] audit: type=1400 audit(2000000067.350:826): avc: denied { write } for pid=5095 comm="syz.2.387" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.260574][ T28] audit: type=1400 audit(2000000067.350:827): avc: denied { rename } for pid=5095 comm="syz.2.387" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.750626][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.830953][ T5119] loop1: detected capacity change from 0 to 764 [ 126.546845][ C1] bridge0: port 3(batadv1) entered learning state [ 126.860497][ T5124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'. [ 126.928322][ T4145] usb usb6-port1: attempt power cycle [ 128.822392][ T5134] pim6reg: left allmulticast mode [ 130.771719][ T5154] xt_nat: multiple ranges no longer supported [ 130.811772][ T5154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 130.881266][ T5160] loop3: detected capacity change from 0 to 512 [ 130.928762][ T5160] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.401: Directory hole found for htree index block 0 [ 131.032332][ T5160] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 131.036541][ T5160] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 131.045945][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 131.045966][ C0] EXT4-fs (loop3): initial error at time 2000000073: dx_probe:791: inode 2 [ 131.045999][ C0] EXT4-fs (loop3): last error at time 2000000073: dx_probe:791: inode 2 [ 131.172638][ T5160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.205271][ T28] audit: type=1400 audit(2000000073.530:828): avc: denied { unmount } for pid=5170 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 131.207876][ T5160] lo: entered allmulticast mode [ 131.245857][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 131.316520][ T5165] tipc: Started in network mode [ 131.322411][ T5165] tipc: Node identity be7285292b8e, cluster identity 4711 [ 131.330721][ T5165] tipc: Enabled bearer , priority 0 [ 131.348881][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.388350][ T5165] syzkaller0: entered promiscuous mode [ 131.402130][ T5165] syzkaller0: entered allmulticast mode [ 131.408129][ T4145] usb usb6-port1: unable to enumerate USB device [ 131.409512][ T5165] tipc: Resetting bearer [ 131.442794][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 131.458930][ T5163] tipc: Resetting bearer [ 131.461067][ T28] audit: type=1400 audit(2000000073.760:829): avc: denied { mounton } for pid=5176 comm="syz.3.410" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 131.507694][ T5163] tipc: Disabling bearer [ 131.550426][ T28] audit: type=1400 audit(2000000073.880:830): avc: denied { listen } for pid=5185 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.582440][ T28] audit: type=1400 audit(2000000073.900:831): avc: denied { accept } for pid=5185 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.637516][ T28] audit: type=1400 audit(2000000073.960:832): avc: denied { read } for pid=5183 comm="syz.0.412" lport=55713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.841230][ T5200] dvmrp1: entered allmulticast mode [ 131.850939][ T5193] loop3: detected capacity change from 0 to 32768 [ 131.868982][ T5200] dvmrp1: left allmulticast mode [ 132.484201][ T5206] netlink: 'syz.1.418': attribute type 29 has an invalid length. [ 132.506263][ T5208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.524069][ T5206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.418'. [ 132.681205][ T5208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.696168][ T5211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.418'. [ 132.781882][ T5216] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 132.804392][ T28] audit: type=1400 audit(2000000075.110:833): avc: denied { mac_admin } for pid=5212 comm="syz.0.420" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 132.841881][ T5193] loop3: p1 p3 < > [ 132.877905][ T5211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 132.954415][ T28] audit: type=1400 audit(2000000075.120:834): avc: denied { relabelto } for pid=5212 comm="syz.0.420" name="bus" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 133.244927][ T28] audit: type=1400 audit(2000000075.120:835): avc: denied { associate } for pid=5212 comm="syz.0.420" name="bus" dev="tmpfs" ino=494 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 133.345246][ T28] audit: type=1400 audit(2000000075.670:836): avc: denied { open } for pid=5220 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 133.382823][ T28] audit: type=1400 audit(2000000075.670:837): avc: denied { kernel } for pid=5220 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 133.410345][ T5208] loop2: detected capacity change from 0 to 512 [ 133.826934][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.861293][ T5237] netlink: 64 bytes leftover after parsing attributes in process `syz.3.425'. [ 134.948460][ T5208] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 134.980643][ T5208] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 135.219862][ T5208] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.419: Corrupt directory, running e2fsck is recommended [ 135.286473][ T5208] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 135.322979][ T5208] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.419: corrupted in-inode xattr: e_name out of bounds [ 135.372963][ T5208] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.373990][ T5208] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.419: couldn't read orphan inode 15 (err -117) [ 135.383467][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 135.383518][ C1] EXT4-fs (loop2): initial error at time 2000000077: ext4_iget_extra_inode:5128: inode 15 [ 135.383612][ C1] EXT4-fs (loop2): last error at time 2000000077: ext4_iget_extra_inode:5128: inode 15 [ 135.539570][ T5208] loop2: lost filesystem error report for type 5 error -117 [ 135.542892][ T5208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.661212][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.727787][ T5252] futex_wake_op: syz.2.430 tries to shift op by -1; fix this program [ 135.910431][ T5249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.429'. [ 135.924322][ T5256] devpts: Unknown parameter 'C' [ 136.118615][ T5264] netlink: 'syz.2.432': attribute type 27 has an invalid length. [ 136.127720][ T5264] netlink: 164 bytes leftover after parsing attributes in process `syz.2.432'. [ 136.388164][ T5267] xt_nat: multiple ranges no longer supported [ 136.507433][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 136.585188][ T5269] netlink: 'syz.4.434': attribute type 29 has an invalid length. [ 136.595739][ T5269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.434'. [ 136.672384][ T5271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.434'. [ 136.834585][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.434'. [ 137.334074][ T5284] loop3: detected capacity change from 0 to 512 [ 137.342305][ T5284] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 137.399508][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 137.410731][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 137.420222][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 137.430121][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 137.541511][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop3 [ 139.217468][ T5299] loop4: detected capacity change from 0 to 128 [ 139.773099][ T5299] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 139.832170][ T5306] loop0: detected capacity change from 0 to 128 [ 139.844407][ T5306] EXT4-fs: Ignoring removed nobh option [ 139.933398][ T5316] xt_hashlimit: size too large, truncated to 1048576 [ 139.996158][ T5306] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.017080][ T5306] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.029077][ T5299] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.106912][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 140.106941][ T28] audit: type=1400 audit(2000000082.430:842): avc: denied { write } for pid=5305 comm="syz.0.444" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.149344][ T5299] ext2 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.595167][ T5324] loop6: detected capacity change from 0 to 7 [ 140.614461][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.623698][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.637920][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.647123][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.655403][ T5324] loop6: unable to read partition table [ 140.663337][ T5324] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 140.677858][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.687046][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.695066][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.704383][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.715945][ T5326] loop6: unable to read partition table [ 140.716471][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.730909][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.779123][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.788324][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.802041][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.811549][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.825157][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.834397][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.842855][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.852277][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.870832][ T28] audit: type=1400 audit(2000000083.200:843): avc: denied { execute } for pid=5323 comm="syz.2.448" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.019452][ T5326] loop2: detected capacity change from 0 to 136 [ 141.043225][ T5326] iso9660: Unknown parameter 'sessionIZוP8ַ' [ 141.230247][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.908961][ C1] bridge0: port 3(batadv1) entered forwarding state [ 141.915659][ C1] bridge0: topology change detected, propagating [ 141.981710][ T28] audit: type=1400 audit(2000000000.860:844): avc: denied { write } for pid=5298 comm="syz.4.439" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.024082][ T5341] __nla_validate_parse: 1 callbacks suppressed [ 142.024100][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 142.092419][ T5342] loop0: detected capacity change from 0 to 256 [ 142.098303][ T28] audit: type=1400 audit(2000000000.930:845): avc: denied { write } for pid=5340 comm="syz.0.450" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 142.100314][ T5342] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.127344][ T28] audit: type=1400 audit(2000000000.930:846): avc: denied { execute } for pid=5298 comm="syz.4.439" name="file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.157587][ T28] audit: type=1400 audit(2000000000.990:847): avc: denied { ioctl } for pid=5340 comm="syz.0.450" path="/dev/input/event3" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.229746][ T5342] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.310687][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.397200][ T5349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.455'. [ 142.408225][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 142.485753][ T5353] loop3: detected capacity change from 0 to 512 [ 142.538926][ T5353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.567100][ T5353] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.631110][ T28] audit: type=1400 audit(2000000001.550:848): avc: denied { listen } for pid=5352 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.664615][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.867601][ T5361] loop4: detected capacity change from 0 to 512 [ 142.896411][ T5361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.912747][ T5361] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.924289][ T5361] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.958666][ T5368] netlink: 'syz.2.458': attribute type 17 has an invalid length. [ 142.966730][ T5370] loop0: detected capacity change from 0 to 128 [ 142.981737][ T5373] loop1: detected capacity change from 0 to 128 [ 143.019345][ T5370] EXT4-fs: Ignoring removed oldalloc option [ 143.030407][ T5373] EXT4-fs: Ignoring removed nobh option [ 143.049092][ T5368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.059542][ T5370] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.062338][ T5368] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.072027][ T5370] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.086290][ T5373] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.101004][ T5368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.109842][ T5373] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.149555][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.169363][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.200918][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.212552][ T5368] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.225602][ T5368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.248434][ T5368] veth1_vlan: left promiscuous mode [ 143.255323][ T5368] veth0_vlan: left promiscuous mode [ 143.261585][ T5368] veth0_vlan: entered promiscuous mode [ 143.272762][ T5368] veth1_vlan: entered promiscuous mode [ 143.282953][ T5368] veth1_macvtap: left promiscuous mode [ 143.290988][ T5368] veth0_macvtap: left promiscuous mode [ 143.299005][ T5368] veth0_macvtap: entered promiscuous mode [ 143.305836][ T5368] veth1_macvtap: entered promiscuous mode [ 143.315628][ T5368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.326134][ T5368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.337128][ T5368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.346199][ T5368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.372088][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.374963][ T28] audit: type=1400 audit(2000000002.290:849): avc: denied { write } for pid=5372 comm="syz.1.462" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.381092][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.442050][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.466964][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.491130][ T5386] loop0: detected capacity change from 0 to 512 [ 143.502836][ T5386] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.475: iget: bad i_size value: 38620345925642 [ 143.517625][ T5386] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 143.526902][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 143.543236][ C0] EXT4-fs (loop0): initial error at time 2000000002: ext4_orphan_get:1397: inode 15 [ 143.552953][ C0] EXT4-fs (loop0): last error at time 2000000002: ext4_orphan_get:1397: inode 15 [ 143.585646][ T5386] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.475: couldn't read orphan inode 15 (err -117) [ 143.597834][ T5386] loop0: lost filesystem error report for type 5 error -117 [ 143.598675][ T5386] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.664277][ T28] audit: type=1400 audit(2000000002.580:850): avc: denied { write } for pid=5385 comm="syz.0.475" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.788011][ T5391] loop2: detected capacity change from 0 to 764 [ 144.773671][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.790785][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 144.933813][ T28] audit: type=1400 audit(2000000003.850:851): avc: denied { setopt } for pid=5401 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.625588][ T5406] netlink: 'syz.1.468': attribute type 27 has an invalid length. [ 145.634579][ T5406] netlink: 164 bytes leftover after parsing attributes in process `syz.1.468'. [ 146.136504][ T5421] loop3: detected capacity change from 0 to 512 [ 146.155580][ T5421] ext3: Unknown parameter 'smackfsroot' [ 146.389180][ T28] audit: type=1400 audit(2000000005.310:852): avc: denied { audit_write } for pid=5426 comm="syz.4.477" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 146.491292][ T28] audit: type=1400 audit(2000000005.350:853): avc: denied { read } for pid=5426 comm="syz.4.477" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.512795][ T28] audit: type=1400 audit(2000000005.350:854): avc: denied { module_load } for pid=5426 comm="syz.4.477" path="/sys/power/disk" dev="sysfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 146.759987][ T5441] loop3: detected capacity change from 0 to 128 [ 146.771068][ T5441] EXT4-fs: Ignoring removed nobh option [ 146.781043][ T5441] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.795028][ T5441] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.801323][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 147.017010][ T5447] loop4: detected capacity change from 0 to 32768 [ 147.073553][ T5447] loop4: p1 p3 < > [ 147.135673][ T28] audit: type=1400 audit(2000000006.050:855): avc: denied { write } for pid=5437 comm="syz.3.480" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.276597][ T5449] loop2: detected capacity change from 0 to 2048 [ 147.384538][ T28] audit: type=1400 audit(2000000006.300:856): avc: denied { tracepoint } for pid=5451 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 147.559055][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.628309][ T5463] xt_hashlimit: size too large, truncated to 1048576 [ 148.588077][ T5476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 148.767906][ T5481] loop4: detected capacity change from 0 to 1024 [ 148.821318][ T5481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 148.867081][ T5479] loop2: detected capacity change from 0 to 512 [ 148.898113][ T5487] net_ratelimit: 70 callbacks suppressed [ 148.898147][ T5487] icmp: detected local route for 172.20.20.0 during ICMP sending, src 10.1.1.0 [ 148.929558][ T5479] ext3: Unknown parameter 'smackfsroot' [ 148.943710][ T5481] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.962410][ T28] audit: type=1400 audit(2000000007.880:857): avc: denied { write } for pid=5480 comm="syz.4.489" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.074802][ T28] audit: type=1400 audit(2000000007.910:858): avc: denied { read write } for pid=5480 comm="syz.4.489" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.191859][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 149.195701][ T28] audit: type=1400 audit(2000000007.910:859): avc: denied { open } for pid=5480 comm="syz.4.489" path="/93/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.224048][ T28] audit: type=1400 audit(2000000007.930:860): avc: denied { write } for pid=5480 comm="syz.4.489" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.245755][ T28] audit: type=1400 audit(2000000007.940:861): avc: denied { accept } for pid=5480 comm="syz.4.489" lport=3618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 149.292074][ T5501] loop4: detected capacity change from 0 to 2048 [ 149.302161][ T5501] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 149.681221][ T5504] loop4: detected capacity change from 0 to 128 [ 149.702934][ T5504] EXT4-fs: Ignoring removed nobh option [ 149.736445][ T5504] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.775810][ T5504] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.836112][ T5507] syz.2.508: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 149.851204][ T5507] CPU: 1 UID: 0 PID: 5507 Comm: syz.2.508 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 149.851258][ T5507] Tainted: [W]=WARN [ 149.851266][ T5507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.851281][ T5507] Call Trace: [ 149.851368][ T5507] [ 149.851375][ T5507] __dump_stack+0x1d/0x30 [ 149.851404][ T5507] dump_stack_lvl+0x95/0xd0 [ 149.851426][ T5507] dump_stack+0x15/0x1b [ 149.851449][ T5507] warn_alloc+0x145/0x1c0 [ 149.851549][ T5507] ? _raw_spin_unlock+0x9/0x30 [ 149.851571][ T5507] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 149.851647][ T5507] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 149.851669][ T5507] ? _raw_spin_unlock+0x9/0x30 [ 149.851701][ T5507] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 149.851739][ T5507] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 149.851771][ T5507] ? irqentry_exit+0x55c/0x5d0 [ 149.851868][ T5507] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 149.851914][ T5507] ? should_fail_ex+0x30/0x280 [ 149.851939][ T5507] vmalloc_user_noprof+0x7d/0xb0 [ 149.851964][ T5507] ? xskq_create+0x80/0xe0 [ 149.851997][ T5507] xskq_create+0x80/0xe0 [ 149.852080][ T5507] xsk_init_queue+0x70/0xb0 [ 149.852114][ T5507] xsk_setsockopt+0x477/0x640 [ 149.852192][ T5507] ? __pfx_xsk_setsockopt+0x10/0x10 [ 149.852239][ T5507] __sys_setsockopt+0x184/0x200 [ 149.852267][ T5507] __x64_sys_setsockopt+0x64/0x80 [ 149.852292][ T5507] x64_sys_call+0x2327/0x3020 [ 149.852366][ T5507] do_syscall_64+0x12c/0x3b0 [ 149.852402][ T5507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.852428][ T5507] RIP: 0033:0x7fdbeb2cce59 [ 149.852477][ T5507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.852494][ T5507] RSP: 002b:00007fdbe9d1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.852514][ T5507] RAX: ffffffffffffffda RBX: 00007fdbeb545fa0 RCX: 00007fdbeb2cce59 [ 149.852528][ T5507] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 149.852555][ T5507] RBP: 00007fdbeb362d6f R08: 0000000000000004 R09: 0000000000000000 [ 149.852571][ T5507] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 149.852586][ T5507] R13: 00007fdbeb546038 R14: 00007fdbeb545fa0 R15: 00007fff9a8af888 [ 149.852604][ T5507] [ 149.852633][ T5507] Mem-Info: [ 150.094706][ T5507] active_anon:10443 inactive_anon:0 isolated_anon:0 [ 150.094706][ T5507] active_file:26400 inactive_file:2587 isolated_file:0 [ 150.094706][ T5507] unevictable:3045 dirty:418 writeback:0 [ 150.094706][ T5507] slab_reclaimable:3270 slab_unreclaimable:17615 [ 150.094706][ T5507] mapped:32228 shmem:3040 pagetables:1228 [ 150.094706][ T5507] sec_pagetables:0 bounce:0 [ 150.094706][ T5507] kernel_misc_reclaimable:0 [ 150.094706][ T5507] free:1870571 free_pcp:7529 free_cma:0 [ 150.141727][ T5507] Node 0 active_anon:52328kB inactive_anon:0kB active_file:105600kB inactive_file:10348kB unevictable:1856kB isolated(anon):0kB isolated(file):0kB mapped:128912kB dirty:1672kB writeback:0kB shmem:12160kB kernel_stack:3776kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 150.173503][ T5507] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.204152][ T5507] lowmem_reserve[]: 0 2878 7857 7857 [ 150.210172][ T5507] Node 0 DMA32 free:2944356kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947984kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 150.215327][ T5515] netlink: 'syz.0.500': attribute type 17 has an invalid length. [ 150.242246][ T5507] lowmem_reserve[]: 0 0 4978 4978 [ 150.256012][ T5507] Node 0 Normal free:4522200kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41772kB inactive_anon:0kB active_file:105600kB inactive_file:10348kB unevictable:812kB writepending:1672kB zspages:0kB present:5242880kB managed:5098236kB mlocked:812kB bounce:0kB free_pcp:38136kB local_pcp:12532kB free_cma:0kB [ 150.292182][ T5507] lowmem_reserve[]: 0 0 0 0 [ 150.296983][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.297419][ T5507] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.321295][ T5507] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 1*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944356kB [ 150.339682][ T5507] Node 0 Normal: 214*4kB (UME) 126*8kB (UM) 193*16kB (UME) 136*32kB (UME) 254*64kB (UME) 130*128kB (UME) 98*256kB (UME) 49*512kB (UM) 28*1024kB (UM) 15*2048kB (UME) 1067*4096kB (UM) = 4522200kB [ 150.360972][ T5507] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 150.370897][ T5507] 32054 total pagecache pages [ 150.375837][ T5507] 0 pages in swap cache [ 150.382113][ T5507] Free swap = 124996kB [ 150.396344][ T5507] Total swap = 124996kB [ 150.417383][ T5507] 2097051 pages RAM [ 150.427790][ T5507] 0 pages HighMem/MovableOnly [ 150.442428][ T5507] 81656 pages reserved [ 150.519384][ T5526] netlink: 'syz.4.504': attribute type 13 has an invalid length. [ 150.651105][ T5533] loop2: detected capacity change from 0 to 256 [ 151.748615][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 151.769852][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 151.769870][ T28] audit: type=1326 audit(2000000010.690:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.4.504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04738ce59 code=0x7ffc0000 [ 151.878226][ T28] audit: type=1326 audit(2000000010.690:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.4.504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04738ce59 code=0x7ffc0000 [ 151.918974][ T5542] dvmrp1: entered allmulticast mode [ 151.940227][ T5542] dvmrp1: left allmulticast mode [ 151.941701][ T28] audit: type=1400 audit(2000000010.850:880): avc: denied { bind } for pid=5546 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.102273][ T5547] loop0: detected capacity change from 0 to 512 [ 152.107894][ T28] audit: type=1326 audit(2000000011.010:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.4.504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7ff04738ce59 code=0x7ffc0000 [ 152.127958][ T5547] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 152.149297][ T28] audit: type=1326 audit(2000000011.010:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.4.504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04738ce59 code=0x7ffc0000 [ 152.175394][ T5549] loop2: detected capacity change from 0 to 512 [ 152.199569][ T28] audit: type=1326 audit(2000000011.010:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.4.504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04738ce59 code=0x7ffc0000 [ 152.247770][ T5549] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.510: corrupted in-inode xattr: invalid ea_ino [ 152.262044][ T5547] EXT4-fs (loop0): 1 truncate cleaned up [ 152.268446][ T5549] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 152.272061][ T5549] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.510: couldn't read orphan inode 15 (err -117) [ 152.281434][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 152.281503][ C0] EXT4-fs (loop2): initial error at time 2000000011: ext4_iget_extra_inode:5128: inode 15 [ 152.281586][ C0] EXT4-fs (loop2): last error at time 2000000011: ext4_iget_extra_inode:5128: inode 15 [ 152.282834][ T5547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.310915][ T5549] loop2: lost filesystem error report for type 5 error -117 [ 152.312745][ T5549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.398963][ T28] audit: type=1400 audit(2000000011.320:884): avc: denied { bind } for pid=5546 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.452937][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.463540][ T28] audit: type=1400 audit(2000000011.380:885): avc: denied { bind } for pid=5555 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.488081][ T28] audit: type=1400 audit(2000000011.380:886): avc: denied { name_bind } for pid=5555 comm="syz.3.512" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 152.526866][ T28] audit: type=1400 audit(2000000011.380:887): avc: denied { node_bind } for pid=5555 comm="syz.3.512" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 152.594184][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.956096][ T5561] ================================================================== [ 152.964236][ T5561] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 152.971753][ T5561] [ 152.974102][ T5561] read-write to 0xffffc900110b7e30 of 8 bytes by task 5564 on cpu 1: [ 152.982276][ T5561] shmem_writeout+0x2f1/0x920 [ 152.987072][ T5561] shrink_folio_list+0x1f52/0x2840 [ 152.992230][ T5561] evict_folios+0x285f/0x3370 [ 152.996949][ T5561] try_to_shrink_lruvec+0x858/0xc20 [ 153.002604][ T5561] shrink_lruvec+0x256/0x1bc0 [ 153.007402][ T5561] shrink_node+0x697/0x20a0 [ 153.011929][ T5561] do_try_to_free_pages+0x408/0xc90 [ 153.017136][ T5561] try_to_free_mem_cgroup_pages+0x201/0x420 [ 153.023042][ T5561] try_charge_memcg+0x373/0xa10 [ 153.027910][ T5561] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 153.033463][ T5561] __alloc_frozen_pages_noprof+0x18a/0x350 [ 153.039279][ T5561] alloc_pages_mpol+0xb3/0x260 [ 153.044057][ T5561] alloc_pages_noprof+0x8f/0x140 [ 153.049198][ T5561] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 153.055115][ T5561] __kvmalloc_node_noprof+0x3d4/0x640 [ 153.060577][ T5561] futex_hash_allocate+0x190/0x9a0 [ 153.065733][ T5561] futex_hash_prctl+0xd8/0xf0 [ 153.070424][ T5561] __se_sys_prctl+0x4f4/0x1400 [ 153.075199][ T5561] __x64_sys_prctl+0x67/0x80 [ 153.079889][ T5561] x64_sys_call+0x2533/0x3020 [ 153.084587][ T5561] do_syscall_64+0x12c/0x3b0 [ 153.089194][ T5561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.095092][ T5561] [ 153.097417][ T5561] read to 0xffffc900110b7e30 of 8 bytes by task 5561 on cpu 0: [ 153.105055][ T5561] shmem_fallocate+0x5c0/0x920 [ 153.109831][ T5561] vfs_fallocate+0x3b6/0x400 [ 153.114524][ T5561] __x64_sys_fallocate+0x7a/0xd0 [ 153.119473][ T5561] x64_sys_call+0x298e/0x3020 [ 153.124156][ T5561] do_syscall_64+0x12c/0x3b0 [ 153.128755][ T5561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.134659][ T5561] [ 153.136980][ T5561] value changed: 0x00000000000014c7 -> 0x00000000000014d3 [ 153.144259][ T5561] [ 153.146590][ T5561] Reported by Kernel Concurrency Sanitizer on: [ 153.152749][ T5561] CPU: 0 UID: 0 PID: 5561 Comm: syz.4.515 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 153.163519][ T5561] Tainted: [W]=WARN [ 153.167324][ T5561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.177556][ T5561] ================================================================== [ 153.766362][ T5566] netlink: 68 bytes leftover after parsing attributes in process `syz.2.516'. [ 153.826867][ T5198] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 153.833038][ T3524] Bluetooth: hci0: command 0x1003 tx timeout