last executing test programs: 1m33.687376326s ago: executing program 32 (id=100): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, 'caif0\x00'}}, 0x1e) 1m33.509698138s ago: executing program 4 (id=106): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003000)="e1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}}], 0x4, 0x4000084) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000300)=0x1, 0x4) 1m33.467073498s ago: executing program 4 (id=108): r0 = socket(0xa, 0x3, 0xff) close(r0) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f00000010c0)=@in6={0xa, 0xea, 0x8000004, @mcast2, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x475}}], 0x18}, 0x20004004) 1m33.149660602s ago: executing program 4 (id=111): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x2e}, 0x2}], 0x1, 0x1822b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 1m33.010576083s ago: executing program 4 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000640)='./file0/file0\x00', 0x272) 1m32.956929174s ago: executing program 4 (id=115): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0x2f00, 0x2, 0x0, 0x4, 0x6, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') fchdir(r0) readlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)=""/223, 0xdf) 1m32.29264655s ago: executing program 4 (id=131): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) 1m32.28257779s ago: executing program 33 (id=131): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) 1m19.497769711s ago: executing program 5 (id=345): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3a, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x4, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000008"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8032, r1, 0xf5f67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000ffffffe00000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a00000000000000000000004800010073686132353600"/207], 0x148}}, 0x20000000) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d722f2c6e6f646f74732c6e6f646f74732c646f733178666c6f7070792c6368c5636b3d72656c617865642c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nodots,dots,\x00'], 0x1, 0x199, &(0x7f0000000580)="$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") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e23, 0x4, 0xa, 0x20, 0x80, 0x32, 0x0, r5}, {0x8, 0x5, 0xcec, 0x2, 0x9, 0xfffffffffffffffc, 0x7, 0x5}, {0x7, 0x6, 0x80, 0x4}, 0x2, 0x6e6bb2, 0x2, 0x0, 0x2}, {{@in=@remote, 0x4d6, 0x6c}, 0xa, @in6=@mcast1, 0x3507, 0x2, 0x51bd6af47a2804ae, 0x4, 0x8, 0x5, 0x400}}, 0xe8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m19.208801374s ago: executing program 5 (id=349): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x218004, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$security_ima(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000000)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 1m18.745371629s ago: executing program 5 (id=359): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r0, 0x1, 0x60bd26, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x40000c4) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0, @ANYBLOB="280225bd6000fcdbdf2501000000050004000200000014000200766c616e3100000000000000000000000900010073797a32000000001400020067656e65766530000000000000000000050004000100c1b33028f100000900010073797a300000000005000400020000001400020067656e65766530000000002f6539aca3ad3fc65cda6bcef5f1d802d48fbc9acb42974fdd4602029acb973cb97c32f20ea1b64935334bf0fb287d08f4f12a185b8b48f238c7834cf2121db03227"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4008801) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x23, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf67c41a25aa2ad835090000000000005509010000000000950000000000000018660000050000b04fc13bfd890069240000000000fbffffff85100000f8ffffff18400000fbffffff000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b70800000a0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB], &(0x7f0000000ec0)='syzkaller\x00', 0x5, 0x52, &(0x7f0000000f00)=""/82, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0xb, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x13, &(0x7f0000001bc0), 0x2) uname(0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x1043080, &(0x7f0000000440)={[{@mblk_io_submit}, {@quota}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}, {@norecovery}, {@journal_checksum}]}, 0x1, 0x5c5, &(0x7f0000001d40)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r4, 0x2) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x5e5e42, 0x19f) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000140)=0x228b1, 0x4) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r7, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106300, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r8) 1m18.063285445s ago: executing program 5 (id=366): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x102) fallocate(r1, 0x10, 0x3, 0x7c27) 1m17.816524658s ago: executing program 5 (id=369): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m17.490062311s ago: executing program 5 (id=372): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[], 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8032, 0xffffffffffffffff, 0xf5f67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000ffffffe00000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a00000000000000000000004800010073686132353600"/215], 0x148}}, 0x20000000) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d722f2c6e6f646f74732c6e6f646f74732c646f733178666c6f7070792c6368c5636b3d72656c617865642c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nodots,dots,\x00'], 0x1, 0x199, &(0x7f0000000580)="$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") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) getuid() setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m17.436194672s ago: executing program 34 (id=372): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[], 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8032, 0xffffffffffffffff, 0xf5f67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000ffffffe00000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a00000000000000000000004800010073686132353600"/215], 0x148}}, 0x20000000) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d722f2c6e6f646f74732c6e6f646f74732c646f733178666c6f7070792c6368c5636b3d72656c617865642c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nodots,dots,\x00'], 0x1, 0x199, &(0x7f0000000580)="$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") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) getuid() setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m8.817318529s ago: executing program 6 (id=465): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r1, 0x406, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1m8.618539062s ago: executing program 6 (id=468): r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [{}], {0x10, 0x6}}, 0x2c, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 1m8.180207846s ago: executing program 6 (id=476): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) mkdirat(0xffffffffffffff9c, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400000000008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0xc, 0x6, 0x42, 0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x7a680000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) 1m7.138976886s ago: executing program 6 (id=489): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = epoll_create(0x200004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000009}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@delalloc}, {@grpquota}, {@nouid32}, {@nouid32}, {@data_writeback}]}, 0x2, 0x55d, &(0x7f0000000e80)="$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") mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11480, 0x0) 1m6.75588543s ago: executing program 6 (id=495): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) statx(0xffffffffffffffff, 0x0, 0x100, 0x400, &(0x7f0000000340)) 1m4.774611521s ago: executing program 6 (id=518): sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x80) syz_io_uring_setup(0x6309, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x3, 0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 1m4.737208511s ago: executing program 35 (id=518): sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x80) syz_io_uring_setup(0x6309, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x3, 0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 1m3.955860839s ago: executing program 0 (id=526): prlimit64(0x0, 0x3, 0x0, &(0x7f00000008c0)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), 0x0}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 1m3.020658999s ago: executing program 0 (id=541): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev(r1, &(0x7f00000047c0)=[{&(0x7f00000010c0)='k', 0x1}], 0x1, 0xde, 0x4) r2 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r2, &(0x7f0000000c80)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x7, 0xe) 1m2.84721549s ago: executing program 0 (id=544): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r0, 0x1, 0x60bd26, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x40000c4) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0, @ANYBLOB="280225bd6000fcdbdf2501000000050004000200000014000200766c616e3100000000000000000000000900010073797a32000000001400020067656e65766530000000000000000000050004000100c1b33028f100000900010073797a300000000005000400020000001400020067656e65766530000000002f6539aca3ad3fc65cda6bcef5f1d802d48fbc9acb42974fdd4602029acb973cb97c32f20ea1b64935334bf0fb287d08f4f12a185b8b48f238c7834cf2121db03227"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4008801) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x23, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf67c41a25aa2ad835090000000000005509010000000000950000000000000018660000050000b04fc13bfd890069240000000000fbffffff85100000f8ffffff18400000fbffffff00000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b70800000a0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB], &(0x7f0000000ec0)='syzkaller\x00', 0x5, 0x52, &(0x7f0000000f00)=""/82, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0xb, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x13, &(0x7f0000001bc0), 0x2) uname(0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x1043080, &(0x7f0000000440)={[{@mblk_io_submit}, {@quota}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}, {@norecovery}, {@journal_checksum}]}, 0x1, 0x5c5, &(0x7f0000001d40)="$eJzs3T9sG9cZAPDvjqIl23LlAi3QFh6MtoALGKb+2G7dTvJa1IABDwW6tAJFC4Yo0RCp1hIEVN6NIB6CJPDibMmQMUGGDEGWjFmz5M8cwIiFBLA8JAwokrIskwpli2Qs/n7ASe/dHfl9j3fv8e5wBwYwsE7X/qQRv42Iq0nE2I5lQ9FYeLq+3ubGWv7xxlo+iWr12jdJJBHxaGMt31w/afw/HhHrEfGbiPg4G3E23X7LI81CeWV1fqZYLCw16uOVhZvj5ZXVczcWZuYKc4XF83/568VLFy5OTk3uTPdxdWctu7+23vni7it3Pv37/bvvvHtqPf/aTBLTMdpYtrMdB6n+mWRjetf8C90I1kdJvxPguWQa/bzWlX4dY5Fp9PpWqjsHh+GepAd0UXU4orptRxEYAMkLdPrmIAK8jJrHAbXz3+bUy+OPB5frJyC1uJsba/n/RzP+UP3aRIxsnZsc+zZ56sykdr55speJciit346IiaGhZ/f/pLH/Pb+Jg0iQrvrocn1DPbv90+3xJ1qMP6PNa6cvqDn+bTbGv80W8TNtxr+r27WFo3vF+P5fX73ZNv7t4fhdy/jN/b8edXf8NCL+02Eb7/3zg0vtllXfijgTreM3JXtfHx6/fqNYmKj/bRnjwzOn/ta+/RHH2sSvX7MdSXa3/0gjp7TD9r//yXu/X98j/p/+sPf2T1p8/rUN/mqH8X/56O1/tFv24HbysHYU0H77t46fRDbudxj/z9OnP28UXTUEAAAAAAAAAIADlG7dy5akue1ymuZy9Wd4fxXH0mKpXDl7vbS8OFu/5+1kZNPmnVZj9XpSq0827sdt1qd21c9nGgEzR7fquXypONvntgMAAAAAAAAAAAAAAAAAAMDPxfFdz/9/l9l6/n86YupEv3MDeqD9T34Dh53+D4Pr6f6f9C0PoPd8/8PAqur/MLj0fxhce/d/v9kPh5nvfxhcLfv/0d7nAfTeM/1/pD95AL3n+B8AAAAAAAAAAAAAAAAAAAAAAAAAALri6pUrtan6eGMtX6vPDq0sz5f+e262UJ7PLSznc/nS0s3cXKk0Vyzk8qWFn3q/pFS6ORGLy7fGK4VyZby8svrvhdLyYvM3RQvZrrcIAAAAAAAAAAAAAAAAAAAAXj6jW1OS5iKy9Xqa5nIRJyLiZBLJ9RvFwkRE/CIiPstkh2v1yX4nDQAAAAAAAAAAAAAAAAAAAIdMeWV1fqZYLCx1rzDUCNXZq76sdDWfof2sHBHrB5tG7R33/aps4wPcmjPS9e11uAuZDvfDgS/0cVACAAAAAAAAAAAAAAAAAIAB9eSh305f8UN3EwIAAAAAAAAAAAAAAAAAAICBlH6dRERtOjP2x9HdS48km5mt/xHxv3vXXr81U6ksTdbmP9yeX3mjMX+qH/kDnWr20zQiav0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKK8sjo/UywWlp6zMNzBOu1iZ3rbVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9+TEAAP//8ZHIEg==") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r4, 0x2) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)={0x38, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc}]}, 0x38}}, 0x40) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x5e5e42, 0x19f) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000140)=0x228b1, 0x4) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r8, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106300, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r9) 1m2.532667744s ago: executing program 0 (id=548): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f887, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x10d7854, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 1m2.509043384s ago: executing program 0 (id=549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3a, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x4, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000008"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8032, r1, 0xf5f67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000ffffffe00000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000"], 0x148}}, 0x20000000) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d722f2c6e6f646f74732c6e6f646f74732c646f733178666c6f7070792c6368c5636b3d72656c617865642c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nodots,dots,\x00'], 0x1, 0x199, &(0x7f0000000580)="$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") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e23, 0x4, 0xa, 0x20, 0x80, 0x32, 0x0, r5}, {0x8, 0x5, 0xcec, 0x2, 0x9, 0xfffffffffffffffc, 0x7, 0x5}, {0x7, 0x6, 0x80, 0x4}, 0x2, 0x6e6bb2, 0x2, 0x0, 0x2}, {{@in=@remote, 0x4d6, 0x6c}, 0xa, @in6=@mcast1, 0x3507, 0x2, 0x51bd6af47a2804ae, 0x4, 0x8, 0x5, 0x400}}, 0xe8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m2.084989798s ago: executing program 0 (id=554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@empty, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x3a}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0x1, 0x0, 0xffd, {[@nop]}}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004"], 0xfdef) 1m1.970571369s ago: executing program 36 (id=554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@empty, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x3a}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0x1, 0x0, 0xffd, {[@nop]}}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004"], 0xfdef) 33.656892678s ago: executing program 7 (id=957): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000000)=0xfff, 0x4) timer_create(0x4, &(0x7f00000001c0)={0x0, 0xc, 0x4, @thr={&(0x7f0000000040)="ccf06d1e0c28151f11656346f09eb2bd38d9d184c03e58fdd3", 0x0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 33.626221038s ago: executing program 7 (id=959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 33.43532641s ago: executing program 7 (id=963): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r2, &(0x7f0000000480)=""/154, 0x9a, 0xe4) 33.43516244s ago: executing program 7 (id=964): syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x1000000, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES16], 0xff, 0x7be, &(0x7f00000005c0)="$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") syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mount(0x0, 0x0, 0x0, 0x800000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d6b244f}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x3000c000) 33.341255301s ago: executing program 7 (id=967): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 33.096675724s ago: executing program 7 (id=970): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setresgid(0x0, 0x0, 0xee00) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x4001) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1) 33.091023723s ago: executing program 37 (id=970): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setresgid(0x0, 0x0, 0xee00) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x4001) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1) 2.783017542s ago: executing program 8 (id=1351): r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x233006a6, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) pipe2(&(0x7f0000000100), 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2d, 0x20000, {0xa, 0x40, 0x22, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x40}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000540)="cb669052dd1d7018806e3a34a339dc0f1750e1d474afc095227eb36a3cdde6bc01029775edb2a0c10e7eeabae4617b760077d382e983a45dcb8ac45ce20be8b6f1e53e8d93b7d5a51b7a986de6ba6433070bc334299d12a4a01e49f1c570b94aebda07a490e87318a5ab11455c7d7b0f274bf7d650f8cf4118ea4f0d3cd5687b222d96ce3f91baba0338b11ffdc15a7f44638cb9d5fb60ed6d577ccef86b862d0d68caa5476b0bcda270ec71feed1a3c5777e66fd976aebf97b8d20651a92c6350f69bc65e28270ce85f1e2a9f1484e3c0ee8a75e83d5b0200b27fc5f7acb55952248025b7b3082880865bb7509c4499999c45e42c62f267ba8f21d03f0b419b") sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}}, 0x0) 2.664328433s ago: executing program 8 (id=1353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ee1}}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc652230"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 2.624014574s ago: executing program 8 (id=1354): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x4}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0xfff, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0xdd30, {0x3, 0x2, 0x3, 0x1da, 0x406}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfaff}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040) close_range(r0, 0xffffffffffffffff, 0x0) 2.568572594s ago: executing program 8 (id=1355): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{}, &(0x7f0000000d00), 0x0}, 0x20) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x81) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x71, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000a80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e734fdc2da8c998a8700232e5263a04392efa56fc98553afa5a498c8c3a3206f2b25a00c0ec0d1202c822ab708037a4c29a9c81216c73358cda8b1a2532650070aaf77d3ac8e46f2b2b5ed7828c6165514d2f40c6cf8eb2e325f9d2b7750af696145751cdfc7d00f6021f29a689969eadb6a870fb43b3f6badebdc0048aa9956828007502b62", @ANYRES16, @ANYRES64, @ANYBLOB="f47d9d"], 0x1, 0x65c, &(0x7f0000002280)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000"], 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x890c, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000006c0)="8c3f", 0x2, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 693.386963ms ago: executing program 1 (id=1380): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 692.907473ms ago: executing program 1 (id=1381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56f5d, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 634.437723ms ago: executing program 1 (id=1382): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) 626.338964ms ago: executing program 2 (id=1383): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20881, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x10, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 572.159384ms ago: executing program 1 (id=1384): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x40000, &(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x1, 0x2, 0x4, 0x1}}, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 571.907674ms ago: executing program 2 (id=1385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) close(0x4) 546.623825ms ago: executing program 9 (id=1386): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x108e08, 0x1224, 0xffffffff, 0x6, 0x8, 0x20805, 0x9, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000001c0)) socket$inet_icmp(0x2, 0x2, 0x1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 418.376096ms ago: executing program 9 (id=1387): openat$hwrng(0xffffffffffffff9c, 0x0, 0x14040, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x5abe, 0x0) 380.532766ms ago: executing program 2 (id=1388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES64=r3], 0x20}}, 0x44800) 223.855108ms ago: executing program 3 (id=1389): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a1102, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) close(0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 175.973239ms ago: executing program 2 (id=1390): socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 92.717679ms ago: executing program 3 (id=1391): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002100)=@delchain={0x38, 0x2c, 0xf31, 0x70bd26, 0x2000, {0x0, 0x0, 0x0, r5, {0xfff3}, {0xfff2, 0xffff}, {0xffff, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xb}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080d4}, 0x4010) 92.569769ms ago: executing program 3 (id=1392): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0x91, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6a000000005b1100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e20005b90"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x8}}}}}, 0x0) 81.746259ms ago: executing program 3 (id=1393): socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 63.505869ms ago: executing program 3 (id=1394): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc08c, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x11000, 0x4, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080c0) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x38}, 0x94) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000540)=""/182) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.time\x00', 0x275a, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/261, 0x105}], 0x1, 0x102, 0xfffffffd, 0x3b) 11.90081ms ago: executing program 2 (id=1395): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) mkdir(0x0, 0x104) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.59969ms ago: executing program 2 (id=1396): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x322}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 3 (id=1397): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c788", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): vsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.127079][ T1726] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.145398][ T5697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.159999][ T5510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.168238][ T5697] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.194111][ T28] audit: type=1400 audit(1778027834.556:493): avc: denied { write } for pid=5696 comm="syz.3.578" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.220384][ T28] audit: type=1400 audit(1778027834.586:494): avc: denied { write } for pid=5696 comm="syz.3.578" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.283473][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.284022][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.332069][ T28] audit: type=1400 audit(1778027834.696:495): avc: denied { write } for pid=5700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.415375][ T28] audit: type=1400 audit(1778027834.746:496): avc: denied { read } for pid=5727 comm="syz.8.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.439812][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 73.475539][ T28] audit: type=1400 audit(1778027834.766:497): avc: denied { write } for pid=5729 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.529435][ T5510] veth0_vlan: entered promiscuous mode [ 73.554959][ T5510] veth1_vlan: entered promiscuous mode [ 73.598227][ T5510] veth0_macvtap: entered promiscuous mode [ 73.613109][ T5732] loop1: detected capacity change from 0 to 1024 [ 73.624981][ T5510] veth1_macvtap: entered promiscuous mode [ 73.655577][ T5510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.688401][ T5510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.707627][ T5732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 73.736101][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.755287][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.799910][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.813801][ T5572] Bluetooth: hci0: command 0x1003 tx timeout [ 73.819840][ T28] audit: type=1400 audit(1778027835.176:498): avc: denied { write } for pid=5744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.819887][ T3881] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.849218][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.962089][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 74.170861][ T5772] netlink: 16 bytes leftover after parsing attributes in process `syz.9.556'. [ 74.215212][ T5786] loop8: detected capacity change from 0 to 128 [ 74.253745][ T5786] FAT-fs (loop8): error, corrupted file size (i_pos 548, 512) [ 74.262471][ T5786] FAT-fs (loop8): Filesystem has been set read-only [ 74.271564][ T5786] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8) [ 74.307248][ T5785] loop9: detected capacity change from 0 to 128 [ 74.313909][ T5785] msdos: Bad value for 'errors' [ 75.301329][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 75.337706][ T5793] set_capacity_and_notify: 2 callbacks suppressed [ 75.337741][ T5793] loop3: detected capacity change from 0 to 1024 [ 75.428355][ T5793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 75.710005][ T5839] loop8: detected capacity change from 0 to 2048 [ 75.728863][ T5833] netlink: 16 bytes leftover after parsing attributes in process `syz.7.603'. [ 75.741980][ T5839] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.756928][ T5839] EXT4-fs (loop8): shut down requested (1) [ 75.763431][ T5839] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 75.773207][ T5839] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 75.790264][ T5345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.806035][ T5840] loop7: detected capacity change from 0 to 128 [ 75.812601][ T5840] msdos: Bad value for 'errors' [ 75.823608][ T5846] loop8: detected capacity change from 0 to 512 [ 75.899141][ T5850] loop1: detected capacity change from 0 to 512 [ 75.920064][ T5846] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.930976][ T5850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.945645][ T5850] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.975596][ T5345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.023036][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.153998][ T5860] netlink: 8 bytes leftover after parsing attributes in process `syz.8.612'. [ 76.296005][ T5866] loop8: detected capacity change from 0 to 1024 [ 76.305250][ T5866] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.320383][ T5866] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 76.328677][ T5866] System zones: 0-1, 3-36 [ 76.334686][ T5866] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.370000][ T5345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.394820][ T5872] netlink: 'syz.8.617': attribute type 1 has an invalid length. [ 76.494747][ T5880] loop7: detected capacity change from 0 to 512 [ 76.507072][ T5880] EXT4-fs (loop7): 1 truncate cleaned up [ 76.514707][ T5880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.599435][ T4768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.653182][ T5892] loop7: detected capacity change from 0 to 512 [ 76.681858][ T5892] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.698776][ T5892] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.761153][ T4768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.289326][ T5922] loop1: detected capacity change from 0 to 512 [ 77.308038][ T5923] loop8: detected capacity change from 0 to 128 [ 77.332259][ T5922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.349551][ T5922] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.360910][ T5914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.629'. [ 77.377837][ T5923] syz.8.632: attempt to access beyond end of device [ 77.377837][ T5923] loop8: rw=2049, sector=145, nr_sectors = 57 limit=128 [ 77.424146][ T5926] msdos: Bad value for 'errors' [ 77.508598][ T5930] EXT4-fs: inline encryption not supported [ 77.528919][ T5930] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003] [ 77.548321][ T5930] System zones: 0-5 [ 77.554723][ T5930] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.579005][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 77.579023][ T28] audit: type=1400 audit(1778027838.936:522): avc: denied { write } for pid=5928 comm="syz.7.635" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.681812][ T4768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.715370][ T5938] EXT4-fs: Ignoring removed bh option [ 77.748472][ T5938] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.755272][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.790590][ T28] audit: type=1400 audit(1778027839.146:523): avc: denied { read write } for pid=5941 comm="syz.7.638" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 77.816084][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.824722][ T28] audit: type=1400 audit(1778027839.146:524): avc: denied { open } for pid=5941 comm="syz.7.638" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 77.825499][ T3413] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 77.849551][ T28] audit: type=1400 audit(1778027839.176:525): avc: denied { write } for pid=5937 comm="syz.8.639" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.885358][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.922261][ T5944] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.938841][ T5944] EXT4-fs: Ignoring removed bh option [ 77.964723][ T5944] EXT4-fs (loop9): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 77.984606][ T3413] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.022904][ T5944] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.040413][ T5944] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.109157][ T5944] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.641: bg 0: block 106: padding at end of block bitmap is not set [ 78.109691][ T28] audit: type=1400 audit(1778027839.466:526): avc: denied { write } for pid=5943 comm="syz.9.641" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.146013][ T28] audit: type=1400 audit(1778027839.466:527): avc: denied { write } for pid=5943 comm="syz.9.641" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.230308][ T5955] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.643: inode has both inline data and extents flags [ 78.250211][ T5955] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.252805][ T5955] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.643: couldn't read orphan inode 15 (err -117) [ 78.262204][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 78.262225][ C0] EXT4-fs (loop1): initial error at time 1778027839: ext4_orphan_get:1397: inode 15 [ 78.262266][ C0] EXT4-fs (loop1): last error at time 1778027839: ext4_orphan_get:1397: inode 15 [ 78.272432][ T5510] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.274877][ T5955] loop1: lost filesystem error report for type 5 error -117 [ 78.314091][ T5345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.315184][ T5955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.342900][ T5952] netlink: 88 bytes leftover after parsing attributes in process `syz.3.642'. [ 78.356316][ T28] audit: type=1400 audit(1778027839.716:528): avc: denied { write } for pid=5953 comm="syz.1.643" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.378571][ T5955] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 78.380906][ T5952] msdos: Bad value for 'errors' [ 78.514316][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.547593][ T5968] netlink: 'syz.8.649': attribute type 4 has an invalid length. [ 78.577735][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.9.644'. [ 78.633672][ T5976] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.658929][ T5976] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.677253][ T28] audit: type=1400 audit(1778027840.036:529): avc: denied { write } for pid=5975 comm="syz.1.652" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.680980][ T5985] xt_hashlimit: size too large, truncated to 1048576 [ 78.719927][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.730505][ T28] audit: type=1400 audit(1778027840.036:530): avc: denied { setopt } for pid=5984 comm="syz.7.655" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.774998][ T28] audit: type=1400 audit(1778027840.066:531): avc: denied { write } for pid=5975 comm="syz.1.652" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.901699][ T5997] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.914330][ T5997] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.942581][ T5092] nci: nci_rsp_packet: unknown rsp opcode 0xb05 [ 79.019437][ T4768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.165795][ T6005] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.178279][ T6005] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.213548][ T6005] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 63: comm syz.7.659: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 79.231996][ T6005] EXT4-fs error (device loop7) in do_split:2027: Corrupt filesystem [ 79.241058][ T6005] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 63: comm syz.7.659: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 79.268854][ T4768] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.288010][ T6008] EXT4-fs: Ignoring removed bh option [ 79.295412][ T6008] EXT4-fs (loop7): 1 truncate cleaned up [ 79.301952][ T6008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.326821][ T4768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.344375][ T6011] netlink: 'syz.7.661': attribute type 1 has an invalid length. [ 79.387292][ T6014] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 79.429066][ T6014] EXT4-fs (loop8): 1 truncate cleaned up [ 79.442779][ T6014] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.550661][ T6025] netlink: 'syz.9.665': attribute type 1 has an invalid length. [ 79.691250][ T5345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.728138][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.9.665'. [ 79.894556][ T6027] batman_adv: batadv0: Adding interface: geneve2 [ 79.901642][ T6027] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 80.344400][ T6045] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.359327][ T6045] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 80.369074][ T6045] EXT4-fs (loop9): orphan cleanup on readonly fs [ 80.377562][ T6045] EXT4-fs error (device loop9): ext4_free_blocks:6718: comm syz.9.673: Freeing blocks not in datazone - block = 0, count = 4096 [ 80.391767][ T6045] loop9: lost filesystem error report for type 5 error -117 [ 80.393556][ T6045] EXT4-fs (loop9): 1 orphan inode deleted [ 80.401203][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 80.401236][ C1] EXT4-fs (loop9): initial error at time 1778027841: ext4_free_blocks:6718 [ 80.401295][ C1] EXT4-fs (loop9): last error at time 1778027841: ext4_free_blocks:6718 [ 80.436914][ T6045] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.479601][ T5510] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.548041][ T6050] syzkaller0: entered promiscuous mode [ 80.554411][ T6050] syzkaller0: entered allmulticast mode [ 80.697615][ T6060] netlink: 'syz.8.679': attribute type 1 has an invalid length. [ 81.373052][ T6083] set_capacity_and_notify: 15 callbacks suppressed [ 81.373069][ T6083] loop9: detected capacity change from 0 to 7 [ 81.394505][ T3286] Buffer I/O error on dev loop9, logical block 0, async page read [ 81.403017][ T3286] Buffer I/O error on dev loop9, logical block 0, async page read [ 81.411229][ T6083] Buffer I/O error on dev loop9, logical block 0, async page read [ 81.419267][ T6083] Buffer I/O error on dev loop9, logical block 0, async page read [ 81.457667][ T6083] loop9: unable to read partition table [ 81.459100][ T3286] Buffer I/O error on dev loop9, logical block 0, async page read [ 81.468953][ T6083] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 81.468953][ T6083] ) failed (rc=-5) [ 81.510401][ T6085] loop9: detected capacity change from 7 to 0 [ 81.542001][ T6091] loop9: detected capacity change from 0 to 512 [ 81.619821][ T6101] loop9: detected capacity change from 0 to 512 [ 81.626516][ T6101] EXT4-fs: Ignoring removed nobh option [ 81.652044][ T6101] EXT4-fs (loop9): orphan cleanup on readonly fs [ 81.659081][ T6101] EXT4-fs error (device loop9): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.9.692: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 81.674495][ T6101] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 81.674738][ T6101] EXT4-fs (loop9): Remounting filesystem read-only [ 81.683895][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 81.683913][ C0] EXT4-fs (loop9): initial error at time 1778027843: ext4_xattr_inode_update_ref:1037: inode 11 [ 81.683949][ C0] EXT4-fs (loop9): last error at time 1778027843: ext4_xattr_inode_update_ref:1037: inode 11 [ 81.728606][ T6101] EXT4-fs warning (device loop9): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.9.692: ea_inode dec ref err=-117 [ 81.742175][ T6101] EXT4-fs (loop9): 1 orphan inode deleted [ 81.748687][ T6099] netlink: 16 bytes leftover after parsing attributes in process `syz.7.691'. [ 81.748767][ T6101] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.771144][ T6101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.832036][ T6104] loop7: detected capacity change from 0 to 128 [ 81.838577][ T6104] msdos: Bad value for 'errors' [ 82.310244][ T5993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.329162][ T6110] loop9: detected capacity change from 0 to 128 [ 82.355919][ T6110] FAT-fs (loop9): error, corrupted file size (i_pos 548, 512) [ 82.364133][ T6110] FAT-fs (loop9): Filesystem has been set read-only [ 82.376679][ T6110] FAT-fs (loop9): error, invalid FAT chain (i_pos 548, last_block 8) [ 82.700598][ T6114] netlink: 'syz.3.695': attribute type 1 has an invalid length. [ 82.743197][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 82.743262][ T28] audit: type=1400 audit(1778027844.096:557): avc: denied { write } for pid=6116 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.805787][ T6124] loop1: detected capacity change from 0 to 128 [ 82.834812][ T28] audit: type=1400 audit(1778027844.196:558): avc: denied { mounton } for pid=6125 comm="syz.9.699" path="/22/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 82.836001][ T6124] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.883468][ T6124] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.956356][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.985441][ T6133] IPv6: Can't replace route, no match found [ 83.001945][ T28] audit: type=1400 audit(1778027844.366:559): avc: denied { create } for pid=6135 comm="syz.1.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.026293][ T6137] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 83.045929][ T28] audit: type=1400 audit(1778027844.366:560): avc: denied { ioctl } for pid=6132 comm="syz.7.704" path="socket:[13783]" dev="sockfs" ino=13783 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.123507][ T28] audit: type=1400 audit(1778027844.406:561): avc: denied { read } for pid=6136 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.139807][ T6148] loop7: detected capacity change from 0 to 2048 [ 83.155694][ T6150] netlink: 40 bytes leftover after parsing attributes in process `syz.3.709'. [ 83.176244][ T6148] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.228310][ T6148] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.326984][ T6148] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.708: bg 0: block 345: padding at end of block bitmap is not set [ 83.341300][ T28] audit: type=1400 audit(1778027844.686:562): avc: denied { write } for pid=6144 comm="syz.7.708" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.382458][ T6148] EXT4-fs (loop7): Remounting filesystem read-only [ 83.391596][ T28] audit: type=1400 audit(1778027844.756:563): avc: denied { write } for pid=6158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.438491][ T28] audit: type=1400 audit(1778027844.796:564): avc: denied { write } for pid=6174 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.476701][ T6177] loop1: detected capacity change from 0 to 1024 [ 83.493919][ T4768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.498245][ T6177] EXT4-fs: Ignoring removed bh option [ 83.529861][ T6177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.674510][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.690205][ T28] audit: type=1400 audit(1778027845.036:565): avc: denied { getopt } for pid=6193 comm="syz.7.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.717794][ T6198] loop7: detected capacity change from 0 to 1024 [ 83.721050][ T6200] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.738137][ T6198] EXT4-fs: Ignoring removed bh option [ 83.745212][ T6200] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.767777][ T6198] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.792873][ T6206] EXT4-fs: inline encryption not supported [ 83.802086][ T28] audit: type=1400 audit(1778027845.166:566): avc: denied { write } for pid=6197 comm="syz.7.725" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.824073][ T5092] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.862578][ T6206] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.931130][ T6215] EXT4-fs (loop8): shut down requested (1) [ 84.004499][ T6224] netlink: 'syz.7.733': attribute type 1 has an invalid length. [ 84.050273][ T55] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:4: lblock 4 mapped to illegal pblock 4 (length 2) [ 84.069144][ T55] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 84.091189][ T55] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.091189][ T55] [ 84.111286][ T1726] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 4) [ 84.138496][ T1726] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 84.174982][ T1726] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.174982][ T1726] [ 84.193295][ T6224] bond2: (slave geneve2): making interface the new active one [ 84.197823][ T3298] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 84.212808][ T6224] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 84.237701][ T55] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.248000][ T55] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.264288][ T6224] syz.7.733 (6224) used greatest stack depth: 9504 bytes left [ 84.282036][ T55] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.301452][ T55] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.325027][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.736'. [ 84.436899][ T6244] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.741: inode has both inline data and extents flags [ 84.469473][ T6244] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.469683][ T6244] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.741: couldn't read orphan inode 15 (err -117) [ 84.480156][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 84.497348][ C1] EXT4-fs (loop7): initial error at time 1778027845: ext4_orphan_get:1397: inode 15 [ 84.506780][ C1] EXT4-fs (loop7): last error at time 1778027845: ext4_orphan_get:1397: inode 15 [ 84.556544][ T6244] loop7: lost filesystem error report for type 5 error -117 [ 84.563826][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 84.700285][ T6259] bond3: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 84.716905][ T6259] bond3 (unregistering): Released all slaves [ 84.813714][ T6265] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 84.877350][ T6260] msdos: Bad value for 'errors' [ 84.886232][ T6265] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.748: corrupted in-inode xattr: bad e_name length [ 84.939422][ T6265] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.939600][ T6265] EXT4-fs (loop8): get orphan inode failed [ 84.948860][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 84.948890][ C1] EXT4-fs (loop8): initial error at time 1778027846: ext4_iget_extra_inode:5128: inode 15 [ 84.948916][ C1] EXT4-fs (loop8): last error at time 1778027846: ext4_iget_extra_inode:5128: inode 15 [ 84.979080][ T6275] netlink: 'syz.1.751': attribute type 1 has an invalid length. [ 84.994401][ T6265] EXT4-fs (loop8): mount failed [ 85.092420][ T6280] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.418601][ T6314] netlink: 128 bytes leftover after parsing attributes in process `syz.7.759'. [ 85.438418][ T6314] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 85.576618][ T6324] ieee802154 phy0 wpan0: encryption failed: -22 [ 85.645448][ T6323] msdos: Bad value for 'errors' [ 85.699864][ T6330] netlink: 'syz.1.764': attribute type 1 has an invalid length. [ 85.916929][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.766'. [ 85.982675][ T6339] msdos: Bad value for 'errors' [ 86.491742][ T6367] set_capacity_and_notify: 11 callbacks suppressed [ 86.491759][ T6367] loop8: detected capacity change from 0 to 128 [ 86.499138][ T6368] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.522260][ T6368] EXT4-fs (loop7): Remounting filesystem read-only [ 86.522662][ T6367] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.692435][ T6377] loop3: detected capacity change from 0 to 512 [ 86.718107][ T6377] EXT4-fs: Ignoring removed oldalloc option [ 86.757328][ T6377] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.773: invalid indirect mapped block 4294967295 (level 1) [ 86.786959][ T6377] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 86.787105][ T6377] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.773: invalid indirect mapped block 4294967295 (level 1) [ 86.796310][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 86.796337][ C0] EXT4-fs (loop3): initial error at time 1778027848: ext4_free_branches:1023: inode 11 [ 86.796390][ C0] EXT4-fs (loop3): last error at time 1778027848: ext4_free_branches:1023: inode 11 [ 86.836616][ T6377] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 86.845252][ T6377] EXT4-fs (loop3): 2 truncates cleaned up [ 86.880024][ T6392] loop1: detected capacity change from 0 to 4096 [ 86.997241][ T6398] loop9: detected capacity change from 0 to 128 [ 87.015473][ T6387] loop8: detected capacity change from 0 to 128 [ 87.023911][ T6387] msdos: Bad value for 'errors' [ 87.040436][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.777'. [ 87.049520][ T6401] netlink: 'syz.7.777': attribute type 29 has an invalid length. [ 87.060710][ T6403] loop3: detected capacity change from 0 to 512 [ 87.062698][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.777'. [ 87.086029][ T6403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.132073][ T6403] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.780: iget: bad i_size value: 38620345925642 [ 87.144947][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.777'. [ 87.164766][ T6403] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.164969][ T6401] netlink: 'syz.7.777': attribute type 29 has an invalid length. [ 87.174165][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 87.174182][ C0] EXT4-fs (loop3): initial error at time 1778027848: ext4_orphan_get:1397: inode 15 [ 87.174213][ C0] EXT4-fs (loop3): last error at time 1778027848: ext4_orphan_get:1397: inode 15 [ 87.207341][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.777'. [ 87.216305][ T6403] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.780: couldn't read orphan inode 15 (err -117) [ 87.228345][ T6403] loop3: lost filesystem error report for type 5 error -117 [ 87.543441][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.783'. [ 87.615113][ T6433] loop3: detected capacity change from 0 to 128 [ 87.621741][ T6433] msdos: Bad value for 'errors' [ 87.799183][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 87.799199][ T28] audit: type=1400 audit(1778027849.156:596): avc: denied { write } for pid=6432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.859885][ T28] audit: type=1400 audit(1778027849.186:597): avc: denied { write } for pid=6450 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.894838][ T28] audit: type=1400 audit(1778027849.206:598): avc: denied { read write } for pid=6443 comm="syz.8.786" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 87.935625][ T28] audit: type=1400 audit(1778027849.206:599): avc: denied { open } for pid=6443 comm="syz.8.786" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 87.974609][ T6465] loop1: detected capacity change from 0 to 128 [ 88.074944][ T28] audit: type=1400 audit(1778027849.436:600): avc: denied { write } for pid=6456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.251807][ T28] audit: type=1400 audit(1778027849.616:601): avc: denied { write } for pid=6480 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.281685][ T6479] loop7: detected capacity change from 0 to 8192 [ 88.298544][ T6479] FAT-fs (loop7): bogus number of reserved sectors [ 88.311703][ T6479] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 88.330170][ T6479] FAT-fs (loop7): Can't find a valid FAT filesystem [ 88.405293][ T28] audit: type=1400 audit(1778027849.766:602): avc: denied { write } for pid=6483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.465758][ T28] audit: type=1400 audit(1778027849.826:603): avc: denied { write } for pid=6495 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.542086][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 88.566909][ T6505] loop9: detected capacity change from 0 to 1024 [ 88.591448][ T6505] EXT4-fs: Ignoring removed bh option [ 88.624151][ T28] audit: type=1400 audit(1778027849.986:604): avc: denied { write } for pid=6504 comm="syz.9.793" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.667190][ T28] audit: type=1400 audit(1778027849.986:605): avc: denied { mounton } for pid=6508 comm="syz.3.797" path="/179/file0" dev="tmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 88.704782][ T6516] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.740902][ T6521] capability: warning: `syz.1.801' uses deprecated v2 capabilities in a way that may be insecure [ 88.760402][ T6516] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.799'. [ 88.793871][ T6516] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.799'. [ 89.061662][ T6554] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.156029][ T6561] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.166233][ T6563] EXT4-fs: Ignoring removed nobh option [ 89.172330][ T6563] EXT4-fs: Ignoring removed bh option [ 89.180468][ T6563] EXT4-fs (loop9): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 89.243332][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.252012][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.338889][ T6575] EXT4-fs: Ignoring removed orlov option [ 89.441879][ T6581] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 89.471793][ T6581] Symlink component flag not implemented [ 89.482842][ T6581] Symlink component flag not implemented (7) [ 89.494190][ T6581] Symlink component flag not implemented (7) [ 89.558967][ T6583] sctp: [Deprecated]: syz.9.823 (pid 6583) Use of int in max_burst socket option. [ 89.558967][ T6583] Use struct sctp_assoc_value instead [ 89.706154][ T6588] netlink: 'syz.9.825': attribute type 13 has an invalid length. [ 89.726918][ T49] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.736132][ T6588] netlink: 'syz.9.825': attribute type 13 has an invalid length. [ 89.754335][ T49] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.767131][ T49] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.778670][ T49] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.779390][ T6590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.820628][ T6590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.881642][ T6598] usb usb7: check_ctrlrecip: process 6598 (syz.9.829) requesting ep 01 but needs 81 [ 89.927730][ T6598] usb usb7: usbfs: process 6598 (syz.9.829) did not claim interface 0 before use [ 89.943543][ T6600] EXT4-fs (loop3): orphan cleanup on readonly fs [ 89.959184][ T6600] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.830: Failed to acquire dquot type 1 [ 89.971194][ T6600] loop3: lost filesystem error report for type 5 error -117 [ 89.971441][ T6600] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.830: Failed to acquire dquot type 1 [ 89.989961][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 89.989980][ C0] EXT4-fs (loop3): last error at time 1778027851: ext4_acquire_dquot:7034 [ 90.006416][ T6600] loop3: lost filesystem error report for type 5 error -117 [ 90.007549][ T6600] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.830: bg 0: block 248: padding at end of block bitmap is not set [ 90.035763][ T6605] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.051476][ T6600] loop3: lost filesystem error report for type 5 error -117 [ 90.051879][ T6600] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 90.069130][ T6605] EXT4-fs (loop8): Remounting filesystem read-only [ 90.075997][ T6600] loop3: lost filesystem error report for type 5 error -117 [ 90.076739][ T6600] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.830: Failed to acquire dquot type 1 [ 90.114348][ T6600] loop3: lost filesystem error report for type 5 error -117 [ 90.114949][ T6600] EXT4-fs (loop3): 1 orphan inode deleted [ 90.275156][ T6611] EXT4-fs: Ignoring removed bh option [ 90.424252][ T6623] EXT4-fs: Ignoring removed bh option [ 90.525236][ T6636] netlink: 'syz.9.842': attribute type 1 has an invalid length. [ 90.607538][ T6639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.653627][ T6639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.686110][ T6641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.720906][ T6636] __nla_validate_parse: 2 callbacks suppressed [ 90.720988][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.9.842'. [ 90.736891][ T6641] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.845: iget: bad i_size value: 38620345925642 [ 90.772829][ T6641] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.780145][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 90.783513][ T6641] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.845: couldn't read orphan inode 15 (err -117) [ 90.789725][ C1] EXT4-fs (loop8): initial error at time 1778027852: ext4_orphan_get:1397: inode 15 [ 90.816787][ T6641] loop8: lost filesystem error report for type 5 error -117 [ 90.817963][ C1] EXT4-fs (loop8): last error at time 1778027852: ext4_orphan_get:1397 [ 90.904439][ T6627] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.920981][ T6641] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.845: bg 0: block 5: invalid block bitmap [ 90.950841][ T6627] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 90.954061][ T6654] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.959363][ T6641] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 780 with error 28 [ 90.974785][ T6627] EXT4-fs (loop1): orphan cleanup on readonly fs [ 90.994249][ T6656] syz.9.847: attempt to access beyond end of device [ 90.994249][ T6656] loop9: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 90.994480][ T6627] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.838: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.011127][ T6654] EXT4-fs (loop3): Remounting filesystem read-only [ 91.022239][ T6627] loop1: lost filesystem error report for type 5 error -117 [ 91.028253][ T6656] syz.9.847: attempt to access beyond end of device [ 91.028253][ T6656] loop9: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 91.028968][ T6627] EXT4-fs (loop1): 1 orphan inode deleted [ 91.035588][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 91.035731][ C1] EXT4-fs (loop1): initial error at time 1778027852: ext4_free_blocks:6718 [ 91.035778][ C1] EXT4-fs (loop1): last error at time 1778027852: ext4_free_blocks:6718 [ 91.035960][ T6641] EXT4-fs (loop8): This should not happen!! Data will be lost [ 91.035960][ T6641] [ 91.035983][ T6641] EXT4-fs (loop8): Total free blocks count 0 [ 91.049686][ T6656] syz.9.847: attempt to access beyond end of device [ 91.049686][ T6656] loop9: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 91.055096][ T6641] EXT4-fs (loop8): Free/Dirty block details [ 91.080816][ T6656] syz.9.847: attempt to access beyond end of device [ 91.080816][ T6656] loop9: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 91.107992][ T6641] EXT4-fs (loop8): free_blocks=0 [ 91.141000][ T6641] EXT4-fs (loop8): dirty_blocks=784 [ 91.141242][ T6656] syz.9.847: attempt to access beyond end of device [ 91.141242][ T6656] loop9: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 91.146304][ T6641] EXT4-fs (loop8): Block reservation details [ 91.146341][ T6641] EXT4-fs (loop8): i_reserved_data_blocks=784 [ 91.189665][ T6656] syz.9.847: attempt to access beyond end of device [ 91.189665][ T6656] loop9: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 91.226424][ T6656] syz.9.847: attempt to access beyond end of device [ 91.226424][ T6656] loop9: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 91.258557][ T6656] syz.9.847: attempt to access beyond end of device [ 91.258557][ T6656] loop9: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 91.272711][ T6656] syz.9.847: attempt to access beyond end of device [ 91.272711][ T6656] loop9: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 91.274348][ T6659] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.286513][ T6656] syz.9.847: attempt to access beyond end of device [ 91.286513][ T6656] loop9: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 91.545695][ T6674] set_capacity_and_notify: 16 callbacks suppressed [ 91.545710][ T6674] loop9: detected capacity change from 0 to 1024 [ 91.564037][ T6674] EXT4-fs: Ignoring removed bh option [ 91.578688][ T6671] loop3: detected capacity change from 0 to 8192 [ 91.769723][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'. [ 92.381441][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'. [ 92.393395][ T6691] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 92.412642][ T6693] loop7: detected capacity change from 0 to 512 [ 92.421771][ T6693] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 92.437189][ T6693] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 92.493235][ T6697] loop9: detected capacity change from 0 to 128 [ 92.581737][ T6697] FAT-fs (loop9): error, corrupted file size (i_pos 548, 512) [ 92.589459][ T6697] FAT-fs (loop9): Filesystem has been set read-only [ 92.599210][ T6697] FAT-fs (loop9): error, invalid FAT chain (i_pos 548, last_block 8) [ 92.632684][ T6693] EXT4-fs (loop7): 1 truncate cleaned up [ 92.696918][ T6693] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 92.811047][ T6691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.856'. [ 93.093566][ T6713] loop8: detected capacity change from 0 to 1024 [ 93.103250][ T6713] EXT4-fs: Ignoring removed bh option [ 93.120002][ T6709] loop1: detected capacity change from 0 to 1024 [ 93.135177][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 93.135192][ T28] audit: type=1400 audit(1778027854.496:632): avc: denied { write } for pid=6712 comm="syz.8.869" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.165644][ T6713] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #12: block 7: comm syz.8.869: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 93.197305][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 93.208087][ T28] audit: type=1400 audit(1778027854.566:633): avc: denied { write } for pid=6712 comm="syz.8.869" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.231840][ T6718] EXT4-fs error (device loop8): ext4_check_all_de:659: inode #12: block 7: comm syz.8.869: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 93.371897][ T6723] syzkaller0: entered promiscuous mode [ 93.377496][ T6723] syzkaller0: entered allmulticast mode [ 93.463876][ T6731] loop8: detected capacity change from 0 to 1024 [ 93.507577][ T28] audit: type=1400 audit(1778027854.866:634): avc: denied { write } for pid=6730 comm="syz.8.874" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.529187][ T28] audit: type=1400 audit(1778027854.866:635): avc: denied { read write } for pid=6730 comm="syz.8.874" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.552003][ T28] audit: type=1400 audit(1778027854.866:636): avc: denied { open } for pid=6730 comm="syz.8.874" path="/62/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.575058][ T28] audit: type=1400 audit(1778027854.866:637): avc: denied { ioctl } for pid=6730 comm="syz.8.874" path="/62/file1/file1" dev="loop8" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.765228][ T6743] loop8: detected capacity change from 0 to 8192 [ 93.782483][ T6743] FAT-fs (loop8): bogus number of reserved sectors [ 93.796014][ T6743] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 93.815907][ T6743] FAT-fs (loop8): Can't find a valid FAT filesystem [ 94.184903][ T6751] loop8: detected capacity change from 0 to 128 [ 94.295681][ T6754] loop7: detected capacity change from 0 to 1024 [ 94.662111][ T6750] FAT-fs (loop8): error, corrupted file size (i_pos 548, 512) [ 94.669807][ T6750] FAT-fs (loop8): Filesystem has been set read-only [ 94.676687][ T6750] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8) [ 94.693316][ T6754] EXT4-fs (loop7): shut down requested (0) [ 94.699492][ T28] audit: type=1400 audit(1778027856.056:638): avc: denied { write } for pid=6752 comm="syz.7.881" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.780190][ T28] audit: type=1400 audit(1778027856.126:639): avc: denied { write } for pid=6758 comm="syz.9.884" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.802378][ T28] audit: type=1400 audit(1778027856.126:640): avc: denied { write } for pid=6758 comm="syz.9.884" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.824792][ T28] audit: type=1400 audit(1778027856.126:641): avc: denied { rename } for pid=6758 comm="syz.9.884" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.847154][ T6739] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.872970][ T6739] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.089361][ T6767] EXT4-fs: Ignoring removed nobh option [ 95.117742][ T6767] EXT4-fs: Ignoring removed bh option [ 95.147571][ T6767] EXT4-fs (loop8): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 95.417609][ T6776] usb usb7: check_ctrlrecip: process 6776 (syz.8.888) requesting ep 01 but needs 81 [ 95.450504][ T6776] usb usb7: usbfs: process 6776 (syz.8.888) did not claim interface 0 before use [ 95.536086][ T6783] -: renamed from syzkaller0 [ 95.804643][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.894'. [ 95.980770][ T6791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.996332][ T6800] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.898: inode has both inline data and extents flags [ 96.019889][ T6800] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.020207][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 96.035817][ C0] EXT4-fs (loop1): initial error at time 1778027857: ext4_orphan_get:1397: inode 15 [ 96.045506][ C0] EXT4-fs (loop1): last error at time 1778027857: ext4_orphan_get:1397: inode 15 [ 96.056751][ T6800] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.898: couldn't read orphan inode 15 (err -117) [ 96.136997][ T6800] loop1: lost filesystem error report for type 5 error -117 [ 96.209901][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 96.247374][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.307478][ T6812] usb usb5: usbfs: process 6812 (syz.1.901) did not claim interface 0 before use [ 96.382359][ T6814] netlink: 'syz.8.903': attribute type 6 has an invalid length. [ 96.566590][ T6823] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.620369][ T6826] set_capacity_and_notify: 5 callbacks suppressed [ 96.620387][ T6826] loop8: detected capacity change from 0 to 512 [ 96.673323][ T6826] EXT4-fs: Ignoring removed bh option [ 96.683637][ T6826] EXT4-fs: inline encryption not supported [ 96.696795][ T6826] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.744735][ T6826] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 96.759603][ T6826] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.906: bg 0: block 248: padding at end of block bitmap is not set [ 96.777247][ T6826] loop8: lost filesystem error report for type 5 error -117 [ 96.777543][ T6826] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.906: Failed to acquire dquot type 1 [ 96.784891][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 96.784910][ C0] EXT4-fs (loop8): last error at time 1778027858: ext4_validate_block_bitmap:441 [ 96.812118][ T6826] loop8: lost filesystem error report for type 5 error -28 [ 96.812588][ T6826] EXT4-fs (loop8): 1 truncate cleaned up [ 96.826456][ T6826] EXT4-fs mount: 66 callbacks suppressed [ 96.826537][ T6826] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 96.883616][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.922789][ T6834] loop1: detected capacity change from 0 to 512 [ 96.944683][ T6834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002] [ 96.981088][ T6834] System zones: 1-12 [ 96.995775][ T6834] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.910: corrupted in-inode xattr: e_value size too large [ 97.010730][ T6834] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.010922][ T6834] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.910: couldn't read orphan inode 15 (err -117) [ 97.031798][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 97.031822][ C1] EXT4-fs (loop1): initial error at time 1778027858: ext4_iget_extra_inode:5128: inode 15 [ 97.031855][ C1] EXT4-fs (loop1): last error at time 1778027858: ext4_iget_extra_inode:5128: inode 15 [ 97.058115][ T6834] loop1: lost filesystem error report for type 5 error -117 [ 97.060581][ T6805] loop9: detected capacity change from 0 to 1024 [ 97.060740][ T6834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.082617][ T6805] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.098675][ T6805] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.129621][ T6834] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.910: Unrecognised inode hash code 4 [ 97.141594][ T6834] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.910: Corrupt directory, running e2fsck is recommended [ 97.154725][ T6834] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.910: Unrecognised inode hash code 4 [ 97.156187][ T6805] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.166068][ T6834] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.910: Corrupt directory, running e2fsck is recommended [ 97.214703][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.286583][ T5510] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.346926][ T6826] syz.8.906 (6826) used greatest stack depth: 9152 bytes left [ 97.371482][ T6865] netlink: 'syz.3.922': attribute type 4 has an invalid length. [ 97.388659][ T6863] loop1: detected capacity change from 0 to 4096 [ 97.392838][ T6865] netlink: 'syz.3.922': attribute type 4 has an invalid length. [ 97.406855][ T6867] netlink: 'syz.9.923': attribute type 1 has an invalid length. [ 97.424914][ T6863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.473183][ T5345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 97.578864][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.587219][ T6867] netlink: 28 bytes leftover after parsing attributes in process `syz.9.923'. [ 97.644111][ T6883] netlink: 24 bytes leftover after parsing attributes in process `syz.7.930'. [ 97.680941][ T6886] loop3: detected capacity change from 0 to 1024 [ 97.691930][ T6886] EXT4-fs: Ignoring removed orlov option [ 97.756330][ T6886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.765647][ T6892] loop1: detected capacity change from 0 to 2048 [ 97.816847][ T6892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.870669][ T6892] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.959360][ T6903] loop8: detected capacity change from 0 to 128 [ 97.984344][ T6904] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.933: bg 0: block 345: padding at end of block bitmap is not set [ 97.999129][ T6903] vfat: Unknown parameter 'mask' [ 98.047334][ T6904] EXT4-fs (loop1): Remounting filesystem read-only [ 98.061293][ T55] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 98.152734][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.205800][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.280041][ T6912] netlink: 'syz.3.941': attribute type 3 has an invalid length. [ 98.359388][ T6920] netlink: 'syz.7.944': attribute type 1 has an invalid length. [ 98.506874][ T6920] netlink: 28 bytes leftover after parsing attributes in process `syz.7.944'. [ 98.526839][ T6933] loop1: detected capacity change from 0 to 1024 [ 98.559033][ T6933] EXT4-fs: Ignoring removed nobh option [ 98.588360][ T6933] EXT4-fs: Ignoring removed bh option [ 98.617377][ T6933] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 98.836063][ T6933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.869815][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 98.869831][ T28] audit: type=1400 audit(1778027860.226:669): avc: denied { write } for pid=6931 comm="syz.1.948" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.921326][ T6952] loop3: detected capacity change from 0 to 128 [ 98.927916][ T6952] msdos: Bad value for 'errors' [ 98.968217][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.113431][ T6963] syzkaller1: entered promiscuous mode [ 99.119286][ T6963] syzkaller1: entered allmulticast mode [ 99.201450][ T6966] SELinux: failed to load policy [ 99.254680][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 99.268538][ T6974] loop7: detected capacity change from 0 to 764 [ 99.359639][ T4768] Symlink component flag not implemented [ 99.365015][ T6982] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 99.433358][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.977'. [ 99.507796][ T3373] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 99.522863][ T3373] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.798293][ T28] audit: type=1400 audit(1778027861.156:670): avc: denied { setattr } for pid=6996 comm="syz.3.972" name="/" dev="configfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.858749][ T55] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.869287][ T55] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.891001][ T6999] EXT4-fs: inline encryption not supported [ 99.905472][ T6999] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003] [ 99.916201][ T6999] System zones: 0-5 [ 99.921449][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.974'. [ 99.933243][ T6999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.933482][ T55] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.947550][ T28] audit: type=1400 audit(1778027861.306:671): avc: denied { write } for pid=6998 comm="syz.3.973" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.977915][ T55] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.988598][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.974'. [ 100.032776][ T55] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.044968][ T55] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 100.056920][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.095465][ T55] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.106174][ T55] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 100.121421][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'. [ 100.215358][ T55] bridge_slave_1: left allmulticast mode [ 100.221647][ T55] bridge_slave_1: left promiscuous mode [ 100.227411][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.235784][ T55] bridge_slave_0: left allmulticast mode [ 100.241655][ T55] bridge_slave_0: left promiscuous mode [ 100.247509][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.326371][ T55] bond2 (unregistering): (slave geneve2): Releasing active interface [ 100.387251][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.397541][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.407730][ T55] bond0 (unregistering): Released all slaves [ 100.415213][ T55] bond1 (unregistering): Released all slaves [ 100.423376][ T55] bond2 (unregistering): Released all slaves [ 100.431609][ T55] bond3 (unregistering): Released all slaves [ 100.466728][ T55] hsr_slave_0: left promiscuous mode [ 100.472336][ T55] hsr_slave_1: left promiscuous mode [ 100.477846][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.485437][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.492925][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.500564][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.511658][ T7025] msdos: Bad value for 'errors' [ 100.517458][ T55] veth1_macvtap: left promiscuous mode [ 100.523883][ T55] veth0_macvtap: left promiscuous mode [ 100.529609][ T55] veth1_vlan: left promiscuous mode [ 100.535144][ T55] veth0_vlan: left promiscuous mode [ 100.649295][ T55] team0 (unregistering): Port device team_slave_1 removed [ 100.659786][ T55] team0 (unregistering): Port device team_slave_0 removed [ 100.697207][ T6992] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.704541][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.711746][ T6992] bridge_slave_0: entered allmulticast mode [ 100.718146][ T6992] bridge_slave_0: entered promiscuous mode [ 100.725056][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.732354][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.739485][ T6992] bridge_slave_1: entered allmulticast mode [ 100.745841][ T6992] bridge_slave_1: entered promiscuous mode [ 100.767746][ T6992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.782495][ T6992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.804608][ T6992] team0: Port device team_slave_0 added [ 100.811700][ T6992] team0: Port device team_slave_1 added [ 100.830365][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.838409][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.865290][ T6992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.877488][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.884644][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.917612][ T6992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.955780][ T6992] hsr_slave_0: entered promiscuous mode [ 100.962143][ T6992] hsr_slave_1: entered promiscuous mode [ 100.968053][ T6992] debugfs: 'hsr0' already exists in 'hsr' [ 100.975202][ T6992] Cannot create hsr debugfs directory [ 101.000273][ T28] audit: type=1400 audit(1778027862.356:672): avc: denied { write } for pid=7042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.024392][ T55] IPVS: stop unused estimator thread 0... [ 101.047992][ T28] audit: type=1400 audit(1778027862.406:673): avc: denied { write } for pid=7055 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.074767][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 101.184074][ T7064] EXT4-fs: Ignoring removed orlov option [ 101.208614][ T7064] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.232872][ T28] audit: type=1400 audit(1778027862.596:674): avc: denied { write } for pid=7063 comm="syz.9.987" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.234980][ T7077] netlink: 'syz.1.988': attribute type 1 has an invalid length. [ 101.274007][ T28] audit: type=1400 audit(1778027862.636:675): avc: denied { write } for pid=7059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.300754][ T5510] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.324646][ T28] audit: type=1400 audit(1778027862.686:676): avc: denied { write } for pid=7082 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.362669][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 101.396095][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.988'. [ 101.424006][ T28] audit: type=1400 audit(1778027862.786:677): avc: denied { read } for pid=7086 comm="syz.9.990" path="socket:[16356]" dev="sockfs" ino=16356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.424758][ T7077] 8021q: adding VLAN 0 to HW filter on device bond7 [ 101.547786][ T7094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.993'. [ 101.568959][ T7096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.994'. [ 101.578669][ T7096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.994'. [ 101.675553][ T7098] netlink: 88 bytes leftover after parsing attributes in process `syz.1.995'. [ 101.736849][ T7099] set_capacity_and_notify: 3 callbacks suppressed [ 101.736862][ T7099] loop1: detected capacity change from 0 to 128 [ 101.750086][ T7099] msdos: Bad value for 'errors' [ 102.437691][ T7119] netlink: 'syz.9.1001': attribute type 1 has an invalid length. [ 102.483965][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.503261][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1001'. [ 102.518317][ T7119] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.449617][ T7129] loop9: detected capacity change from 0 to 128 [ 103.456673][ T7129] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 103.466856][ T7129] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.479192][ T7129] ext2 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.492291][ T28] audit: type=1400 audit(1778027864.856:678): avc: denied { write } for pid=7128 comm="syz.9.1005" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.523947][ T5510] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.540659][ T7133] loop9: detected capacity change from 0 to 256 [ 103.580833][ T7135] loop9: detected capacity change from 0 to 512 [ 103.592712][ T7135] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.605429][ T7135] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.629569][ T5510] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.155261][ T7065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.164860][ T6992] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.189451][ T6992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.197777][ T6992] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.208280][ T6992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.227004][ T6992] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.253336][ T6992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.274677][ T6992] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.292592][ T6992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.342536][ T6992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.350301][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 104.350314][ T28] audit: type=1400 audit(1778027865.706:681): avc: denied { write } for pid=7159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.353058][ T6992] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.376364][ T28] audit: type=1400 audit(1778027865.736:682): avc: denied { write } for pid=7184 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.401222][ T6992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.419132][ T6992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.443760][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.451745][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.461017][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.468112][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.494040][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 104.530771][ T3881] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.536976][ T5572] Bluetooth: hci0: command 0x1003 tx timeout [ 104.601685][ T7199] loop1: detected capacity change from 0 to 2048 [ 104.634198][ T7199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.664762][ T28] audit: type=1400 audit(1778027866.016:683): avc: denied { write } for pid=7198 comm="syz.1.1023" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.666768][ T7199] SELinux: Context is not valid (left unmapped). [ 104.694480][ T28] audit: type=1400 audit(1778027866.016:684): avc: denied { write } for pid=7198 comm="syz.1.1023" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.716769][ T28] audit: type=1400 audit(1778027866.016:685): avc: denied { create } for pid=7198 comm="syz.1.1023" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 104.744776][ T28] audit: type=1400 audit(1778027866.016:686): avc: denied { read write } for pid=7198 comm="syz.1.1023" name="file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 104.769354][ T28] audit: type=1400 audit(1778027866.016:687): avc: denied { open } for pid=7198 comm="syz.1.1023" path="/237/file1/file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 104.800230][ T28] audit: type=1400 audit(1778027866.016:688): avc: denied { watch } for pid=7198 comm="syz.1.1023" path="/237/file1/file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 104.827009][ T28] audit: type=1400 audit(1778027866.026:689): avc: denied { mac_admin } for pid=7198 comm="syz.1.1023" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.844477][ T7208] loop8: detected capacity change from 0 to 1024 [ 104.850828][ T28] audit: type=1400 audit(1778027866.056:690): avc: denied { relabelto } for pid=7198 comm="syz.1.1023" name="blkio.bfq.io_serviced" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 104.890507][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.908268][ T6992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.005011][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1025'. [ 105.106962][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24 [ 105.139226][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1029'. [ 105.205655][ T6992] veth0_vlan: entered promiscuous mode [ 105.215025][ T7257] tmpfs: Unsupported parameter 'huge' [ 105.218559][ T6992] veth1_vlan: entered promiscuous mode [ 105.247150][ T7262] loop3: detected capacity change from 0 to 128 [ 105.262357][ T6992] veth0_macvtap: entered promiscuous mode [ 105.293323][ T6992] veth1_macvtap: entered promiscuous mode [ 105.335510][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.365800][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.402719][ T5092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.427398][ T5092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.454499][ T5092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.480038][ T5092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.106500][ T7339] syzkaller1: entered promiscuous mode [ 106.118649][ T7339] syzkaller1: entered allmulticast mode [ 106.352905][ T7344] loop3: detected capacity change from 0 to 1024 [ 106.400655][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 106.648709][ T7380] loop3: detected capacity change from 0 to 1024 [ 106.707012][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 106.842785][ T7409] syz_tun: entered allmulticast mode [ 106.850090][ T7408] syz_tun: left allmulticast mode [ 106.935243][ T7415] loop3: detected capacity change from 0 to 512 [ 106.977283][ T7415] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.032084][ T7415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.052882][ T7400] loop2: detected capacity change from 0 to 512 [ 107.077907][ T7415] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.124232][ T7400] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 107.244307][ T7400] [EXT4 FS bs=1024, gc=1, bpg=2304, ipg=32, mo=a843c018, mo2=0100] [ 107.264882][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.289395][ T7400] System zones: 2-12, 7-7 [ 107.331588][ T7400] EXT4-fs (loop2): orphan cleanup on readonly fs [ 107.410251][ T7400] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1045: Block bitmap for bg 0 marked uninitialized [ 107.471884][ T7400] loop2: lost filesystem error report for type 5 error -117 [ 107.477064][ T7400] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 107.485486][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 107.485956][ C0] EXT4-fs (loop2): initial error at time 1778027868: ext4_read_block_bitmap_nowait:517 [ 107.486266][ C0] EXT4-fs (loop2): last error at time 1778027868: ext4_read_block_bitmap_nowait:517 [ 107.543473][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.550684][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.563935][ T7400] loop2: lost filesystem error report for type 5 error -117 [ 107.585730][ T7400] EXT4-fs (loop2): 1 orphan inode deleted [ 107.692763][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.706728][ T7400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 107.722238][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.786181][ T7400] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 107.798895][ T7400] [EXT4 FS bs=1024, gc=1, bpg=2304, ipg=32, mo=a843c018, mo2=0100] [ 107.808598][ T7400] EXT4-fs error (device loop2): __ext4_remount:6837: comm syz.2.1045: Abort forced by user [ 107.820878][ T7400] EXT4-fs (loop2): Remounting filesystem read-only [ 107.828459][ T7400] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 107.846491][ T7463] syzkaller1: entered allmulticast mode [ 107.868451][ T6992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.904280][ T30] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.920248][ T30] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.942023][ T30] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.959104][ T30] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.978421][ T30] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.001938][ T30] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.024910][ T30] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.060165][ T30] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.092805][ T7489] loop2: detected capacity change from 0 to 1024 [ 108.146605][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 108.177016][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1062'. [ 108.360278][ T7522] tmpfs: Unsupported parameter 'huge' [ 108.432435][ T7526] tmpfs: Too small a size for current use [ 108.462876][ T7528] pimreg: entered allmulticast mode [ 108.474687][ T7528] pimreg: left allmulticast mode [ 109.548442][ T7545] loop2: detected capacity change from 0 to 1024 [ 109.629985][ T7551] netlink: 'syz.3.1078': attribute type 1 has an invalid length. [ 109.645921][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'. [ 109.662105][ T3406] page_pool_release_retry() stalled pool shutdown: id 44, 1 inflight 60 sec [ 110.070338][ T7574] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 110.126858][ T7570] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1087'. [ 110.187695][ T7582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1089'. [ 110.211580][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 110.211595][ T28] audit: type=1400 audit(1778027871.576:733): avc: denied { associate } for pid=7580 comm="syz.1.1092" name="cgroup.freeze" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 110.273148][ T7579] loop3: detected capacity change from 0 to 512 [ 110.349339][ T7579] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 110.407880][ T7579] [EXT4 FS bs=1024, gc=1, bpg=2304, ipg=32, mo=a843c018, mo2=0100] [ 110.416560][ T7586] loop1: detected capacity change from 0 to 1024 [ 110.425916][ T7579] System zones: 2-12, 7-7 [ 110.439581][ T7579] EXT4-fs (loop3): orphan cleanup on readonly fs [ 110.456576][ T7579] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1091: Block bitmap for bg 0 marked uninitialized [ 110.490043][ T7579] loop3: lost filesystem error report for type 5 error -117 [ 110.497840][ T7579] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 110.505707][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 110.505739][ C0] EXT4-fs (loop3): initial error at time 1778027871: ext4_read_block_bitmap_nowait:517 [ 110.506318][ C0] EXT4-fs (loop3): last error at time 1778027871: ext4_read_block_bitmap_nowait:517 [ 110.528300][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 110.538270][ T7579] loop3: lost filesystem error report for type 5 error -117 [ 110.567421][ T7579] EXT4-fs (loop3): 1 orphan inode deleted [ 110.655148][ T7579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.678344][ T28] audit: type=1400 audit(1778027872.036:734): avc: denied { shutdown } for pid=7592 comm="syz.2.1096" lport=44228 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 110.738810][ T7596] syzkaller1: entered promiscuous mode [ 110.749997][ T7596] syzkaller1: entered allmulticast mode [ 110.757351][ T7579] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 110.782480][ T7596] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 110.796940][ T7579] [EXT4 FS bs=1024, gc=1, bpg=2304, ipg=32, mo=a843c018, mo2=0100] [ 110.820445][ T7579] EXT4-fs error (device loop3): __ext4_remount:6837: comm syz.3.1091: Abort forced by user [ 110.860930][ T7579] EXT4-fs (loop3): Remounting filesystem read-only [ 110.880638][ T7579] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 110.918242][ T1037] IPVS: starting estimator thread 0... [ 110.942417][ T7607] bridge_slave_0: left allmulticast mode [ 110.948533][ T7607] bridge_slave_0: left promiscuous mode [ 110.955600][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.955904][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.977071][ T7607] bridge_slave_1: left allmulticast mode [ 110.993060][ T7607] bridge_slave_1: left promiscuous mode [ 111.010363][ T7608] IPVS: using max 2160 ests per chain, 108000 per kthread [ 111.018480][ T7607] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.035707][ T7607] bond0: (slave bond_slave_0): Releasing backup interface [ 111.049206][ T7607] bond0: (slave bond_slave_1): Releasing backup interface [ 111.071207][ T7607] team0: Port device team_slave_0 removed [ 111.081096][ T7607] team0: Port device team_slave_1 removed [ 111.088566][ T7607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.096438][ T7607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.105315][ T7607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.113136][ T7607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.168938][ T7618] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1105'. [ 111.178239][ T7607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.659319][ T7624] loop2: detected capacity change from 0 to 1024 [ 111.694949][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'. [ 111.907971][ T7626] loop2: detected capacity change from 0 to 128 [ 111.916352][ T7626] msdos: Bad value for 'errors' [ 112.059666][ T28] audit: type=1400 audit(1778027873.416:735): avc: denied { write } for pid=7632 comm="syz.9.1111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 112.136437][ T7629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1109'. [ 112.250867][ T7644] loop3: detected capacity change from 0 to 128 [ 112.273655][ T7644] msdos: Bad value for 'errors' [ 112.287187][ T7640] loop1: detected capacity change from 0 to 1024 [ 112.366822][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1113'. [ 112.408780][ T7650] netlink: 666 bytes leftover after parsing attributes in process `syz.9.1117'. [ 112.917229][ T7670] xt_hashlimit: size too large, truncated to 1048576 [ 113.233558][ T7683] loop3: detected capacity change from 0 to 1024 [ 113.270218][ T28] audit: type=1400 audit(1778027874.626:736): avc: denied { bind } for pid=7684 comm="syz.2.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.296707][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 113.300896][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1130'. [ 113.336662][ T28] audit: type=1400 audit(1778027874.656:737): avc: denied { setopt } for pid=7684 comm="syz.2.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.360551][ T7685] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1130'. [ 113.513950][ T28] audit: type=1400 audit(1778027874.876:738): avc: denied { unmount } for pid=5345 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 113.610173][ T28] audit: type=1400 audit(1778027874.966:739): avc: denied { execute_no_trans } for pid=7696 comm="syz.3.1134" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.724720][ T28] audit: type=1400 audit(1778027875.086:740): avc: denied { ioctl } for pid=7698 comm="syz.2.1136" path="socket:[18276]" dev="sockfs" ino=18276 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.775682][ T28] audit: type=1400 audit(1778027875.106:741): avc: denied { bind } for pid=7698 comm="syz.2.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.816216][ T7705] loop3: detected capacity change from 0 to 512 [ 113.841351][ T7705] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1139: bg 0: block 288: padding at end of block bitmap is not set [ 113.871587][ T7705] loop3: lost filesystem error report for type 5 error -117 [ 113.872367][ T7708] xt_hashlimit: size too large, truncated to 1048576 [ 113.873075][ T7705] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 113.886448][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 113.886471][ C1] EXT4-fs (loop3): initial error at time 1778027875: ext4_validate_block_bitmap:441 [ 113.886515][ C1] EXT4-fs (loop3): last error at time 1778027875: ext4_validate_block_bitmap:441 [ 113.940236][ T7705] loop3: lost filesystem error report for type 5 error -117 [ 113.944196][ T7705] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1139: attempt to clear invalid blocks 1024 len 1 [ 113.965349][ T7705] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 113.965683][ T7705] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1139: invalid indirect mapped block 1819239214 (level 0) [ 113.989152][ T7705] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 113.989399][ T7705] EXT4-fs (loop3): 1 truncate cleaned up [ 114.007446][ T7705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.078076][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.092142][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.542380][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1145'. [ 114.625663][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.683704][ T7738] loop3: detected capacity change from 0 to 128 [ 114.695062][ T7738] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.720012][ T7738] ext4 filesystem being mounted at /247/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.743945][ T28] audit: type=1400 audit(1778027876.106:742): avc: denied { write } for pid=7737 comm="syz.3.1148" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.792336][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.919489][ T30] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.936513][ T30] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.958380][ T30] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.974590][ T30] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.990887][ T30] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.007297][ T30] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 115.029863][ T30] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.043957][ T30] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 115.045556][ T7757] netlink: 'syz.9.1156': attribute type 1 has an invalid length. [ 115.081043][ T1037] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 115.088668][ T1037] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 115.109996][ T1037] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 115.117962][ T1037] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 115.125599][ T1037] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 115.135787][ T7762] netlink: 'syz.1.1158': attribute type 1 has an invalid length. [ 115.143062][ T1037] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 115.152867][ T1037] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 115.160462][ T1037] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 115.167956][ T1037] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 115.175561][ T1037] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 115.189982][ T1037] hid-generic 0006:0004:0009.0007: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 115.284160][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1156'. [ 115.311335][ T7757] 8021q: adding VLAN 0 to HW filter on device bond4 [ 115.440432][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 115.520056][ T7777] loop1: detected capacity change from 0 to 128 [ 115.526656][ T7777] msdos: Bad value for 'errors' [ 115.807667][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 115.807683][ T28] audit: type=1400 audit(1778027877.166:744): avc: denied { read } for pid=7774 comm="syz.9.1163" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.059539][ T7788] loop2: detected capacity change from 0 to 2048 [ 116.082520][ T7788] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 116.090764][ T7788] System zones: 0-4 [ 116.095193][ T7788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.110534][ T7788] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.130172][ T28] audit: type=1400 audit(1778027877.486:745): avc: denied { write } for pid=7787 comm="syz.2.1167" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.152087][ T28] audit: type=1400 audit(1778027877.486:746): avc: denied { append } for pid=7787 comm="syz.2.1167" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.176673][ T6992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.245098][ T7798] loop2: detected capacity change from 0 to 1764 [ 116.352481][ T7801] netlink: 'syz.3.1172': attribute type 1 has an invalid length. [ 118.175008][ T7831] sg_write: data in/out 406493/306 bytes for SCSI command 0x0-- guessing data in; [ 118.175008][ T7831] program syz.1.1183 not setting count and/or reply_len properly [ 118.449288][ T7848] netlink: 'syz.1.1188': attribute type 1 has an invalid length. [ 118.498276][ T28] audit: type=1400 audit(1778027879.856:747): avc: denied { write } for pid=7839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.567358][ T28] audit: type=1400 audit(1778027879.926:748): avc: denied { write } for pid=7857 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.589764][ T7859] __nla_validate_parse: 1 callbacks suppressed [ 118.589779][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1189'. [ 118.719811][ T1726] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.784506][ T1726] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.804001][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1192'. [ 118.832332][ T28] audit: type=1400 audit(1778027880.196:749): avc: denied { write } for pid=7865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.887365][ T28] audit: type=1400 audit(1778027880.196:750): avc: denied { write } for pid=7888 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.925922][ T1726] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.983321][ T1726] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.072507][ T7834] 9pnet_fd: p9_fd_create_tcp (7834): problem connecting socket to 127.0.0.1 [ 119.142241][ T7908] netlink: 'syz.2.1198': attribute type 1 has an invalid length. [ 119.197187][ T7918] netlink: 'syz.3.1202': attribute type 1 has an invalid length. [ 119.217004][ T1726] bridge_slave_1: left allmulticast mode [ 119.224426][ T1726] bridge_slave_1: left promiscuous mode [ 119.230285][ T1726] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.238125][ T1726] bridge_slave_0: left allmulticast mode [ 119.243910][ T1726] bridge_slave_0: left promiscuous mode [ 119.249624][ T1726] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.276322][ T7924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1198'. [ 119.392420][ T1726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.403145][ T1726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.413037][ T1726] bond0 (unregistering): Released all slaves [ 119.420796][ T1726] bond1 (unregistering): Released all slaves [ 119.474961][ T7908] bond1: (slave geneve3): making interface the new active one [ 119.487894][ T7908] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 119.498944][ T7924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.522836][ T1966] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.538331][ T1966] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.564173][ T1966] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.583466][ T1966] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.603808][ T1726] hsr_slave_0: left promiscuous mode [ 119.620056][ T1726] hsr_slave_1: left promiscuous mode [ 119.633342][ T1726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.653007][ T1726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.715775][ T28] audit: type=1400 audit(1778027881.076:751): avc: denied { write } for pid=7933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.759331][ T28] audit: type=1400 audit(1778027881.116:752): avc: denied { write } for pid=7954 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.996463][ T1726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.014819][ T1726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.044200][ T1726] veth1_macvtap: left promiscuous mode [ 120.051083][ T1726] veth0_macvtap: left promiscuous mode [ 120.056777][ T1726] veth1_vlan: left promiscuous mode [ 120.074935][ T1726] veth0_vlan: left promiscuous mode [ 120.220913][ T1726] team0 (unregistering): Port device team_slave_1 removed [ 120.241726][ T1726] team0 (unregistering): Port device team_slave_0 removed [ 120.335728][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 120.349557][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.358377][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.365856][ T7884] bridge_slave_0: entered allmulticast mode [ 120.372641][ T7884] bridge_slave_0: entered promiscuous mode [ 120.391098][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.420708][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.437745][ T7884] bridge_slave_1: entered allmulticast mode [ 120.449333][ T7884] bridge_slave_1: entered promiscuous mode [ 120.492776][ T7884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.504314][ T7884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.551537][ T7884] team0: Port device team_slave_0 added [ 120.561752][ T28] audit: type=1400 audit(1778027881.916:753): avc: denied { write } for pid=7971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.590665][ T7884] team0: Port device team_slave_1 added [ 120.612247][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.619325][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.649393][ T7884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.670739][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.677772][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.707727][ T7985] loop3: detected capacity change from 0 to 1024 [ 120.708290][ T7884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.765571][ T7884] hsr_slave_0: entered promiscuous mode [ 120.777923][ T7993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1215'. [ 120.793006][ T7884] hsr_slave_1: entered promiscuous mode [ 120.803318][ T7884] debugfs: 'hsr0' already exists in 'hsr' [ 120.815691][ T7884] Cannot create hsr debugfs directory [ 120.840721][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1214'. [ 120.901692][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 120.901708][ T28] audit: type=1400 audit(1778027882.266:755): avc: denied { write } for pid=7994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.994346][ T28] audit: type=1400 audit(1778027882.316:756): avc: denied { write } for pid=8006 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.019483][ T8011] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 121.125915][ T8016] loop2: detected capacity change from 0 to 128 [ 121.132721][ T8016] msdos: Bad value for 'errors' [ 121.178204][ T8020] netlink: 'syz.3.1218': attribute type 13 has an invalid length. [ 121.202822][ T35] kernel write not supported for file [eventfd] (pid: 35 comm: kworker/1:1) [ 121.233706][ T7935] Set syz1 is full, maxelem 65536 reached [ 121.244976][ T7884] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 121.254605][ T7884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.262651][ T7884] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 121.275016][ T28] audit: type=1400 audit(1778027882.636:757): avc: denied { write } for pid=8017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.305569][ T7884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.315031][ T8015] ------------[ cut here ]------------ [ 121.320512][ T8015] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#1: syz.1.1217/8015 [ 121.330246][ T8015] Modules linked in: [ 121.334216][ T8015] CPU: 1 UID: 0 PID: 8015 Comm: syz.1.1217 Not tainted syzkaller #0 PREEMPT(full) [ 121.343558][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.353630][ T8015] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 121.359437][ T8015] Code: 8b 05 f1 49 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d4 a8 5e 04 cc e8 5e 12 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 50 12 1e 00 90 0f 0b 90 e9 af fa ff ff [ 121.379052][ T8015] RSP: 0018:ffffc90004f7bdd8 EFLAGS: 00010093 [ 121.385127][ T8015] RAX: ffffffff813b1652 RBX: ffff888104d78000 RCX: ffff888104d78000 [ 121.393098][ T8015] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 121.401248][ T8015] RBP: 0000000000000080 R08: ffff888104d78af8 R09: 0000000000000000 [ 121.409328][ T8015] R10: ffffc90004f7bdf0 R11: 0001c90004f7bdf0 R12: ffff888104d78000 [ 121.417377][ T8015] R13: ffff888104d78828 R14: ffff888103e15b10 R15: 0000000000000080 [ 121.425459][ T8015] FS: 0000000000000000(0000) GS:ffff8882ae9fe000(0000) knlGS:0000000000000000 [ 121.434421][ T8015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.441010][ T8015] CR2: 00007f2281c26286 CR3: 0000000006c32000 CR4: 00000000003506f0 [ 121.448973][ T8015] Call Trace: [ 121.452250][ T8015] [ 121.455164][ T8015] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 121.460561][ T8015] ? __list_add_valid_or_report+0x38/0xe0 [ 121.466271][ T8015] do_exit+0xc13/0x1530 [ 121.470424][ T8015] ? switch_fpu_return+0xe7/0x1b0 [ 121.475437][ T8015] __x64_sys_exit+0x1f/0x20 [ 121.479994][ T8015] x64_sys_call+0x301d/0x3020 [ 121.484662][ T8015] do_syscall_64+0x12c/0x3b0 [ 121.489280][ T8015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.495162][ T8015] RIP: 0033:0x7f7b279ccdd9 [ 121.499637][ T8015] Code: Unable to access opcode bytes at 0x7f7b279ccdaf. [ 121.506635][ T8015] RSP: 002b:00007f7b2641efd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 121.515043][ T8015] RAX: ffffffffffffffda RBX: 00007f7b27c45fa0 RCX: 00007f7b279ccdd9 [ 121.523001][ T8015] RDX: 00007f7b2641f9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.531027][ T8015] RBP: 00007f7b27a62d69 R08: 0000000000000000 R09: 0000000000000000 [ 121.539014][ T8015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.546987][ T8015] R13: 00007f7b27c46038 R14: 00007f7b27c45fa0 R15: 00007ffe24c39d48 [ 121.554949][ T8015] [ 121.557955][ T8015] ---[ end trace 0000000000000000 ]--- [ 121.569802][ T7884] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 121.578317][ T28] audit: type=1400 audit(1778027882.926:758): avc: denied { write } for pid=8032 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.611819][ T7884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.639152][ T7884] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 121.652284][ T7884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.661356][ T28] audit: type=1400 audit(1778027883.026:759): avc: denied { ioctl } for pid=8039 comm="syz.9.1222" path="socket:[19932]" dev="sockfs" ino=19932 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.692768][ T28] audit: type=1400 audit(1778027883.046:760): avc: denied { write } for pid=8037 comm="syz.3.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 121.715358][ T28] audit: type=1400 audit(1778027883.046:761): avc: denied { read } for pid=8037 comm="syz.3.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 121.769735][ T28] audit: type=1400 audit(1778027883.126:762): avc: denied { create } for pid=8053 comm="syz.9.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.794418][ T28] audit: type=1400 audit(1778027883.126:763): avc: denied { write } for pid=8053 comm="syz.9.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.817060][ T8054] wg1 speed is unknown, defaulting to 1000 [ 121.828496][ T8047] tipc: Started in network mode [ 121.833799][ T8047] tipc: Node identity 3aeffd1ef54, cluster identity 4711 [ 121.841832][ T8047] tipc: Enabled bearer , priority 0 [ 121.848585][ T8054] wg1 speed is unknown, defaulting to 1000 [ 121.850680][ T7884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.882822][ T8047] syzkaller0: entered promiscuous mode [ 121.888419][ T8047] syzkaller0: entered allmulticast mode [ 121.896022][ T8047] tipc: Resetting bearer [ 121.903743][ T8054] wg1 speed is unknown, defaulting to 1000 [ 121.916860][ T8045] tipc: Resetting bearer [ 121.918777][ T8054] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.929792][ T28] audit: type=1400 audit(1778027883.286:764): avc: denied { write } for pid=8059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.938329][ T8054] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 121.966642][ T8045] tipc: Disabling bearer [ 121.978651][ T7884] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.999276][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.006407][ T5092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.024287][ T8075] xt_hashlimit: size too large, truncated to 1048576 [ 122.044888][ T8054] wg1 speed is unknown, defaulting to 1000 [ 122.053471][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.060608][ T5092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.088444][ T8054] wg1 speed is unknown, defaulting to 1000 [ 122.103215][ T8054] wg1 speed is unknown, defaulting to 1000 [ 122.110029][ T8054] wg1 speed is unknown, defaulting to 1000 [ 122.125156][ T8054] wg1 speed is unknown, defaulting to 1000 [ 122.227411][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.347364][ T7884] veth0_vlan: entered promiscuous mode [ 122.361834][ T7884] veth1_vlan: entered promiscuous mode [ 122.390942][ T7884] veth0_macvtap: entered promiscuous mode [ 122.402494][ T7884] veth1_macvtap: entered promiscuous mode [ 122.418973][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.442470][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.456715][ T1726] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.466888][ T1726] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.488915][ T1726] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.499634][ T1726] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.654720][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1232'. [ 122.717446][ T8124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1233'. [ 122.830647][ T8146] loop3: detected capacity change from 0 to 128 [ 122.837412][ T8146] msdos: Bad value for 'errors' [ 122.908585][ T8148] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1241'. [ 123.157207][ T8157] loop1: detected capacity change from 0 to 1024 [ 123.177731][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 124.273946][ T8175] netlink: 'syz.1.1252': attribute type 4 has an invalid length. [ 124.287466][ T8175] netlink: 'syz.1.1252': attribute type 4 has an invalid length. [ 124.420511][ T8181] syzkaller0: entered promiscuous mode [ 124.431231][ T8181] syzkaller0: entered allmulticast mode [ 124.475260][ T8191] ªªªªªª: renamed from vlan0 (while UP) [ 124.575255][ T8197] loop3: detected capacity change from 0 to 8192 [ 124.595849][ T8202] loop2: detected capacity change from 0 to 512 [ 124.621783][ T8202] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1262: inode has both inline data and extents flags [ 124.649787][ T8202] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.649983][ T8202] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1262: couldn't read orphan inode 15 (err -117) [ 124.659732][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 124.659753][ C0] EXT4-fs (loop2): initial error at time 1778027886: ext4_orphan_get:1397: inode 15 [ 124.659782][ C0] EXT4-fs (loop2): last error at time 1778027886: ext4_orphan_get:1397: inode 15 [ 124.716197][ T8202] loop2: lost filesystem error report for type 5 error -117 [ 124.716802][ T8202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.759224][ T8209] netlink: 'syz.9.1264': attribute type 1 has an invalid length. [ 124.914520][ T6992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.044157][ T8214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1265'. [ 125.157483][ T8236] loop3: detected capacity change from 0 to 128 [ 125.164134][ T8236] msdos: Bad value for 'errors' [ 125.318452][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.328506][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.423213][ T8233] loop2: detected capacity change from 0 to 1024 [ 125.458241][ T8233] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.479489][ T8233] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 125.489296][ T8233] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.506759][ T8233] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1267: Freeing blocks not in datazone - block = 0, count = 4096 [ 125.522998][ T8233] loop2: lost filesystem error report for type 5 error -117 [ 125.527030][ T8233] EXT4-fs (loop2): 1 orphan inode deleted [ 125.535111][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 125.535279][ C0] EXT4-fs (loop2): initial error at time 1778027886: ext4_free_blocks:6718 [ 125.535410][ C0] EXT4-fs (loop2): last error at time 1778027886: ext4_free_blocks:6718 [ 125.573159][ T8248] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1276'. [ 125.575383][ T8233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.628831][ T8233] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 16: comm syz.2.1267: path /57/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 125.655865][ T8254] loop1: detected capacity change from 0 to 128 [ 125.662578][ T8254] msdos: Bad value for 'errors' [ 126.096138][ T6992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.126072][ T8277] netlink: 'syz.8.1287': attribute type 1 has an invalid length. [ 126.180985][ T8277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=8277 comm=syz.8.1287 [ 126.305854][ T8280] loop2: detected capacity change from 0 to 1024 [ 126.329124][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 126.353824][ T8288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.361446][ T8288] IPv6: NLM_F_CREATE should be set when creating new route [ 126.396918][ T8288] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.404201][ T8288] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.447022][ T8288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.457706][ T8288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.493556][ T1966] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.510717][ T8286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1290'. [ 126.514382][ T1966] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.538885][ T1966] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.548166][ T1966] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.580082][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 126.580098][ T28] audit: type=1400 audit(1778027887.936:773): avc: denied { name_bind 0x1000000 } for pid=8292 comm="syz.2.1293" path="socket:[20349]" dev="sockfs" ino=20349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 126.600093][ T8295] syzkaller0: entered promiscuous mode [ 126.617549][ T8289] loop1: detected capacity change from 0 to 128 [ 126.624166][ T8289] msdos: Bad value for 'errors' [ 126.628995][ T8295] syzkaller0: entered allmulticast mode [ 126.639576][ T8297] loop8: detected capacity change from 0 to 128 [ 127.113113][ T8299] bio_check_eod: 24 callbacks suppressed [ 127.113764][ T8299] syz.8.1295: attempt to access beyond end of device [ 127.113764][ T8299] loop8: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 127.133493][ T8299] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 127.142519][ T8297] syz.8.1295: attempt to access beyond end of device [ 127.142519][ T8297] loop8: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 127.159185][ T8297] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 127.170802][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1301'. [ 127.316493][ T8314] batadv_slave_0: entered promiscuous mode [ 127.473992][ T8326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1306'. [ 127.510432][ T8326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1306'. [ 127.586298][ T8304] loop3: detected capacity change from 0 to 1024 [ 127.603566][ T28] audit: type=1400 audit(1778027888.956:774): avc: denied { listen } for pid=8332 comm="syz.9.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 127.620600][ T8304] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.659457][ T8304] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 127.672815][ T8304] EXT4-fs (loop3): orphan cleanup on readonly fs [ 127.681325][ T8304] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.1297: Freeing blocks not in datazone - block = 0, count = 4096 [ 127.698446][ T8304] loop3: lost filesystem error report for type 5 error -117 [ 127.699577][ T8341] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 127.704022][ T8304] EXT4-fs (loop3): 1 orphan inode deleted [ 127.708524][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1311'. [ 127.714452][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 127.735822][ C1] EXT4-fs (loop3): initial error at time 1778027889: ext4_free_blocks:6718 [ 127.744935][ C1] EXT4-fs (loop3): last error at time 1778027889: ext4_free_blocks:6718 [ 127.772029][ T8304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.805878][ T8304] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 16: comm syz.3.1297: path /274/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 128.050743][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.263776][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1314'. [ 128.381196][ T8355] loop3: detected capacity change from 0 to 128 [ 128.387752][ T8355] msdos: Bad value for 'errors' [ 128.562192][ T8362] random: crng reseeded on system resumption [ 128.569911][ T28] audit: type=1400 audit(1778027889.926:775): avc: denied { write } for pid=8360 comm="syz.8.1318" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 128.601792][ T28] audit: type=1400 audit(1778027889.926:776): avc: denied { open } for pid=8360 comm="syz.8.1318" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 128.665012][ T8367] loop1: detected capacity change from 0 to 164 [ 128.749497][ T28] audit: type=1400 audit(1778027890.106:777): avc: denied { mount } for pid=8372 comm="syz.8.1325" name="/" dev="autofs" ino=20444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 128.808483][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1326'. [ 128.812538][ T28] audit: type=1400 audit(1778027890.136:778): avc: denied { read } for pid=8372 comm="syz.8.1325" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.878474][ T28] audit: type=1400 audit(1778027890.136:779): avc: denied { open } for pid=8372 comm="syz.8.1325" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.904057][ T28] audit: type=1400 audit(1778027890.146:780): avc: denied { ioctl } for pid=8372 comm="syz.8.1325" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.936976][ T8389] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 128.948172][ T28] audit: type=1400 audit(1778027890.226:781): avc: denied { create } for pid=8385 comm="syz.9.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.018460][ T28] audit: type=1400 audit(1778027890.226:782): avc: denied { bind } for pid=8385 comm="syz.9.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.075855][ T8389] 8021q: adding VLAN 0 to HW filter on device bond10 [ 129.130887][ T8405] io-wq is not configured for unbound workers [ 129.299539][ T8416] netlink: 'syz.2.1339': attribute type 1 has an invalid length. [ 129.398760][ T8420] loop3: detected capacity change from 0 to 128 [ 129.697603][ T8434] netlink: 'syz.1.1347': attribute type 1 has an invalid length. [ 129.748304][ T8436] loop3: detected capacity change from 0 to 128 [ 129.750396][ T8434] 8021q: adding VLAN 0 to HW filter on device bond11 [ 129.755030][ T8436] msdos: Bad value for 'errors' [ 129.994005][ T8451] netlink: 'syz.8.1353': attribute type 1 has an invalid length. [ 130.046019][ T8451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=8451 comm=syz.8.1353 [ 130.136913][ T8457] loop8: detected capacity change from 0 to 164 [ 130.184666][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.483603][ T8473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.492223][ T8473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.756253][ T8477] loop3: detected capacity change from 0 to 8192 [ 130.840012][ T8484] netlink: 'syz.9.1365': attribute type 1 has an invalid length. [ 130.861469][ C1] I/O error, dev loop3, sector 33 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 130.871021][ C1] Buffer I/O error on dev loop3, logical block 33, lost sync page write [ 130.879826][ T8477] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 130.897513][ T8477] FAT-fs (loop3): unable to read inode block for updating (i_pos 1051) [ 130.938596][ T12] FAT-fs (loop3): unable to read inode block for updating (i_pos 1051) [ 130.952876][ T8482] FAT-fs (loop3): unable to read inode block for updating (i_pos 1051) [ 130.977561][ T8482] FAT-fs (loop3): unable to read inode block for updating (i_pos 1051) [ 130.997381][ T8482] FAT-fs (loop3): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 131.021656][ T8482] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 131.262619][ T8491] __nla_validate_parse: 5 callbacks suppressed [ 131.262674][ T8491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1368'. [ 131.298347][ T8479] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.312869][ T8479] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 131.322766][ T8479] EXT4-fs (loop1): orphan cleanup on readonly fs [ 131.329651][ T8479] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.1362: Freeing blocks not in datazone - block = 0, count = 4096 [ 131.343268][ T8479] loop1: lost filesystem error report for type 5 error -117 [ 131.344166][ T8498] set_capacity_and_notify: 2 callbacks suppressed [ 131.344181][ T8498] loop2: detected capacity change from 0 to 128 [ 131.345346][ T8479] EXT4-fs (loop1): 1 orphan inode deleted [ 131.351527][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 131.351607][ C0] EXT4-fs (loop1): initial error at time 1778027892: ext4_free_blocks:6718 [ 131.351778][ C0] EXT4-fs (loop1): last error at time 1778027892: ext4_free_blocks:6718 [ 131.395839][ T8498] msdos: Bad value for 'errors' [ 131.408502][ T8479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.469035][ T8479] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 16: comm syz.1.1362: path /306/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 131.734077][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.880809][ T8512] syzkaller0: entered promiscuous mode [ 131.892134][ T8512] syzkaller0: entered allmulticast mode [ 132.124544][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 132.124559][ T28] audit: type=1400 audit(1778027893.486:795): avc: denied { create } for pid=8524 comm="syz.1.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.169896][ T28] audit: type=1400 audit(1778027893.516:796): avc: denied { write } for pid=8524 comm="syz.1.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.194430][ T8525] syzkaller0: entered promiscuous mode [ 132.200179][ T8525] syzkaller0: entered allmulticast mode [ 132.210272][ T5572] Bluetooth: hci0: command 0x1003 tx timeout [ 132.210408][ T3881] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.230593][ T28] audit: type=1400 audit(1778027893.566:797): avc: denied { cmd } for pid=8524 comm="syz.1.1384" path="socket:[22775]" dev="sockfs" ino=22775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 132.567950][ T8544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8544 comm=syz.3.1391 [ 132.703575][ T8558] loop3: detected capacity change from 0 to 128 [ 133.558631][ T30] ================================================================== [ 133.566854][ T30] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 133.576353][ T30] [ 133.578689][ T30] write to 0xffff88811dc035cb of 5 bytes by task 8560 on cpu 1: [ 133.586499][ T30] copy_folio_from_iter_atomic+0x743/0x10b0 [ 133.592413][ T30] generic_perform_write+0x2c1/0x490 [ 133.597715][ T30] __generic_file_write_iter+0x9e/0x120 [ 133.603276][ T30] generic_file_write_iter+0x8d/0x310 [ 133.608656][ T30] iter_file_splice_write+0x6c4/0xa80 [ 133.614042][ T30] direct_splice_actor+0x156/0x2a0 [ 133.619179][ T30] splice_direct_to_actor+0x311/0x670 [ 133.624565][ T30] do_splice_direct+0x119/0x1a0 [ 133.629418][ T30] do_sendfile+0x382/0x650 [ 133.633842][ T30] __x64_sys_sendfile64+0x105/0x150 [ 133.639067][ T30] x64_sys_call+0x2dc4/0x3020 [ 133.643764][ T30] do_syscall_64+0x12c/0x3b0 [ 133.648368][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.654272][ T30] [ 133.656680][ T30] read to 0xffff88811dc03400 of 512 bytes by task 30 on cpu 0: [ 133.664219][ T30] copy_folio_from_iter_atomic+0x743/0x10b0 [ 133.670228][ T30] generic_perform_write+0x2c1/0x490 [ 133.675611][ T30] shmem_file_write_iter+0xc5/0xf0 [ 133.680730][ T30] lo_rw_aio+0x67d/0x730 [ 133.684997][ T30] loop_process_work+0x56c/0xac0 [ 133.689962][ T30] loop_workfn+0x31/0x40 [ 133.694226][ T30] process_scheduled_works+0x4f0/0x9c0 [ 133.699697][ T30] worker_thread+0x58a/0x780 [ 133.704301][ T30] kthread+0x22a/0x280 [ 133.708369][ T30] ret_from_fork+0x146/0x330 [ 133.713051][ T30] ret_from_fork_asm+0x1a/0x30 [ 133.717838][ T30] [ 133.720164][ T30] Reported by Kernel Concurrency Sanitizer on: [ 133.726310][ T30] CPU: 0 UID: 0 PID: 30 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(full) [ 133.737218][ T30] Tainted: [W]=WARN [ 133.741024][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 133.751082][ T30] Workqueue: loop3 loop_workfn [ 133.755856][ T30] ==================================================================