last executing test programs: 1m44.248403122s ago: executing program 4 (id=253): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000000500007041"], 0x50) 1m44.175138024s ago: executing program 4 (id=255): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7bdb00ff00000000711078000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1m44.158488495s ago: executing program 4 (id=257): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) 1m44.023301548s ago: executing program 4 (id=259): madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) 1m44.022886348s ago: executing program 4 (id=260): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000001100)='0000:00:06.0', 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x80}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0x4, 0x0, 0x0, 0xfffffffffffffff8, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xcc800000, 0x0, 0x0, 0x0, 0xa}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0xca, &(0x7f0000000400)=""/202, 0x41100, 0x3a33e30d08bdda9b, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x5, 0xfffffffc, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6f, @value=r0}, 0x94) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x8000040000a9c, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @dev, @multicast1}, &(0x7f0000000300)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x11, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}, @generic={0xc, 0x0, 0x0, 0x2f6, 0x2000}, @ldst={0x1, 0x3, 0x0, 0xa, 0x9, 0x50, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110c700000000009500000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x48, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) 1m43.762742394s ago: executing program 4 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x4d1f09bfa548064f) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, r3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@gettaction={0x14, 0x32, 0xe72c5f922f23ccf3, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40008c4}, 0x4000000) r5 = socket(0x10, 0x3, 0x0) acct(&(0x7f0000000180)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x8080) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000300)="dc070000000300000000000000f1e3b76d64454aedba283413e674c7719c33a4b17f028f68610a6c550100f8282853f3e16f06000000674c6c07e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348cdd9b462ab1e34d54a9ce164ade124c5a89c0c9f60165bc2c6f474c1880ea461e8955a5", 0x94}) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="d80000001000810468f70082db44b904021d080b01000000e8fe55a118001500060014fe800000120800040043000000a80016000a00014006000600000010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f", 0xbd}], 0x1}, 0x20000004) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 1m28.47095729s ago: executing program 32 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x4d1f09bfa548064f) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, r3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@gettaction={0x14, 0x32, 0xe72c5f922f23ccf3, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40008c4}, 0x4000000) r5 = socket(0x10, 0x3, 0x0) acct(&(0x7f0000000180)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x8080) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000300)="dc070000000300000000000000f1e3b76d64454aedba283413e674c7719c33a4b17f028f68610a6c550100f8282853f3e16f06000000674c6c07e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348cdd9b462ab1e34d54a9ce164ade124c5a89c0c9f60165bc2c6f474c1880ea461e8955a5", 0x94}) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="d80000001000810468f70082db44b904021d080b01000000e8fe55a118001500060014fe800000120800040043000000a80016000a00014006000600000010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f", 0xbd}], 0x1}, 0x20000004) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 20.41147757s ago: executing program 0 (id=1414): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00000000c0)=0xb3, 0xb43880e6255d7f44) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}, 0x1002}], 0x1, 0x2023, 0x0) 20.302558202s ago: executing program 0 (id=1415): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 19.5946374s ago: executing program 0 (id=1419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000580)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d28b31c32a790343c48040000db", 0x2a}, {&(0x7f00000005c0)="0046053cb304538a9927911e0000", 0xe}, {&(0x7f0000000540)='W4', 0x2}], 0x3) 19.448974493s ago: executing program 0 (id=1420): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@prjquota}, {@orlov}]}, 0x0, 0x491, &(0x7f0000000c40)="$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") bind$inet6(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121c040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 18.979241625s ago: executing program 0 (id=1424): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x6}, 0x8) 18.703068652s ago: executing program 0 (id=1429): syz_clone(0x22040000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x3, 0x21, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x1f4) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) sendto$packet(r4, &(0x7f0000000180)="992e55a0051a81ae", 0x8, 0x400d0, &(0x7f0000000080)={0x11, 0xc, r3}, 0x6) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007379903100000000080041007369770014003300626f6e643000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 18.677311162s ago: executing program 33 (id=1429): syz_clone(0x22040000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x3, 0x21, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x1f4) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) sendto$packet(r4, &(0x7f0000000180)="992e55a0051a81ae", 0x8, 0x400d0, &(0x7f0000000080)={0x11, 0xc, r3}, 0x6) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007379903100000000080041007369770014003300626f6e643000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 7.696500792s ago: executing program 6 (id=1516): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 7.405083719s ago: executing program 6 (id=1518): r0 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed7, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_pidfd_open(0x0, 0x0) membarrier(0x40, 0x0) membarrier(0x20, 0x0) 7.316849931s ago: executing program 6 (id=1520): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa5a9171", 0xdc}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d", 0x8b}, {&(0x7f0000001380)="6697624319e115b3b12c54b477244af3979b03fafbcbe555a59252423d41131d33d81eefbc306e247aeb9a5e6891b7ff731babe242dbc2169c193466b1ffc295417e411d5ce52b4c6152217e3d70561444f13245ddeee17315be4358e1eef9e2c0a3070892d678bd4135206b3b44ff555e1af828e96652b28c358de018d5f140049c808959c331d95b00b8facac20ccc1e8eb73ebb503081239ef938a258fa89e74a87faaa0ba98a22c339fbf663189263b974ece97ce573643bf6", 0xbb}], 0x3}}], 0x1, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b25503", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851eec544ac66993e0aa8aac7013f19af", 0x6e}], 0x1}}], 0x2, 0x4000900) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.215108823s ago: executing program 6 (id=1522): syz_clone(0x22040000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x3, 0x21, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x1f4) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) sendto$packet(r4, &(0x7f0000000180)="992e55a0051a81ae", 0x8, 0x400d0, &(0x7f0000000080)={0x11, 0xc, r3}, 0x6) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007379903100000000080041007369770014003300626f6e643000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 6.334249445s ago: executing program 6 (id=1528): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x7, 0x100}, 0x634d, 0x0, 0x1, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0xff, 0x4b4, &(0x7f0000000c80)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r0, 0x0, 0x0, 0x80800) 5.267145691s ago: executing program 6 (id=1536): perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0xa, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x4, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.495024969s ago: executing program 1 (id=1556): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0x4800000, 0x0, 0x7fffffc, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40e8662e, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000080)=""/186, 0xba}], 0x2, 0x98ca, 0x108002) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000001d25a80", 0x14}], 0x1}, 0x0) 2.370617712s ago: executing program 5 (id=1559): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.242888576s ago: executing program 1 (id=1562): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000340)={@multicast2, @loopback, @remote}, 0xc) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.107160519s ago: executing program 1 (id=1564): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000540)={@private0, 0x802, 0x0, 0xff, 0x9, 0xa4, 0x43}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000003c0)=""/118) msgctl$MSG_INFO(0x0, 0xc, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) close(r0) 1.995733242s ago: executing program 2 (id=1565): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) eventfd2(0x0, 0x800) 1.944807173s ago: executing program 1 (id=1566): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x3, 0x8, 0x4, 0x9, 0xa902, 0x800, 0x400, 0xfffffffc, 0x8, 0x1c, 0x1c, 0xd, 0x2, 0x9, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) 1.891198514s ago: executing program 2 (id=1567): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0xc}, 0x10000d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, 0x0, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[], 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032abd700000000000010000000800", @ANYBLOB='\f'], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40) 1.733531678s ago: executing program 1 (id=1568): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 1.690022559s ago: executing program 5 (id=1569): mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x18, 0x1, 0x51, 0xffff0000}}], 0x18}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) 1.64629672s ago: executing program 2 (id=1570): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x20040810) io_uring_setup(0x17, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) 1.523202174s ago: executing program 5 (id=1571): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r2, 0x0, 0x1) 1.522656023s ago: executing program 2 (id=1572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x8013, r0, 0xf6690000) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) wait4(0x0, 0x0, 0x8, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/172, 0xfffffffffffffeb6, 0x0, 0x0}, &(0x7f0000000040)=0x40) 1.364653207s ago: executing program 3 (id=1574): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x5084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x100, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3f, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x8}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4041}, 0x4894) 1.22469888s ago: executing program 3 (id=1575): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x46) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7adb151", 0x47}, {&(0x7f00000005c0)="eb8a7649f11eee0c8a704e458b76ad37e1361c43b4078ae926cbf9f823f27bdb489f6255019cad0e6f95137d3fcf", 0x2e}, {&(0x7f0000000e80)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef3416e47adfd7347bbe95903fa873fd7fee7e7e8c22d8b2ff575a", 0xcb}, {&(0x7f0000000300)="403b79b82469009e17eb430603f00c0647be9ff98c47b50fd6f730e2792ddbbf7b652a14e4834f296aa196203e317bf9903432428936d25c6edc8e515a0b4163a5db45db98ddfd605fe790dc6a8c00a351849767ef20dc74a9837970695c17f38af6f8d5a0516dded2b2ae16506a606a05caecf4a3d368ebf7666c6b67f1b377c80d8978dc9f86ee21114824d5d4", 0x8e}, {&(0x7f00000003c0)="d6bb113c7b78657978dd03855b7e1ec454d1e9483e84f01f992b375df7f06f643f6f44dde10f992fc6169b469799153c36608079dab5d848c15c9e46ab95cce352205e94a76e6da06623f654f6df19eb72400290", 0x54}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3127e54e348b02f", 0x38}, {&(0x7f0000000d80)="d5fee6f98c7150a83a9cea831ea4544b3a7af98ebabf4bdb24a7c30ebee91943a8bc3ce8cdf595c0d1df81fdf8af8fbd5f9f20cb3a4fea75c76189440b7fd03ce64f4eb903a8b0e1bc5952ab147faf4d09be366284ee0107e67c46e5976d630b1b0ff5c221816b915694bd724dd49dfe710737b117f4ac8bc67c4ddd0c929e72c1cf9044fa9986249201c3b7718c313fb06cab56246f466cd1d0a67493b4520f4e95c4e09c88a8acbb664f14bb3caa6b288a49817daec2a3d9bb17db7076f74b9655aa732a2e1b99c5360e4a93bf4f91", 0xd0}, {&(0x7f0000000980)="183f174044fb6c21eed34ed0e3ea9ad6b2001ed64b2b0f898a84cc869d6cef3101249bebc8e8408fb6b4ef180095479afeeee8b316d8633b750bbe783f01b87714d44cedb6d34e816dd3470ef6e15bb82a09b450800e6731fae01b57f6d1fa164829319a7106ad775efa580e774e3c09adcbdda16e0c2e50a921802953b557", 0x7f}, {&(0x7f0000000c40)="d991faa418f25261fb200ea0c3eff3ccf3da201a4e8265ca778677e6759949781ace715cf83bf5af4796dc0bed32c38246d8b9c856720c1750c455ebc3195ddbf67c49013b61acca6a", 0x49}], 0x4}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6b5d62dc43b74cf", 0xd8}, {&(0x7f0000001100)="75619ba9b63af95745741a7167ca1c6679d83b202eefa6dc7a5eec0dfe04ea78263ad3d4272a1d707f17976212eb03d419e2adc073b16437f374d3cd3b6f7718fcf2aeed196dde83e668def7840db0d319c7ccf58bde50fe137d1de465875c8bd2aa2cd9c100dfe6c353b02ff314dbed4b08fd40d65c1364a08ed9ca28ce3bdaa88c77945aec718de9e6f793256366da40bd3949ed0a162c747f979f5ad6bdaf8d", 0xa1}], 0x2}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 856.078479ms ago: executing program 5 (id=1576): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x80000000af49, 0x5}, 0x2402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, r1, 0x5, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000090) 811.08358ms ago: executing program 1 (id=1577): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@fuse={0xc, 0x81, {0x45c4b757, 0x4, 0xc}}, 0xe0000) syz_open_procfs(0x0, 0x0) 647.873304ms ago: executing program 2 (id=1578): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ea, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x9d9a2e3559e530af, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) openat$cgroup_int(r0, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f00000001c0)=0x1, 0x4) 388.938111ms ago: executing program 5 (id=1579): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60140, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x401, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(0x4) 338.500312ms ago: executing program 3 (id=1580): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000000000001800000001000000000000000700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0xfffffffe, 0x4) 253.911025ms ago: executing program 2 (id=1581): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000"], 0x50) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000741000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xb, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 221.869365ms ago: executing program 3 (id=1582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x70a0af8c93042c75}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x4, 0x7}, 0x9, 0x0, 0xa, 0x4, 0x6, 0x4, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x5, 0x6, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd27, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 67.147159ms ago: executing program 3 (id=1583): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x0, 0x34}, 0x28) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)={0x2, {{0xa, 0x4e21, 0x7, @mcast2, 0x2}}}, 0x90) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 29.22714ms ago: executing program 5 (id=1584): openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r0, 0x5}) 0s ago: executing program 3 (id=1585): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): tclass=file permissive=1 [ 166.792518][ T28] audit: type=1400 audit(3932690635.107:1332): avc: denied { create } for pid=5358 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.838062][ T5380] netlink: 'syz.0.497': attribute type 15 has an invalid length. [ 166.902158][ T3302] EXT4-fs (loop3): unmounting filesystem 007f0000-0000-0000-0000-000000000000. [ 166.932183][ T5382] SELinux: Context system_u:object_r:getty_var_run_t:s0 is not valid (left unmapped). [ 167.000442][ T5387] netlink: 316 bytes leftover after parsing attributes in process `syz.3.498'. [ 167.029473][ T5387] netlink: 196 bytes leftover after parsing attributes in process `syz.3.498'. [ 167.058201][ T5387] netlink: 196 bytes leftover after parsing attributes in process `syz.3.498'. [ 167.096272][ T5387] netlink: 60 bytes leftover after parsing attributes in process `syz.3.498'. [ 167.184148][ T5398] siw: device registration error -23 [ 167.278602][ T5401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.505'. [ 167.302026][ T5394] loop5: detected capacity change from 0 to 8192 [ 167.381472][ T5405] loop3: detected capacity change from 0 to 128 [ 167.391377][ T5394] loop5: p2 p3 p4 [ 167.396751][ T5394] loop5: p2 start 4293394690 is beyond EOD, truncated [ 167.411875][ T5394] loop5: p3 size 100663552 extends beyond EOD, truncated [ 167.427134][ T5405] vfat filesystem being mounted at /117/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 167.440208][ T5394] loop5: p4 start 4278222848 is beyond EOD, truncated [ 167.443693][ T5409] vhci_hcd vhci_hcd.2: invalid port number 255 [ 167.469661][ T5405] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 167.482995][ T5409] vhci_hcd vhci_hcd.2: invalid port number 255 [ 167.506707][ T5405] FAT-fs (loop3): Filesystem has been set read-only [ 167.529511][ T5411] loop1: detected capacity change from 0 to 128 [ 167.556135][ T5411] vfat filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 167.925533][ T5441] Driver unsupported XDP return value 0 on prog (id 97) dev N/A, expect packet loss! [ 167.948570][ T5442] siw: device registration error -23 [ 168.063710][ T5452] loop5: detected capacity change from 0 to 512 [ 168.100422][ T5452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.273751][ T5452] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 168.312141][ T5452] EXT4-fs error (device loop5): ext4_xattr_set_entry:1672: inode #2: comm syz.5.523: corrupted xattr entries [ 168.881572][ T4990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.348797][ T5496] loop2: detected capacity change from 0 to 128 [ 169.389786][ T5496] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.487941][ T5496] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.560950][ T5496] vfat filesystem being mounted at /123/bus supports timestamps until 2107-12-31 (0x10391447e) [ 169.940763][ T5519] loop2: detected capacity change from 0 to 1024 [ 169.988973][ T5521] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.001016][ T5519] EXT4-fs: Ignoring removed bh option [ 170.031171][ T5526] netlink: 16 bytes leftover after parsing attributes in process `syz.5.559'. [ 170.049491][ T5519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.073211][ T5526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.559'. [ 171.355187][ T5565] siw: device registration error -23 [ 171.828402][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 171.828420][ T28] audit: type=1326 audit(3932690640.787:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.0.569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab792dde99 code=0x7ffc0000 [ 172.155407][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.168640][ T28] audit: type=1326 audit(3932690640.797:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.0.569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab792dde99 code=0x7ffc0000 [ 172.958149][ T28] audit: type=1326 audit(3932690640.797:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.0.569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab792dde99 code=0x7ffc0000 [ 173.368016][ T28] audit: type=1326 audit(3932690640.797:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.0.569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab792dde99 code=0x7ffc0000 [ 173.470717][ T5574] loop2: detected capacity change from 0 to 1024 [ 173.514811][ T28] audit: type=1326 audit(3932690640.797:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.0.569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fab792dde99 code=0x7ffc0000 [ 173.563736][ T5574] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 173.620738][ T5574] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 173.687962][ T28] audit: type=1326 audit(3932690640.797:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.0.569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab792dde99 code=0x7ffc0000 [ 173.714153][ T5574] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 173.769607][ T5574] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.574: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 173.861667][ T28] audit: type=1326 audit(3932690640.797:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.0.569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab792dde99 code=0x7ffc0000 [ 173.894930][ T5574] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 173.897230][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 173.912804][ C0] EXT4-fs (loop2): initial error at time 3932690642: ext4_ext_check_inode:521: inode 3 [ 173.922522][ C0] EXT4-fs (loop2): last error at time 3932690642: ext4_ext_check_inode:521: inode 3 [ 173.933632][ T5574] EXT4-fs (loop2): no journal found [ 173.953517][ T5574] EXT4-fs (loop2): can't get journal size [ 173.990121][ T5574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.030926][ T28] audit: type=1326 audit(3932690640.797:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.0.569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab792dde99 code=0x7ffc0000 [ 174.133676][ T28] audit: type=1326 audit(3932690640.797:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.0.569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab792dde99 code=0x7ffc0000 [ 174.170266][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.212437][ T28] audit: type=1326 audit(3932690640.797:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.0.569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fab7929e6ce code=0x7ffc0000 [ 174.378193][ T5601] loop5: detected capacity change from 0 to 512 [ 174.410233][ T5601] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.438933][ T5601] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.589: inode has both inline data and extents flags [ 174.524697][ T5601] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.524871][ T5601] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.589: couldn't read orphan inode 15 (err -117) [ 174.534115][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 174.534132][ C1] EXT4-fs (loop5): initial error at time 3932690643: ext4_orphan_get:1399: inode 15 [ 174.534157][ C1] EXT4-fs (loop5): last error at time 3932690643: ext4_orphan_get:1399: inode 15 [ 174.642593][ T5601] loop5: lost filesystem error report for type 5 error -117 [ 174.643166][ T5601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.954745][ T5629] loop2: detected capacity change from 0 to 512 [ 174.970592][ T5629] vfat: Unknown parameter 's\V-Ę8™' [ 175.104257][ T5630] hub 8-0:1.0: USB hub found [ 175.109119][ T5630] hub 8-0:1.0: 8 ports detected [ 175.320485][ T4990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.810875][ T5639] loop1: detected capacity change from 0 to 1024 [ 175.857952][ T5639] EXT4-fs: Ignoring removed bh option [ 175.918152][ T5639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.006859][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.162691][ T5663] loop5: detected capacity change from 0 to 512 [ 176.181356][ T5663] msdos filesystem being mounted at /40/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 176.695143][ T5688] siw: device registration error -23 [ 176.852613][ T5722] loop2: detected capacity change from 0 to 256 [ 176.868058][ T5722] vfat filesystem being mounted at /141/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 176.905134][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 176.905153][ T28] audit: type=1400 audit(3932690645.867:1483): avc: denied { getopt } for pid=5723 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.977447][ T28] audit: type=1400 audit(3932690645.927:1484): avc: denied { create } for pid=5727 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 177.045751][ T28] audit: type=1400 audit(3932690645.937:1485): avc: denied { accept } for pid=5727 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 177.332334][ T28] audit: type=1400 audit(3932690646.297:1486): avc: denied { read } for pid=5751 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.429672][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 177.442300][ T28] audit: type=1400 audit(3932690646.407:1487): avc: denied { bind } for pid=5757 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.468363][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 177.513750][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 177.537897][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 177.560784][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 177.594450][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 177.630717][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 177.639789][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 177.649074][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 177.658077][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 177.668956][ T5762] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 177.696325][ T5762] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.053951][ T5773] usb usb1: usbfs: process 5773 (syz.2.666) did not claim interface 0 before use [ 178.065349][ T5774] loop1: detected capacity change from 0 to 256 [ 178.099337][ T5774] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.165842][ T5774] vfat filesystem being mounted at /137/bus supports timestamps until 2107-12-31 (0x10391447e) [ 178.304962][ T28] audit: type=1400 audit(3932690647.267:1488): avc: denied { remount } for pid=5772 comm="syz.1.665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 178.531057][ T28] audit: type=1400 audit(3932690647.497:1489): avc: denied { connect } for pid=5787 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.559818][ T5791] loop3: detected capacity change from 0 to 128 [ 178.621404][ T28] audit: type=1400 audit(3932690647.587:1490): avc: denied { getopt } for pid=5795 comm="syz.2.677" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.652798][ T5794] loop1: detected capacity change from 0 to 1024 [ 178.666476][ T5791] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.698804][ T5794] EXT4-fs: Ignoring removed bh option [ 178.781247][ T5791] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.819659][ T5794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.867939][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.907451][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.970026][ T28] audit: type=1400 audit(3932690647.927:1491): avc: denied { connect } for pid=5808 comm="syz.2.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 179.071060][ T28] audit: type=1400 audit(3932690648.007:1492): avc: denied { read } for pid=5813 comm="syz.5.685" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 179.248176][ T5821] program syz.5.689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.438112][ T5833] usb usb9: usbfs: process 5833 (syz.5.695) did not claim interface 9 before use [ 179.669652][ T5843] loop5: detected capacity change from 0 to 1024 [ 179.687875][ T5843] EXT4-fs: Ignoring removed bh option [ 179.737254][ T5843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.778396][ T5848] loop3: detected capacity change from 0 to 512 [ 179.862392][ T5848] EXT4-fs (loop3): 1 orphan inode deleted [ 179.878361][ T5848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.898233][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 1 [ 179.910634][ T5848] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.986591][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.075767][ T5863] loop1: detected capacity change from 0 to 164 [ 180.095922][ T5861] loop3: detected capacity change from 0 to 256 [ 180.138780][ T4990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.151962][ T5861] msdos filesystem being mounted at /145/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 180.176391][ T5865] program syz.2.708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.482279][ T5881] loop2: detected capacity change from 0 to 512 [ 180.515368][ T5881] EXT4-fs error (device loop2): ext4_get_journal_inode:5900: comm syz.2.715: inode #2147418112: comm syz.2.715: iget: illegal inode # [ 180.707878][ T5889] loop5: detected capacity change from 0 to 512 [ 180.724855][ T5889] vfat: Unknown parameter 's\V-Ę8™' [ 180.783158][ T5881] loop2: lost filesystem error report for type 5 error -117 [ 180.783665][ T5881] EXT4-fs (loop2): no journal found [ 180.791074][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 180.791093][ C1] EXT4-fs (loop2): initial error at time 3932690649: ext4_get_journal_inode:5900 [ 180.791124][ C1] EXT4-fs (loop2): last error at time 3932690649: ext4_get_journal_inode:5900 [ 180.892432][ T5890] hub 8-0:1.0: USB hub found [ 180.897598][ T5890] hub 8-0:1.0: 8 ports detected [ 180.995748][ T5835] kexec: Could not allocate control_code_buffer [ 181.042064][ T5893] sg_write: data in/out 447452/210 bytes for SCSI command 0x0-- guessing data in; [ 181.042064][ T5893] program syz.1.719 not setting count and/or reply_len properly [ 181.073603][ T5894] loop3: detected capacity change from 0 to 512 [ 181.111461][ T5894] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.142274][ T5881] EXT4-fs (loop2): can't get journal size [ 181.340422][ T5881] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 181.380208][ T5881] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 181.393277][ T3302] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 181.403174][ T5881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.429104][ T5901] loop1: detected capacity change from 0 to 512 [ 181.453910][ T5901] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 181.470481][ T5881] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 181.495028][ T5901] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 181.512051][ T5903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.530409][ T5881] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.715: Invalid inode bitmap blk 4 in block_group 0 [ 181.543202][ T5901] EXT4-fs (loop1): orphan cleanup on readonly fs [ 181.578856][ T5881] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 181.613544][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.657576][ T5901] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.722: iget: bad i_size value: 12154761577498 [ 181.714859][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.731025][ T5901] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 181.731222][ T5901] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.722: couldn't read orphan inode 13 (err -117) [ 181.740517][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 181.740541][ C1] EXT4-fs (loop1): initial error at time 3932690650: ext4_orphan_get:1399: inode 13 [ 181.740572][ C1] EXT4-fs (loop1): last error at time 3932690650: ext4_orphan_get:1399: inode 13 [ 181.791537][ T5914] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 181.845471][ T5914] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 181.916526][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 181.916542][ T28] audit: type=1400 audit(3932690650.877:1513): avc: denied { setopt } for pid=5919 comm="syz.3.728" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.922201][ T5901] loop1: lost filesystem error report for type 5 error -117 [ 181.954142][ T5914] JBD2: no valid journal superblock found [ 181.986266][ T5901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 182.023519][ T5914] EXT4-fs (loop2): Could not load journal inode [ 182.038448][ T5901] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.092969][ T28] audit: type=1400 audit(3932690651.057:1514): avc: denied { append } for pid=5930 comm="syz.3.735" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 182.117357][ T5931] sg_write: data in/out 294976/136 bytes for SCSI command 0x0-- guessing data in; [ 182.117357][ T5931] program syz.3.735 not setting count and/or reply_len properly [ 182.267039][ T28] audit: type=1400 audit(3932690651.227:1515): avc: denied { listen } for pid=5941 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 182.349446][ T5954] sg_write: data in/out 221184/136 bytes for SCSI command 0x0-- guessing data in; [ 182.349446][ T5954] program syz.1.746 not setting count and/or reply_len properly [ 182.376960][ T28] audit: type=1400 audit(3932690651.337:1516): avc: denied { recv } for pid=3301 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.132 dest=57028 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 182.430059][ T5948] loop5: p2 p3 p7 [ 182.437888][ T5950] __nla_validate_parse: 41 callbacks suppressed [ 182.438064][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.744'. [ 182.511123][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.744'. [ 182.532149][ T28] audit: type=1400 audit(3932690651.497:1517): avc: denied { read write } for pid=5947 comm="syz.5.743" name="loop5p7" dev="devtmpfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.570257][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.744'. [ 182.633398][ T28] audit: type=1400 audit(3932690651.497:1518): avc: denied { open } for pid=5947 comm="syz.5.743" path="/dev/loop5p7" dev="devtmpfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.721254][ T5972] netlink: 196 bytes leftover after parsing attributes in process `syz.1.755'. [ 182.753732][ T28] audit: type=1400 audit(3932690651.577:1519): avc: denied { create } for pid=5963 comm="syz.5.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.779612][ T5972] netlink: 'syz.1.755': attribute type 6 has an invalid length. [ 182.791012][ T5970] EXT4-fs: Ignoring removed bh option [ 182.810313][ T5978] EXT4-fs: Ignoring removed bh option [ 182.842962][ T5970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.864995][ T5978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.872912][ T28] audit: type=1400 audit(3932690651.827:1520): avc: denied { ioctl } for pid=5987 comm="syz.0.762" path="socket:[12907]" dev="sockfs" ino=12907 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.915470][ T5980] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 183.010888][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.050419][ T5994] tipc: Can't bind to reserved service type 0 [ 183.059198][ T28] audit: type=1400 audit(3932690651.887:1521): avc: denied { write } for pid=5977 comm="syz.5.758" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.151595][ T28] audit: type=1400 audit(3932690651.897:1522): avc: denied { setattr } for pid=5969 comm="syz.3.754" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.175396][ T6002] netlink: 'syz.3.764': attribute type 21 has an invalid length. [ 183.194136][ T6002] netlink: 156 bytes leftover after parsing attributes in process `syz.3.764'. [ 183.378721][ T4990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.468531][ T6023] vfat filesystem being mounted at /62/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 183.601131][ T3412] kernel read not supported for file /vga_arbiter (pid: 3412 comm: kworker/0:6) [ 183.615867][ T6035] netlink: 'syz.2.783': attribute type 10 has an invalid length. [ 183.665539][ T6038] netlink: 'syz.2.783': attribute type 10 has an invalid length. [ 183.712056][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.742199][ T6035] team0: Port device netdevsim2 added [ 183.819590][ T6055] set_capacity_and_notify: 8 callbacks suppressed [ 183.819607][ T6055] loop3: detected capacity change from 0 to 128 [ 183.887607][ T6055] vfat filesystem being mounted at /163/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 184.101022][ T6079] netlink: 'syz.2.804': attribute type 32 has an invalid length. [ 184.129910][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 184.172624][ T6079] bond1: option coupled_control: invalid value (64) [ 184.184313][ T6079] bond1 (unregistering): Released all slaves [ 184.224008][ T6092] loop3: detected capacity change from 0 to 164 [ 184.627860][ T6102] hub 8-0:1.0: USB hub found [ 184.634114][ T6102] hub 8-0:1.0: 8 ports detected [ 185.487509][ T6116] loop3: detected capacity change from 0 to 1024 [ 185.535188][ T6116] EXT4-fs: Ignoring removed bh option [ 185.617911][ T6116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.825421][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.973942][ T6147] netlink: set zone limit has 4 unknown bytes [ 185.988757][ T6159] netlink: 132 bytes leftover after parsing attributes in process `syz.3.839'. [ 186.145565][ T6173] loop2: detected capacity change from 0 to 1024 [ 186.175763][ T6173] EXT4-fs: Ignoring removed bh option [ 186.209660][ T6173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.342299][ T6193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.401880][ T6200] netlink: 264 bytes leftover after parsing attributes in process `syz.0.856'. [ 186.607140][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.696492][ T6222] loop3: detected capacity change from 0 to 1024 [ 186.725746][ T6222] EXT4-fs: Ignoring removed bh option [ 186.769964][ T6222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.850782][ T6226] loop1: detected capacity change from 0 to 4096 [ 186.963490][ T6226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.017596][ T6226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.047446][ T6236] netlink: 256 bytes leftover after parsing attributes in process `syz.2.873'. [ 187.081925][ T6236] netlink: 72 bytes leftover after parsing attributes in process `syz.2.873'. [ 187.211600][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 187.211619][ T28] audit: type=1400 audit(3932690656.177:1557): avc: denied { create } for pid=6244 comm="syz.5.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.280492][ T28] audit: type=1400 audit(3932690656.217:1558): avc: denied { connect } for pid=6244 comm="syz.5.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.311727][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.332957][ T28] audit: type=1400 audit(3932690656.217:1559): avc: denied { write } for pid=6244 comm="syz.5.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.405522][ T6255] loop2: detected capacity change from 0 to 512 [ 187.447627][ T6255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.453632][ T28] audit: type=1400 audit(3932690656.417:1560): avc: denied { create } for pid=6256 comm="syz.1.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.497385][ T6255] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.498480][ T28] audit: type=1400 audit(3932690656.447:1561): avc: denied { setopt } for pid=6256 comm="syz.1.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.550062][ T28] audit: type=1400 audit(3932690656.497:1562): avc: denied { getopt } for pid=6256 comm="syz.1.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.575360][ T6255] EXT4-fs: Ignoring removed nobh option [ 187.581152][ T6255] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.587899][ T6255] EXT4-fs: Cannot change journaled quota options when quota turned on [ 187.616813][ T6262] loop1: detected capacity change from 0 to 512 [ 187.643107][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.657852][ T6262] EXT4-fs: Ignoring removed orlov option [ 187.706919][ T6262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.736688][ T6269] loop2: detected capacity change from 0 to 1764 [ 187.782076][ T6262] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.829019][ T6273] netlink: 'syz.5.887': attribute type 10 has an invalid length. [ 187.860339][ T6262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.879498][ T6273] netlink: 40 bytes leftover after parsing attributes in process `syz.5.887'. [ 187.912436][ T6273] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 187.965767][ T6278] tmpfs: Bad value for 'mpol' [ 188.024481][ T28] audit: type=1400 audit(3932690656.987:1563): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 188.061794][ T6281] netlink: 'syz.1.890': attribute type 4 has an invalid length. [ 188.082708][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 188.093403][ T6281] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 188.119078][ T6285] loop5: detected capacity change from 0 to 512 [ 188.133723][ T6281] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.890'. [ 188.176289][ T6285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.208325][ T6285] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.234625][ T28] audit: type=1400 audit(3932690657.197:1564): avc: denied { write } for pid=6284 comm="syz.5.892" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.305032][ T6296] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 188.324783][ T6298] EXT4-fs: Ignoring removed orlov option [ 188.354110][ T6298] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.357613][ T4990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.383701][ T6296] vfat filesystem being mounted at /200/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 188.413459][ T6298] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.897: corrupted in-inode xattr: e_value size too large [ 188.487131][ T28] audit: type=1400 audit(3932690657.447:1565): avc: denied { create } for pid=6304 comm="syz.3.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.512998][ T6298] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 188.514633][ T6298] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.897: couldn't read orphan inode 15 (err -117) [ 188.523997][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 188.524024][ C1] EXT4-fs (loop1): initial error at time 3932690657: ext4_iget_extra_inode:5180: inode 15 [ 188.524061][ C1] EXT4-fs (loop1): last error at time 3932690657: ext4_iget_extra_inode:5180: inode 15 [ 188.568788][ T6307] vfat filesystem being mounted at /76/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 188.618165][ T6298] loop1: lost filesystem error report for type 5 error -117 [ 188.618768][ T6298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.640709][ T28] audit: type=1400 audit(3932690657.477:1566): avc: denied { bind } for pid=6304 comm="syz.3.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.702237][ T6298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.742644][ T6298] SELinux: Context nogrpid is not valid (left unmapped). [ 188.759568][ T6311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.894454][ T6311] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 188.965162][ T6324] set_capacity_and_notify: 4 callbacks suppressed [ 188.965235][ T6324] loop3: detected capacity change from 0 to 512 [ 188.999752][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.006514][ T6326] SELinux: Context ›Y7ťôj [ 189.006514][ T6326] u/$2Sٟť2'´ƒk€s2- vj×džĂ ű#žťœ,ŮN< [ 189.006514][ T6326] :ćşE]Yů´\?˜Íź•=ęŻŮ‹1ŰKI‹Ŕ­ßÇäî‚kÎé°{kL^‰—ů0ŚóýŇë}ĺ4nšrş }–˘ĎpÄŻÚĽ›ŮNťwŸ‚Ţyxiu?+ëţŃý˝ÜH~›öťFŚ–ý1ůW¤š÷jm &8›UۂVŠƒß‹œNĂ’œ2ů)GxĆVÔ%‘5œőxeRM4r4cĽî˙JsĎHU&Ÿ“ä§'p…Œ2EMMŕk&‰ÎcŤbUƒÎČ,ä,ĎÖÝÁâÂfÓ@Őď8żĹřœÎœśbÁˆD™¨%$ŹœÓfÚ=˝šž÷8Ž@짏k¤I|íţ€w íOçŁx&KCH;ÁÝx-ÍKł˛oĺ4˜i!˙˙Oi%ڂ2 úë´F"2‹E,P] čôkÇ? is not valid (left unmapped). [ 189.011997][ T6324] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.104507][ T6324] EXT4-fs (loop3): 1 truncate cleaned up [ 189.110958][ T6324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.139750][ T6326] SELinux: Context *mţkXIˇĆ$hˇx4ŰŤ˝K•M¤ is not valid (left unmapped). [ 189.148582][ T6326] SELinux: Context Źő–KM*ş,hĂcśźI¨ÇžĘĂťˇß̋yÖÔő+á.ë+yŇ˙0Ş[prŸ;JŠA9ĹőIqŇ jŚÇź=7)oM{ěší–nFÓŮ=Ťžř‰XmnxşœrśDß㑉ł垳ç4ĚÚTW˛ü}ťtŠóôňň%ȖY…É^sělFŹ€¤§Bˆ53˛‰hÖmě‰âÝ5ţ}ßă;J™ŹěÁXom%~"áż~9mMž–~alĘşLŕI8­„iŰţ HID v0.00 Device [syz1] on syz0 [ 213.745309][ T7389] siw: device registration error -23 [ 214.080198][ T7394] hid-generic 0000:0000:0000.0002: pid 7394 passed too large report [ 214.489373][ T7396] loop3: detected capacity change from 0 to 8192 [ 214.514796][ T7396] vfat filesystem being mounted at /277/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 214.622088][ T7402] loop0: detected capacity change from 0 to 512 [ 214.664649][ T7402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 214.712359][ T7402] EXT4-fs (loop0): 1 truncate cleaned up [ 214.759350][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 214.759369][ T28] audit: type=1400 audit(3932690683.727:1709): avc: denied { write } for pid=7401 comm="syz.0.1344" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.909193][ T7410] loop5: detected capacity change from 0 to 7 [ 215.030346][ T7414] netlink: 'syz.3.1349': attribute type 39 has an invalid length. [ 215.056911][ T7416] loop5: detected capacity change from 0 to 512 [ 215.112326][ T7416] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.206804][ T28] audit: type=1400 audit(3932690684.167:1710): avc: denied { write } for pid=7415 comm="syz.5.1350" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.324381][ T28] audit: type=1326 audit(3932690684.287:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.5.1350" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0aa529de99 code=0x0 [ 215.422244][ T28] audit: type=1400 audit(3932690684.387:1712): avc: denied { write } for pid=7429 comm="syz.2.1355" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 215.559413][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1358'. [ 215.602815][ T7443] loop0: detected capacity change from 0 to 1024 [ 215.623819][ T7434] loop3: detected capacity change from 0 to 8192 [ 215.630589][ T7443] EXT4-fs: inline encryption not supported [ 215.645270][ T7434] vfat filesystem being mounted at /282/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 215.665258][ T7443] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 215.707646][ T7443] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 1: comm syz.0.1359: lblock 1 mapped to illegal pblock 1 (length 1) [ 215.727494][ T7443] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 215.727821][ T7443] EXT4-fs (loop0): Remounting filesystem read-only [ 215.743581][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 215.743601][ C1] EXT4-fs (loop0): initial error at time 3932690684: ext4_map_blocks:833: inode 3: block 1 [ 215.743651][ C1] EXT4-fs (loop0): last error at time 3932690684: ext4_map_blocks:833: inode 3: block 1 [ 215.832125][ T7443] Quota error (device loop0): write_blk: dquota write failed [ 215.860998][ T7443] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 215.871367][ T7443] EXT4-fs (loop0): 1 orphan inode deleted [ 215.905729][ T28] audit: type=1400 audit(3932690684.867:1713): avc: denied { write } for pid=7442 comm="syz.0.1359" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.937430][ T7443] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 216.087688][ T280] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 216.095791][ T280] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 216.159400][ T7457] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 216.229362][ T7464] vlan2: entered allmulticast mode [ 216.269768][ T7464] bond0: entered allmulticast mode [ 216.309104][ T7464] bond_slave_0: entered allmulticast mode [ 216.326542][ T7464] bond_slave_1: entered allmulticast mode [ 216.344223][ T7464] bridge0: port 3(vlan2) entered blocking state [ 216.357121][ T7464] bridge0: port 3(vlan2) entered disabled state [ 216.390721][ T7464] vlan2: entered promiscuous mode [ 216.414924][ T7464] bond0: entered promiscuous mode [ 216.426105][ T7464] bond_slave_0: entered promiscuous mode [ 216.439977][ T7464] bond_slave_1: entered promiscuous mode [ 216.453883][ T7464] bridge0: port 3(vlan2) entered blocking state [ 216.460283][ T7464] bridge0: port 3(vlan2) entered forwarding state [ 216.605282][ T7481] loop5: detected capacity change from 0 to 1024 [ 216.608889][ T7486] xt_hashlimit: size too large, truncated to 1048576 [ 216.632210][ T7481] EXT4-fs: Ignoring removed bh option [ 216.676214][ T7490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.701694][ T28] audit: type=1400 audit(3932690685.667:1714): avc: denied { write } for pid=7479 comm="syz.5.1374" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.727765][ T7490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.781933][ T7495] loop1: detected capacity change from 0 to 512 [ 216.805152][ T7495] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 216.852866][ T7495] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.1379: Allocating blocks 41-42 which overlap fs metadata [ 216.883900][ T7495] loop1: lost filesystem error report for type 5 error -117 [ 216.884128][ T7495] EXT4-fs (loop1): Remounting filesystem read-only [ 216.891517][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 216.891542][ C1] EXT4-fs (loop1): initial error at time 3932690685: ext4_mb_mark_diskspace_used:4222 [ 216.891572][ C1] EXT4-fs (loop1): last error at time 3932690685: ext4_mb_mark_diskspace_used:4222 [ 216.924075][ T7495] Quota error (device loop1): write_blk: dquota write failed [ 216.931599][ T7495] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 216.941143][ T7495] EXT4-fs (loop1): 1 truncate cleaned up [ 218.759592][ T7640] loop1: detected capacity change from 0 to 1024 [ 218.783548][ T7640] EXT4-fs: Ignoring removed bh option [ 218.850722][ T7650] loop0: detected capacity change from 0 to 512 [ 218.880770][ T7650] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.941802][ T7650] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.265603][ T7652] loop2: detected capacity change from 0 to 512 [ 219.314583][ T7652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.353055][ T7652] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 219.409862][ T7652] EXT4-fs (loop2): 1 truncate cleaned up [ 219.910566][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 219.910587][ T28] audit: type=1400 audit(3932690688.877:1718): avc: denied { mounton } for pid=7677 comm="syz.1.1418" path="/311/file1" dev="tmpfs" ino=1690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 220.036111][ T7681] netlink: 'syz.2.1416': attribute type 29 has an invalid length. [ 220.128363][ T7686] loop0: detected capacity change from 0 to 512 [ 220.149504][ T7686] EXT4-fs: Ignoring removed orlov option [ 220.180729][ T7686] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.1420: corrupted inode contents [ 220.198743][ T7686] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.198978][ T7686] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 220.208227][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 220.208266][ C1] EXT4-fs (loop0): initial error at time 3932690689: ext4_do_update_inode:5742: inode 15 [ 220.208308][ C1] EXT4-fs (loop0): last error at time 3932690689: ext4_do_update_inode:5742: inode 15 [ 220.245446][ T7689] netlink: 'syz.2.1421': attribute type 4 has an invalid length. [ 220.271149][ T7689] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1421'. [ 220.292130][ T7686] loop0: lost filesystem error report for type 5 error -117 [ 220.292328][ T7686] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.1420: corrupted inode contents [ 220.349071][ T7686] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.349293][ T7686] EXT4-fs error (device loop0): ext4_evict_inode:315: inode #15: comm syz.0.1420: mark_inode_dirty error [ 220.387327][ T7686] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.390249][ T7686] EXT4-fs (loop0): 1 orphan inode deleted [ 220.469197][ T28] audit: type=1400 audit(3932690689.437:1719): avc: denied { mounton } for pid=7685 comm="syz.0.1420" path="/272/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.543873][ T28] audit: type=1400 audit(3932690689.457:1720): avc: denied { mounton } for pid=7685 comm="syz.0.1420" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 220.817637][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.855323][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.929294][ T7707] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 220.996219][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.022941][ T28] audit: type=1400 audit(3932690689.987:1721): avc: denied { mounton } for pid=7711 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 221.027266][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.074384][ T7713] netlink: 'syz.1.1432': attribute type 4 has an invalid length. [ 221.101747][ T28] audit: type=1400 audit(3932690690.067:1722): avc: denied { write } for pid=7714 comm="syz.5.1433" name="tracing_on" dev="tracefs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 221.115869][ T7713] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1432'. [ 221.202594][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.248987][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.329260][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1436'. [ 221.400636][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.433095][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.501936][ T7732] loop1: detected capacity change from 0 to 1024 [ 221.542591][ T7732] EXT4-fs: Ignoring removed bh option [ 221.585898][ T28] audit: type=1400 audit(3932690690.547:1723): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 221.936224][ T28] audit: type=1400 audit(3932690690.897:1724): avc: denied { search } for pid=3020 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.027259][ T28] audit: type=1400 audit(3932690690.897:1725): avc: denied { search } for pid=3020 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.061053][ T12] bridge_slave_1: left allmulticast mode [ 222.081564][ T12] bridge_slave_1: left promiscuous mode [ 222.105706][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.134501][ T28] audit: type=1400 audit(3932690690.897:1726): avc: denied { search } for pid=3020 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.169687][ T12] bridge_slave_0: left allmulticast mode [ 222.191289][ T12] bridge_slave_0: left promiscuous mode [ 222.217139][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.239046][ T28] audit: type=1400 audit(3932690690.897:1727): avc: denied { read } for pid=3020 comm="dhcpcd" name="n30" dev="tmpfs" ino=9409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 222.500799][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 222.539412][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.579015][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.614521][ T12] bond0 (unregistering): Released all slaves [ 222.640610][ T12] bond1 (unregistering): Released all slaves [ 222.667969][ T7774] loop5: detected capacity change from 0 to 1024 [ 222.690334][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 222.767003][ T7774] EXT4-fs: Ignoring removed bh option [ 222.801200][ T12] hsr_slave_0: left promiscuous mode [ 222.833344][ T12] hsr_slave_1: left promiscuous mode [ 222.863389][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.898197][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.934833][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.959503][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.990713][ T12] batman_adv: batadv0: Interface deactivated: macvlan2 [ 223.012942][ T12] batman_adv: batadv0: Removing interface: macvlan2 [ 223.064927][ T12] batadv_slave_1: left allmulticast mode [ 223.076170][ T12] batadv_slave_1: left promiscuous mode [ 223.105481][ T12] veth1_macvtap: left promiscuous mode [ 223.125858][ T12] veth0_macvtap: left promiscuous mode [ 223.248546][ T12] team0 (unregistering): Port device team_slave_1 removed [ 223.277393][ T12] team0 (unregistering): Port device team_slave_0 removed [ 223.367905][ T12] team0 (unregistering): Port device dummy0 removed [ 223.668817][ T12] IPVS: stop unused estimator thread 0... [ 223.793335][ T7711] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.829047][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.858897][ T7711] bridge_slave_0: entered allmulticast mode [ 223.873191][ T7711] bridge_slave_0: entered promiscuous mode [ 223.905703][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 223.923831][ T7711] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.940750][ T7711] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.959621][ T7711] bridge_slave_1: entered allmulticast mode [ 223.982609][ T7711] bridge_slave_1: entered promiscuous mode [ 224.071472][ T7711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.101209][ T7827] loop5: detected capacity change from 0 to 1024 [ 224.109928][ T7711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.122434][ T7827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.199081][ T7711] team0: Port device team_slave_0 added [ 224.219882][ T7711] team0: Port device team_slave_1 added [ 224.244906][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.252050][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.279117][ T7711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.290598][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.297831][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.324075][ T7711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.405411][ T7711] hsr_slave_0: entered promiscuous mode [ 224.416253][ T7711] hsr_slave_1: entered promiscuous mode [ 224.502347][ T7837] loop1: detected capacity change from 0 to 512 [ 224.575080][ T7837] EXT4-fs mount: 51 callbacks suppressed [ 224.575099][ T7837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.652284][ T7837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.736306][ T4990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.928318][ T7847] IPVS: ip_vs_add_dest(): server weight less than zero [ 224.963525][ T7849] loop5: detected capacity change from 0 to 512 [ 224.988946][ T7849] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.1463: corrupted xattr block 95: invalid header [ 225.032711][ T7849] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 225.033081][ T7849] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1463: bg 0: block 7: invalid block bitmap [ 225.042359][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 225.042386][ C1] EXT4-fs (loop5): initial error at time 3932690693: ext4_expand_extra_isize_ea:2810: inode 11 [ 225.042428][ C1] EXT4-fs (loop5): last error at time 3932690693: ext4_expand_extra_isize_ea:2810: inode 11 [ 225.188762][ T7849] loop5: lost filesystem error report for type 5 error -117 [ 225.188992][ T7849] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 225.230688][ T7849] loop5: lost filesystem error report for type 5 error -117 [ 225.230875][ T7849] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.1463: corrupted xattr block 95: invalid header [ 225.234294][ T7856] netlink: 'syz.1.1466': attribute type 29 has an invalid length. [ 225.241913][ T7849] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 225.285736][ T7849] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 225.322145][ T7849] EXT4-fs (loop5): 1 orphan inode deleted [ 225.332149][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 225.332168][ T28] audit: type=1400 audit(3932690694.297:1746): avc: denied { bind } for pid=7857 comm="syz.3.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 225.334587][ T7849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.801391][ T4990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.399894][ T7792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.425538][ T7711] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 226.484056][ T7711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.523177][ T7711] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 226.573231][ T7711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.616070][ T7711] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 226.674019][ T7711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.716301][ T7711] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 226.744807][ T7897] loop5: detected capacity change from 0 to 512 [ 226.760410][ T7711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.796902][ T7897] msdos filesystem being mounted at /200/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 226.860834][ T28] audit: type=1400 audit(3932690695.827:1747): avc: denied { write } for pid=7884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.921220][ T7711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.964365][ T7711] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.977089][ T28] audit: type=1400 audit(3932690695.937:1748): avc: denied { write } for pid=7910 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.009062][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.016326][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.059601][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 227.089609][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.096764][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.529363][ T28] audit: type=1400 audit(3932690696.497:1749): avc: denied { write } for pid=7921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.592592][ T7711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.608710][ T28] audit: type=1400 audit(3932690696.497:1750): avc: denied { setopt } for pid=7941 comm="syz.5.1483" lport=41007 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 227.695942][ T28] audit: type=1400 audit(3932690696.627:1751): avc: denied { write } for pid=7948 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.774066][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 228.135013][ T7711] veth0_vlan: entered promiscuous mode [ 228.174296][ T7711] veth1_vlan: entered promiscuous mode [ 228.216272][ T7711] veth0_macvtap: entered promiscuous mode [ 228.485997][ T7967] IPv6: sit1: Disabled Multicast RS [ 228.800726][ T7711] veth1_macvtap: entered promiscuous mode [ 228.859135][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.882731][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.931518][ T3433] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.966367][ T3433] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.995308][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 229.011668][ T3433] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.029094][ T3433] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.084078][ T28] audit: type=1400 audit(3932690698.047:1752): avc: denied { mounton } for pid=7711 comm="syz-executor" path="/root/syzkaller.vcA3nK/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 229.190671][ T28] audit: type=1400 audit(3932690698.047:1753): avc: denied { mount } for pid=7711 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 229.267260][ T28] audit: type=1400 audit(3932690698.047:1754): avc: denied { mounton } for pid=7711 comm="syz-executor" path="/root/syzkaller.vcA3nK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 229.340925][ T28] audit: type=1400 audit(3932690698.047:1755): avc: denied { mounton } for pid=7711 comm="syz-executor" path="/root/syzkaller.vcA3nK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 229.460832][ T8005] loop5: detected capacity change from 0 to 128 [ 229.487585][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1500'. [ 229.519593][ T8005] msdos filesystem being mounted at /209/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 229.533162][ T8007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.562875][ T8007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.659931][ T8005] syz.5.1499: attempt to access beyond end of device [ 229.659931][ T8005] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 229.674036][ T8005] syz.5.1499: attempt to access beyond end of device [ 229.674036][ T8005] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 229.689720][ T8005] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 229.709577][ T8005] syz.5.1499: attempt to access beyond end of device [ 229.709577][ T8005] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 229.734368][ T8005] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 229.782088][ T8008] syz.5.1499: attempt to access beyond end of device [ 229.782088][ T8008] loop5: rw=8912896, sector=154, nr_sectors = 8 limit=128 [ 229.804821][ T8008] syz.5.1499: attempt to access beyond end of device [ 229.804821][ T8008] loop5: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 229.847322][ T8008] syz.5.1499: attempt to access beyond end of device [ 229.847322][ T8008] loop5: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 229.890016][ T8008] syz.5.1499: attempt to access beyond end of device [ 229.890016][ T8008] loop5: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 229.951391][ T8008] syz.5.1499: attempt to access beyond end of device [ 229.951391][ T8008] loop5: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 230.009704][ T8008] syz.5.1499: attempt to access beyond end of device [ 230.009704][ T8008] loop5: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 230.061279][ T8008] syz.5.1499: attempt to access beyond end of device [ 230.061279][ T8008] loop5: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 230.816123][ T8020] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 230.822710][ T8020] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 230.839789][ T8020] vhci_hcd vhci_hcd.0: Device attached [ 230.871360][ T8020] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 230.878057][ T8020] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 230.914341][ T8020] vhci_hcd vhci_hcd.0: Device attached [ 230.945309][ T8029] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 230.951961][ T8029] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 230.991336][ T8029] vhci_hcd vhci_hcd.0: Device attached [ 231.020449][ T8020] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(10) [ 231.027122][ T8020] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 231.037585][ T8020] vhci_hcd vhci_hcd.0: Device attached [ 231.061587][ T8020] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(9) [ 231.068214][ T8020] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 231.087339][ T3412] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 231.104570][ T8020] vhci_hcd vhci_hcd.0: Device attached [ 231.114612][ T8029] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(14) [ 231.121323][ T8029] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 231.132961][ T8038] loop3: detected capacity change from 0 to 256 [ 231.160545][ T8020] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(13) [ 231.167213][ T8020] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 231.178335][ T8038] msdos filesystem being mounted at /296/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 231.215930][ T8020] vhci_hcd vhci_hcd.0: Device attached [ 231.232042][ T8029] vhci_hcd vhci_hcd.0: Device attached [ 231.241543][ T8047] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(19) [ 231.248211][ T8047] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 231.299214][ T8047] vhci_hcd vhci_hcd.0: Device attached [ 231.328912][ T8048] vhci_hcd: connection closed [ 231.328997][ T8043] vhci_hcd: connection closed [ 231.329389][ T8021] vhci_hcd: connection reset by peer [ 231.334198][ T3433] vhci_hcd vhci_hcd.6: stop threads [ 231.340232][ T8041] vhci_hcd: connection closed [ 231.345047][ T8033] vhci_hcd: connection closed [ 231.349378][ T8031] vhci_hcd: connection closed [ 231.354119][ T8035] vhci_hcd: connection closed [ 231.358728][ T8025] vhci_hcd: connection closed [ 231.379279][ T3433] vhci_hcd vhci_hcd.6: release socket [ 231.421475][ T3433] vhci_hcd vhci_hcd.6: disconnect device [ 231.443618][ T3433] vhci_hcd vhci_hcd.6: stop threads [ 231.461883][ T3433] vhci_hcd vhci_hcd.6: release socket [ 231.483795][ T3433] vhci_hcd vhci_hcd.6: disconnect device [ 231.502075][ T3433] vhci_hcd vhci_hcd.6: stop threads [ 231.521884][ T3433] vhci_hcd vhci_hcd.6: release socket [ 231.540772][ T3433] vhci_hcd vhci_hcd.6: disconnect device [ 231.558744][ T3433] vhci_hcd vhci_hcd.6: stop threads [ 231.575733][ T3433] vhci_hcd vhci_hcd.6: release socket [ 231.591526][ T3433] vhci_hcd vhci_hcd.6: disconnect device [ 231.609377][ T3433] vhci_hcd vhci_hcd.6: stop threads [ 231.624933][ T3433] vhci_hcd vhci_hcd.6: release socket [ 231.642415][ T3433] vhci_hcd vhci_hcd.6: disconnect device [ 231.660333][ T3433] vhci_hcd vhci_hcd.6: stop threads [ 231.676427][ T3433] vhci_hcd vhci_hcd.6: release socket [ 231.696896][ T3433] vhci_hcd vhci_hcd.6: disconnect device [ 231.713759][ T3433] vhci_hcd vhci_hcd.6: stop threads [ 231.729573][ T3433] vhci_hcd vhci_hcd.6: release socket [ 231.757390][ T3433] vhci_hcd vhci_hcd.6: disconnect device [ 231.779110][ T3433] vhci_hcd vhci_hcd.6: stop threads [ 231.799041][ T3433] vhci_hcd vhci_hcd.6: release socket [ 231.811919][ T3433] vhci_hcd vhci_hcd.6: disconnect device [ 232.445049][ T8079] loop3: detected capacity change from 0 to 512 [ 232.471276][ T8080] siw: device registration error -23 [ 232.485851][ T8079] EXT4-fs: Ignoring removed bh option [ 232.511335][ T8079] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 232.535179][ T8079] EXT4-fs (loop3): 1 truncate cleaned up [ 232.553971][ T8079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.787041][ T8090] loop1: detected capacity change from 0 to 512 [ 232.855623][ T8090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.883629][ T8090] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.915212][ T8090] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.538360][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.562108][ T8096] loop6: detected capacity change from 0 to 512 [ 233.821662][ T8096] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1528: bg 0: block 393: padding at end of block bitmap is not set [ 233.871948][ T8096] loop6: lost filesystem error report for type 5 error -117 [ 233.880185][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 233.895584][ C1] EXT4-fs (loop6): initial error at time 3932690702: ext4_validate_block_bitmap:441 [ 233.905912][ C1] EXT4-fs (loop6): last error at time 3932690702: ext4_validate_block_bitmap:441 [ 233.931567][ T8096] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 233.965680][ T8096] loop6: lost filesystem error report for type 5 error -117 [ 233.990627][ T8096] EXT4-fs (loop6): 2 truncates cleaned up [ 234.038122][ T8096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.066377][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 234.066457][ T28] audit: type=1400 audit(3932690703.027:1761): avc: denied { write } for pid=8095 comm="syz.6.1528" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.119640][ T28] audit: type=1400 audit(3932690703.027:1762): avc: denied { create } for pid=8095 comm="syz.6.1528" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 234.153767][ T28] audit: type=1400 audit(3932690703.077:1763): avc: denied { write } for pid=8095 comm="syz.6.1528" name=E91F7189591E9233614B dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 234.265917][ T7711] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.698042][ T8129] loop3: detected capacity change from 0 to 512 [ 234.745137][ T8129] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1537: inode has both inline data and extents flags [ 234.804482][ T8129] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.807187][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 234.822865][ C0] EXT4-fs (loop3): initial error at time 3932690703: ext4_orphan_get:1399: inode 15 [ 234.832311][ C0] EXT4-fs (loop3): last error at time 3932690703: ext4_orphan_get:1399: inode 15 [ 234.844488][ T8129] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1537: couldn't read orphan inode 15 (err -117) [ 234.884618][ T8129] loop3: lost filesystem error report for type 5 error -117 [ 234.899080][ T8129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.935261][ T3391] IPVS: starting estimator thread 0... [ 234.973001][ T8129] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 234.990958][ T28] audit: type=1400 audit(3932690703.937:1764): avc: denied { write } for pid=8128 comm="syz.3.1537" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.047318][ T8134] IPVS: using max 2208 ests per chain, 110400 per kthread [ 235.170372][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.499964][ T8149] loop3: detected capacity change from 0 to 1024 [ 235.514652][ T8148] netlink: 'syz.1.1543': attribute type 1 has an invalid length. [ 235.522462][ T8149] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.522494][ T8149] EXT4-fs: inline encryption not supported [ 235.541171][ T8149] EXT4-fs (loop3): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 235.545299][ T8132] loop2: detected capacity change from 0 to 512 [ 235.577327][ T8149] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.621405][ T8148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1543'. [ 235.651230][ T28] audit: type=1400 audit(3932690704.607:1765): avc: denied { write } for pid=8146 comm="syz.3.1542" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.687150][ T8149] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1542: bg 0: block 112: padding at end of block bitmap is not set [ 235.743315][ T8149] ext4: Unknown parameter 'e' [ 235.770685][ T28] audit: type=1400 audit(3932690704.647:1766): avc: denied { write } for pid=8146 comm="syz.3.1542" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.850569][ T8132] EXT4-fs error (device loop2): ext4_get_journal_inode:5900: comm syz.2.1538: inode #1792: comm syz.2.1538: iget: illegal inode # [ 235.869271][ T3302] EXT4-fs (loop3): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 235.879447][ T8154] vhci_hcd vhci_hcd.3: default hub control req: 020b v0000 i0000 l0 [ 235.903132][ T8132] loop2: lost filesystem error report for type 5 error -117 [ 235.918019][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 235.938068][ C1] EXT4-fs (loop2): initial error at time 3932690704: ext4_get_journal_inode:5900 [ 235.953429][ C1] EXT4-fs (loop2): last error at time 3932690704: ext4_get_journal_inode:5900 [ 236.019722][ T8132] EXT4-fs (loop2): Remounting filesystem read-only [ 236.020161][ T8132] EXT4-fs (loop2): no journal found [ 236.020313][ T8132] EXT4-fs (loop2): can't get journal size [ 236.084460][ T8132] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 236.086790][ T8158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1546'. [ 236.135463][ T8132] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 236.187207][ T3412] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 236.401707][ T8132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.731932][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.792645][ T8169] netlink: 'syz.2.1550': attribute type 4 has an invalid length. [ 237.042429][ T8179] tipc: Failed to remove unknown binding: 66,0,0/0:3981106671/3981106673 [ 237.072525][ T8179] tipc: Failed to remove unknown binding: 66,0,0/0:3981106671/3981106672 [ 237.107993][ T28] audit: type=1400 audit(3932690706.077:1767): avc: denied { read } for pid=8182 comm="syz.2.1557" path="socket:[19755]" dev="sockfs" ino=19755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.327009][ T8196] netlink: 'syz.1.1562': attribute type 4 has an invalid length. [ 237.377204][ T28] audit: type=1326 audit(3932690706.337:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8190 comm="syz.3.1560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f2bbb397c17 code=0x0 [ 237.805453][ T8206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1567'. [ 238.045855][ T28] audit: type=1400 audit(3932690707.007:1769): avc: denied { map } for pid=8220 comm="syz.2.1572" path="socket:[19842]" dev="sockfs" ino=19842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 238.209571][ T8219] loop5: detected capacity change from 0 to 4096 [ 238.246778][ T8219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.609437][ T28] audit: type=1400 audit(3932690707.577:1770): avc: denied { write } for pid=8218 comm="syz.5.1571" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.692449][ T4990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.240514][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 239.240546][ T28] audit: type=1400 audit(3932690708.207:1774): avc: denied { write } for pid=8256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.374169][ T28] audit: type=1400 audit(3932690708.337:1775): avc: denied { write } for pid=8277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.479700][ T28] audit: type=1326 audit(3932690708.387:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8272 comm="syz.2.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b156de99 code=0x7ffc0000 [ 239.567054][ T28] audit: type=1326 audit(3932690708.387:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8272 comm="syz.2.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f29b156de99 code=0x7ffc0000 [ 239.596375][ T3390] ================================================================== [ 239.604522][ T3390] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 239.611623][ T3390] [ 239.613959][ T3390] read-write to 0xffff888237c2a8e4 of 4 bytes by task 3412 on cpu 0: [ 239.622050][ T3390] wq_worker_running+0x9b/0x120 [ 239.627094][ T3390] schedule_timeout+0xca/0x180 [ 239.631875][ T3390] wait_for_common+0xef/0x1d0 [ 239.636574][ T3390] usb_start_wait_urb+0x12c/0x220 [ 239.641766][ T3390] usb_control_msg+0x182/0x240 [ 239.646561][ T3390] hub_ext_port_status+0xc2/0x470 [ 239.651611][ T3390] hub_event+0x47e/0x2aa0 [ 239.655959][ T3390] process_scheduled_works+0x4d4/0x9a0 [ 239.661438][ T3390] worker_thread+0x569/0x750 [ 239.666066][ T3390] kthread+0x221/0x270 [ 239.670143][ T3390] ret_from_fork+0x146/0x330 [ 239.674777][ T3390] ret_from_fork_asm+0x1a/0x30 [ 239.679561][ T3390] [ 239.681897][ T3390] read to 0xffff888237c2a8e4 of 4 bytes by task 3390 on cpu 1: [ 239.689446][ T3390] kick_pool+0x49/0x2d0 [ 239.693650][ T3390] __queue_work+0x8e9/0xb90 [ 239.698194][ T3390] queue_work_on+0xa9/0x140 [ 239.702743][ T3390] process_srcu+0xa39/0xd90 [ 239.707269][ T3390] process_scheduled_works+0x4d4/0x9a0 [ 239.712758][ T3390] worker_thread+0x569/0x750 [ 239.717366][ T3390] kthread+0x221/0x270 [ 239.721440][ T3390] ret_from_fork+0x146/0x330 [ 239.726045][ T3390] ret_from_fork_asm+0x1a/0x30 [ 239.730841][ T3390] [ 239.733168][ T3390] value changed: 0x00000000 -> 0x00000001 [ 239.738901][ T3390] [ 239.741242][ T3390] Reported by Kernel Concurrency Sanitizer on: [ 239.747411][ T3390] CPU: 1 UID: 0 PID: 3390 Comm: kworker/1:4 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 239.758376][ T3390] Tainted: [W]=WARN [ 239.762180][ T3390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 239.772259][ T3390] Workqueue: rcu_gp process_srcu [ 239.777228][ T3390] ================================================================== [ 239.844881][ T28] audit: type=1326 audit(3932690708.777:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8272 comm="syz.2.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b156de99 code=0x7ffc0000 [ 239.892506][ T28] audit: type=1326 audit(3932690708.777:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8272 comm="syz.2.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b156de99 code=0x7ffc0000 [ 239.996309][ T28] audit: type=1400 audit(3932690708.957:1780): avc: denied { write } for pid=8285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.045155][ T28] audit: type=1400 audit(3932690709.007:1781): avc: denied { write } for pid=8302 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.224386][ T28] audit: type=1400 audit(3932690709.187:1782): avc: denied { write } for pid=8305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.282857][ T28] audit: type=1400 audit(3932690709.237:1783): avc: denied { write } for pid=8316 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1