last executing test programs: 1m24.123840953s ago: executing program 3 (id=452): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(0xffffffffffffffff, 0x0, 0x0, r0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x4, &(0x7f00000006c0)=[&(0x7f0000000380)='deflate\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000580)='deflate\x00', &(0x7f0000000680)='0{\x00'], 0x0, 0xfffffffffffffff8}}, 0x30) (async) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x1c47, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async, rerun: 64) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) (async, rerun: 64) close(0xffffffffffffffff) r6 = socket(0x28, 0x5, 0x0) (async, rerun: 32) r7 = socket(0x28, 0x5, 0x0) (rerun: 32) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000400), &(0x7f00000004c0)=0x4) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100408}, 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xc010) (async) listen(r7, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="006f270500"/22, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x28, 0x32, 0x0, 0x0) (async, rerun: 32) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3801000010000100fdffffbf000100000000000000000000000000000000000164010100000000000000000000000000000103144e210009000000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000002000f8ffffffffefffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002ebd7000023500000a0001fc2a00000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (rerun: 64) 1m23.277078125s ago: executing program 3 (id=455): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0x77, 0x0, &(0x7f0000000540)="c9f7b98600000000000000000000ad038d56c6cb20b0526a89ee15ad5776fcd922689ab270ff97872901d253330061d7f898e4f661b95dee0adf8ec55dbb73cfb2985ac7b14ad5197c397c1b292becf48a0e9a0b0646321c21668c2ba3e1252f47f696458a51ae24caea74b9301e3b27d5775a7f1d675c", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) close(0x3) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x10300100, 0x0, 0x31, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400074701eb944000000000080012400000000d050005000000000005000100060000000d000300686173683a6d616300000000"], 0x5c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="6320861769022a3a2a206d6d"], 0xa) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x200, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) 1m22.439867476s ago: executing program 3 (id=462): syz_emit_ethernet(0x6a, &(0x7f0000000840)={@remote, @random="e80ad0971538", @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x6, 0x6, "8e62aa", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x6, 0x6, "1deb33", 0xf, 0x0, 0x1, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}}}, 0x0) socket(0x10, 0x80000, 0x2) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800002c1d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000e0000000850000008200000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40448c0}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, 0x0) syz_clone(0x10808080, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100), 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}}, 0x20}}, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x400, @rand_addr=0x3}}, 0x24) sendmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000340)=@raw=[@generic={0x90, 0x4, 0x0, 0x6, 0x469}, @generic={0x9, 0x4, 0x0, 0xf0, 0x5}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @ldst={0x3, 0x0, 0x6, 0x9, 0x0, 0x8, 0x1}], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000001ac0)=""/4096, 0x40f00, 0x21, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xc, 0xe, 0x100000}, 0x10, 0x1cb04, r10, 0x3, &(0x7f0000000580)=[0xffffffffffffffff], &(0x7f00000005c0)=[{0x4, 0x1, 0x5, 0x7}, {0x1, 0x4, 0x8, 0xb}, {0x5, 0x4, 0x6}], 0x10, 0x9}, 0x94) r12 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r11}, 0x8) close(r12) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m22.229126797s ago: executing program 3 (id=466): r0 = socket(0x400000000010, 0x3, 0x0) io_setup(0x2278, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x91, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x8084, 0x100000001, 0x101, 0x2, 0x7f, 0x9b9c, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) connect$unix(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") write(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r3 = getpid() syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x1900a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0) chroot(&(0x7f0000000140)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_pidfd_open(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(r4, 0x24020000) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000340)='.\x00', 0x10) 1m21.137896941s ago: executing program 3 (id=471): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000200000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 1m20.524038972s ago: executing program 3 (id=474): socket$kcm(0x29, 0x5, 0x0) 1m20.124534051s ago: executing program 32 (id=474): socket$kcm(0x29, 0x5, 0x0) 56.761782068s ago: executing program 0 (id=668): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000711236007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 56.619934566s ago: executing program 0 (id=669): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x3, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x20004) sendmmsg$inet(r0, &(0x7f0000002780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="01d51675127d4d9bb56d3b5c37d479a53219210398cdc5c62e6ab4438458c4321c8a298edffa671124", 0x29}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}}], 0x1, 0xc0) 56.472770413s ago: executing program 0 (id=672): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x5, 0x60010, 0xffffffffffffffff, 0x10000000) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, r1, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r6, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r7}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000022000000060000005545000000000000", @ANYRES32=0x1, @ANYBLOB="61a90000000900007baabcc60a72e56b900000000000000000000000000c327c335fb748f069b14364b204bf35502367bc00f12cf0d8", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="02000000000000000500"/28], 0x50) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000040)={{0x1}}) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='sched\x00') write$UHID_INPUT(r9, &(0x7f0000000300)={0x18, {"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", 0x1060}}, 0x1006) 56.400688216s ago: executing program 0 (id=676): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a4ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80478b, &(0x7f0000000500)={[{@nodioread_nolock}, {@grpjquota}, {@minixdf}, {@discard}, {@prjquota}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xffff}}]}, 0x0, 0x489, &(0x7f0000000c80)="$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") r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYRES64=r3], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 56.307739321s ago: executing program 0 (id=678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x4080, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000080)="18349ff0707332657eaaad2904dd1d1d86dd", 0x12, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xff}, 0x14) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x68, 0x0, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 55.174036607s ago: executing program 0 (id=680): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000,']) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000,']) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRES8, @ANYRES64=r0], 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$kcm(0x2, 0x2, 0x0) r7 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r8, &(0x7f0000000280)='.\x00', 0x0, r9, 0x1000) setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30040000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021"], 0xe0}}, 0x0) 40.438380347s ago: executing program 33 (id=680): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000,']) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000,']) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRES8, @ANYRES64=r0], 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$kcm(0x2, 0x2, 0x0) r7 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r8, &(0x7f0000000280)='.\x00', 0x0, r9, 0x1000) setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30040000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021"], 0xe0}}, 0x0) 4.880926588s ago: executing program 2 (id=1083): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x22000, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") truncate(&(0x7f0000000180)='./file0\x00', 0x21) io_cancel(r1, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000400)="9d67b1f3717771ec6fd65de29bf9a31228488a84287d5e8080fb4eaf35b39c34638c7375ff0721ff826935f1aee83a600dd9d6048e0a44fc3a", 0x39, 0x0, 0x0, 0x0, r0}, &(0x7f00000017c0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)) fcntl$getown(r0, 0x9) syz_clone3(&(0x7f0000001540)={0x0, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000001740), {0x39}, &(0x7f0000000440)=""/143, 0x8f, &(0x7f0000000500)=""/4096, &(0x7f0000001500)}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000015c0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001640)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767320000"], 0xa8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="1100000003000000000000000500000000000000", @ANYRES32, @ANYBLOB="5e884118000000000000000372483b5777000000000000010000c5ae210294e8fa3831eb2e65bddf0ad784f73fd225aec03f866afa0645b094b84fe0e57da0402ad63ce22324f77b33cff30400000000000000000000000000d24351ff9bcb3e2223a0707769b2863a80b4862ee8cd650adf53abad0d96cdf392", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="02000000050000000500"/28], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x3402, 0x0, 0x0, 0x8, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0xb, &(0x7f0000000180)) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.500569736s ago: executing program 2 (id=1098): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000040)={'macvlan1\x00', @ifru_map={0x2, 0x53, 0x3, 0x4a, 0xab, 0x5}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000040) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xb}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0xfffffff9, 0x10000, 0x1, 'queue1\x00', 0x400}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x15) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xc}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x94}, 0x0) socket$rds(0x15, 0x5, 0x0) (async) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000040)={'macvlan1\x00', @ifru_map={0x2, 0x53, 0x3, 0x4a, 0xab, 0x5}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x10, 0x803, 0x0) (async) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000040) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xb}}, './file0\x00'}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0xfffffff9, 0x10000, 0x1, 'queue1\x00', 0x400}) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x15) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xc}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x94}, 0x0) (async) 2.331904744s ago: executing program 2 (id=1100): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.331268054s ago: executing program 2 (id=1101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f00000006c0)=@ethtool_cmd={0x3a, 0x5, 0x2fef, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0x0, 0x8000]}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000038000900000000000021000004000000040000800c000380"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800fa00000000000018110200", @ANYRES64=r2, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ptrace$setregs(0xf, 0x0, 0x82d5, &(0x7f0000000180)="1669dc45c32512aec9732e12e1c41af2fc076e3eac92f83523364b348a39f229cd8fa1f0659cba7a2bc7c8ebd220df067a32c6528099b8fbd37a3e8dc0fec3eee78a6b000a1159c6f68ec31aa36008485a9ab4ac7a4ea79de6be7c7e6e74c9e47b3241ecaf62") bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) 2.083283937s ago: executing program 6 (id=1106): r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) copy_file_range(r0, &(0x7f00000001c0)=0x92, r2, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x3c0, 0xffffff80, 0x178, 0x0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {0x9}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x20}, {0x0, 0xfc}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x8a}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xffffff00], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}, {}, 0x88}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x4, 0xffffffff, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0xffff}}}, 0x24}}, 0x0) sendto(r5, &(0x7f00000003c0)="c200a9ee453db61e52f221fde3615a2e9744ff5dafba3a5372f9cd834d849ef06238dfa227abd23a69aa09dd2829df94991f1351cf96380205eba94919476c912ede9a224338d7293decc44a8a838c575f5a8e052330ef52e5a92d06a0a50f683800b4ff8b21d633971b928163887cdee9d0dd750cd677ec8aad6e7090daa78d435649c2058ccb996c0955bf6c31e3b170ce866c463d45cf517a61ef3d958e3ccf915137795fdfc45479c06f798c33d581", 0xb1, 0x4010, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=@newtfilter={0x161c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x15e8, 0x2, [@TCA_MATCHALL_ACT={0x15e4, 0x2, [@m_sample={0x1050, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7fff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x148, 0x14, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x45, 0x1, 0xa0fe, 0x5aa}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x5, 0x2ad0ae01, 0x3}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffb, 0x1, 0x7, 0x18000, 0x6}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x5, 0x1, 0x12, 0x6}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x0, 0x2, 0x2}, 0x7d}}]}, {0x8d, 0x6, "5f86893ba18973fa692d3a971826493d15a32ca1ee2b2291ef3ccc2efa89fd6b2dd97501e79ee6683f55e81d1ce7d3b35c17ce3f67204ea842470f04316b9c4a9b48ee2938cec8374249c0d452fbf10afb0f8dce165c61679a3041567f2a108c1db3310e9ac419aafb126a07549f6925b4d0d9d90e150ee772e7ef06b71b1b6ad515c5e0225bca065e"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x1ec, 0x12, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x0, 0x1, 0x50d, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xff0000ff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x0, 0x0, 0x1000, 0xffff}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x585, 0x20000000, 0x3, 0x5}, @loopback, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x200, 0x2, 0x10001, 0x9}, @private=0xa010100, @private=0xa010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x9, 0x5, 0x63, 0x8}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffff00, 0x1}}]}, {0xfb, 0x6, "bdc72014c8d2cf5080be29c8946ccf56b795ce93c2b02fbc6d0880cd7ee34c77ec85316b12603fce14264e20604971614be817854efe3059452fac6d694c40ce95407442fe8ed4637372f5bf2cc9a1466147466b48ca82249b03687e549112d99fa9123789ab0ac8f6813f948e4ea0248f69fde4fa9654fb3134c2d2aa9859b15ea3e32ac1232d14002e888e6557d072fa947f2c92b7bda8404590bd3b813dd6c5ebc78ce1b4b6e729fd523b0d585030e8bae416a78c2940fe284c6ddb979937f225638556b415a0294e5261df7cdd59a1257449b0369bf406d442a1b6b7cb423b304da6bc33855e2042ba83d22fce8b0ad4c07e094afb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x138, 0x11, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3ff, 0x3, 0x0, 0x9, 0x1e}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xe7, 0x6, "1ee5104e3b8ed17dc4cccf1e296e81c4a64d470275f1785a1cb654285358e8da0a9259368ed0b2c288245596569443da8e96b0b0e9c7ca5c695fed07bbfc6b2b9ffa1d1e257a291c1b70f6f6d41541ecd39e0b423f59e74bcd250a1da57055eb1a78eb6cb84f4704543e433d1fdd5775ed76f458833ed660d33062198422b8faadb9da72ccf3db5f7d26b83488d62bfc7075c3445fca4d8c17e804150d7b804ab4ed90c07a97e3667493357ad8caa42c79743d1df07920a54b0ace0b6b86caa63c84dde2c0392719c511c94d7789e52dac3d8a233a72a0f29ea199b6ed0766cab1f4ee"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x124, 0x813, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '\'\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0x3, 0x8, 0x5, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffffc, 0xfffffffffffffff5, 0xc23, 0x81}}]}, {0xbf, 0x6, "43eaeae600387cdabb12e68483b09b93f62b4cba444acbb71489178b17d65dc552fde9c32db10a83eba666b65cd544069409adb569c34fa4402d892e635fdd60c7924732e6eee1949d0f873c4e1a6c5be445b6784e3d20ddd8d069ef4e260a9cd60a10e7b781b83064c189ffcbd6e9206af913441bf912ce35a4b29b74d7c6ce6da9110a6427cb1b2ad129d793a36b89ae7b55534912c11bff603f6626fdd25e15e0a055ca853779b7f15d971b334596ad76bf4add7fafbe626f0b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x161c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:'], 0xa) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r8, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r8, 0x2, 0x6, @local}, 0x10) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000680)=0x50000) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x10) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000240)=0xffff) 2.01831366s ago: executing program 6 (id=1108): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$eJzs3LtvHMUfAPDvrl+/X54GAiQhAkOEsHjYsRMgBQ0IJIogQFAEqIztRFGcGMVGwlGUGIRCg4QiQQ2USPwFdDQIqJCQqKBHQRGkSUAUh/ZuNzmvffEj5zsn9/lIZ8/c7N7M7Ozszs74HEDHGsh+JBFbIuLXiNheiy7cYKD26+rlM+N/Xz4znkSl8tqfETEfceXymfFi02K/zXlkMI1IP0zyTBaamTt9fGxqavJUHh+ePfHO8Mzc6SeOnRg7Onl08uTowYMH9o88/dTok02pZ1avK7vPTu/Z9eIbF14aP3zh7R++zsq7JU+vr8ea9C5+ayCr+F+VqnLaw/H/m8puo9laF06621gQVqUrIrLm6sn6f6VSOVeXtj1e+GCZ3Tevc/GAdZTdm/qWeD+/L85XGkpumArcCpJodwmA9iju99nzb/Fq4fCj7S49W3sAyup9NX/VUrojzbfpKT3fNtNARBye/+fz7BXNmIcAAFjGx+OfHYrHlxr/pXFPLfBH9mNbvobSHxF3RMSdEXFXROyIiLsjqtveGxE7V5Jp3QJBeWlo8fgnvVjapKmrC9n475l8bWvh+K8Y/UV/Vx7bWq1/T3Lk2NTkvvyYDEZPXxYfuUEe3z7/8yeN0urHf9kry78YC+bluNhdmqCbGJsdqw5Km+DS+xG7u+PfSqVSqn9y7UAnEbErInav7qO3FYFjj361p9FGy9d/0cdd14QzofJlxCO19p+PUv0LyeL1yd6t19cnh/8XU5P7houzYrEffzr/SqP8V17/9ZG1/6aF53+e8sVcHuh/q369diYarFxuaZjH+d8+avhMs9bzvzd5vXo9KpZd3xubnT01EtGbHKrGF7w/en3fIl5sn9V/cG9EZHlU61/smVavcZG3/30RsSdfL7s/Ih7Iy/5gRDwUEXsb1j7i++cap22E9p+oa/8kyuf/zrO130X7z6060HX8u28a5b+y9j9QDQ3m71Svf8tYaQHXfuQAAADg1pFWZ26SdOhaOE2Hhmp/2LsjNqVT0zOzjx2ZfvfkRG2Gpz960mKma3vdfOhIMp9/Yi0+ms8VF+n783njT7uiGh8an56aaHPdodNtbtD/M793tbt0wLpbah1tdIkvtAG3n3L/TxdGz73cysIALeX72tC5lun/aavKAbSe+z90rqX6/7lS3FoA3J7c/6Fz6f/QufR/6Fyl/t8Vv7SrJEALreHr/AIbJvDq0Gr26otm5h7pBjkI5UDx70nqklb+/yBuGOi7+RK+eZPFSKNVB7PNFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAm+S8AAP//i1LmAQ==") perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1c14744, &(0x7f0000000080), 0x2, 0x4bb, &(0x7f0000000600)="$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") r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000c80)={0x0, 0x3, 0x20}, &(0x7f0000000cc0)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000d00)={r2, 0x1, 0x2, 0x7fff, 0x1000, 0x5}, &(0x7f0000000d40)=0x14) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r5, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20082}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x2, 0xf7, 0x0, [@empty]}}}], 0x28}, 0x24004800) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="11050f00400000000000090000000c0003800800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x40850}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000ac0)={0x128, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x24}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20004010}, 0x40001) syz_clone(0x1300211, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) r6 = socket(0xa, 0x3, 0xff) sendto$inet6(r6, 0x0, 0x0, 0xc8b8, &(0x7f0000000140)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0xfffffffe}, 0x1c) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) timer_create(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) write$selinux_load(r1, &(0x7f0000000c00)={0xf97cff8c, 0x8, 'SE Linux', "988b0a88c4421bcf8559d42b707890cd85d879c224eb82fd6149c1e254ecd4f1ed672ae3fa830cce493733b044e7d66f34"}, 0x41) splice(r0, &(0x7f0000000080)=0x401, r0, &(0x7f0000000100)=0x5, 0xc460, 0x9) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00', 0x0, 0x0) 1.918352175s ago: executing program 5 (id=1110): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000711236000095000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.862427988s ago: executing program 5 (id=1111): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.835760389s ago: executing program 5 (id=1112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x30, 0x3a, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0xffffffff80000000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7, 0x4}, 0x80, 0x0}, 0x0) 1.751930273s ago: executing program 5 (id=1113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20000000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x8800, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000580)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000ac0)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x209, &(0x7f0000000200)="$eJzs3c9uEmEQAPChpfwxHnozMTFZ40FPjfoENaYmRhKTGg56a2JP5QQX4NI+hq/ge/kApicu5jO4bEGgiERA9Pe7dLrzze4OG5a9MKTIfbn3KWq1Uuwdx3EMSnEYe1G4imnlmS0AwO4YpBRfU+73qz0HAMAuWuLz/9uGTwkAWLN37z+8edFonJxmWS3i+qrb7Dbzv3n+1evGydPsh8Nx1XW329y/yT/Lpp8dhvmDuDPKP8/rs5t0JSKalXjyKM8Pcy/fNrKf66vxcc29AwAAAAAAAAAAAAAAAAAAAADAtjyIrDB3vs/R0XS+Psrn/03MB5qa31OO+8V44PF4oHS5iaYAAAAAAAAAAAAAAAAAAABgx3R6/YuzVuu8PQ6qETG5pTxnze1BabTjpRZvP9iL1crrozZXOGhp9BKtt8H6/Iu7TBDlv+XqrBpkf2qH1eIyz6bqUVpQntIwmP8uKMZi3FpeiYjFJ/b4dNW+Biml1ueH7U4v0sLF43tEdWN3IwAAAAAAAAAAAAAAAAAA+L9NfOt7Rm1/G2cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJvX6fWLX/nvX5y1WuftTm/p4DIi7sYvFxfHOoja9hoFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgn/Y9AAD//ybtHK4=") r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x24, 0x18, 0x1, 0x1000000, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r4}]}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c5442, 0xb2) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xfffffffffdffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x90}, {0xc, 0x90, 0x8000000}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0c4}, 0xd4) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000500)=@usbdevfs_driver={0x9, 0x0, &(0x7f0000000440)="657f8ad5c7a6c2a8ab4525f57e8108a628322f333bebed4317de5c39b4416156974c2e38e08c7a1da67c2490f2d03068071aaf18da767c49408063eca2fae9d41cdadcbb33bb1b11c715e5e422a90191a7f483470a35840fdd6189a1ddb9a28684fe7204bfb41f0d72088806c4b008b7c97b0c5c7ee957b063a20d5516ed9abdf9e609831ce9a9499713b01776ae503629455663bc4cd4bb9014d21830198424dc2d19dac98758228fb9c519b7636eb476"}) 1.587953591s ago: executing program 6 (id=1116): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) syz_clone(0x30209000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f15}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.483688256s ago: executing program 2 (id=1118): socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) getpid() bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.462926828s ago: executing program 6 (id=1119): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 1.367712232s ago: executing program 6 (id=1120): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x1) r1 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20002016}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x6, 0x2, 0x562, 0x7f, 0x1b, "0e4c25a4651306c0ab46b53445cff3859b00fd"}) epoll_create1(0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x3}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0x8000}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0xc040) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0xd0204) preadv(r10, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) r11 = socket$unix(0x1, 0x1, 0x0) listen(r11, 0xb) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)=@orangefs_parent={0x28, 0x2, {{"42e4bc38fa96c39e61bab70f949f6a02", 0x9}, {"46c45cbe2231ff1b73d7d6f1edfb2a58", 0x8427}}}, &(0x7f0000000240), 0x600) 692.284836ms ago: executing program 1 (id=1122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "31204f6b517a0305d7daee0d32159be2"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 691.762706ms ago: executing program 2 (id=1123): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) r9 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000100)) 624.601279ms ago: executing program 4 (id=1124): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000201016400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80478b, &(0x7f0000000500)={[{@nodioread_nolock}, {@grpjquota}, {@minixdf}, {@discard}, {@prjquota}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xffff}}]}, 0x0, 0x489, &(0x7f0000000c80)="$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") r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYRES64=r3], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 624.180569ms ago: executing program 5 (id=1125): r0 = getpid() syz_pidfd_open(r0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)={[{@discard}, {@noload}]}, 0x64, 0x544, &(0x7f0000000880)="$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") r2 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x500, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000003c0)=0x1, 0x4) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0x10000, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e20, @local}, 0x4, 0x0, 0x0, 0x0, 0x7f, &(0x7f00000000c0)='batadv_slave_0\x00', 0x8, 0x5, 0x81}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) r7 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r7, 0x0, 0x0, 0x400001) (async) fallocate(r7, 0x0, 0x0, 0x400001) socket$kcm(0x29, 0x5, 0x0) (async) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) (async) sendmsg$kcm(r8, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000180)=0x4c, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000180)=0x4c, 0x4) fcntl$addseals(r7, 0x409, 0xe) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x20040056) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 576.794922ms ago: executing program 6 (id=1126): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() perf_event_open(&(0x7f00000010c0)={0x5, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4000a, 0x7}, 0x8781, 0x2000000, 0x5, 0x9, 0x0, 0x10, 0xfffe}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYRES16], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 559.118643ms ago: executing program 4 (id=1127): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(0xffffffffffffffff, &(0x7f0000000100)="2600000022e80100000000000000000078cc6f920a97c99f494e07000000f84fcf47e2af0bf9", 0x26) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x3200}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) fsopen(&(0x7f0000000140)='sockfs\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc)=0x61, 0x4) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') sendto(0xffffffffffffffff, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x10120, 0x0) 491.929846ms ago: executing program 1 (id=1128): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x800) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000280)=""/108, 0x6c}], 0x2) clock_gettime(0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x100118, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x8003}, 0x0, 0xffeffffffffffffb, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d00)=[{{&(0x7f0000002100)={0xa, 0x4e22, 0x17, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c, &(0x7f0000002640)=[{&(0x7f0000002140)='7', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x2, &(0x7f00000010c0)=""/4122, &(0x7f0000000000)=0x101a) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = accept$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000200)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@local, 0x4e21, 0x9, 0x4e22, 0x79, 0xa, 0xa0, 0x0, 0x0, r3, r4}, {0xfff, 0x20000000, 0xfffffffffffffffe, 0x0, 0x7, 0x7, 0xfffffffffffffffe, 0xfa}, {0xa6, 0x9, 0xffffffffffffffff, 0x80000000}, 0x8, 0x6e6bb5, 0x1, 0x1, 0x2, 0x1}, {{@in=@multicast1, 0x4d4, 0x2b}, 0x2, @in6=@private1, 0x3501, 0x1, 0x3, 0xd, 0x4, 0x8, 0x9}}, 0xe8) 452.007758ms ago: executing program 4 (id=1129): r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000e40)=@gettaction={0x94, 0x32, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x80f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x354}}]}]}, 0x94}, 0x1, 0xfffc, 0x0, 0x4}, 0x4040814) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r3, 0x701, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x60b}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x401}, @ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40005) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) unshare(0x400) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r8, 0x10f, 0x83, 0x0, &(0x7f0000000340)) getrandom(&(0x7f0000000080)=""/298, 0x10b, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sync() 229.054279ms ago: executing program 1 (id=1130): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 176.033031ms ago: executing program 4 (id=1131): r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x155}], 0x1}, 0x84) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async, rerun: 64) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$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") (async) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 175.604021ms ago: executing program 4 (id=1132): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000020000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 172.668892ms ago: executing program 5 (id=1133): r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES32], 0xf9, 0x1213, &(0x7f00000020c0)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xd9d, 0x3ff, 0x8, 0x7fffffff, 0x2, "48b4299abf3991c75ba90fb7ee13ed2ee2f419"}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0xffffffff, 0x0, 0x6, 0x6, 0x17, "c7d92c0155b6056ee613657246ec62b016d5a9"}) r2 = openat(r0, &(0x7f0000000080)='.\x00', 0x0, 0x0) fstatfs(r2, &(0x7f0000000500)=""/167) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES32], 0xf9, 0x1213, &(0x7f00000020c0)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xd9d, 0x3ff, 0x8, 0x7fffffff, 0x2, "48b4299abf3991c75ba90fb7ee13ed2ee2f419"}) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000026c0)=0x3d) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0xffffffff, 0x0, 0x6, 0x6, 0x17, "c7d92c0155b6056ee613657246ec62b016d5a9"}) (async) openat(r0, &(0x7f0000000080)='.\x00', 0x0, 0x0) (async) fstatfs(r2, &(0x7f0000000500)=""/167) (async) 150.485242ms ago: executing program 1 (id=1134): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000007112360000e4000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 91.805075ms ago: executing program 1 (id=1135): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x16f, @tick=0x7, 0x4}) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10], 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r1}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r1}, 0x38) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0xffffffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0xffffffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) (async) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 41.606708ms ago: executing program 4 (id=1136): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r3, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x208010, &(0x7f0000000000)={[{@nodots}, {@nodots}, {@nodots}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@fat=@debug}, {@nodots}]}, 0x0, 0x239, &(0x7f0000000380)="$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") 0s ago: executing program 1 (id=1137): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80478b, &(0x7f0000000500)={[{@nodioread_nolock}, {@grpjquota}, {@minixdf}, {@discard}, {@prjquota}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xffff}}]}, 0x0, 0x489, &(0x7f0000000c80)="$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") r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYRES64=r3], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) kernel console output (not intermixed with test programs): 08][ T28] audit: type=1400 audit(1774564194.486:1500): avc: denied { ioctl } for pid=5113 comm="syz.0.398" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 89.739107][ T5115] autofs4:pid:5115:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(541982722.0), cmd(0xc0189376) [ 89.757093][ T4864] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.847332][ T4864] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.943916][ T5115] autofs4:pid:5115:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189376) [ 89.989383][ T5125] loop0: detected capacity change from 0 to 128 [ 90.030525][ T4864] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.506769][ T5144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 90.547692][ T5145] netlink: 'syz.4.405': attribute type 4 has an invalid length. [ 90.600271][ T5147] netlink: 'syz.4.405': attribute type 4 has an invalid length. [ 90.670523][ T5140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 90.777617][ T5151] loop4: detected capacity change from 0 to 512 [ 90.881590][ T5158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 90.974586][ T5161] netlink: 'syz.4.412': attribute type 8 has an invalid length. [ 91.225108][ T28] audit: type=1400 audit(1774564195.973:1501): avc: denied { append } for pid=5162 comm="syz.4.413" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 91.423858][ T5174] loop3: detected capacity change from 0 to 1024 [ 91.430441][ T28] audit: type=1400 audit(1774564196.168:1502): avc: denied { firmware_load } for pid=5162 comm="syz.4.413" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 91.461974][ T5163] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 91.535577][ T5163] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 91.953171][ T5174] EXT4-fs: inline encryption not supported [ 91.967007][ T28] audit: type=1400 audit(1774564196.479:1503): avc: denied { connect } for pid=5182 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.987465][ T28] audit: type=1400 audit(1774564196.489:1504): avc: denied { read } for pid=5182 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.008568][ T5174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.072368][ T5187] loop4: detected capacity change from 0 to 512 [ 92.116978][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.154572][ T5196] loop0: detected capacity change from 0 to 512 [ 92.267981][ T5200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 92.288881][ T5202] lo speed is unknown, defaulting to 1000 [ 92.302627][ T5187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.355385][ T5187] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.381058][ T5209] netlink: 14 bytes leftover after parsing attributes in process `syz.2.425'. [ 92.394207][ T5187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.439495][ T35] kernel read not supported for file [fscontext] (pid: 35 comm: kworker/1:1) [ 92.493245][ T5218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 92.604469][ T28] audit: type=1400 audit(1774564197.318:1505): avc: denied { mount } for pid=5186 comm="syz.4.419" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 92.649551][ T5202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.422'. [ 92.659640][ T5228] loop4: detected capacity change from 0 to 512 [ 92.685434][ T5202] gtp0: entered promiscuous mode [ 92.714124][ T5228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.773000][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.164754][ T5250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52462 sclass=netlink_route_socket pid=5250 comm=syz.2.437 [ 93.456302][ T5265] pim6reg: entered allmulticast mode [ 93.527352][ T5265] loop2: detected capacity change from 0 to 128 [ 93.546790][ T5265] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.570898][ T5265] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 93.965732][ T5268] loop1: detected capacity change from 0 to 512 [ 93.980171][ T5268] ext4: Unknown parameter 'smackfstransmute' [ 94.170722][ T5277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.197084][ T5277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.219488][ T5277] loop2: detected capacity change from 0 to 512 [ 94.253049][ T5277] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.287689][ T5277] EXT4-fs (loop2): 1 orphan inode deleted [ 94.299712][ T5277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.435956][ T5294] loop1: detected capacity change from 0 to 512 [ 94.444098][ T5296] loop4: detected capacity change from 0 to 1024 [ 94.596060][ T5296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.669723][ T5319] lo speed is unknown, defaulting to 1000 [ 95.782122][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.793613][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.816121][ T28] audit: type=1400 audit(1774564200.457:1506): avc: denied { read } for pid=5325 comm="syz.3.455" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 95.862509][ T28] audit: type=1400 audit(1774564200.457:1507): avc: denied { open } for pid=5325 comm="syz.3.455" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.092736][ T5331] loop4: detected capacity change from 0 to 2048 [ 96.129294][ T5331] EXT4-fs: Ignoring removed i_version option [ 96.170948][ T5331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.197974][ T5331] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.212169][ T5331] EXT4-fs (loop4): shut down requested (0) [ 96.218218][ T28] audit: type=1400 audit(1774564200.849:1508): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 96.242603][ T28] audit: type=1400 audit(1774564200.849:1509): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.267149][ T28] audit: type=1400 audit(1774564200.849:1510): avc: denied { append } for pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.290554][ T28] audit: type=1400 audit(1774564200.849:1511): avc: denied { open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.314965][ T28] audit: type=1400 audit(1774564200.849:1512): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.362010][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.590835][ T5347] loop0: detected capacity change from 0 to 1024 [ 96.612796][ T5347] EXT4-fs: Ignoring removed orlov option [ 96.640427][ T5347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.906333][ T5363] loop3: detected capacity change from 0 to 128 [ 97.087772][ T5323] loop1: detected capacity change from 0 to 2048 [ 97.283121][ T5323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.342497][ T5323] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.510731][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.572810][ T5369] capability: warning: `syz.0.467' uses 32-bit capabilities (legacy support in use) [ 97.591323][ T28] audit: type=1400 audit(1774564202.194:1513): avc: denied { mounton } for pid=5362 comm="syz.3.466" path="/90/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 97.687994][ T28] audit: type=1400 audit(1774564202.243:1514): avc: denied { create } for pid=5362 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 97.708688][ T28] audit: type=1400 audit(1774564202.252:1515): avc: denied { sys_admin } for pid=5362 comm="syz.3.466" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 97.793374][ T5379] lo speed is unknown, defaulting to 1000 [ 97.919722][ T3314] FAT-fs (loop3): error, invalid access to FAT (entry 0x05000006) [ 97.942260][ T3314] FAT-fs (loop3): Filesystem has been set read-only [ 97.955516][ T5382] loop2: detected capacity change from 0 to 512 [ 98.023657][ T5282] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 98.075656][ T5282] EXT4-fs (loop1): Remounting filesystem read-only [ 98.144127][ T5382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.177837][ T5382] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.214702][ T5382] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.237252][ T5375] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 98.252905][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.551393][ T5399] loop1: detected capacity change from 0 to 256 [ 99.077184][ T5405] loop4: detected capacity change from 0 to 512 [ 99.483283][ T5405] FAT-fs (loop4): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 99.555220][ T5399] FAT-fs (loop1): Directory bread(block 64) failed [ 99.562046][ T5399] FAT-fs (loop1): Directory bread(block 65) failed [ 99.568666][ T5399] FAT-fs (loop1): Directory bread(block 66) failed [ 99.575307][ T5399] FAT-fs (loop1): Directory bread(block 67) failed [ 99.582244][ T5399] FAT-fs (loop1): Directory bread(block 68) failed [ 99.589487][ T5399] FAT-fs (loop1): Directory bread(block 69) failed [ 99.596310][ T5399] FAT-fs (loop1): Directory bread(block 70) failed [ 99.603133][ T5399] FAT-fs (loop1): Directory bread(block 71) failed [ 99.609967][ T5399] FAT-fs (loop1): Directory bread(block 72) failed [ 99.616733][ T5399] FAT-fs (loop1): Directory bread(block 73) failed [ 100.643327][ T4878] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.770453][ T5399] bond0: (slave team0): Releasing backup interface [ 102.228944][ T5399] bridge_slave_0: left allmulticast mode [ 102.234747][ T5399] bridge_slave_0: left promiscuous mode [ 102.240552][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.308543][ T5399] bridge_slave_1: left allmulticast mode [ 102.314621][ T5399] bridge_slave_1: left promiscuous mode [ 102.320547][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.330365][ T5399] bond0: (slave bond_slave_0): Releasing backup interface [ 102.341306][ T5399] bond0: (slave bond_slave_1): Releasing backup interface [ 102.354930][ T5399] team0: Port device team_slave_0 removed [ 102.363901][ T5399] team0: Port device team_slave_1 removed [ 102.370510][ T5399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.378315][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.387720][ T5399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.395425][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.404855][ T5399] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 102.507965][ T4878] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.549693][ T5430] loop2: detected capacity change from 0 to 256 [ 102.628557][ T4878] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.715862][ T4878] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.822131][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 102.822147][ T28] audit: type=1400 audit(1774564207.344:1520): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 102.872583][ T5441] IPv6: sit1: Disabled Multicast RS [ 102.923055][ T5436] lo: entered allmulticast mode [ 102.937697][ T5436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.285238][ T28] audit: type=1400 audit(1774564207.809:1521): avc: denied { search } for pid=3041 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.320745][ T4878] bridge_slave_1: left allmulticast mode [ 103.326658][ T4878] bridge_slave_1: left promiscuous mode [ 103.383629][ T28] audit: type=1400 audit(1774564207.809:1522): avc: denied { search } for pid=3041 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.390997][ T4878] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.405562][ T28] audit: type=1400 audit(1774564207.809:1523): avc: denied { search } for pid=3041 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.444157][ T5447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 103.502458][ T4878] bridge_slave_0: left allmulticast mode [ 103.522076][ T4878] bridge_slave_0: left promiscuous mode [ 103.528053][ T4878] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.713498][ T5449] loop1: detected capacity change from 0 to 8192 [ 103.764035][ T5449] vfat: Unknown parameter '' [ 104.001531][ T4878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.029089][ T4878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.059951][ T4878] bond0 (unregistering): Released all slaves [ 104.095476][ T5459] loop0: detected capacity change from 0 to 512 [ 104.106069][ T4878] bond1 (unregistering): (slave veth3): Releasing active interface [ 104.124604][ T5465] netlink: 'syz.1.485': attribute type 13 has an invalid length. [ 104.145306][ T4878] bond1 (unregistering): (slave veth5): Releasing active interface [ 104.180815][ T5465] netlink: 204 bytes leftover after parsing attributes in process `syz.1.485'. [ 104.202636][ T5459] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.221174][ T4878] bond1 (unregistering): Released all slaves [ 104.252932][ T5460] syz_tun: entered allmulticast mode [ 104.263440][ T28] audit: type=1400 audit(1774564207.809:1524): avc: denied { read } for pid=3041 comm="dhcpcd" name="n25" dev="tmpfs" ino=4055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.285432][ T28] audit: type=1400 audit(1774564207.809:1525): avc: denied { open } for pid=3041 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=4055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.312641][ T28] audit: type=1400 audit(1774564207.809:1526): avc: denied { getattr } for pid=3041 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=4055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.336246][ T28] audit: type=1400 audit(1774564208.332:1527): avc: denied { mount } for pid=5448 comm="syz.1.485" name="/" dev="hugetlbfs" ino=11055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 104.359158][ T28] audit: type=1400 audit(1774564208.332:1528): avc: denied { remount } for pid=5448 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 104.365828][ T5461] dvmrp8: entered allmulticast mode [ 104.400337][ T5459] EXT4-fs (loop0): 1 truncate cleaned up [ 104.427899][ T5448] syz_tun: left allmulticast mode [ 104.436816][ T4878] hsr_slave_0: left promiscuous mode [ 104.451236][ T5459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.467424][ T28] audit: type=1400 audit(1774564208.974:1529): avc: denied { read open } for pid=5477 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.493881][ T4878] hsr_slave_1: left promiscuous mode [ 104.502476][ T4878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.513567][ T4878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.532309][ T4878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.562600][ T4878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.589534][ T4878] veth1_macvtap: left promiscuous mode [ 104.602371][ T4878] veth0_macvtap: left promiscuous mode [ 104.615391][ T4878] veth1_vlan: left promiscuous mode [ 104.629272][ T4878] veth0_vlan: left promiscuous mode [ 104.822406][ T4878] team0 (unregistering): Port device team_slave_1 removed [ 104.840955][ T4878] team0 (unregistering): Port device team_slave_0 removed [ 104.931785][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.947713][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.957151][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.965986][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.009144][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.052626][ T5478] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.116667][ T5478] bridge_slave_1: left allmulticast mode [ 105.132490][ T5478] bridge_slave_1: left promiscuous mode [ 105.142375][ T5478] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.245908][ T5478] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 105.256506][ T3394] lo speed is unknown, defaulting to 1000 [ 105.270750][ T3394] infiniband syz2: ib_query_port failed (-19) [ 105.335363][ T5500] veth1_to_bond: entered promiscuous mode [ 105.341581][ T5500] veth1_to_bond: entered allmulticast mode [ 105.538720][ T5406] chnl_net:caif_netlink_parms(): no params data found [ 105.777148][ T5406] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.796251][ T5406] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.830198][ T5406] bridge_slave_0: entered allmulticast mode [ 105.837110][ T5406] bridge_slave_0: entered promiscuous mode [ 105.844482][ T5406] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.846086][ T5541] loop2: detected capacity change from 0 to 128 [ 105.851901][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.865305][ T5406] bridge_slave_1: entered allmulticast mode [ 105.872310][ T5406] bridge_slave_1: entered promiscuous mode [ 105.917725][ T5406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.937974][ T5406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.033017][ T5406] team0: Port device team_slave_0 added [ 106.051321][ T5406] team0: Port device team_slave_1 added [ 106.101197][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.112922][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.144377][ T5406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.165298][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.172336][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.199061][ T5547] loop0: detected capacity change from 0 to 1024 [ 106.217708][ T5554] loop4: detected capacity change from 0 to 1024 [ 106.231624][ T5547] EXT4-fs: Ignoring removed bh option [ 106.237499][ T5406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.251177][ T5554] EXT4-fs: Ignoring removed bh option [ 106.256888][ T5554] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.279819][ T5547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.311837][ T5547] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.324244][ T5554] EXT4-fs: Mount option(s) incompatible with ext3 [ 106.431247][ T5406] hsr_slave_0: entered promiscuous mode [ 106.444079][ T5406] hsr_slave_1: entered promiscuous mode [ 106.450276][ T5406] debugfs: 'hsr0' already exists in 'hsr' [ 106.456161][ T5406] Cannot create hsr debugfs directory [ 106.462982][ T5542] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.501: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.488479][ T5542] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.501: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.666965][ T5406] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.697236][ T5406] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.730261][ T5406] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.756976][ T5406] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.940739][ T5406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.990745][ T5406] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.082292][ T5406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.255504][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.263135][ T4864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.281572][ T5542] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.501: lblock 0 mapped to illegal pblock 0 (length 1) [ 107.309080][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.316509][ T4864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.340819][ T5542] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.501: lblock 0 mapped to illegal pblock 0 (length 1) [ 107.374969][ T5542] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.501: lblock 0 mapped to illegal pblock 0 (length 1) [ 107.441269][ T5542] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.501: lblock 0 mapped to illegal pblock 0 (length 1) [ 107.489586][ T5406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.533406][ T5542] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.501: lblock 0 mapped to illegal pblock 0 (length 1) [ 107.567667][ T5542] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.501: lblock 0 mapped to illegal pblock 0 (length 1) [ 107.591870][ T5542] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.501: lblock 0 mapped to illegal pblock 0 (length 1) [ 107.622275][ T5542] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.501: lblock 0 mapped to illegal pblock 0 (length 1) [ 107.710183][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 107.899590][ T5622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 108.319199][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.344214][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.352422][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.360257][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.390573][ T5636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.415031][ T5636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.491554][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.530800][ T5634] bridge_slave_1: left allmulticast mode [ 108.546619][ T5634] bridge_slave_1: left promiscuous mode [ 108.565270][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.675182][ T5634] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 108.756111][ T5406] veth0_vlan: entered promiscuous mode [ 108.778559][ T5406] veth1_vlan: entered promiscuous mode [ 108.826098][ T5406] veth0_macvtap: entered promiscuous mode [ 108.848735][ T5406] veth1_macvtap: entered promiscuous mode [ 108.919682][ T28] kauditd_printk_skb: 142 callbacks suppressed [ 108.919701][ T28] audit: type=1400 audit(1774564219.576:1672): avc: denied { read } for pid=5647 comm="syz.0.515" path="socket:[10221]" dev="sockfs" ino=10221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.987061][ T5406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.012990][ T5406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.039720][ T28] audit: type=1400 audit(1774564219.692:1673): avc: denied { shutdown } for pid=5650 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.070170][ T309] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.093879][ T309] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.139090][ T309] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.186687][ T309] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.224235][ T28] audit: type=1400 audit(1774564219.901:1674): avc: denied { mounton } for pid=5406 comm="syz-executor" path="/root/syzkaller.3AZlXT/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 109.267761][ T5668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 109.333229][ T28] audit: type=1400 audit(1774564219.922:1675): avc: denied { mounton } for pid=5406 comm="syz-executor" path="/root/syzkaller.3AZlXT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 109.455266][ T5684] loop0: detected capacity change from 0 to 764 [ 109.460423][ T28] audit: type=1400 audit(1774564219.922:1676): avc: denied { mounton } for pid=5406 comm="syz-executor" path="/root/syzkaller.3AZlXT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=12323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 109.631739][ T28] audit: type=1400 audit(1774564219.933:1677): avc: denied { mounton } for pid=5406 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 109.670625][ T5684] rock: directory entry would overflow storage [ 109.676838][ T5684] rock: sig=0x4f50, size=4, remaining=3 [ 109.688756][ T5684] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 109.701687][ T28] audit: type=1400 audit(1774564219.933:1678): avc: denied { mount } for pid=5406 comm="syz-executor" name="/" dev="gadgetfs" ino=4522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 109.952157][ T5693] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.526' resets device [ 110.689520][ T5724] loop0: detected capacity change from 0 to 1024 [ 110.701888][ T5724] EXT4-fs: Ignoring removed bh option [ 110.726474][ T5724] EXT4-fs: Ignoring removed oldalloc option [ 110.736368][ T5724] EXT4-fs: Ignoring removed nobh option [ 110.770170][ T5730] loop1: detected capacity change from 0 to 512 [ 110.785141][ T5724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.826124][ T28] audit: type=1400 audit(1774564221.571:1679): avc: denied { read } for pid=5723 comm="syz.0.534" path="/128/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.857937][ T5736] loop4: detected capacity change from 0 to 128 [ 110.928620][ T5736] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.947372][ T28] audit: type=1400 audit(1774564221.644:1680): avc: denied { append } for pid=5723 comm="syz.0.534" path="/128/file1/memory.events" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.971364][ T28] audit: type=1400 audit(1774564221.707:1681): avc: denied { create } for pid=5723 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 110.993737][ T5736] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.019392][ T5736] veth1_to_bond: entered allmulticast mode [ 111.031554][ T5736] veth1_to_bond: left allmulticast mode [ 111.038195][ T5737] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 19: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 111.078315][ T5736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.537'. [ 111.097777][ T5736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.537'. [ 111.134108][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.228488][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.589790][ T5767] veth0_to_team: entered promiscuous mode [ 111.594269][ T5768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 112.277318][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'. [ 112.383033][ T5787] loop0: detected capacity change from 0 to 512 [ 112.399887][ T5787] FAT-fs (loop0): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 112.862728][ T5789] tmpfs: Bad value for 'mpol' [ 113.362863][ T5813] netlink: 76 bytes leftover after parsing attributes in process `syz.2.559'. [ 113.397672][ T5821] xfrm0: entered promiscuous mode [ 113.402886][ T5821] xfrm0: entered allmulticast mode [ 113.450583][ T5823] usb usb7: usbfs: interface 0 claimed by hub while 'syz.2.561' resets device [ 113.670783][ T5834] loop4: detected capacity change from 0 to 512 [ 113.876429][ T5841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=5841 comm=syz.2.567 [ 113.896970][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 113.896990][ T28] audit: type=1400 audit(1774564224.794:1685): avc: denied { write } for pid=5840 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.172409][ T5864] loop1: detected capacity change from 0 to 1024 [ 114.186993][ T5865] loop2: detected capacity change from 0 to 2048 [ 114.195843][ T5864] EXT4-fs: Ignoring removed bh option [ 114.214603][ T5865] FAT-fs (loop2): FAT read failed (blocknr 1056) [ 114.222669][ T5864] ext4: Bad value for 'dax' [ 114.343980][ T5873] loop4: detected capacity change from 0 to 512 [ 114.480433][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'. [ 114.500104][ T28] audit: type=1400 audit(1774564225.414:1686): avc: denied { accept } for pid=5884 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.593459][ T5892] loop4: detected capacity change from 0 to 1024 [ 114.606377][ T28] audit: type=1400 audit(1774564225.508:1687): avc: denied { create } for pid=5888 comm="syz.5.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 114.643327][ T5892] EXT4-fs: Ignoring removed orlov option [ 114.672044][ T5892] EXT4-fs: Ignoring removed orlov option [ 114.716112][ T5892] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #2: comm syz.4.582: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 1537, max 4(4), depth 0(0) [ 114.755702][ T5892] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 114.755907][ T5892] EXT4-fs (loop4): Remounting filesystem read-only [ 114.772219][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 114.772263][ C0] EXT4-fs (loop4): initial error at time 1774564225: ext4_ext_check_inode:521: inode 2 [ 114.772315][ C0] EXT4-fs (loop4): last error at time 1774564225: ext4_ext_check_inode:521: inode 2 [ 114.799056][ T5892] EXT4-fs (loop4): get root inode failed [ 114.805374][ T5892] EXT4-fs (loop4): mount failed [ 114.820347][ T5899] loop1: detected capacity change from 0 to 4096 [ 114.863273][ T5899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.899146][ T5903] loop4: detected capacity change from 0 to 128 [ 114.934049][ T5903] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.965029][ T5903] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.006309][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.064068][ T28] audit: type=1400 audit(1774564226.023:1688): avc: denied { wake_alarm } for pid=5910 comm="syz.1.587" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.103812][ T5913] loop4: detected capacity change from 0 to 1024 [ 115.128902][ T5915] FAULT_INJECTION: forcing a failure. [ 115.128902][ T5915] name failslab, interval 1, probability 0, space 0, times 1 [ 115.144285][ T5913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.173778][ T5913] EXT4-fs (loop4): stripe (14) is not aligned with cluster size (16), stripe is disabled [ 115.178749][ T5915] CPU: 1 UID: 0 PID: 5915 Comm: syz.0.588 Tainted: G W syzkaller #0 PREEMPT(full) [ 115.178874][ T5915] Tainted: [W]=WARN [ 115.178895][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.178996][ T5915] Call Trace: [ 115.179019][ T5915] [ 115.179052][ T5915] __dump_stack+0x1d/0x30 [ 115.179153][ T5915] dump_stack_lvl+0x95/0xd0 [ 115.179286][ T5915] dump_stack+0x15/0x1b [ 115.179364][ T5915] should_fail_ex+0x263/0x280 [ 115.179464][ T5915] should_failslab+0x8c/0xb0 [ 115.179596][ T5915] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 115.179709][ T5915] ? __alloc_skb+0x2d6/0x690 [ 115.179811][ T5915] __alloc_skb+0x2d6/0x690 [ 115.179914][ T5915] tipc_msg_create+0x47/0x230 [ 115.180149][ T5915] ? __kfree_skb+0x109/0x150 [ 115.180244][ T5915] tipc_group_proto_xmit+0xb7/0x2f0 [ 115.180397][ T5915] tipc_group_delete+0xab/0x2a0 [ 115.180511][ T5915] tipc_release+0x121/0xf70 [ 115.180578][ T5915] ? proc_fail_nth_write+0x13b/0x160 [ 115.180677][ T5915] sock_close+0x6b/0x150 [ 115.180741][ T5915] ? __pfx_sock_close+0x10/0x10 [ 115.180812][ T5915] __fput+0x29b/0x650 [ 115.180979][ T5915] fput_close_sync+0xad/0x190 [ 115.181207][ T5915] __x64_sys_close+0x55/0xf0 [ 115.181306][ T5915] x64_sys_call+0x275d/0x3020 [ 115.181400][ T5915] do_syscall_64+0x12c/0x370 [ 115.181527][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.181595][ T5915] RIP: 0033:0x7fa27805c799 [ 115.181685][ T5915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.181818][ T5915] RSP: 002b:00007fa276aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 115.181884][ T5915] RAX: ffffffffffffffda RBX: 00007fa2782d5fa0 RCX: 00007fa27805c799 [ 115.181995][ T5915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 115.182039][ T5915] RBP: 00007fa276aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 115.182081][ T5915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.182123][ T5915] R13: 00007fa2782d6038 R14: 00007fa2782d5fa0 R15: 00007ffebe3932b8 [ 115.182186][ T5915] [ 115.434302][ T5913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.481621][ T28] audit: type=1400 audit(1774564226.463:1689): avc: denied { unlink } for pid=5912 comm="syz.4.589" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 115.538656][ T5936] syz.1.596 (5936): attempted to duplicate a private mapping with mremap. This is not supported. [ 115.591109][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.670989][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'. [ 115.900089][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.605'. [ 115.979329][ T5939] loop1: detected capacity change from 0 to 1024 [ 116.014546][ T5939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.190975][ T5946] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.598: Allocating blocks 385-513 which overlap fs metadata [ 116.236960][ T5999] loop5: detected capacity change from 0 to 1024 [ 116.258818][ T5999] EXT4-fs: Ignoring removed oldalloc option [ 116.278078][ T5999] EXT4-fs: Ignoring removed bh option [ 116.316236][ T5974] EXT4-fs (loop1): pa ffff888107e87700: logic 16, phys. 129, len 24 [ 116.324406][ T5974] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 116.334989][ T5999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.375587][ T6015] loop0: detected capacity change from 0 to 128 [ 116.464926][ T28] audit: type=1400 audit(1774564227.482:1690): avc: denied { bind } for pid=6014 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.490350][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.508881][ T5406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.540246][ T28] audit: type=1400 audit(1774564227.492:1691): avc: denied { write } for pid=6014 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.564742][ T6026] FAULT_INJECTION: forcing a failure. [ 116.564742][ T6026] name failslab, interval 1, probability 0, space 0, times 0 [ 116.609183][ T6023] tmpfs: Unknown parameter 'Ympol' [ 116.619276][ T6025] netlink: 68 bytes leftover after parsing attributes in process `syz.1.614'. [ 116.629395][ T6026] CPU: 1 UID: 0 PID: 6026 Comm: syz.5.615 Tainted: G W syzkaller #0 PREEMPT(full) [ 116.629458][ T6026] Tainted: [W]=WARN [ 116.629469][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 116.629486][ T6026] Call Trace: [ 116.629496][ T6026] [ 116.629506][ T6026] __dump_stack+0x1d/0x30 [ 116.629537][ T6026] dump_stack_lvl+0x95/0xd0 [ 116.629654][ T6026] dump_stack+0x15/0x1b [ 116.629697][ T6026] should_fail_ex+0x263/0x280 [ 116.629735][ T6026] should_failslab+0x8c/0xb0 [ 116.629765][ T6026] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 116.629792][ T6026] ? __alloc_skb+0x2d6/0x690 [ 116.629874][ T6026] __alloc_skb+0x2d6/0x690 [ 116.629908][ T6026] ? tipc_msg_create+0x1ed/0x230 [ 116.630017][ T6026] tipc_msg_create+0x47/0x230 [ 116.630051][ T6026] tipc_group_proto_xmit+0xb7/0x2f0 [ 116.630170][ T6026] tipc_group_delete+0xab/0x2a0 [ 116.630210][ T6026] tipc_release+0x121/0xf70 [ 116.630234][ T6026] ? proc_fail_nth_write+0x13b/0x160 [ 116.630281][ T6026] sock_close+0x6b/0x150 [ 116.630347][ T6026] ? __pfx_sock_close+0x10/0x10 [ 116.630427][ T6026] __fput+0x29b/0x650 [ 116.630467][ T6026] fput_close_sync+0xad/0x190 [ 116.630509][ T6026] __x64_sys_close+0x55/0xf0 [ 116.630677][ T6026] x64_sys_call+0x275d/0x3020 [ 116.630774][ T6026] do_syscall_64+0x12c/0x370 [ 116.630810][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.630835][ T6026] RIP: 0033:0x7fa670adc799 [ 116.630852][ T6026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.630873][ T6026] RSP: 002b:00007fa66f537028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 116.630924][ T6026] RAX: ffffffffffffffda RBX: 00007fa670d55fa0 RCX: 00007fa670adc799 [ 116.630941][ T6026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 116.630998][ T6026] RBP: 00007fa66f537090 R08: 0000000000000000 R09: 0000000000000000 [ 116.631014][ T6026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.631029][ T6026] R13: 00007fa670d56038 R14: 00007fa670d55fa0 R15: 00007ffeeffb1b58 [ 116.631057][ T6026] [ 116.646846][ T28] audit: type=1400 audit(1774564227.639:1692): avc: denied { bind } for pid=6022 comm="syz.1.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.696931][ T6029] netlink: 'syz.4.618': attribute type 28 has an invalid length. [ 116.771548][ T28] audit: type=1400 audit(1774564227.818:1693): avc: denied { create } for pid=6027 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 116.839292][ T6037] loop2: detected capacity change from 0 to 512 [ 116.849431][ T28] audit: type=1400 audit(1774564227.818:1694): avc: denied { connect } for pid=6027 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 116.881208][ T6029] loop4: detected capacity change from 0 to 128 [ 116.929643][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.619'. [ 116.960768][ T6015] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 117.232077][ T6064] netlink: 132 bytes leftover after parsing attributes in process `syz.2.627'. [ 117.393222][ T6076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.470927][ T6076] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.783232][ T5406] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 117.794622][ T5406] FAT-fs (loop5): Filesystem has been set read-only [ 117.986683][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz.5.635'. [ 118.001624][ T6127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6127 comm=syz.5.635 [ 118.158976][ T6131] FAT-fs (loop0): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 118.489901][ T5902] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 118.545973][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.728747][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 118.728766][ T28] audit: type=1400 audit(1774564229.876:1699): avc: denied { write } for pid=6145 comm="syz.5.641" path="socket:[13101]" dev="sockfs" ino=13101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.844961][ T6157] Symlink component flag not implemented [ 118.850903][ T6157] Symlink component flag not implemented (129) [ 118.889176][ T6157] rock: directory entry would overflow storage [ 118.921835][ T6157] rock: sig=0x4f50, size=4, remaining=3 [ 118.953906][ T6157] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 118.994117][ T5406] rock: directory entry would overflow storage [ 119.000848][ T5406] rock: sig=0x4f50, size=4, remaining=3 [ 119.019732][ T5406] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 119.045629][ T5406] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 119.282130][ T6144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.350086][ T6144] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.423579][ T6198] netlink: 'syz.5.649': attribute type 5 has an invalid length. [ 119.452397][ T6199] netlink: 'syz.5.649': attribute type 5 has an invalid length. [ 119.565214][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.599677][ T6204] set_capacity_and_notify: 6 callbacks suppressed [ 119.599724][ T6204] loop1: detected capacity change from 0 to 512 [ 119.635085][ T6204] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 120.344917][ T6218] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.707891][ T6229] FAULT_INJECTION: forcing a failure. [ 120.707891][ T6229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.732197][ T6229] CPU: 1 UID: 0 PID: 6229 Comm: syz.0.657 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.732233][ T6229] Tainted: [W]=WARN [ 120.732240][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.732253][ T6229] Call Trace: [ 120.732307][ T6229] [ 120.732318][ T6229] __dump_stack+0x1d/0x30 [ 120.732364][ T6229] dump_stack_lvl+0x95/0xd0 [ 120.732477][ T6229] dump_stack+0x15/0x1b [ 120.732502][ T6229] should_fail_ex+0x263/0x280 [ 120.732539][ T6229] should_fail+0xb/0x20 [ 120.732570][ T6229] should_fail_usercopy+0x1a/0x20 [ 120.732613][ T6229] _copy_to_user+0x20/0xa0 [ 120.732646][ T6229] simple_read_from_buffer+0xb5/0x130 [ 120.732698][ T6229] proc_fail_nth_read+0x10e/0x150 [ 120.732779][ T6229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.732812][ T6229] vfs_read+0x1ab/0x7f0 [ 120.732900][ T6229] ? __rcu_read_unlock+0x4e/0x70 [ 120.732922][ T6229] ? __fget_files+0x184/0x1c0 [ 120.732975][ T6229] ? mutex_lock+0x57/0x90 [ 120.733009][ T6229] ksys_read+0xdc/0x1a0 [ 120.733028][ T6229] __x64_sys_read+0x40/0x50 [ 120.733058][ T6229] x64_sys_call+0x2886/0x3020 [ 120.733092][ T6229] do_syscall_64+0x12c/0x370 [ 120.733217][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.733247][ T6229] RIP: 0033:0x7fa27801cfce [ 120.733276][ T6229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.733359][ T6229] RSP: 002b:00007fa276aaefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.733385][ T6229] RAX: ffffffffffffffda RBX: 00007fa276aaf6c0 RCX: 00007fa27801cfce [ 120.733399][ T6229] RDX: 000000000000000f RSI: 00007fa276aaf0a0 RDI: 0000000000000004 [ 120.733415][ T6229] RBP: 00007fa276aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 120.733482][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.733495][ T6229] R13: 00007fa2782d6038 R14: 00007fa2782d5fa0 R15: 00007ffebe3932b8 [ 120.733515][ T6229] [ 121.288650][ T6235] loop0: detected capacity change from 0 to 256 [ 121.313014][ T6235] vfat: Unknown parameter '@' [ 121.374396][ T28] audit: type=1326 audit(1774564232.648:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27805c799 code=0x7ffc0000 [ 121.471494][ T28] audit: type=1326 audit(1774564232.679:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27805c799 code=0x7ffc0000 [ 121.566144][ T28] audit: type=1326 audit(1774564232.690:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fa27805c799 code=0x7ffc0000 [ 121.748418][ T28] audit: type=1326 audit(1774564232.690:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27805c799 code=0x7ffc0000 [ 121.803555][ T28] audit: type=1326 audit(1774564232.690:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27805c799 code=0x7ffc0000 [ 121.823657][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 121.831394][ T28] audit: type=1326 audit(1774564232.690:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa27805c799 code=0x7ffc0000 [ 121.860384][ T28] audit: type=1326 audit(1774564232.700:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27805c799 code=0x7ffc0000 [ 121.884871][ T28] audit: type=1326 audit(1774564232.700:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa27805c799 code=0x7ffc0000 [ 121.915404][ T6252] bridge0: port 2(syz_tun) entered blocking state [ 121.922084][ T6252] bridge0: port 2(syz_tun) entered disabled state [ 121.929084][ T6252] syz_tun: entered allmulticast mode [ 121.935953][ T6252] syz_tun: entered promiscuous mode [ 121.941528][ T6252] bridge0: port 2(syz_tun) entered blocking state [ 121.948125][ T6252] bridge0: port 2(syz_tun) entered forwarding state [ 121.968308][ T28] audit: type=1326 audit(1774564232.700:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27805c799 code=0x7ffc0000 [ 121.994970][ T6254] 9pnet_virtio: no channels available for device ./file0 [ 122.259729][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 122.476726][ T6264] ipip0: entered promiscuous mode [ 122.484654][ T6267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.494727][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.512866][ T6264] ipip0: entered allmulticast mode [ 122.664585][ T6280] loop0: detected capacity change from 0 to 512 [ 123.528861][ T6291] loop2: detected capacity change from 0 to 512 [ 123.581786][ T6291] FAT-fs (loop2): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 123.949647][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.681'. [ 124.283502][ T6305] loop5: detected capacity change from 0 to 2048 [ 124.446886][ T6305] loop5: detected capacity change from 0 to 764 [ 124.553579][ T6301] loop5: detected capacity change from 0 to 128 [ 124.823163][ T6315] loop1: detected capacity change from 0 to 164 [ 124.847226][ T6315] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=82 [ 124.979549][ T6320] netlink: 68 bytes leftover after parsing attributes in process `syz.1.689'. [ 124.998957][ T6322] netlink: 'syz.5.690': attribute type 21 has an invalid length. [ 125.023581][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.690'. [ 125.082525][ T6327] loop2: detected capacity change from 0 to 1024 [ 125.101445][ T6326] loop1: detected capacity change from 0 to 1024 [ 125.120798][ T6326] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.140313][ T6327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.185226][ T6326] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 125.214135][ T6326] EXT4-fs (loop1): orphan cleanup on readonly fs [ 125.283170][ T6326] __quota_error: 2 callbacks suppressed [ 125.283187][ T6326] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 125.315733][ T6318] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.688: Allocating blocks 385-513 which overlap fs metadata [ 125.330336][ T6326] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 125.345816][ T6326] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 125.356238][ T6327] EXT4-fs (loop2): pa ffff888107e879a0: logic 16, phys. 129, len 24 [ 125.364692][ T6327] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 125.404078][ T6326] EXT4-fs (loop1): 1 truncate cleaned up [ 125.412374][ T6326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.492379][ T6347] loop5: detected capacity change from 0 to 512 [ 125.508607][ T6347] FAT-fs (loop5): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 125.547230][ T6348] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 125.592059][ T6348] bond1: entered promiscuous mode [ 125.599823][ T6348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.618343][ T6351] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 125.633136][ T6351] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 125.663425][ T6348] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.691: corrupted in-inode xattr: overlapping e_value [ 125.738373][ T6351] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 125.964117][ T6353] loop4: detected capacity change from 0 to 512 [ 125.981527][ T6353] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.074210][ T6353] EXT4-fs (loop4): orphan file too big: 4294967295 [ 126.081261][ T6353] EXT4-fs (loop4): mount failed [ 126.097892][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.416913][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.470773][ T6375] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 126.805228][ T6377] loop5: detected capacity change from 0 to 4096 [ 126.812012][ T6377] EXT4-fs: Ignoring removed bh option [ 126.828814][ T6377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.053651][ T6394] loop4: detected capacity change from 0 to 4096 [ 127.060769][ T6394] EXT4-fs: Ignoring removed bh option [ 127.643300][ T6399] loop2: detected capacity change from 0 to 512 [ 127.654745][ T6399] FAT-fs (loop2): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 127.875820][ T6394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.949722][ T28] audit: type=1400 audit(1774564239.556:1711): avc: denied { ioctl } for pid=6393 comm="syz.4.706" path="/149/file3/cpu.stat" dev="loop4" ino=18 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 128.148529][ T5406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.222498][ T28] audit: type=1400 audit(1774564239.840:1712): avc: denied { unlink } for pid=6393 comm="syz.4.706" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.252319][ T28] audit: type=1400 audit(1774564239.850:1713): avc: denied { write } for pid=6415 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.274805][ T28] audit: type=1400 audit(1774564239.892:1714): avc: denied { mount } for pid=6418 comm="syz.5.711" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 128.309265][ T6393] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.706: corrupted inode contents [ 128.337315][ T6393] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 128.344229][ T6393] EXT4-fs (loop4): Remounting filesystem read-only [ 128.404727][ T4864] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 128.435003][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.442750][ T28] audit: type=1326 audit(1774564240.070:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.2.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b961dc799 code=0x7ffc0000 [ 128.471400][ T4864] Quota error (device loop4): write_blk: dquota write failed [ 128.480697][ T4864] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 128.491423][ T28] audit: type=1326 audit(1774564240.070:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.2.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b961dc799 code=0x7ffc0000 [ 128.492626][ T6427] syzkaller0: entered promiscuous mode [ 128.523366][ T6427] syzkaller0: entered allmulticast mode [ 128.541636][ T28] audit: type=1400 audit(1774564240.175:1717): avc: denied { bind } for pid=6431 comm="syz.5.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.630662][ T6432] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 128.663400][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.718'. [ 129.903825][ T6461] loop2: detected capacity change from 0 to 512 [ 130.080808][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 130.080828][ T28] audit: type=1400 audit(1774564241.782:1719): avc: denied { name_bind } for pid=6462 comm="syz.1.724" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 130.129395][ T6461] FAT-fs (loop2): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 130.459020][ T28] audit: type=1400 audit(1774564242.191:1720): avc: denied { cpu } for pid=6464 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 130.659038][ T6476] loop5: detected capacity change from 0 to 512 [ 131.249497][ T6489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6489 comm=syz.4.732 [ 132.416015][ T28] audit: type=1400 audit(1774564244.249:1721): avc: denied { ioctl } for pid=6500 comm="syz.4.735" path="socket:[14788]" dev="sockfs" ino=14788 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 132.777918][ T6512] loop4: detected capacity change from 0 to 512 [ 132.786201][ T6512] FAT-fs (loop4): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 132.821682][ T6508] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 133.290933][ T6532] netlink: 'syz.5.747': attribute type 10 has an invalid length. [ 133.299106][ T6533] netlink: 'syz.5.747': attribute type 10 has an invalid length. [ 133.321855][ T6532] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 134.704889][ T28] audit: type=1400 audit(1774564246.643:1722): avc: denied { setattr } for pid=6547 comm="syz.5.751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 134.929832][ T28] audit: type=1400 audit(1774564246.874:1723): avc: denied { shutdown } for pid=6552 comm="syz.5.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.998350][ T28] audit: type=1400 audit(1774564246.916:1724): avc: denied { getopt } for pid=6552 comm="syz.5.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.163696][ T6563] loop5: detected capacity change from 0 to 128 [ 135.182177][ T28] audit: type=1326 audit(1774564247.136:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa670adc799 code=0x7ffc0000 [ 135.239869][ T28] audit: type=1326 audit(1774564247.136:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa670adc799 code=0x7ffc0000 [ 135.733811][ T6580] loop1: detected capacity change from 0 to 512 [ 135.750994][ T6580] FAT-fs (loop1): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 136.087064][ T28] audit: type=1326 audit(1774564247.136:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa670adc799 code=0x7ffc0000 [ 136.264784][ T28] audit: type=1400 audit(1774564248.291:1728): avc: denied { read write } for pid=6589 comm="syz.5.764" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 136.293067][ T6590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31368 sclass=netlink_route_socket pid=6590 comm=syz.5.764 [ 136.297493][ T28] audit: type=1400 audit(1774564248.291:1729): avc: denied { open } for pid=6589 comm="syz.5.764" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 136.325107][ T6590] netlink: 64 bytes leftover after parsing attributes in process `syz.5.764'. [ 136.437238][ T6603] loop1: detected capacity change from 0 to 512 [ 136.466083][ T6603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.482948][ T6607] loop5: detected capacity change from 0 to 1764 [ 136.490106][ T6603] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.507052][ T6607] iso9660: Unknown parameter 'showassSc' [ 136.605763][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.167408][ T6657] loop1: detected capacity change from 0 to 512 [ 138.202473][ T6657] FAT-fs (loop1): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 138.644589][ T6666] loop5: detected capacity change from 0 to 150 [ 138.694019][ T6671] loop1: detected capacity change from 0 to 1024 [ 138.726856][ T6671] EXT4-fs: Ignoring removed bh option [ 138.750293][ T6671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.845008][ T6671] EXT4-fs error (device loop1): ext4_lookup:1777: inode #2: comm syz.1.785: bad inode number: 16 [ 138.858743][ T6671] EXT4-fs (loop1): Remounting filesystem read-only [ 138.928675][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.139666][ T6677] chnl_net:caif_netlink_parms(): no params data found [ 139.540522][ T6711] loop2: detected capacity change from 0 to 512 [ 139.721567][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.735883][ T6711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.749476][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.756681][ T6677] bridge_slave_0: entered allmulticast mode [ 139.779143][ T6711] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.796449][ T6677] bridge_slave_0: entered promiscuous mode [ 139.858436][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.858470][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.858688][ T6677] bridge_slave_1: entered allmulticast mode [ 139.873917][ T6677] bridge_slave_1: entered promiscuous mode [ 139.918682][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.926469][ T6677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.927975][ T6677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.958833][ T6718] loop5: detected capacity change from 0 to 512 [ 140.011026][ T6677] team0: Port device team_slave_0 added [ 140.041145][ T6677] team0: Port device team_slave_1 added [ 140.058038][ T6718] EXT4-fs (loop5): 1 truncate cleaned up [ 140.084204][ T6718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.097863][ T6718] netlink: 'syz.5.789': attribute type 10 has an invalid length. [ 140.148617][ T6719] netlink: 'syz.5.789': attribute type 1 has an invalid length. [ 140.182429][ T6718] hsr0: entered promiscuous mode [ 140.188402][ T28] audit: type=1400 audit(1774564252.407:1730): avc: denied { watch watch_reads } for pid=6730 comm="syz.2.793" path="/138/file0" dev="tmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.212047][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.789'. [ 140.230597][ T6718] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 140.243995][ T6718] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 140.256806][ T6718] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 140.265953][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.281889][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.359549][ T5406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.369907][ T6677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.408998][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.424286][ T6743] netlink: 71 bytes leftover after parsing attributes in process `syz.5.796'. [ 140.429192][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.503538][ T6677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.510046][ T6746] loop2: detected capacity change from 0 to 1024 [ 140.560517][ T6746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.574123][ T6746] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.797: missing EA_INODE flag [ 140.592236][ T6746] EXT4-fs (loop2): Remounting filesystem read-only [ 140.612431][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.652377][ T6677] hsr_slave_0: entered promiscuous mode [ 140.674455][ T6677] hsr_slave_1: entered promiscuous mode [ 140.691851][ T6677] debugfs: 'hsr0' already exists in 'hsr' [ 140.697975][ T6677] Cannot create hsr debugfs directory [ 141.557055][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'. [ 141.594370][ T6677] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 141.629163][ T6677] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 141.684116][ T6677] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 141.721293][ T6677] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 141.885409][ T6677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.892207][ T28] audit: type=1400 audit(1774564254.192:1731): avc: denied { append } for pid=6782 comm="syz.4.804" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 141.938398][ T6677] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.958795][ T4014] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.966004][ T4014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.977560][ T28] audit: type=1400 audit(1774564254.286:1732): avc: denied { create } for pid=6782 comm="syz.4.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 142.028720][ T4014] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.035859][ T4014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.063254][ T28] audit: type=1400 audit(1774564254.286:1733): avc: denied { write } for pid=6782 comm="syz.4.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 142.113385][ T6785] loop2: detected capacity change from 0 to 512 [ 142.137761][ T28] audit: type=1400 audit(1774564254.286:1734): avc: denied { mount } for pid=6782 comm="syz.4.804" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 142.215181][ T6793] loop1: detected capacity change from 0 to 2048 [ 142.258581][ T6677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.434435][ T28] audit: type=1326 audit(1774564254.759:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d33d9c799 code=0x7ffc0000 [ 142.590958][ T6793] tipc: Started in network mode [ 142.640937][ T6793] tipc: Node identity ac14140f, cluster identity 4711 [ 142.705150][ T6793] tipc: New replicast peer: 255.255.255.255 [ 142.797950][ T6793] tipc: Enabled bearer , priority 10 [ 142.949229][ T28] audit: type=1326 audit(1774564254.759:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d33d9c799 code=0x7ffc0000 [ 142.973352][ T28] audit: type=1326 audit(1774564254.759:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d33d9c799 code=0x7ffc0000 [ 143.002404][ T28] audit: type=1326 audit(1774564254.759:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d33d9c799 code=0x7ffc0000 [ 143.057497][ T6810] loop4: detected capacity change from 0 to 2048 [ 143.103343][ T6810] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 143.140892][ T28] audit: type=1326 audit(1774564254.759:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6d33d9c799 code=0x7ffc0000 [ 143.165632][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 143.196180][ T6810] EXT4-fs (loop4): group descriptors corrupted! [ 143.369644][ T6829] loop1: detected capacity change from 0 to 512 [ 143.386896][ T6677] veth0_vlan: entered promiscuous mode [ 143.415467][ T6829] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 143.436356][ T6677] veth1_vlan: entered promiscuous mode [ 143.459519][ T6829] EXT4-fs (loop1): orphan cleanup on readonly fs [ 143.487097][ T6829] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.813: Block bitmap for bg 0 marked uninitialized [ 143.501363][ T6677] veth0_macvtap: entered promiscuous mode [ 143.508632][ T6677] veth1_macvtap: entered promiscuous mode [ 143.520304][ T6829] loop1: lost filesystem error report for type 5 error -117 [ 143.520858][ T6829] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 143.537144][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 143.537169][ C1] EXT4-fs (loop1): initial error at time 1774564255: ext4_read_block_bitmap_nowait:517 [ 143.537199][ C1] EXT4-fs (loop1): last error at time 1774564255: ext4_read_block_bitmap_nowait:517 [ 143.545286][ T6809] syz.4.809 (6809) used greatest stack depth: 8192 bytes left [ 143.554021][ T6829] loop1: lost filesystem error report for type 5 error -117 [ 143.595856][ T6835] loop5: detected capacity change from 0 to 1024 [ 143.611637][ T6835] EXT4-fs: Ignoring removed orlov option [ 143.617848][ T6835] EXT4-fs: Ignoring removed bh option [ 143.648764][ T6829] EXT4-fs (loop1): 1 orphan inode deleted [ 143.680371][ T6829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 143.735272][ T6835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.752533][ T3519] tipc: Node number set to 2886997007 [ 143.804964][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.829502][ T6829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.914184][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.956577][ T6795] syz.4.809 (6795) used greatest stack depth: 6896 bytes left [ 144.010476][ T4010] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.047357][ T4010] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.132364][ T4010] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.199825][ T4010] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.278752][ T6851] netlink: 68 bytes leftover after parsing attributes in process `syz.1.818'. [ 144.404483][ T5406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.455727][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 144.584376][ T6866] team0: No ports can be present during mode change [ 144.714611][ T6871] netlink: 'syz.6.826': attribute type 39 has an invalid length. [ 144.768615][ T6871] hsr_slave_1 (unregistering): left promiscuous mode [ 144.895574][ T6876] loop5: detected capacity change from 0 to 512 [ 144.925995][ T6876] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 144.947754][ T6877] loop6: detected capacity change from 0 to 4096 [ 144.953532][ T6876] EXT4-fs (loop5): 1 truncate cleaned up [ 144.970634][ T6876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.002676][ T6877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.005907][ T6876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.048965][ T6877] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.227525][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 145.227544][ T28] audit: type=1400 audit(1774564257.699:1846): avc: denied { bind } for pid=6882 comm="syz.5.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.503027][ T6896] sch_fq: defrate 4294967295 ignored. [ 145.974887][ T28] audit: type=1400 audit(1774564258.035:1847): avc: denied { write } for pid=6889 comm="syz.5.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.057914][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.830'. [ 146.088638][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.830'. [ 146.490816][ T6896] netlink: 14 bytes leftover after parsing attributes in process `syz.2.832'. [ 147.337880][ T6905] loop6: detected capacity change from 0 to 512 [ 147.350351][ T6905] FAT-fs (loop6): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 147.659229][ T6912] 9p: Bad value for 'rfdno' [ 147.667545][ T28] audit: type=1400 audit(1774564260.250:1848): avc: denied { connect } for pid=6911 comm="syz.6.836" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.785235][ T6920] loop2: detected capacity change from 0 to 512 [ 147.810595][ T6907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=6907 comm=syz.1.834 [ 148.062632][ T28] audit: type=1400 audit(1774564260.670:1849): avc: denied { connect } for pid=6931 comm="syz.5.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.091770][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.5.842'. [ 148.111187][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.5.842'. [ 148.125148][ T28] audit: type=1400 audit(1774564260.701:1850): avc: denied { bind } for pid=6931 comm="syz.5.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.145634][ T6933] netlink: 20 bytes leftover after parsing attributes in process `syz.5.842'. [ 148.155192][ T6933] netlink: 20 bytes leftover after parsing attributes in process `syz.5.842'. [ 148.217618][ T6920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.248572][ T6938] xt_hashlimit: size too large, truncated to 1048576 [ 148.255784][ T6920] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.273751][ T28] audit: type=1400 audit(1774564260.901:1851): avc: denied { setattr } for pid=6919 comm="syz.2.840" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.301603][ T6939] Invalid argument reading file caps for ./file0 [ 148.313019][ T6939] loop5: detected capacity change from 0 to 764 [ 148.331717][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.406005][ T28] audit: type=1400 audit(1774564261.027:1852): avc: denied { create } for pid=6940 comm="syz.2.844" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.444049][ T28] audit: type=1400 audit(1774564261.027:1853): avc: denied { write } for pid=6940 comm="syz.2.844" name="file0" dev="tmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.466867][ T28] audit: type=1400 audit(1774564261.027:1854): avc: denied { open } for pid=6940 comm="syz.2.844" path="/154/file0" dev="tmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.490552][ T28] audit: type=1400 audit(1774564261.058:1855): avc: denied { ioctl } for pid=6940 comm="syz.2.844" path="/154/file0" dev="tmpfs" ino=848 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.581126][ T6948] loop2: detected capacity change from 0 to 512 [ 148.598408][ T6948] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 148.626269][ T6948] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.847: inode has both inline data and extents flags [ 148.649864][ T6948] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.653528][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 148.669239][ C1] EXT4-fs (loop2): initial error at time 1774564261: ext4_orphan_get:1391: inode 15 [ 148.678868][ C1] EXT4-fs (loop2): last error at time 1774564261: ext4_orphan_get:1391: inode 15 [ 148.695865][ T6948] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.847: couldn't read orphan inode 15 (err -117) [ 148.707944][ T6948] loop2: lost filesystem error report for type 5 error -117 [ 148.709754][ T6948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.796884][ T6967] EXT4-fs: Cannot specify journal on remount [ 148.864175][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.854'. [ 148.892757][ T6974] loop4: detected capacity change from 0 to 1024 [ 148.923039][ T6974] EXT4-fs: dax option not supported [ 148.929240][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.137820][ T6974] netlink: 84 bytes leftover after parsing attributes in process `syz.4.853'. [ 149.174838][ T6974] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 149.213899][ T6979] loop4: detected capacity change from 0 to 764 [ 149.314833][ T6974] Symlink component flag not implemented [ 149.381811][ T6974] Symlink component flag not implemented (116) [ 149.654065][ T6996] loop2: detected capacity change from 0 to 512 [ 149.672960][ T6996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.694528][ T6992] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6992 comm=syz.4.860 [ 149.737062][ T6996] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.789273][ T7007] loop5: detected capacity change from 0 to 512 [ 149.821063][ T6987] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 149.842127][ T7007] ext4: Unknown parameter 'noacl' [ 149.921775][ T7017] loop5: detected capacity change from 0 to 164 [ 149.932255][ T7018] loop4: detected capacity change from 0 to 512 [ 149.949145][ T7017] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 149.959889][ T7018] msdos: Unknown parameter 'nkdots' [ 150.009618][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 150.009636][ T28] audit: type=1400 audit(1774564262.717:1863): avc: denied { setopt } for pid=6984 comm="syz.2.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 150.082391][ T28] audit: type=1400 audit(1774564262.770:1864): avc: denied { create } for pid=7016 comm="syz.5.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 150.111422][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.129587][ T28] audit: type=1400 audit(1774564262.822:1865): avc: denied { mounton } for pid=7016 comm="syz.5.867" path="/85/file0/file0" dev="loop5" ino=1984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 150.147011][ T7027] loop6: detected capacity change from 0 to 512 [ 150.185470][ T7027] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 150.213070][ T7027] EXT4-fs (loop6): orphan file too big: 4294967295 [ 150.221893][ T7027] EXT4-fs (loop6): mount failed [ 150.362092][ T7039] tap0: tun_chr_ioctl cmd 1074025675 [ 150.367705][ T7039] tap0: persist disabled [ 150.372137][ T7039] tap0: tun_chr_ioctl cmd 1074025675 [ 150.377718][ T7039] tap0: persist disabled [ 150.710828][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.875'. [ 150.726418][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.875'. [ 150.742997][ T7055] netlink: 'syz.6.875': attribute type 1 has an invalid length. [ 151.056590][ T7059] loop5: detected capacity change from 0 to 512 [ 151.078239][ T7059] EXT4-fs: Invalid want_extra_isize 91 [ 151.120118][ T28] audit: type=1400 audit(1774564263.872:1866): avc: denied { create } for pid=7058 comm="syz.5.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.148253][ T28] audit: type=1400 audit(1774564263.872:1867): avc: denied { write } for pid=7058 comm="syz.5.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.236921][ T28] audit: type=1400 audit(1774564263.872:1868): avc: denied { read } for pid=7058 comm="syz.5.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.273937][ T7076] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 151.280523][ T7076] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.330070][ T28] audit: type=1400 audit(1774564263.904:1869): avc: denied { read } for pid=7066 comm="syz.4.880" dev="nsfs" ino=4026531834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 151.371090][ T7072] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 151.377669][ T7072] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.406203][ T7084] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 151.412926][ T7084] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 151.429089][ T7076] vhci_hcd vhci_hcd.0: Device attached [ 151.447628][ T28] audit: type=1400 audit(1774564263.904:1870): avc: denied { open } for pid=7066 comm="syz.4.880" path="time:[4026531834]" dev="nsfs" ino=4026531834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 151.454122][ T7084] vhci_hcd vhci_hcd.0: Device attached [ 151.476840][ T7072] vhci_hcd vhci_hcd.0: Device attached [ 151.809563][ T7072] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 151.816237][ T7072] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.828973][ T7076] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(8) [ 151.835553][ T7076] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.847588][ T7094] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(19) [ 151.854402][ T7094] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 151.914797][ T7098] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(22) [ 151.921457][ T7098] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.929853][ T3421] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 151.950688][ T7072] vhci_hcd vhci_hcd.0: Device attached [ 151.987334][ T28] audit: type=1400 audit(1774564263.904:1871): avc: denied { ioctl } for pid=7066 comm="syz.4.880" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 151.998182][ T7076] vhci_hcd vhci_hcd.0: Device attached [ 152.012837][ T28] audit: type=1400 audit(1774564263.904:1872): avc: denied { create } for pid=7066 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.038122][ T7094] vhci_hcd vhci_hcd.0: Device attached [ 152.045995][ T7101] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(14) [ 152.052649][ T7101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.060525][ T7098] vhci_hcd vhci_hcd.0: Device attached [ 152.101553][ T7082] vhci_hcd: connection closed [ 152.101807][ T7099] vhci_hcd: connection closed [ 152.106793][ T4012] vhci_hcd vhci_hcd.2: stop threads [ 152.116920][ T7090] vhci_hcd: connection closed [ 152.117725][ T7085] vhci_hcd: connection closed [ 152.122605][ T7095] vhci_hcd: connection closed [ 152.130137][ T7092] vhci_hcd: connection closed [ 152.135344][ T7077] vhci_hcd: connection reset by peer [ 152.145952][ T7104] loop6: detected capacity change from 0 to 512 [ 152.146404][ T4012] vhci_hcd vhci_hcd.2: release socket [ 152.158494][ T4012] vhci_hcd vhci_hcd.2: disconnect device [ 152.160247][ T7101] vhci_hcd vhci_hcd.0: Device attached [ 152.173829][ T7102] vhci_hcd: connection closed [ 152.225554][ T4012] vhci_hcd vhci_hcd.2: stop threads [ 152.244400][ T4012] vhci_hcd vhci_hcd.2: release socket [ 152.246364][ T7104] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 152.258607][ T4012] vhci_hcd vhci_hcd.2: disconnect device [ 152.274773][ T4012] vhci_hcd vhci_hcd.2: stop threads [ 152.277876][ T7104] EXT4-fs (loop6): orphan cleanup on readonly fs [ 152.280039][ T4012] vhci_hcd vhci_hcd.2: release socket [ 152.303609][ T4012] vhci_hcd vhci_hcd.2: disconnect device [ 152.311399][ T7104] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.326200][ T4012] vhci_hcd vhci_hcd.2: stop threads [ 152.340816][ T7104] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 152.349068][ T4012] vhci_hcd vhci_hcd.2: release socket [ 152.364591][ T4012] vhci_hcd vhci_hcd.2: disconnect device [ 152.371212][ T7104] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.884: corrupted inode contents [ 152.387533][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 152.393490][ T7104] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 152.397379][ T7104] EXT4-fs (loop6): Remounting filesystem read-only [ 152.406658][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 152.406691][ C0] EXT4-fs (loop6): initial error at time 1774564265: ext4_do_update_inode:5569: inode 16 [ 152.406729][ C0] EXT4-fs (loop6): last error at time 1774564265: ext4_do_update_inode:5569: inode 16 [ 152.440390][ T4012] vhci_hcd vhci_hcd.2: stop threads [ 152.440809][ T7104] EXT4-fs (loop6): 1 truncate cleaned up [ 152.450451][ T4012] vhci_hcd vhci_hcd.2: release socket [ 152.457027][ T7104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.500018][ T4012] vhci_hcd vhci_hcd.2: disconnect device [ 152.515816][ T4012] vhci_hcd vhci_hcd.2: stop threads [ 152.521676][ T6677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.535740][ T4012] vhci_hcd vhci_hcd.2: release socket [ 152.558545][ T4012] vhci_hcd vhci_hcd.2: disconnect device [ 152.577474][ T4012] vhci_hcd vhci_hcd.2: stop threads [ 152.586984][ T4012] vhci_hcd vhci_hcd.2: release socket [ 152.625569][ T4012] vhci_hcd vhci_hcd.2: disconnect device [ 152.644820][ T4012] vhci_hcd vhci_hcd.2: stop threads [ 152.650104][ T4012] vhci_hcd vhci_hcd.2: release socket [ 152.701848][ T4012] vhci_hcd vhci_hcd.2: disconnect device [ 152.884149][ T7134] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 153.017917][ T7138] loop6: detected capacity change from 0 to 512 [ 153.025882][ T7138] FAT-fs (loop6): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 153.483564][ T7145] loop4: detected capacity change from 0 to 512 [ 153.529490][ T7145] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 3: comm syz.4.895: lblock 0 mapped to illegal pblock 3 (length 1) [ 153.593924][ T7145] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 153.594098][ T7145] EXT4-fs (loop4): Remounting filesystem read-only [ 153.603312][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 153.603329][ C0] EXT4-fs (loop4): initial error at time 1774564266: ext4_map_blocks:776: inode 2: block 3 [ 153.603381][ C0] EXT4-fs (loop4): last error at time 1774564266: ext4_map_blocks:776: inode 2: block 3 [ 153.787243][ T7145] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.895: error -117 reading directory block [ 153.854365][ T7145] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 153.863072][ T7145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.938135][ T7145] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.895: error -117 reading directory block [ 153.998472][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.899'. [ 154.014509][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.084834][ T7162] program syz.4.900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.843227][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'. [ 155.878606][ T7227] loop5: detected capacity change from 0 to 512 [ 155.945687][ T7227] EXT4-fs (loop5): 1 orphan inode deleted [ 155.952330][ T7227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.965461][ T4012] __quota_error: 81 callbacks suppressed [ 155.965515][ T4012] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 156.076020][ T4012] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:18: Failed to release dquot type 1 [ 156.184432][ T4012] loop5: lost filesystem error report for type 5 error -117 [ 156.580602][ T7227] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.806484][ T3421] usb 5-1: enqueue for inactive port 0 [ 156.812099][ T3421] usb 5-1: enqueue for inactive port 0 [ 156.818075][ T7235] netlink: 104 bytes leftover after parsing attributes in process `syz.2.919'. [ 156.836834][ T28] audit: type=1400 audit(1774564269.888:1953): avc: denied { setopt } for pid=7234 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.901747][ T3421] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 156.955645][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'. [ 157.011918][ T28] audit: type=1400 audit(1774564270.067:1954): avc: denied { write } for pid=7243 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.275989][ T28] audit: type=1400 audit(1774564270.350:1955): avc: denied { execmod } for pid=7249 comm="syz.1.927" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 157.344352][ T28] audit: type=1400 audit(1774564270.382:1956): avc: denied { execute } for pid=7249 comm="syz.1.927" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 157.384482][ T28] audit: type=1400 audit(1774564270.455:1957): avc: denied { read write } for pid=7233 comm="syz.6.921" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.409223][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.419247][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.430062][ T7255] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 157.447203][ T28] audit: type=1400 audit(1774564270.455:1958): avc: denied { open } for pid=7233 comm="syz.6.921" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.473961][ T7255] loop6: detected capacity change from 0 to 128 [ 157.497852][ T5406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.516485][ T7255] EXT4-fs: test_dummy_encryption option not supported [ 157.538932][ T28] audit: type=1400 audit(1774564270.455:1959): avc: denied { ioctl } for pid=7233 comm="syz.6.921" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.678821][ T28] audit: type=1400 audit(1774564270.770:1960): avc: denied { ioctl } for pid=7264 comm="syz.4.932" path="socket:[17238]" dev="sockfs" ino=17238 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.738964][ T28] audit: type=1400 audit(1774564270.770:1961): avc: denied { write } for pid=7264 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.052554][ T7273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.933'. [ 158.102641][ T7273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.933'. [ 158.131386][ T7275] can: request_module (can-proto-0) failed. [ 158.145637][ T7275] tipc: Enabling of bearer rejected, failed to enable media [ 158.173485][ T7275] netlink: 14 bytes leftover after parsing attributes in process `syz.6.934'. [ 158.736084][ T7300] loop5: detected capacity change from 0 to 512 [ 158.764303][ T7300] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.941: corrupted in-inode xattr: invalid ea_ino [ 158.837130][ T7300] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.837317][ T7300] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.941: couldn't read orphan inode 15 (err -117) [ 158.846570][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 158.846587][ C1] EXT4-fs (loop5): initial error at time 1774564271: ext4_iget_extra_inode:5025: inode 15 [ 158.846620][ C1] EXT4-fs (loop5): last error at time 1774564271: ext4_iget_extra_inode:5025: inode 15 [ 158.901019][ T7300] loop5: lost filesystem error report for type 5 error -117 [ 159.014025][ T7300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.859230][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 159.907610][ T5406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.028288][ T7334] netlink: 132 bytes leftover after parsing attributes in process `syz.5.950'. [ 160.057279][ T7336] netlink: 'syz.2.948': attribute type 1 has an invalid length. [ 160.083104][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 160.117061][ T7336] netlink: 'syz.2.948': attribute type 1 has an invalid length. [ 160.735667][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 160.735685][ T28] audit: type=1400 audit(1774564273.972:1983): avc: denied { bind } for pid=7357 comm="syz.4.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.928432][ T28] audit: type=1400 audit(1774564274.014:1984): avc: denied { write } for pid=7357 comm="syz.4.956" path="socket:[16314]" dev="sockfs" ino=16314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.518740][ T28] audit: type=1326 audit(1774564274.791:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d511c799 code=0x7ffc0000 [ 161.557555][ T28] audit: type=1326 audit(1774564274.791:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d511c799 code=0x7ffc0000 [ 161.671942][ T28] audit: type=1326 audit(1774564274.802:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f81d511c799 code=0x7ffc0000 [ 161.699356][ T28] audit: type=1326 audit(1774564274.802:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d511c799 code=0x7ffc0000 [ 161.738347][ T28] audit: type=1326 audit(1774564274.802:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d511c799 code=0x7ffc0000 [ 161.768002][ T28] audit: type=1326 audit(1774564274.991:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81d511c799 code=0x7ffc0000 [ 161.791801][ T28] audit: type=1326 audit(1774564274.991:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d511c799 code=0x7ffc0000 [ 161.816763][ T28] audit: type=1326 audit(1774564275.022:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f81d511c799 code=0x7ffc0000 [ 161.850485][ T7385] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7385 comm=syz.2.963 [ 161.880813][ T7395] loop5: detected capacity change from 0 to 128 [ 161.921412][ T7395] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.953384][ T7395] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 162.011693][ T4019] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 162.303044][ T7409] loop2: detected capacity change from 0 to 512 [ 162.313079][ T7409] FAT-fs (loop2): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 162.694708][ T7411] loop5: detected capacity change from 0 to 512 [ 162.708846][ T7411] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.737148][ T7411] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42592!=33349) [ 162.748207][ T7411] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.968: corrupted in-inode xattr: invalid size in ea xattr [ 162.763188][ T7416] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 162.771781][ T7411] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.772257][ T7411] EXT4-fs (loop5): get orphan inode failed [ 162.781597][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 162.781619][ C1] EXT4-fs (loop5): initial error at time 1774564276: ext4_iget_extra_inode:5025: inode 15 [ 162.781659][ C1] EXT4-fs (loop5): last error at time 1774564276: ext4_iget_extra_inode:5025: inode 15 [ 162.820130][ T7411] EXT4-fs (loop5): mount failed [ 163.036351][ T7430] loop5: detected capacity change from 0 to 128 [ 163.062839][ T7430] msdos: Unknown parameter 'nodxfloppy' [ 163.093013][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 163.801483][ T7443] loop5: detected capacity change from 0 to 512 [ 163.826250][ T7443] ext4: Bad value for 'auto_da_alloc' [ 163.863864][ T7447] sctp: [Deprecated]: syz.4.977 (pid 7447) Use of int in max_burst socket option deprecated. [ 163.863864][ T7447] Use struct sctp_assoc_value instead [ 163.899826][ T7449] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 164.108545][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.118057][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.507686][ T7458] netlink: 20 bytes leftover after parsing attributes in process `syz.6.982'. [ 164.688267][ T7462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.983'. [ 164.751836][ T7465] loop2: detected capacity change from 0 to 512 [ 164.763200][ T7465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.776438][ T7465] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.796951][ T7465] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 164.861212][ T7471] netlink: 'syz.4.986': attribute type 8 has an invalid length. [ 164.913710][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.022769][ T7490] 9pnet_fd: Insufficient options for proto=fd [ 165.181268][ T7497] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 165.314086][ T7497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.576627][ T28] kauditd_printk_skb: 488 callbacks suppressed [ 165.576647][ T28] audit: type=1326 audit(1774564279.054:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.6.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f81d511c799 code=0x7ffc0000 [ 165.655011][ T7502] loop6: detected capacity change from 0 to 512 [ 165.665771][ T7502] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 165.680343][ T7502] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.993: bad orphan inode 131083 [ 165.691843][ T7502] loop6: lost filesystem error report for type 5 error -117 [ 165.692470][ T7502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.915040][ T28] audit: type=1400 audit(1774564279.411:2482): avc: denied { remount } for pid=7501 comm="syz.6.993" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 165.934709][ T7512] loop2: detected capacity change from 0 to 512 [ 166.035610][ T28] audit: type=1400 audit(1774564279.537:2483): avc: denied { setopt } for pid=7515 comm="syz.2.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.091594][ T7519] loop4: detected capacity change from 0 to 512 [ 166.103405][ T28] audit: type=1400 audit(1774564279.537:2484): avc: denied { ioctl } for pid=7515 comm="syz.2.997" path="socket:[17579]" dev="sockfs" ino=17579 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.106780][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 166.136382][ T7519] EXT4-fs: test_dummy_encryption option not supported [ 166.190122][ T28] audit: type=1400 audit(1774564279.537:2485): avc: denied { bind } for pid=7515 comm="syz.2.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.239603][ T28] audit: type=1400 audit(1774564279.537:2486): avc: denied { ioctl } for pid=7515 comm="syz.2.997" path="socket:[17581]" dev="sockfs" ino=17581 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 166.525087][ T6677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.064714][ T28] audit: type=1400 audit(1774564280.156:2487): avc: denied { create } for pid=7533 comm="syz.2.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 167.111349][ T7545] loop6: detected capacity change from 0 to 512 [ 167.214764][ T7545] ext4: Unknown parameter 'subj_type' [ 167.340460][ T28] audit: type=1400 audit(1774564280.167:2488): avc: denied { ioctl } for pid=7533 comm="syz.2.1003" path="socket:[18587]" dev="sockfs" ino=18587 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 167.809737][ T7553] netlink: 'syz.6.1005': attribute type 1 has an invalid length. [ 167.821848][ T28] audit: type=1400 audit(1774564281.311:2489): avc: denied { create } for pid=7544 comm="syz.6.1005" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 167.846700][ T7553] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1005'. [ 167.863397][ T28] audit: type=1400 audit(1774564281.322:2490): avc: denied { setattr } for pid=7544 comm="syz.6.1005" name="file0" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 167.896333][ T7558] loop2: detected capacity change from 0 to 512 [ 167.940105][ T7565] loop2: detected capacity change from 0 to 1024 [ 167.950331][ T7565] EXT4-fs: test_dummy_encryption option not supported [ 168.081762][ T7568] loop4: detected capacity change from 0 to 512 [ 168.102999][ T7568] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.110836][ T7568] EXT4-fs (loop4): orphan cleanup on readonly fs [ 168.117892][ T7568] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 168.129704][ T7568] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1012: attempt to clear invalid blocks 2 len 1 [ 168.155271][ T7568] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 168.155551][ T7568] EXT4-fs (loop4): Remounting filesystem read-only [ 168.164770][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 168.164795][ C0] EXT4-fs (loop4): initial error at time 1774564281: ext4_clear_blocks:876: inode 13 [ 168.164821][ C0] EXT4-fs (loop4): last error at time 1774564281: ext4_clear_blocks:876: inode 13 [ 168.282915][ T7574] loop2: detected capacity change from 0 to 512 [ 168.322196][ T7568] EXT4-fs (loop4): 1 truncate cleaned up [ 168.329511][ T7568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.389662][ T7574] EXT4-fs (loop2): 1 orphan inode deleted [ 168.405027][ T7574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.428538][ T7574] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.460429][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 168.490108][ T7574] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 168.512591][ T9] IPVS: starting estimator thread 0... [ 168.654791][ T7581] IPVS: using max 2112 ests per chain, 105600 per kthread [ 168.994409][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.005820][ T7601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1018'. [ 169.094303][ T7604] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1015'. [ 169.138706][ T7608] loop6: detected capacity change from 0 to 512 [ 169.258018][ T7613] loop4: detected capacity change from 0 to 512 [ 169.946541][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.160465][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1027'. [ 170.273587][ T7638] loop5: detected capacity change from 0 to 512 [ 170.327531][ T7638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 170.343643][ T7638] ext4 filesystem being mounted at /122/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.371806][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 170.371825][ T28] audit: type=1400 audit(1774564284.094:2503): avc: denied { ioctl } for pid=7637 comm="syz.5.1030" path="/122/file2/file1" dev="loop5" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 170.432332][ T28] audit: type=1400 audit(1774564284.146:2504): avc: denied { mount } for pid=7646 comm="syz.1.1032" name="/" dev="mqueue" ino=2670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 170.470386][ T5406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 170.491297][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1029'. [ 170.512329][ T7652] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1029'. [ 170.552360][ T7653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1033'. [ 170.595801][ T7653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7653 comm=syz.2.1033 [ 170.623033][ T7657] loop5: detected capacity change from 0 to 512 [ 170.697892][ T7653] dvmrp1: entered allmulticast mode [ 170.740050][ T7663] loop5: detected capacity change from 0 to 1024 [ 170.764404][ T7663] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.778335][ T7663] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1036: bg 0: block 10: padding at end of block bitmap is not set [ 170.792880][ T7663] loop5: lost filesystem error report for type 5 error -117 [ 170.793250][ T7663] Quota error (device loop5): write_blk: dquota write failed [ 170.800701][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 170.800720][ C1] EXT4-fs (loop5): initial error at time 1774564284: ext4_validate_block_bitmap:441 [ 170.800742][ C1] EXT4-fs (loop5): last error at time 1774564284: ext4_validate_block_bitmap:441 [ 170.833762][ T7663] Quota error (device loop5): find_free_dqentry: Can't write quota data block 2 [ 170.843097][ T7663] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 170.853518][ T7663] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1036: Failed to acquire dquot type 0 [ 170.905979][ T7663] loop5: lost filesystem error report for type 5 error -117 [ 170.906145][ T7663] Quota error (device loop5): write_blk: dquota write failed [ 170.921318][ T7663] Quota error (device loop5): find_free_dqentry: Can't write quota data block 2 [ 170.930492][ T7663] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 170.941565][ T7663] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1036: Failed to acquire dquot type 0 [ 170.953575][ T7663] loop5: lost filesystem error report for type 5 error -28 [ 170.953870][ T7663] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.1036: Freeing blocks not in datazone - block = 0, count = 4096 [ 170.974816][ T7663] loop5: lost filesystem error report for type 5 error -117 [ 170.975072][ T7663] Quota error (device loop5): write_blk: dquota write failed [ 171.057352][ T7663] Quota error (device loop5): find_free_dqentry: Can't write quota data block 2 [ 171.068324][ T7663] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1036: Failed to acquire dquot type 0 [ 171.080987][ T7663] loop5: lost filesystem error report for type 5 error -28 [ 171.081319][ T7663] EXT4-fs (loop5): 1 orphan inode deleted [ 171.100282][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 171.109590][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1040'. [ 171.110645][ T7663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.131397][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1040'. [ 171.155409][ T7679] xt_NFQUEUE: number of queues (65533) out of range (got 65539) [ 171.242592][ T5406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.646874][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 171.918108][ T7713] netlink: 'syz.2.1051': attribute type 29 has an invalid length. [ 172.001417][ T7722] netlink: 'syz.6.1053': attribute type 1 has an invalid length. [ 172.121331][ T7726] netlink: 'syz.6.1054': attribute type 7 has an invalid length. [ 172.217454][ T7742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37632 sclass=netlink_route_socket pid=7742 comm=syz.4.1059 [ 172.272359][ T7740] set_capacity_and_notify: 2 callbacks suppressed [ 172.272376][ T7740] loop2: detected capacity change from 0 to 8192 [ 172.409471][ T7758] loop1: detected capacity change from 0 to 4096 [ 172.436783][ T7758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.525927][ T7747] loop6: detected capacity change from 0 to 1024 [ 172.603969][ T7747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.263705][ T7777] loop5: detected capacity change from 0 to 128 [ 173.319309][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.332265][ T7777] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.344142][ T6677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.355234][ T7777] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.432743][ T4019] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.534747][ T7794] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 173.679820][ T7810] loop4: detected capacity change from 0 to 512 [ 173.689070][ T7807] loop5: detected capacity change from 0 to 2048 [ 173.708068][ T7807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.731430][ T7807] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.899001][ T5406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.041038][ T7818] loop5: detected capacity change from 0 to 1024 [ 174.167969][ T7827] loop2: detected capacity change from 0 to 512 [ 174.177833][ T7827] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 175.600633][ T7837] __nla_validate_parse: 4 callbacks suppressed [ 175.600653][ T7837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1084'. [ 175.632628][ T3394] kernel read not supported for file /input/event0 (pid: 3394 comm: kworker/0:3) [ 175.980918][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 175.980934][ T28] audit: type=1400 audit(1774564289.984:2559): avc: denied { connect } for pid=7849 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.030751][ T28] audit: type=1400 audit(1774564290.026:2560): avc: denied { bind } for pid=7849 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.106000][ T28] audit: type=1400 audit(1774564290.026:2561): avc: denied { read } for pid=7849 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.174035][ T28] audit: type=1400 audit(1774564290.089:2562): avc: denied { write } for pid=7849 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.572462][ T28] audit: type=1400 audit(1774564290.603:2563): avc: denied { ioctl } for pid=7879 comm="syz.2.1098" path="socket:[19008]" dev="sockfs" ino=19008 ioctlcmd=0x8927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.600713][ T7880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=7880 comm=syz.2.1098 [ 176.700817][ T28] audit: type=1400 audit(1774564290.656:2564): avc: denied { create } for pid=7872 comm="syz.5.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 176.797974][ T28] audit: type=1326 audit(1774564290.834:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.2.1101" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b961dc799 code=0x0 [ 176.855728][ T7898] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1103'. [ 176.873213][ T28] audit: type=1400 audit(1774564290.897:2566): avc: denied { create } for pid=7894 comm="syz.5.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.909070][ T28] audit: type=1400 audit(1774564290.897:2567): avc: denied { read } for pid=7894 comm="syz.5.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.932208][ T28] audit: type=1400 audit(1774564290.897:2568): avc: denied { connect } for pid=7894 comm="syz.5.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.965470][ T7902] No such timeout policy "syz0" [ 176.980167][ T7902] veth1_to_bond: entered allmulticast mode [ 176.987153][ T7902] veth1_to_bond: left allmulticast mode [ 177.031268][ T7906] loop6: detected capacity change from 0 to 512 [ 177.051948][ T7906] EXT4-fs: Ignoring removed bh option [ 177.054342][ T7911] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1109'. [ 177.075280][ T7912] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1109'. [ 177.094104][ T7906] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 177.115133][ T7906] EXT4-fs (loop6): 1 truncate cleaned up [ 177.132615][ T7906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.402889][ T6677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.653404][ T7924] loop5: detected capacity change from 0 to 512 [ 177.655561][ T7939] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1120'. [ 177.752225][ T7924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.781695][ T7924] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.378726][ T5406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.401205][ T7951] loop4: detected capacity change from 0 to 512 [ 178.408638][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'. [ 178.510827][ T7958] loop5: detected capacity change from 0 to 512 [ 178.571483][ T7958] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 178.589084][ T7958] System zones: 0-2, 18-18, 34-34 [ 178.601866][ T7958] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1125: bg 0: block 248: padding at end of block bitmap is not set [ 178.626802][ T7968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1129'. [ 178.632356][ T7958] loop5: lost filesystem error report for type 5 error -117 [ 178.646127][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 178.661210][ C0] EXT4-fs (loop5): last error at time 1774564292: ext4_validate_block_bitmap:441 [ 178.672301][ T7958] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1125: Failed to acquire dquot type 1 [ 178.684303][ T7958] loop5: lost filesystem error report for type 5 error -117 [ 178.693227][ T7958] EXT4-fs (loop5): 1 truncate cleaned up [ 178.699420][ T7958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.726105][ T7958] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.861954][ T5406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.878267][ T4012] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:18: Failed to release dquot type 1 [ 178.905667][ T4012] loop5: lost filesystem error report for type 5 error -117 [ 179.009386][ T7986] loop5: detected capacity change from 0 to 8192 [ 179.025486][ T7986] ================================================================== [ 179.033625][ T7986] BUG: KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event [ 179.042442][ T7986] [ 179.044782][ T7986] write to 0xffff888125b37314 of 4 bytes by task 3301 on cpu 1: [ 179.052431][ T7986] fsnotify_detach_mark+0xb9/0x160 [ 179.057581][ T7986] fsnotify_destroy_mark+0x6f/0x150 [ 179.062869][ T7986] __se_sys_inotify_rm_watch+0xe8/0x170 [ 179.068493][ T7986] __x64_sys_inotify_rm_watch+0x31/0x40 [ 179.074100][ T7986] x64_sys_call+0xc88/0x3020 [ 179.078738][ T7986] do_syscall_64+0x12c/0x370 [ 179.083399][ T7986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.089420][ T7986] [ 179.091769][ T7986] read to 0xffff888125b37314 of 4 bytes by task 7986 on cpu 0: [ 179.099429][ T7986] inotify_handle_inode_event+0x34c/0x3d0 [ 179.105290][ T7986] fsnotify_handle_inode_event+0x1c0/0x220 [ 179.111224][ T7986] fsnotify+0x15d0/0x1730 [ 179.115593][ T7986] __fsnotify_parent+0x2f8/0x3a0 [ 179.120563][ T7986] __fput+0x1de/0x650 [ 179.124587][ T7986] fput_close_sync+0xad/0x190 [ 179.129392][ T7986] __x64_sys_close+0x55/0xf0 [ 179.134042][ T7986] x64_sys_call+0x275d/0x3020 [ 179.138876][ T7986] do_syscall_64+0x12c/0x370 [ 179.143613][ T7986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.149546][ T7986] [ 179.151907][ T7986] value changed: 0x00000003 -> 0x00000000 [ 179.157683][ T7986] [ 179.160123][ T7986] Reported by Kernel Concurrency Sanitizer on: [ 179.166328][ T7986] CPU: 0 UID: 0 PID: 7986 Comm: syz.5.1133 Tainted: G W syzkaller #0 PREEMPT(full) [ 179.177321][ T7986] Tainted: [W]=WARN [ 179.181176][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.191368][ T7986] ================================================================== [ 179.227956][ T7997] loop1: detected capacity change from 0 to 512 [ 179.250825][ T7986] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.264554][ T7999] loop4: detected capacity change from 0 to 128