last executing test programs: 1m44.46909371s ago: executing program 2 (id=249): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="3000000011140100000000000000020008004a0000000000080001000000000008004b0013000000e4ff030001000000f2ebeb391bba60da2681d0ea3eede4543d733cdbf3d87fce1695240ac76c27421a93da691f69dfadee0b7a6f6a6f438f53bb0b56257eae051c59f2e91673aa8730015498b8bed036c8f62f70c30e5f3196f153d00c4ff6f3cc40fa208210b01560b40943e6"], 0x30}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02037f02210000000000000000020000030006000000000002000000ac14142e00000000000000000200010000000000100000007fffffff030005002b00000002000000ac1414aa000000000000000017000800"], 0x108}, 0x1, 0x7}, 0x0) 1m44.420813154s ago: executing program 2 (id=251): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0xc6bd}}, './file1\x00'}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@mcast1}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x1, 0x2, 0x4c, 0x0, 0x7fffffffffffffff, 0x200, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x11829177, 0x2, @perf_config_ext={0x81, 0x3}, 0x0, 0x100000001, 0x6, 0x5, 0x7f, 0x5, 0x1, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xd, r0, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000300)={[{@noload}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@noquota}, {}, {@barrier}, {@nodiscard}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000100)='%', 0xfffffdf3, 0x1) 1m44.150491948s ago: executing program 2 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write(r4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "e6bff385353800ff"}, 0x10}}, 0x2004c895) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000002"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 1m43.134237557s ago: executing program 2 (id=260): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10002}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) fgetxattr(r4, &(0x7f0000000140)=@known='trusted.overlay.upper\x00', 0x0, 0xffffffffffffff85) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000880), &(0x7f00000008c0), 0x75, r0}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r0}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000380)={0x6c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0xcc, r9, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @empty, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @private1, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NODE={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m42.615897353s ago: executing program 2 (id=265): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3, 0x0, 0x2000}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 1m42.451914707s ago: executing program 2 (id=269): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xc, 0xf40b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) 1m42.448659068s ago: executing program 32 (id=269): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xc, 0xf40b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) 32.143728909s ago: executing program 1 (id=1134): r0 = socket$netlink(0x10, 0x3, 0x12) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r7, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r5, 0x4, r6}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf35, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESHEX=0x0], 0x104}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x4, &(0x7f0000000440)=[{0x200000000006, 0x81, 0x0, 0x7ffc0002}, {0x400, 0x5, 0x2, 0x5}, {0x6, 0x51, 0x40, 0xffffffc0}, {0x5, 0x9, 0x2, 0x6}]}) sync_file_range(0xffffffffffffffff, 0x6, 0x6, 0x1) r9 = io_uring_setup(0x4806, &(0x7f0000000000)={0x0, 0xec9b, 0x800, 0x2, 0x8375}) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, &(0x7f0000000080)={0x253, 0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000340)=""/215, 0xd4}], 0x0}, 0x20) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x392c00, 0x0) mkdirat(r10, &(0x7f00000002c0)='./file0\x00', 0x80) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x10, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd98}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r13, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) 31.398699915s ago: executing program 1 (id=1138): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="03", 0x1}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0004000000000000000000000000000000000000000003", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 31.191472373s ago: executing program 1 (id=1141): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x20, 0x1e, 0x21, 0xfffffffd, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xf}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x10000000, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 30.968075333s ago: executing program 1 (id=1145): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x81, 0xfffffffe, @loopback, 0x3ff}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000001c0)=[r2, r0, r8, 0xffffffffffffffff], 0x4) getuid() statx(r4, &(0x7f0000000180)='./file2\x00', 0x1000, 0x4, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x6, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x12, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) 30.667769769s ago: executing program 1 (id=1147): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r0) (async) r1 = socket$caif_stream(0x25, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '*({*^}][\'}}@@{})'}, {0x20, '9p\x00'}]}, 0x20) 30.215833399s ago: executing program 1 (id=1151): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0x2, 0x0, &(0x7f0000000080)) getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef1, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e06002c6e586575f800250002000f00000017d344090024eaf556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000000000000600000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5dbe516780785e1e6892e87421f9ff145fd0c810611cee1da613842b42005ff59a21d153656fb54918cdec10038fb7c27a4bb557403b9ed4d75f63aefc2946875d268195a064358bde491f89b4c3a8f08800b94a57de54", @ANYRES16=r4, @ANYBLOB="0503000000000000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x24044080) syz_io_uring_setup(0xdf, &(0x7f0000000040)={0x0, 0x186, 0x4000, 0x3, 0x223}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000040)=0xc1f0, 0x2) 30.166382233s ago: executing program 33 (id=1151): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0x2, 0x0, &(0x7f0000000080)) getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef1, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e06002c6e586575f800250002000f00000017d344090024eaf556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000000000000600000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5dbe516780785e1e6892e87421f9ff145fd0c810611cee1da613842b42005ff59a21d153656fb54918cdec10038fb7c27a4bb557403b9ed4d75f63aefc2946875d268195a064358bde491f89b4c3a8f08800b94a57de54", @ANYRES16=r4, @ANYBLOB="0503000000000000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x24044080) syz_io_uring_setup(0xdf, &(0x7f0000000040)={0x0, 0x186, 0x4000, 0x3, 0x223}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000040)=0xc1f0, 0x2) 6.786382742s ago: executing program 5 (id=1383): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x701, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x8880) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$cgroup_subtree(r5, 0x0, 0x4c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpeername(0xffffffffffffffff, 0x0, 0x0) close(0x3) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, 0x0, 0x4040) 5.56469548s ago: executing program 5 (id=1432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x6, 0x0, 0x200000}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) 5.191575122s ago: executing program 6 (id=1437): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000a80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2008080, &(0x7f0000000480)=ANY=[@ANYBLOB="696f636861727365743d63703836392c696f636861727365743d63703836332c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c636f6465706167653d3836322c756e695f786c6174653d312c6e66732c756e695f786c6174653d312c696f636861727365743d63703934392c757466383d312c726f6469722c757466383d302c007d32ee4841012fd39dec3a56aa9346cd1e30f0573e35d24f4ac163c1412baeff3871465c9839deb80f4c5be55616b23300f3db8e290153f9a08bbd7a"], 0x81, 0x2c8, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) 4.828063664s ago: executing program 6 (id=1439): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) 3.872198749s ago: executing program 6 (id=1446): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") creat(&(0x7f00000000c0)='./bus\x00', 0x182) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000100)={0xb, 0x29, 0x1, {0x62318dc3}}, 0xb) fallocate(r4, 0x0, 0x0, 0x1001ed) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, 0x0) 3.503914691s ago: executing program 3 (id=1454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, 0x0, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) getrlimit(0xe, &(0x7f0000000040)) dup(r7) 2.556296845s ago: executing program 6 (id=1456): r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$rds(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88020000", @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r7, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1fc, 0x21}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040014}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r5, 0x5, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) 2.343916463s ago: executing program 4 (id=1457): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x40000002]}}) 1.726628838s ago: executing program 3 (id=1458): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x19, &(0x7f0000000ec0)={@local, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x4, 0x0, 0x2}}, {@x25={0x805, {0x0, 0x0, 0xf1}}}}, 0x0) 1.723614178s ago: executing program 4 (id=1459): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xe}, 0x94) 1.603949689s ago: executing program 4 (id=1460): syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100}}}}}}}, 0x0) 1.59205402s ago: executing program 4 (id=1461): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000380)="000185ea4c92309c4486ede110f88a3e3604", 0x12, 0x0, 0x0, 0x0) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 1.398310827s ago: executing program 4 (id=1462): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@nombcache}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1.191920555s ago: executing program 6 (id=1463): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 1.191825205s ago: executing program 4 (id=1464): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @loopback, 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000380)=';', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x2, @remote, 0x8}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000540)=';', 0x1}], 0x1}}], 0x2, 0x4004851) setsockopt(r0, 0x84, 0x11, &(0x7f0000000000)="020000000980ffff", 0x8) 1.171877547s ago: executing program 5 (id=1465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '}'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4004850}, 0x20040000) 1.153550498s ago: executing program 5 (id=1466): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2a, 0x2, 0x2000000) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="500238", @ANYRES64=r0], 0x3b) 1.079734085s ago: executing program 3 (id=1467): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.046685958s ago: executing program 3 (id=1468): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x56f, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400), &(0x7f00000000c0)=0x8) 988.488903ms ago: executing program 3 (id=1469): r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002010000102505a88b40000102030109021b000101000000090400ff020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x7}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/185, 0xb9}, {0x0}], 0x2, 0x7ff, 0xc6) 926.459898ms ago: executing program 5 (id=1470): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 807.970369ms ago: executing program 5 (id=1471): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 560.966971ms ago: executing program 0 (id=1475): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aa"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 501.432586ms ago: executing program 0 (id=1476): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x40000}}], 0x18}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x7f) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) r5 = dup(r2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="0142d90a740caf5be7262ea0cc9915873f6a4884b81c5c7a741989336fab6e5d4fae19cbd057f59350b57c0edac5dc346c76912a22c62d7929b31f3a10514b91457642140b1fce26b2f99a25c62e7baee13afab6818cf8880942121d4929663a4759aa805d1736c702c2b9b208f85c965cde013db73b1352dcf19d481894a7a521442bd23abf669b5b3f75fd7a95ce17805d4ff4ea43ef38d82517443b17ef4f539851d25fe3e5fa63d4fd18d22e1b372b03ff095d91727549a034cdcaf49c3d50fe3f5ccd88ca", 0xc7}, {&(0x7f0000000100)="5623a55397d2d21e09a0be6e7b37f3b4f7792f96d5ea1c0f0703efc97bccfbc45bc6386df2300b0c6b77261fbc76ae6390abcd908d251f7be34266e5439d94c24fba420d1729425a6b0f18716e61b9708c97d8cb2cbee2c37dc2acaad9aa63e3a0849f92ade20f45d67fc161ed898c2797a9a948830cc53839d1695b673f644f92fc59a5ecea9db46a599ebef12a35db46d0750974edc5e494a67d41018e08ff678794cd9fdde863620924d0ad7d0d98dc3637225fdcc0b3e46738e43e18c2ea6b1e06b2edabf803b946df9c24ef3431c64f91b0a4919f3162c0bd6a53b1892a7a1397b1b8145fb42a8ab02149", 0xed}, {&(0x7f0000000200)="3fff2096a966a1411b4bd88abb36493193a9b3b2769671b38897b90c9ec7c6601c03f69b88583eceffd0cfaec1a366fcb6cb9f1198a55e61db8e8922f59e4eb60ddfd98810a4e1f9a473e496a6f7c9f8c88e34abf1d8fbdd3837eb97305b52efa3efa9cfb1ca276b5b8178e701b354bc7d03d0d21265f4046ca25e3a85f144e634c06b7b46b1f85b7b95a543f407fd9a4711", 0x92}, {&(0x7f00000002c0)="8ea63dbda4c19ca9e6c824f045b6316cee2c76bede654d19d850647c13698a91b4580d694cc2dabb76a79133d632032aef8b022f32611a64fd3289a6b6fc1457cc5351de072e655d67cbe1257c6f524333223b18c466adc2d6e9cf578c7d0d5e86cb9ae8e44db5f35df39c48c33dfeeb006e0a3588a2e7e84b65574547f77c2c0545a27ed387ebdc9727e779ab3d5a5898db9d86c25720a8f9073c5e9698c5b209b68ec2ea14bee79ac8", 0xaa}], 0x4) 399.984855ms ago: executing program 0 (id=1477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="0002", 0xfffffffffffffc94, 0x24000000, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 390.971575ms ago: executing program 0 (id=1478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310301000000fcdbdf2509e5ffff07000300"], 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) 283.553395ms ago: executing program 0 (id=1479): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 238.789399ms ago: executing program 3 (id=1480): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x100000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x77e03000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 159.971346ms ago: executing program 0 (id=1481): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) ioprio_get$uid(0x3, r1) 0s ago: executing program 6 (id=1482): syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xfffc, 0x0, 0xff6b}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 90][ T6140] lo speed is unknown, defaulting to 1000 [ 110.775079][ T6140] ip6_vti0 speed is unknown, defaulting to 1000 [ 110.828894][ T6136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.941760][ T6149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.973746][ T6149] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 111.035010][ T6149] bond0: (slave gre0): Error -95 calling set_mac_address [ 111.172964][ T6166] netlink: 168 bytes leftover after parsing attributes in process `syz.0.774'. [ 111.223040][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 111.223060][ T28] audit: type=1400 audit(1771868764.037:7264): avc: denied { ioctl } for pid=6162 comm="syz.4.776" path="socket:[13735]" dev="sockfs" ino=13735 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.264685][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 111.303901][ T28] audit: type=1400 audit(1771868764.047:7269): avc: denied { module_request } for pid=6162 comm="syz.4.776" kmod="netdev-vxcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 111.341101][ T4370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.383244][ T6185] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 111.391686][ T28] audit: type=1400 audit(1771868764.077:7270): avc: denied { create } for pid=6139 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.432151][ T6193] __nla_validate_parse: 1 callbacks suppressed [ 111.432167][ T6193] netlink: 104 bytes leftover after parsing attributes in process `syz.4.781'. [ 111.468502][ T28] audit: type=1400 audit(1771868764.097:7271): avc: denied { remove_name } for pid=6171 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=6032 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.499459][ T28] audit: type=1400 audit(1771868764.097:7272): avc: denied { unlink } for pid=6171 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=6032 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.529067][ T28] audit: type=1400 audit(1771868764.107:7273): avc: denied { sys_module } for pid=6162 comm="syz.4.776" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 111.563356][ T6198] netlink: 500 bytes leftover after parsing attributes in process `syz.5.779'. [ 111.582075][ T6202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.783'. [ 111.597742][ T28] audit: type=1400 audit(1771868764.107:7274): avc: denied { create } for pid=6176 comm="syz.1.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.681102][ T28] audit: type=1400 audit(1771868764.117:7275): avc: denied { write } for pid=6176 comm="syz.1.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.762416][ T28] audit: type=1400 audit(1771868764.157:7276): avc: denied { unmount } for pid=4370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.762486][ T28] audit: type=1400 audit(1771868764.187:7277): avc: denied { create } for pid=6181 comm="syz.4.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.811416][ T6207] loop1: detected capacity change from 0 to 8192 [ 111.919520][ T6233] bond_slave_0: entered promiscuous mode [ 111.919616][ T6233] bond_slave_1: entered promiscuous mode [ 111.919703][ T6233] macvtap1: entered promiscuous mode [ 111.919721][ T6233] bond0: entered promiscuous mode [ 111.920063][ T6233] macvtap1: entered allmulticast mode [ 111.920133][ T6233] bond0: entered allmulticast mode [ 111.920198][ T6233] bond_slave_0: entered allmulticast mode [ 111.920215][ T6233] bond_slave_1: entered allmulticast mode [ 111.921111][ T6233] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 111.938358][ T6233] bond0: left allmulticast mode [ 111.938382][ T6233] bond_slave_0: left allmulticast mode [ 111.938449][ T6233] bond_slave_1: left allmulticast mode [ 111.938468][ T6233] bond0: left promiscuous mode [ 111.938818][ T6233] bond_slave_0: left promiscuous mode [ 111.938885][ T6233] bond_slave_1: left promiscuous mode [ 112.123620][ T6251] netlink: 80 bytes leftover after parsing attributes in process `syz.1.799'. [ 112.194349][ T6263] FAT-fs (loop1): bogus number of FAT structure [ 112.194373][ T6263] FAT-fs (loop1): Can't find a valid FAT filesystem [ 112.497671][ T3302] loop4: p1 < > p2 p4 < p5 > [ 112.502413][ T3302] loop4: partition table partially beyond EOD, truncated [ 112.532409][ T3302] loop4: p1 start 134217728 is beyond EOD, truncated [ 112.542286][ T3302] loop4: p2 size 591360 extends beyond EOD, truncated [ 112.609099][ T6283] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.802'. [ 112.618486][ T6283] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.802'. [ 112.658208][ T3302] loop4: p5 size 591360 extends beyond EOD, truncated [ 112.670319][ T6284] vhci_hcd vhci_hcd.4: invalid port number 254 [ 112.676553][ T6284] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 113.105818][ T6275] loop4: p1 < > p2 p4 < p5 > [ 113.122236][ T6275] loop4: partition table partially beyond EOD, truncated [ 113.144091][ T6275] loop4: p1 start 134217728 is beyond EOD, truncated [ 113.157900][ T6282] loop5: p1 p3 p4[EZD] [ 113.167823][ T6282] loop5: p1 start 262144 is beyond EOD, truncated [ 113.174440][ T6282] loop5: p3 start 331781 is beyond EOD, truncated [ 113.217010][ T6282] loop5: p4 size 197376 extends beyond EOD, truncated [ 113.226951][ T6275] loop4: p2 size 591360 extends beyond EOD, truncated [ 113.288368][ T6275] loop4: p5 size 591360 extends beyond EOD, truncated [ 113.414179][ T6310] set_capacity_and_notify: 5 callbacks suppressed [ 113.414203][ T6310] loop0: detected capacity change from 0 to 1024 [ 113.456302][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.813'. [ 113.468382][ T6310] EXT4-fs: Ignoring removed nobh option [ 113.474034][ T6310] EXT4-fs: inline encryption not supported [ 113.495776][ T6315] loop5: detected capacity change from 0 to 1024 [ 113.507605][ T6311] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 113.507961][ T6307] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 113.578840][ T6315] EXT4-fs: Ignoring removed nobh option [ 113.580730][ T3590] udevd[3590]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 113.596987][ T6315] EXT4-fs: inline encryption not supported [ 113.629192][ T6310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.660128][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 113.672550][ T6310] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.814: deleted inode referenced: 15 [ 113.739614][ T6315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.764445][ T6310] EXT4-fs (loop0): Remounting filesystem read-only [ 113.811197][ T6315] FAULT_INJECTION: forcing a failure. [ 113.811197][ T6315] name failslab, interval 1, probability 0, space 0, times 0 [ 113.854764][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.867430][ T6315] CPU: 0 UID: 0 PID: 6315 Comm: syz.5.815 Tainted: G W syzkaller #0 PREEMPT(full) [ 113.867538][ T6315] Tainted: [W]=WARN [ 113.867547][ T6315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.867564][ T6315] Call Trace: [ 113.867572][ T6315] [ 113.867583][ T6315] __dump_stack+0x1d/0x30 [ 113.867616][ T6315] dump_stack_lvl+0x95/0xd0 [ 113.867647][ T6315] dump_stack+0x15/0x1b [ 113.867719][ T6315] should_fail_ex+0x263/0x280 [ 113.867745][ T6315] should_failslab+0x8c/0xb0 [ 113.867765][ T6315] kmem_cache_alloc_noprof+0x66/0x400 [ 113.867787][ T6315] ? do_getname+0x2e/0x1c0 [ 113.867824][ T6315] do_getname+0x2e/0x1c0 [ 113.867852][ T6315] getname_flags+0x1d/0x30 [ 113.867940][ T6315] do_sys_openat2+0x60/0x130 [ 113.867971][ T6315] __x64_sys_openat+0xf2/0x120 [ 113.868010][ T6315] x64_sys_call+0x1e39/0x3020 [ 113.868037][ T6315] do_syscall_64+0x12c/0x370 [ 113.868089][ T6315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.868173][ T6315] RIP: 0033:0x7f5c1224c629 [ 113.868243][ T6315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.868267][ T6315] RSP: 002b:00007f5c10ca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.868293][ T6315] RAX: ffffffffffffffda RBX: 00007f5c124c5fa0 RCX: 00007f5c1224c629 [ 113.868307][ T6315] RDX: 0000000000000441 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 113.868320][ T6315] RBP: 00007f5c10ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 113.868333][ T6315] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 113.868345][ T6315] R13: 00007f5c124c6038 R14: 00007f5c124c5fa0 R15: 00007ffc06350ef8 [ 113.868492][ T6315] [ 113.870213][ T6330] loop3: detected capacity change from 0 to 1024 [ 114.059347][ T6332] loop0: detected capacity change from 0 to 128 [ 114.068610][ T6332] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 114.079307][ T3307] udevd[3307]: incorrect ext4 checksum on /dev/loop0 [ 114.094159][ T4370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.108066][ T6330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.442808][ T6361] loop5: detected capacity change from 0 to 1024 [ 114.456243][ T6361] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.480343][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 114.498717][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.576502][ T6366] netlink: 36 bytes leftover after parsing attributes in process `syz.4.833'. [ 114.614833][ T6361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.718671][ T6377] loop3: detected capacity change from 0 to 1024 [ 114.738570][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.747234][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.756750][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.761003][ T6377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.767341][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.787631][ T4370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.811081][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.821055][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.831650][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.840943][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.850287][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.860199][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.881413][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.891075][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.924330][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.073093][ T6404] loop4: detected capacity change from 0 to 128 [ 115.155602][ T6411] veth1_macvtap: left promiscuous mode [ 115.227048][ T6414] loop5: detected capacity change from 0 to 512 [ 115.255360][ T6414] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 115.279194][ T6414] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 115.302357][ T6414] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.849: bad orphan inode 4 [ 115.315726][ T6414] loop5: lost filesystem error report for type 5 error -117 [ 115.316415][ T6414] EXT4-fs (loop5): 1 orphan inode deleted [ 115.329746][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 115.329772][ C1] EXT4-fs (loop5): initial error at time 1771868768: ext4_orphan_get:1417 [ 115.329794][ C1] EXT4-fs (loop5): last error at time 1771868768: ext4_orphan_get:1417 [ 115.376603][ T6414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.499141][ T6422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8217 sclass=netlink_route_socket pid=6422 comm=syz.3.850 [ 115.535245][ T6419] bond5 (unregistering): Released all slaves [ 115.622982][ T6427] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 4: comm syz.5.849: lblock 0 mapped to illegal pblock 4 (length 1) [ 116.063208][ T6441] bond2: option mode: unable to set because the bond device is up [ 116.119367][ T6438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.157634][ T6438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.183853][ T4370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.313886][ T6462] validate_nla: 50 callbacks suppressed [ 116.313906][ T6462] netlink: 'syz.5.866': attribute type 1 has an invalid length. [ 116.354559][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 116.354574][ T28] audit: type=1400 audit(1771868769.180:7358): avc: denied { setopt } for pid=6456 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.388136][ T6462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.411998][ T6459] lo speed is unknown, defaulting to 1000 [ 116.434843][ T6465] ip6erspan0: entered promiscuous mode [ 116.493066][ T6465] bond1: (slave ip6erspan0): making interface the new active one [ 116.527914][ T6465] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 116.547196][ T28] audit: type=1400 audit(1771868769.370:7359): avc: denied { write } for pid=6456 comm="syz.3.865" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.598100][ T6462] macvlan2: entered promiscuous mode [ 116.603847][ T6462] bond1: entered promiscuous mode [ 116.611709][ T6462] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.638821][ T6462] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 116.640650][ T28] audit: type=1400 audit(1771868769.410:7360): avc: denied { open } for pid=6456 comm="syz.3.865" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.673153][ T6462] bond1: left promiscuous mode [ 116.694659][ T28] audit: type=1400 audit(1771868769.470:7361): avc: denied { create } for pid=6471 comm="syz.3.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 116.722816][ T6473] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 116.738213][ T6459] ip6_vti0 speed is unknown, defaulting to 1000 [ 116.738213][ T6468] netlink: 'syz.1.868': attribute type 3 has an invalid length. [ 116.762279][ T6474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6474 comm=syz.3.870 [ 116.786077][ T6474] netlink: 'syz.3.870': attribute type 4 has an invalid length. [ 116.948066][ T6493] __nla_validate_parse: 9 callbacks suppressed [ 116.948083][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 116.983530][ T28] audit: type=1400 audit(1771868769.810:7362): avc: denied { bind } for pid=6499 comm="syz.0.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.057361][ T6503] loop4: detected capacity change from 0 to 128 [ 117.070847][ T6503] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.871'. [ 117.080169][ T6503] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.871'. [ 117.125455][ T6506] vhci_hcd vhci_hcd.4: invalid port number 254 [ 117.131832][ T6506] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 117.212376][ T6508] loop5: detected capacity change from 0 to 512 [ 117.495926][ T28] audit: type=1400 audit(1771868769.810:7363): avc: denied { name_bind } for pid=6499 comm="syz.0.875" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 117.517762][ T28] audit: type=1400 audit(1771868769.810:7364): avc: denied { node_bind } for pid=6499 comm="syz.0.875" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 117.546449][ T6508] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 117.565717][ T6504] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 117.585692][ T6504] SELinux: failed to load policy [ 117.646817][ T6508] FAT-fs (loop5): Filesystem has been set read-only [ 117.679764][ T28] audit: type=1400 audit(1771868769.810:7365): avc: denied { create } for pid=6499 comm="syz.0.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.737807][ T28] audit: type=1400 audit(1771868769.810:7366): avc: denied { read } for pid=6499 comm="syz.0.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.761225][ T6508] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 117.781116][ T28] audit: type=1400 audit(1771868769.810:7367): avc: denied { write } for pid=6499 comm="syz.0.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.815867][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'. [ 117.883140][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 117.999672][ T6538] EXT4-fs: inline encryption not supported [ 118.016397][ T6538] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 118.134124][ T6548] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.157530][ T3302] loop1: p1 p3 p4[EZD] [ 118.162915][ T3302] loop1: p1 start 262144 is beyond EOD, truncated [ 118.170007][ T3302] loop1: p3 start 331781 is beyond EOD, truncated [ 118.176663][ T3302] loop1: p4 size 197376 extends beyond EOD, truncated [ 118.183761][ T6548] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.200277][ T6543] loop1: p1 p3 p4[EZD] [ 118.211228][ T6543] loop1: p1 start 262144 is beyond EOD, truncated [ 118.219154][ T6543] loop1: p3 start 331781 is beyond EOD, truncated [ 118.240455][ T6543] loop1: p4 size 197376 extends beyond EOD, truncated [ 118.268470][ T3000] loop1: p1 p3 p4[EZD] [ 118.274016][ T6548] delete_channel: no stack [ 118.287703][ T3000] loop1: p1 start 262144 is beyond EOD, truncated [ 118.294945][ T6545] lo speed is unknown, defaulting to 1000 [ 118.306883][ T6545] ip6_vti0 speed is unknown, defaulting to 1000 [ 118.314253][ T3000] loop1: p3 start 331781 is beyond EOD, truncated [ 118.330950][ T3000] loop1: p4 size 197376 extends beyond EOD, truncated [ 118.521272][ T6557] set_capacity_and_notify: 4 callbacks suppressed [ 118.521292][ T6557] loop1: detected capacity change from 0 to 1024 [ 118.536555][ T6557] EXT4-fs: Ignoring removed oldalloc option [ 118.543937][ T6557] EXT4-fs: Ignoring removed orlov option [ 118.578232][ T6557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.595399][ T6557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.892'. [ 118.661434][ T6557] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 118.856566][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.897546][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 118.911916][ T6565] lo speed is unknown, defaulting to 1000 [ 118.931187][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.949904][ T6565] ip6_vti0 speed is unknown, defaulting to 1000 [ 119.048382][ T6574] syzkaller0: entered promiscuous mode [ 119.062530][ T6582] loop0: detected capacity change from 0 to 1024 [ 119.072468][ T6574] syzkaller0: entered allmulticast mode [ 119.080570][ T6582] EXT4-fs: Ignoring removed nobh option [ 119.093940][ T6582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.139177][ T6582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.233059][ T6586] raw_sendmsg: syz.4.903 forgot to set AF_INET. Fix it! [ 119.302257][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.319388][ T6598] batadv2: left allmulticast mode [ 119.324651][ T6598] batadv2: left promiscuous mode [ 119.329808][ T6598] bridge0: port 4(batadv2) entered disabled state [ 119.337405][ T6598] batadv1: left allmulticast mode [ 119.342721][ T6598] batadv1: left promiscuous mode [ 119.347873][ T6598] bridge0: port 3(batadv1) entered disabled state [ 119.355283][ T6598] bridge_slave_1: left allmulticast mode [ 119.360988][ T6598] bridge_slave_1: left promiscuous mode [ 119.363843][ T6600] loop4: detected capacity change from 0 to 512 [ 119.373688][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.402259][ T6598] bridge_slave_0: left allmulticast mode [ 119.409171][ T6600] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.419365][ T6598] bridge_slave_0: left promiscuous mode [ 119.430503][ T6600] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 119.430617][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.496240][ T6596] tipc: Enabled bearer , priority 10 [ 119.522170][ T6603] lo speed is unknown, defaulting to 1000 [ 119.571772][ T6603] ip6_vti0 speed is unknown, defaulting to 1000 [ 119.638627][ T6605] loop0: detected capacity change from 0 to 512 [ 119.716397][ T6605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.746941][ T6605] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.906: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 119.766456][ T6605] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 119.768884][ T6605] EXT4-fs (loop0): get root inode failed [ 119.778650][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 119.778771][ C0] EXT4-fs (loop0): last error at time 1771868772: ext4_ext_check_inode:521: inode 2 [ 119.806514][ T6605] EXT4-fs (loop0): mount failed [ 119.814373][ T6600] syzkaller0: entered promiscuous mode [ 119.828160][ T6623] loop5: detected capacity change from 0 to 128 [ 119.843904][ T6600] syzkaller0: entered allmulticast mode [ 120.107965][ T6633] lo speed is unknown, defaulting to 1000 [ 120.114491][ T6633] ip6_vti0 speed is unknown, defaulting to 1000 [ 120.281537][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 120.337328][ T35] IPVS: starting estimator thread 0... [ 120.395345][ T6638] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 120.412633][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.917'. [ 120.453054][ T6641] bridge0: port 3(batadv1) entered blocking state [ 120.472963][ T6635] netlink: 108 bytes leftover after parsing attributes in process `syz.0.915'. [ 120.485866][ T6641] bridge0: port 3(batadv1) entered disabled state [ 120.499392][ T6641] batadv1: entered allmulticast mode [ 120.511131][ T6641] batadv1: entered promiscuous mode [ 120.516738][ T6639] IPVS: using max 2208 ests per chain, 110400 per kthread [ 120.703659][ T6651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.723209][ T6651] bond2: (slave bond0): making interface the new active one [ 120.742107][ T6651] bond2: (slave bond0): Enslaving as an active interface with an up link [ 120.858632][ T6655] loop3: detected capacity change from 0 to 512 [ 121.043931][ T6655] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 121.090075][ T3511] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 121.099464][ T3511] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 121.117691][ T6655] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 121.129592][ T6655] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.922: bad orphan inode 4 [ 121.142579][ T6655] loop3: lost filesystem error report for type 5 error -117 [ 121.142773][ T6655] EXT4-fs (loop3): 1 orphan inode deleted [ 121.150206][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 121.150227][ C1] EXT4-fs (loop3): initial error at time 1771868773: ext4_orphan_get:1417 [ 121.150263][ C1] EXT4-fs (loop3): last error at time 1771868773: ext4_orphan_get:1417 [ 121.155146][ T9] tipc: Node number set to 1081475072 [ 121.161143][ T6655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.219419][ T6660] bond_slave_0: entered promiscuous mode [ 121.225233][ T6660] bond_slave_1: entered promiscuous mode [ 121.369075][ T6662] loop4: detected capacity change from 0 to 1024 [ 121.375796][ T6660] macvtap1: entered promiscuous mode [ 121.381225][ T6660] bond0: entered promiscuous mode [ 121.394239][ T6662] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 121.409478][ T6660] macvtap1: entered allmulticast mode [ 121.697664][ T6662] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.924: lblock 2 mapped to illegal pblock 2 (length 1) [ 121.744024][ T6660] bond0: entered allmulticast mode [ 121.771526][ T6660] bond_slave_0: entered allmulticast mode [ 121.942586][ T6662] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 121.942874][ T6662] __quota_error: 39 callbacks suppressed [ 121.942888][ T6662] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 121.957914][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 121.957942][ C1] EXT4-fs (loop4): initial error at time 1771868774: ext4_map_blocks:776: inode 3: block 2 [ 121.957987][ C1] EXT4-fs (loop4): last error at time 1771868774: ext4_map_blocks:776: inode 3: block 2 [ 121.994688][ T6660] bond_slave_1: entered allmulticast mode [ 122.011647][ T6660] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 122.037558][ T6662] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.924: lblock 0 mapped to illegal pblock 48 (length 1) [ 122.053597][ T6662] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 122.053714][ T6662] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 122.071924][ T6662] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.924: Failed to acquire dquot type 0 [ 122.083582][ T6662] loop4: lost filesystem error report for type 5 error -117 [ 122.083775][ T6662] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 122.100964][ T6662] loop4: lost filesystem error report for type 5 error -117 [ 122.101086][ T6662] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.924: mark_inode_dirty error [ 122.120510][ T6660] bond0: left allmulticast mode [ 122.125518][ T6662] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 122.125710][ T6660] bond_slave_0: left allmulticast mode [ 122.132691][ T6662] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 122.135939][ T6660] bond_slave_1: left allmulticast mode [ 122.140704][ T6662] EXT4-fs (loop4): 1 orphan inode deleted [ 122.151788][ T6660] bond0: left promiscuous mode [ 122.157205][ T6662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.175825][ T6660] bond_slave_0: left promiscuous mode [ 122.184214][ T6660] bond_slave_1: left promiscuous mode [ 122.186517][ T3511] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 122.256065][ T3511] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 122.264810][ T3511] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 0 [ 122.278870][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.404558][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.422237][ T6674] syzkaller0: entered promiscuous mode [ 122.428398][ T6674] syzkaller0: entered allmulticast mode [ 122.434864][ T3319] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 122.447949][ T3319] loop4: lost filesystem error report for type 5 error -117 [ 122.448059][ T3319] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 122.481077][ T3319] loop4: lost filesystem error report for type 5 error -117 [ 122.484270][ T3319] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 122.503004][ T3319] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 122.504676][ T6678] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 122.550044][ T6678] bond2 (unregistering): Released all slaves [ 122.603387][ T6686] syzkaller0: entered promiscuous mode [ 122.608945][ T6686] syzkaller0: entered allmulticast mode [ 122.638055][ T6694] loop4: detected capacity change from 0 to 512 [ 122.647398][ T6693] netlink: 'syz.5.936': attribute type 21 has an invalid length. [ 122.667352][ T6694] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 122.686520][ T6694] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 122.695075][ T6694] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.937: bad orphan inode 4 [ 122.705500][ T6694] loop4: lost filesystem error report for type 5 error -117 [ 122.710552][ T6694] EXT4-fs (loop4): 1 orphan inode deleted [ 122.717985][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 122.718008][ C1] EXT4-fs (loop4): initial error at time 1771868775: ext4_orphan_get:1417 [ 122.718048][ C1] EXT4-fs (loop4): last error at time 1771868775: ext4_orphan_get:1417 [ 122.728062][ T28] audit: type=1400 audit(1771868775.562:7407): avc: denied { ioctl } for pid=6697 comm="syz.1.939" path="socket:[15632]" dev="sockfs" ino=15632 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.773352][ T6694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.965521][ T28] audit: type=1400 audit(1771868775.802:7408): avc: denied { write } for pid=6704 comm="syz.3.940" name="dev_mcast" dev="proc" ino=4026532683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 123.192223][ T6693] __nla_validate_parse: 2 callbacks suppressed [ 123.192264][ T6693] netlink: 132 bytes leftover after parsing attributes in process `syz.5.936'. [ 123.214418][ T6693] netlink: 'syz.5.936': attribute type 1 has an invalid length. [ 123.276028][ T6703] loop1: detected capacity change from 0 to 128 [ 123.306775][ T6703] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.348280][ T6706] tipc: Enabling of bearer rejected, failed to enable media [ 123.556058][ T6703] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.581941][ T28] audit: type=1400 audit(1771868776.412:7409): avc: denied { kexec_image_load } for pid=6697 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 123.640247][ T28] audit: type=1400 audit(1771868776.472:7410): avc: denied { bind } for pid=6715 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.676768][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.690339][ T28] audit: type=1400 audit(1771868776.522:7411): avc: denied { create } for pid=6716 comm="syz.3.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.693258][ T6701] netlink: 144 bytes leftover after parsing attributes in process `syz.1.939'. [ 123.711083][ T139] Bluetooth: hci0: Frame reassembly failed (-84) [ 123.747112][ T28] audit: type=1400 audit(1771868776.522:7412): avc: denied { ioctl } for pid=6716 comm="syz.3.943" path="socket:[15664]" dev="sockfs" ino=15664 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.829698][ T139] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.860495][ T28] audit: type=1326 audit(1771868776.692:7413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5198c629 code=0x7ffc0000 [ 124.018005][ T6753] loop4: detected capacity change from 0 to 512 [ 124.033784][ T6753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.052880][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.954'. [ 124.095684][ T6760] loop5: detected capacity change from 0 to 512 [ 124.102411][ T6760] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.130248][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.141262][ T6760] EXT4-fs (loop5): orphan cleanup on readonly fs [ 124.151909][ T6760] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 124.175823][ T6760] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.960: attempt to clear invalid blocks 2 len 1 [ 124.200189][ T6760] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 124.200573][ T6760] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, [ 124.209776][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 124.209796][ C0] EXT4-fs (loop5): initial error at time 1771868777: ext4_clear_blocks:876: inode 13 [ 124.209824][ C0] EXT4-fs (loop5): last error at time 1771868777: ext4_clear_blocks:876: inode 13 [ 124.243518][ T6760] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 124.280889][ T6760] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.960: invalid indirect mapped block 1819239214 (level 0) [ 124.295110][ T6760] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 124.295380][ T6760] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.960: invalid indirect mapped block 1819239214 (level 1) [ 124.318505][ T6760] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 124.319068][ T6760] EXT4-fs (loop5): 1 truncate cleaned up [ 124.334799][ T6760] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.349479][ T6760] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 124.422186][ T6774] lo speed is unknown, defaulting to 1000 [ 124.428484][ T6774] ip6_vti0 speed is unknown, defaulting to 1000 [ 124.537818][ T4370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.585544][ T6779] loop0: detected capacity change from 0 to 256 [ 124.658661][ T6781] loop3: detected capacity change from 0 to 1024 [ 124.666048][ T6781] EXT4-fs: Ignoring removed bh option [ 124.744312][ T6779] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.778019][ T6782] loop5: detected capacity change from 0 to 512 [ 125.077221][ T6781] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 125.088192][ T6781] EXT4-fs (loop3): group descriptors corrupted! [ 125.111235][ T6782] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.128251][ T6779] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.183551][ T6782] EXT4-fs (loop5): 1 truncate cleaned up [ 125.184379][ T6785] lo speed is unknown, defaulting to 1000 [ 125.202946][ T6785] ip6_vti0 speed is unknown, defaulting to 1000 [ 125.212686][ T6782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.387725][ T4370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.397947][ T6791] loop4: detected capacity change from 0 to 512 [ 125.411857][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 125.434926][ T6796] bridge2: entered promiscuous mode [ 125.461851][ T6791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.482595][ T6791] EXT4-fs (loop4): orphan cleanup on readonly fs [ 125.496885][ T6791] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 125.523161][ T6791] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 125.541500][ T6791] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.969: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 125.571250][ T6791] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 125.574965][ T6791] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.969: couldn't read orphan inode 13 (err -117) [ 125.584890][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 125.585158][ C0] EXT4-fs (loop4): last error at time 1771868778: ext4_ext_check_inode:521: inode 13 [ 125.617785][ T6791] loop4: lost filesystem error report for type 5 error -117 [ 125.620907][ T6813] netlink: 104 bytes leftover after parsing attributes in process `syz.5.977'. [ 125.647776][ T6791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.664170][ T6812] lo speed is unknown, defaulting to 1000 [ 125.670232][ T6812] ip6_vti0 speed is unknown, defaulting to 1000 [ 125.710913][ T3847] Bluetooth: hci0: command 0x1003 tx timeout [ 125.717135][ T3526] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 125.842271][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.998365][ T6831] netlink: 44 bytes leftover after parsing attributes in process `syz.4.985'. [ 126.043137][ T6834] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 126.049642][ T6834] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 126.066011][ T6834] loop5: detected capacity change from 0 to 2048 [ 126.075027][ T6812] IPVS: Error connecting to the multicast addr [ 126.102473][ T3302] loop5: p1 p2 p3 [ 126.107282][ T3302] loop5: p2 size 16842752 extends beyond EOD, truncated [ 126.122869][ T3302] loop5: p3 start 8388352 is beyond EOD, truncated [ 126.141280][ T6834] loop5: p1 p2 p3 [ 126.147167][ T6834] loop5: p2 size 16842752 extends beyond EOD, truncated [ 126.165433][ T6834] loop5: p3 start 8388352 is beyond EOD, truncated [ 126.189415][ T6837] FAULT_INJECTION: forcing a failure. [ 126.189415][ T6837] name failslab, interval 1, probability 0, space 0, times 0 [ 126.214438][ T6837] CPU: 0 UID: 0 PID: 6837 Comm: syz.0.988 Tainted: G W syzkaller #0 PREEMPT(full) [ 126.214471][ T6837] Tainted: [W]=WARN [ 126.214477][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.214490][ T6837] Call Trace: [ 126.214570][ T6837] [ 126.214580][ T6837] __dump_stack+0x1d/0x30 [ 126.214692][ T6837] dump_stack_lvl+0x95/0xd0 [ 126.214718][ T6837] dump_stack+0x15/0x1b [ 126.214744][ T6837] should_fail_ex+0x263/0x280 [ 126.214807][ T6837] should_failslab+0x8c/0xb0 [ 126.214859][ T6837] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 126.214952][ T6837] ? __alloc_skb+0x2d6/0x690 [ 126.214975][ T6837] ? pfkey_broadcast+0x223/0x240 [ 126.215014][ T6837] __alloc_skb+0x2d6/0x690 [ 126.215076][ T6837] ? xfrm_state_flush+0x41b/0x440 [ 126.215113][ T6837] ? __alloc_skb+0x200/0x690 [ 126.215147][ T6837] unicast_flush_resp+0x28/0xc0 [ 126.215224][ T6837] pfkey_flush+0xcc/0x1c0 [ 126.215329][ T6837] ? pfkey_broadcast+0x223/0x240 [ 126.215359][ T6837] pfkey_sendmsg+0x876/0x9b0 [ 126.215401][ T6837] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 126.215495][ T6837] ____sys_sendmsg+0x5af/0x600 [ 126.215535][ T6837] ___sys_sendmsg+0x195/0x1e0 [ 126.215583][ T6837] __x64_sys_sendmsg+0xd4/0x160 [ 126.215680][ T6837] x64_sys_call+0x194c/0x3020 [ 126.215723][ T6837] do_syscall_64+0x12c/0x370 [ 126.215770][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.215792][ T6837] RIP: 0033:0x7fd61ed7c629 [ 126.215854][ T6837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.215879][ T6837] RSP: 002b:00007fd61d7cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.215953][ T6837] RAX: ffffffffffffffda RBX: 00007fd61eff5fa0 RCX: 00007fd61ed7c629 [ 126.215972][ T6837] RDX: 0000000004000000 RSI: 00002000000009c0 RDI: 0000000000000005 [ 126.215990][ T6837] RBP: 00007fd61d7cf090 R08: 0000000000000000 R09: 0000000000000000 [ 126.216076][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.216093][ T6837] R13: 00007fd61eff6038 R14: 00007fd61eff5fa0 R15: 00007ffc81bec8f8 [ 126.216119][ T6837] [ 126.486607][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 126.498007][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 126.512697][ T6841] netlink: 388 bytes leftover after parsing attributes in process `syz.5.990'. [ 126.527114][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 126.533764][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.5.990'. [ 126.546677][ T6841] ip6_vti0: Master is either lo or non-ether device [ 126.556653][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 126.600049][ T3590] udevd[3590]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 126.611382][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 126.611683][ T6843] loop0: detected capacity change from 0 to 128 [ 126.791113][ T6859] loop1: detected capacity change from 0 to 1024 [ 126.797787][ T6859] EXT4-fs: Ignoring removed orlov option [ 126.816498][ T6859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.932220][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.944620][ T6866] loop4: detected capacity change from 0 to 1024 [ 126.953104][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 126.953138][ T28] audit: type=1400 audit(1771868779.794:7462): avc: denied { mounton } for pid=6865 comm="syz.4.1000" path="/190/file1" dev="tmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 127.018083][ T28] audit: type=1400 audit(1771868779.844:7463): avc: denied { name_bind } for pid=6867 comm="syz.5.1002" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 127.032980][ T6866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.053506][ T6866] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.067346][ T28] audit: type=1400 audit(1771868779.884:7464): avc: denied { mount } for pid=6865 comm="syz.4.1000" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 127.089687][ T28] audit: type=1400 audit(1771868779.894:7465): avc: denied { read write } for pid=6865 comm="syz.4.1000" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.113269][ T6866] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1000: bg 0: block 112: padding at end of block bitmap is not set [ 127.128902][ T28] audit: type=1400 audit(1771868779.894:7466): avc: denied { open } for pid=6865 comm="syz.4.1000" path="/190/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.152279][ T28] audit: type=1400 audit(1771868779.914:7467): avc: denied { map } for pid=6865 comm="syz.4.1000" path="/190/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.173964][ T6866] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1000: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.182053][ T28] audit: type=1400 audit(1771868779.914:7468): avc: denied { execute } for pid=6865 comm="syz.4.1000" path="/190/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.224190][ T28] audit: type=1400 audit(1771868779.984:7469): avc: denied { create } for pid=6876 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.252554][ T6866] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 127.267215][ T6866] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.267215][ T6866] [ 127.278325][ T28] audit: type=1400 audit(1771868780.054:7470): avc: denied { create } for pid=6876 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.299837][ T28] audit: type=1400 audit(1771868780.054:7471): avc: denied { prog_load } for pid=6876 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 127.307363][ T6878] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1000: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.333394][ T6882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.379390][ T6865] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1000: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.419547][ T6865] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1000: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.458687][ T6865] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1000: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.490706][ T6865] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1000: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.513321][ T6865] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1000: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.529424][ T6895] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1008'. [ 127.540058][ T6865] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1000: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.547443][ T6892] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.602431][ T6865] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1000: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.621466][ T6892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.760427][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.777970][ T6903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.792058][ T4370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.844172][ T6903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1011'. [ 127.918203][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.989918][ T6922] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 128.011332][ T6922] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 128.069354][ T6922] EXT4-fs error (device loop0): ext4_get_journal_inode:5863: comm syz.0.1019: inode #4294967295: comm syz.0.1019: iget: illegal inode # [ 128.095874][ T6932] EXT4-fs: Ignoring removed orlov option [ 128.109818][ T6922] loop0: lost filesystem error report for type 5 error -117 [ 128.119653][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 128.133498][ C0] EXT4-fs (loop0): initial error at time 1771868780: ext4_get_journal_inode:5863 [ 128.142700][ C0] EXT4-fs (loop0): last error at time 1771868780: ext4_get_journal_inode:5863 [ 128.155497][ T6922] EXT4-fs (loop0): no journal found [ 128.169683][ T6922] EXT4-fs (loop0): can't get journal size [ 128.177046][ T6922] EXT4-fs (loop0): failed to initialize system zone (-22) [ 128.191040][ T6922] EXT4-fs (loop0): mount failed [ 128.203119][ T6932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.242883][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 128.294123][ T6942] journal_path: Non-blockdev passed as './file2' [ 128.308779][ T6942] EXT4-fs: error: could not find journal device path [ 128.358547][ T4370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.373762][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'. [ 128.383186][ T6942] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1025'. [ 128.453843][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1026'. [ 128.504723][ T6950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1026'. [ 128.565935][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 128.578316][ T6943] loop1: p1 p2 [ 128.594204][ T6950] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 128.669088][ T6946] netlink: 26 bytes leftover after parsing attributes in process `syz.5.1026'. [ 128.784563][ T6963] cgroup: Invalid name [ 128.815633][ T6965] netlink: 'syz.4.1032': attribute type 3 has an invalid length. [ 128.905795][ T6970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6970 comm=syz.1.1035 [ 128.927150][ T6970] netlink: 'syz.1.1035': attribute type 4 has an invalid length. [ 128.947977][ T9] lo speed is unknown, defaulting to 1000 [ 128.961660][ T9] syz0: Port: 1 Link DOWN [ 129.033986][ T6979] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1037'. [ 129.125191][ T6985] netlink: 'syz.1.1048': attribute type 1 has an invalid length. [ 129.162025][ T6985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.192544][ T6985] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1048'. [ 129.202070][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 129.217962][ T6985] ip6erspan0: entered promiscuous mode [ 129.225617][ T6992] set_capacity_and_notify: 9 callbacks suppressed [ 129.225636][ T6992] loop4: detected capacity change from 0 to 512 [ 129.229618][ T6985] bond2: (slave ip6erspan0): making interface the new active one [ 129.248202][ T6985] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 129.266670][ T6985] macvlan2: entered promiscuous mode [ 129.303152][ T6985] bond2: entered promiscuous mode [ 129.308571][ T6985] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.337509][ T6985] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 129.368161][ T6985] bond2: left promiscuous mode [ 129.375660][ T6999] loop5: detected capacity change from 0 to 256 [ 129.375668][ T6992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.414883][ T7006] loop3: detected capacity change from 0 to 512 [ 129.427509][ T6992] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.438997][ T7006] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1045: inode has both inline data and extents flags [ 129.452214][ T6992] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1041: Failed to acquire dquot type 0 [ 129.467047][ T7006] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.468326][ T7006] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1045: couldn't read orphan inode 15 (err -117) [ 129.478940][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 129.494669][ T7006] loop3: lost filesystem error report for type 5 error -117 [ 129.496241][ C1] EXT4-fs (loop3): initial error at time 1771868782: ext4_orphan_get:1391 [ 129.497664][ T7006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.503623][ C1] : inode 15 [ 129.503639][ C1] EXT4-fs (loop3): last error at time 1771868782: ext4_orphan_get:1396 [ 129.561609][ T7006] EXT4-fs error (device loop3): ext4_add_entry:2415: inode #2: comm syz.3.1045: Directory hole found for htree leaf block 0 [ 129.575583][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.656919][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.708166][ T7028] FAULT_INJECTION: forcing a failure. [ 129.708166][ T7028] name failslab, interval 1, probability 0, space 0, times 0 [ 129.744160][ T7028] CPU: 1 UID: 0 PID: 7028 Comm: syz.3.1051 Tainted: G W syzkaller #0 PREEMPT(full) [ 129.744265][ T7028] Tainted: [W]=WARN [ 129.744274][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.744290][ T7028] Call Trace: [ 129.744299][ T7028] [ 129.744309][ T7028] __dump_stack+0x1d/0x30 [ 129.744412][ T7028] dump_stack_lvl+0x95/0xd0 [ 129.744436][ T7028] dump_stack+0x15/0x1b [ 129.744458][ T7028] should_fail_ex+0x263/0x280 [ 129.744482][ T7028] should_failslab+0x8c/0xb0 [ 129.744549][ T7028] __kmalloc_noprof+0xb8/0x4e0 [ 129.744574][ T7028] ? kernfs_fop_write_iter+0xe2/0x300 [ 129.744618][ T7028] kernfs_fop_write_iter+0xe2/0x300 [ 129.744837][ T7028] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 129.744880][ T7028] vfs_write+0x5a6/0x9f0 [ 129.744991][ T7028] ksys_write+0xdc/0x1a0 [ 129.745031][ T7028] __x64_sys_write+0x40/0x50 [ 129.745071][ T7028] x64_sys_call+0x27e1/0x3020 [ 129.745099][ T7028] do_syscall_64+0x12c/0x370 [ 129.745170][ T7028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.745328][ T7028] RIP: 0033:0x7fb84b37c629 [ 129.745349][ T7028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.745402][ T7028] RSP: 002b:00007fb849dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.745424][ T7028] RAX: ffffffffffffffda RBX: 00007fb84b5f5fa0 RCX: 00007fb84b37c629 [ 129.745438][ T7028] RDX: 0000000000000008 RSI: 0000200000000400 RDI: 0000000000000004 [ 129.745488][ T7028] RBP: 00007fb849dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.745506][ T7028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.745523][ T7028] R13: 00007fb84b5f6038 R14: 00007fb84b5f5fa0 R15: 00007ffc35492018 [ 129.745548][ T7028] [ 129.987287][ T7035] lo speed is unknown, defaulting to 1000 [ 129.994021][ T7035] ip6_vti0 speed is unknown, defaulting to 1000 [ 130.071939][ T7046] loop5: detected capacity change from 0 to 512 [ 130.087053][ T7046] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 130.097853][ T7046] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 130.114470][ T7046] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1058: bad orphan inode 4 [ 130.129317][ T7046] loop5: lost filesystem error report for type 5 error -117 [ 130.129511][ T7046] EXT4-fs (loop5): 1 orphan inode deleted [ 130.142728][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 130.142752][ C0] EXT4-fs (loop5): initial error at time 1771868782: ext4_orphan_get:1417 [ 130.142780][ C0] EXT4-fs (loop5): last error at time 1771868782: ext4_orphan_get:1417 [ 130.166578][ T7046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.364988][ T7054] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 130.444913][ T7064] syzkaller0: entered promiscuous mode [ 130.450670][ T7064] syzkaller0: entered allmulticast mode [ 130.490401][ T7064] 0: reclassify loop, rule prio 0, protocol 800 [ 130.548935][ T7072] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 130.896893][ T7097] loop3: detected capacity change from 0 to 512 [ 130.927207][ T7097] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 130.958842][ T7099] loop4: detected capacity change from 0 to 512 [ 130.958879][ T7097] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 130.959698][ T7097] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1072: bad orphan inode 4 [ 130.971665][ T7099] vfat: Unknown parameter 'À' [ 131.013359][ T7099] loop4: detected capacity change from 0 to 512 [ 131.019763][ T7097] loop3: lost filesystem error report for type 5 error -117 [ 131.027039][ T7097] EXT4-fs (loop3): 1 orphan inode deleted [ 131.034425][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 131.034452][ C1] EXT4-fs (loop3): initial error at time 1771868783: ext4_orphan_get:1417 [ 131.034499][ C1] EXT4-fs (loop3): last error at time 1771868783: ext4_orphan_get:1417 [ 131.088575][ T7099] journal_path: Non-blockdev passed as './file2' [ 131.094974][ T7099] EXT4-fs: error: could not find journal device path [ 131.108997][ T7097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.373947][ T7104] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 4: comm syz.3.1072: lblock 0 mapped to illegal pblock 4 (length 1) [ 131.399090][ T7104] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 4: comm syz.3.1072: lblock 0 mapped to illegal pblock 4 (length 1) [ 131.908016][ T7113] loop1: detected capacity change from 0 to 736 [ 132.006293][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.041986][ T7115] lo speed is unknown, defaulting to 1000 [ 132.070055][ T7115] ip6_vti0 speed is unknown, defaulting to 1000 [ 132.125888][ T7117] lo speed is unknown, defaulting to 1000 [ 132.141011][ T7122] loop4: detected capacity change from 0 to 512 [ 132.141308][ T7122] ext4: Unknown parameter 'func' [ 132.156332][ T28] kauditd_printk_skb: 207 callbacks suppressed [ 132.156386][ T28] audit: type=1400 audit(1771868784.987:7677): avc: denied { create } for pid=7114 comm="syz.4.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 132.157710][ T28] audit: type=1400 audit(1771868784.987:7678): avc: denied { setopt } for pid=7114 comm="syz.4.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 132.157857][ T7122] v: renamed from ip6_vti0 [ 132.223985][ T7117] ip6_vti0 speed is unknown, defaulting to 1000 [ 132.239067][ T4370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.331659][ T7129] loop5: detected capacity change from 0 to 512 [ 132.373802][ T7129] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 132.496752][ T28] audit: type=1400 audit(1771868785.327:7679): avc: denied { create } for pid=7134 comm="syz.5.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.567920][ T7135] tun0: tun_chr_ioctl cmd 1074025675 [ 132.573284][ T7135] tun0: persist enabled [ 132.577887][ T7135] tun0: tun_chr_ioctl cmd 1074025675 [ 132.583214][ T7135] tun0: persist enabled [ 132.589572][ T28] audit: type=1400 audit(1771868785.427:7680): avc: denied { create } for pid=7134 comm="syz.5.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.599186][ T7135] netlink: 'syz.5.1084': attribute type 3 has an invalid length. [ 132.637528][ T28] audit: type=1400 audit(1771868785.427:7681): avc: denied { setopt } for pid=7134 comm="syz.5.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.658511][ T7139] netlink: 'syz.5.1084': attribute type 39 has an invalid length. [ 132.687336][ T28] audit: type=1400 audit(1771868785.427:7682): avc: denied { shutdown } for pid=7134 comm="syz.5.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.847763][ T7151] siw: device registration error -23 [ 132.848113][ T28] audit: type=1400 audit(1771868785.687:7683): avc: denied { read write } for pid=7107 comm="syz.1.1074" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.903530][ T28] audit: type=1400 audit(1771868785.717:7684): avc: denied { open } for pid=7107 comm="syz.1.1074" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.935399][ T28] audit: type=1400 audit(1771868785.717:7685): avc: denied { ioctl } for pid=7107 comm="syz.1.1074" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.000927][ T28] audit: type=1400 audit(1771868785.727:7686): avc: denied { name_bind } for pid=7107 comm="syz.1.1074" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 133.054557][ T7164] batadv3: left allmulticast mode [ 133.060497][ T7164] batadv3: left promiscuous mode [ 133.065922][ T7164] bridge0: port 3(batadv3) entered disabled state [ 133.073252][ T7164] batadv2: left allmulticast mode [ 133.079191][ T7164] batadv2: left promiscuous mode [ 133.084336][ T7164] bridge0: port 2(batadv2) entered disabled state [ 133.101471][ T7164] batadv1: left allmulticast mode [ 133.106561][ T7164] batadv1: left promiscuous mode [ 133.113431][ T7164] bridge0: port 1(batadv1) entered disabled state [ 133.294257][ T7173] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 133.313445][ T7173] 9pnet_fd: p9_fd_create_unix (7173): problem connecting socket: ./file0: -2 [ 134.157024][ T7202] lo speed is unknown, defaulting to 1000 [ 134.162860][ T7202] lo speed is unknown, defaulting to 1000 [ 134.169025][ T7202] lo speed is unknown, defaulting to 1000 [ 134.176592][ T7202] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 134.289271][ T7203] set_capacity_and_notify: 2 callbacks suppressed [ 134.289338][ T7203] loop3: detected capacity change from 0 to 128 [ 134.537777][ T7203] __nla_validate_parse: 10 callbacks suppressed [ 134.537857][ T7203] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1104'. [ 134.553521][ T7203] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1104'. [ 134.563729][ T7203] vhci_hcd vhci_hcd.4: invalid port number 254 [ 134.570107][ T7203] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 134.620579][ T7202] lo speed is unknown, defaulting to 1000 [ 134.626782][ T7202] lo speed is unknown, defaulting to 1000 [ 134.643395][ T7202] lo speed is unknown, defaulting to 1000 [ 134.680273][ T7204] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 134.753382][ T7202] lo speed is unknown, defaulting to 1000 [ 134.759597][ T7202] lo speed is unknown, defaulting to 1000 [ 134.800836][ T7209] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1105'. [ 134.933461][ T7211] netlink: 'syz.3.1106': attribute type 15 has an invalid length. [ 134.941520][ T7212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7212 comm=syz.5.1105 [ 135.271069][ T7229] loop1: detected capacity change from 0 to 128 [ 135.652756][ T7238] loop5: detected capacity change from 0 to 512 [ 135.692339][ T7238] EXT4-fs: Ignoring removed i_version option [ 135.729954][ T7238] EXT4-fs: Ignoring removed nobh option [ 135.747819][ T7238] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 135.836477][ T7238] EXT4-fs (loop5): 1 truncate cleaned up [ 135.842751][ T7238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.908944][ T7229] bio_check_eod: 87 callbacks suppressed [ 135.908965][ T7229] syz.1.1113: attempt to access beyond end of device [ 135.908965][ T7229] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 135.996775][ T7229] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1113'. [ 136.086928][ T5428] kworker/u8:13: attempt to access beyond end of device [ 136.086928][ T5428] loop1: rw=1, sector=138, nr_sectors = 2 limit=128 [ 136.111515][ T4370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.177525][ T7244] loop3: detected capacity change from 0 to 128 [ 136.191039][ T7244] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1118'. [ 136.200466][ T7244] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1118'. [ 136.245890][ T7245] vhci_hcd vhci_hcd.4: invalid port number 254 [ 136.252166][ T7245] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 136.432458][ T7247] loop5: detected capacity change from 0 to 512 [ 136.505172][ T7247] EXT4-fs: Ignoring removed bh option [ 136.561782][ T7247] ext4: Unknown parameter 'smackfsfloor' [ 136.723615][ T7256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7256 comm=syz.4.1121 [ 136.976289][ T1032] IPVS: starting estimator thread 0... [ 137.075309][ T7265] IPVS: using max 1680 ests per chain, 84000 per kthread [ 137.166449][ T7271] syz_tun: entered allmulticast mode [ 137.198674][ T7272] macvtap1: entered promiscuous mode [ 137.204028][ T7272] bond0: entered promiscuous mode [ 137.215392][ T7272] macvtap1: entered allmulticast mode [ 137.220992][ T7272] bond0: entered allmulticast mode [ 137.226581][ T7272] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 137.260419][ T7272] bond0: left allmulticast mode [ 137.265718][ T7272] bond0: left promiscuous mode [ 137.288261][ T7269] syz_tun: left allmulticast mode [ 137.340481][ T7287] loop4: detected capacity change from 0 to 512 [ 137.350800][ T7287] EXT4-fs: Ignoring removed orlov option [ 137.360433][ T7287] EXT4-fs: old and new quota format mixing [ 137.677554][ T7292] loop3: detected capacity change from 0 to 256 [ 137.784567][ T7299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1134'. [ 138.070191][ T7303] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.1135'. [ 138.079437][ T7303] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.1135'. [ 138.662612][ T7320] loop3: detected capacity change from 0 to 256 [ 138.695359][ T7323] netlink: 'syz.5.1142': attribute type 1 has an invalid length. [ 138.695866][ T7324] netlink: 'syz.1.1141': attribute type 15 has an invalid length. [ 138.721749][ T7320] FAT-fs (loop3): Directory bread(block 64) failed [ 138.731340][ T7320] FAT-fs (loop3): Directory bread(block 65) failed [ 138.738639][ T7320] FAT-fs (loop3): Directory bread(block 66) failed [ 138.747607][ T7320] FAT-fs (loop3): Directory bread(block 67) failed [ 138.748137][ T7323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.755019][ T7320] FAT-fs (loop3): Directory bread(block 68) failed [ 138.767759][ T7320] FAT-fs (loop3): Directory bread(block 69) failed [ 138.774919][ T7320] FAT-fs (loop3): Directory bread(block 70) failed [ 138.781796][ T7320] FAT-fs (loop3): Directory bread(block 71) failed [ 138.788781][ T7320] FAT-fs (loop3): Directory bread(block 72) failed [ 138.795744][ T7320] FAT-fs (loop3): Directory bread(block 73) failed [ 138.813177][ T7326] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1142'. [ 138.867182][ T7323] macvlan0: entered promiscuous mode [ 138.875151][ T7323] bond3: entered promiscuous mode [ 138.880647][ T7323] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 138.911667][ T7323] bond3: left promiscuous mode [ 138.934337][ T7330] loop1: detected capacity change from 0 to 1024 [ 138.945119][ T7330] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.963869][ T7332] loop3: detected capacity change from 0 to 512 [ 138.990299][ T7330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.008173][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 139.008191][ T28] audit: type=1400 audit(1771868791.850:7778): avc: denied { remount } for pid=7329 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 139.034598][ T7330] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 139.043201][ T7332] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 139.071072][ T7330] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 139.105360][ T7332] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 139.123605][ T28] audit: type=1400 audit(1771868791.910:7779): avc: denied { execute } for pid=7329 comm="syz.1.1145" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.149419][ T7332] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1144: bad orphan inode 4 [ 139.159827][ T7332] loop3: lost filesystem error report for type 5 error -117 [ 139.161782][ T28] audit: type=1400 audit(1771868791.910:7780): avc: denied { read } for pid=7329 comm="syz.1.1145" path="/243/file0/file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.165262][ T7342] syzkaller0: entered promiscuous mode [ 139.169159][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 139.193306][ T7332] EXT4-fs (loop3): 1 orphan inode deleted [ 139.197669][ C1] EXT4-fs (loop3): initial error at time 1771868792: ext4_orphan_get:1417 [ 139.197702][ C1] EXT4-fs (loop3): last error at time 1771868792: ext4_orphan_get:1417 [ 139.197773][ T28] audit: type=1400 audit(1771868791.940:7781): avc: denied { sqpoll } for pid=7329 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 139.254806][ T7342] syzkaller0: entered allmulticast mode [ 139.256064][ T3320] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 139.268501][ T7332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.289127][ T3320] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 139.385187][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.576128][ T7347] netlink: 'syz.3.1148': attribute type 3 has an invalid length. [ 139.584867][ T7347] netlink: 'syz.3.1148': attribute type 3 has an invalid length. [ 139.592690][ T7347] netlink: 'syz.3.1148': attribute type 3 has an invalid length. [ 139.602069][ T7347] netlink: 'syz.3.1148': attribute type 3 has an invalid length. [ 139.624937][ T7347] netlink: 'syz.3.1148': attribute type 3 has an invalid length. [ 139.632914][ T7347] netlink: 'syz.3.1148': attribute type 3 has an invalid length. [ 139.640770][ T7362] __nla_validate_parse: 1 callbacks suppressed [ 139.640788][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 139.657750][ T7348] loop3: detected capacity change from 0 to 128 [ 139.664660][ T7347] netlink: 'syz.3.1148': attribute type 3 has an invalid length. [ 139.679756][ T7348] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 139.694988][ T5411] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.740308][ T7369] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 139.757774][ T5411] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.781362][ T28] audit: type=1400 audit(1771868792.620:7782): avc: denied { mount } for pid=7371 comm="syz.0.1157" name="/" dev="hugetlbfs" ino=17098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 139.880943][ T5411] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.901005][ T28] audit: type=1400 audit(1771868792.640:7783): avc: denied { mounton } for pid=7374 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 139.937375][ T28] audit: type=1326 audit(1771868792.770:7784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5198c629 code=0x7ffc0000 [ 139.962298][ T28] audit: type=1326 audit(1771868792.770:7785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f6c5198c629 code=0x7ffc0000 [ 139.996464][ T28] audit: type=1326 audit(1771868792.770:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5198c629 code=0x7ffc0000 [ 140.022937][ T5411] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.036620][ T28] audit: type=1326 audit(1771868792.770:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5198c629 code=0x7ffc0000 [ 140.149902][ T7374] ip6_vti0 speed is unknown, defaulting to 1000 [ 140.165131][ T7413] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1167'. [ 140.181204][ T5411] bridge0: port 4(vlan0) entered disabled state [ 140.213376][ T5411] batadv1: left allmulticast mode [ 140.220525][ T5411] batadv1: left promiscuous mode [ 140.227007][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1170'. [ 140.236439][ T5411] bridge0: port 3(batadv1) entered disabled state [ 140.268939][ T5411] bridge_slave_1: left allmulticast mode [ 140.275478][ T5411] bridge_slave_1: left promiscuous mode [ 140.280891][ T7415] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1168'. [ 140.306194][ T7424] loop5: detected capacity change from 0 to 512 [ 140.321224][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.343570][ T7424] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1171: iget: bad extra_isize 90 (inode size 256) [ 140.357164][ T7424] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 140.357306][ T7424] EXT4-fs (loop5): Remounting filesystem read-only [ 140.366563][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 140.366589][ C0] EXT4-fs (loop5): initial error at time 1771868793: ext4_xattr_inode_iget:441: inode 11 [ 140.366632][ C0] EXT4-fs (loop5): last error at time 1771868793: ext4_xattr_inode_iget:441: inode 11 [ 140.400050][ T7424] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 140.413290][ T5411] bridge_slave_0: left allmulticast mode [ 140.414535][ T7424] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 140.429335][ T7424] EXT4-fs (loop5): 1 orphan inode deleted [ 140.433846][ T5411] bridge_slave_0: left promiscuous mode [ 140.436795][ T7424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.452930][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.463371][ T7424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.516539][ T7435] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1176'. [ 140.537396][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1176'. [ 140.546692][ T7435] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1176'. [ 140.561916][ T7433] validate_nla: 45 callbacks suppressed [ 140.561928][ T7433] netlink: 'syz.0.1175': attribute type 21 has an invalid length. [ 140.577688][ T5411] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 140.706042][ T5411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.716252][ T5411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.726164][ T5411] bond0 (unregistering): Released all slaves [ 140.734126][ T5411] bond1 (unregistering): Released all slaves [ 140.743051][ T5411] bond2 (unregistering): Released all slaves [ 140.751764][ T7374] lo speed is unknown, defaulting to 1000 [ 140.759879][ T7436] siw: device registration error -23 [ 140.766265][ T7433] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1175'. [ 140.801499][ T7439] wireguard0: entered promiscuous mode [ 140.810657][ T7450] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1178'. [ 140.823357][ T7439] wireguard0: entered allmulticast mode [ 140.839569][ T7454] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 140.861211][ T7444] netlink: 'syz.4.1178': attribute type 29 has an invalid length. [ 140.870984][ T7445] netlink: 'syz.4.1178': attribute type 29 has an invalid length. [ 140.882599][ T5411] tipc: Disabling bearer [ 140.904140][ T5411] tipc: Left network mode [ 140.938140][ T5411] IPVS: stopping master sync thread 5014 ... [ 141.073966][ T5411] hsr_slave_0: left promiscuous mode [ 141.101722][ T5411] hsr_slave_1: left promiscuous mode [ 141.108132][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.115966][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.125882][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.133449][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.147628][ T5411] veth1_macvtap: left promiscuous mode [ 141.153326][ T5411] veth0_macvtap: left promiscuous mode [ 141.158891][ T5411] veth1_vlan: left promiscuous mode [ 141.165171][ T7485] loop4: detected capacity change from 0 to 2048 [ 141.176806][ T7485] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 141.187880][ T7485] EXT4-fs (loop4): group descriptors corrupted! [ 141.337254][ T5411] team0 (unregistering): Port device team_slave_1 removed [ 141.435828][ T7374] chnl_net:caif_netlink_parms(): no params data found [ 141.529699][ T7374] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.546168][ T7516] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1190'. [ 141.590342][ T7374] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.597642][ T7374] bridge_slave_0: entered allmulticast mode [ 141.604849][ T7374] bridge_slave_0: entered promiscuous mode [ 141.621091][ T7374] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.630133][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.637442][ T7374] bridge_slave_1: entered allmulticast mode [ 141.644298][ T7374] bridge_slave_1: entered promiscuous mode [ 141.734291][ T7374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.763547][ T7374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.845709][ T7540] ip6_vti0 speed is unknown, defaulting to 1000 [ 141.853971][ T7374] team0: Port device team_slave_0 added [ 141.860579][ T7374] team0: Port device team_slave_1 added [ 141.909754][ T7551] loop4: detected capacity change from 0 to 512 [ 141.942213][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.971693][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.979786][ T7551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.998075][ T7374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.043150][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.050272][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.081246][ T7551] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.091978][ T7374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.120924][ T7374] hsr_slave_0: entered promiscuous mode [ 142.127255][ T7374] hsr_slave_1: entered promiscuous mode [ 142.133201][ T7374] debugfs: 'hsr0' already exists in 'hsr' [ 142.138961][ T7374] Cannot create hsr debugfs directory [ 142.195036][ T5411] IPVS: stop unused estimator thread 0... [ 142.228734][ T7540] lo speed is unknown, defaulting to 1000 [ 142.707836][ T7581] loop3: detected capacity change from 0 to 128 [ 142.775935][ T7581] FAT-fs (loop3): bogus number of reserved sectors [ 142.811118][ T7581] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 142.847362][ T7581] FAT-fs (loop3): Can't find a valid FAT filesystem [ 142.854270][ T7587] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 142.875430][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.927513][ T7576] ip6_vti0 speed is unknown, defaulting to 1000 [ 142.966792][ T7591] loop4: detected capacity change from 0 to 1024 [ 142.974524][ T7591] EXT4-fs: Ignoring removed nobh option [ 142.980173][ T7591] EXT4-fs: inline encryption not supported [ 143.029368][ T7591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.032044][ T7374] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 143.064250][ T7374] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 143.080524][ T7576] lo speed is unknown, defaulting to 1000 [ 143.080849][ T7374] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 143.132506][ T7374] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 143.292951][ T7626] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.1211: deleted inode referenced: 15 [ 143.324745][ T7374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.351327][ T7374] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.387199][ T7626] EXT4-fs (loop4): Remounting filesystem read-only [ 143.413928][ T5428] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.421061][ T5428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.432168][ T7603] Set syz1 is full, maxelem 6117 reached [ 143.455117][ T5428] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.462258][ T5428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.530517][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.666298][ T7374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.692229][ T7633] netlink: zone id is out of range [ 143.727465][ T7633] netlink: zone id is out of range [ 143.763965][ T7633] netlink: zone id is out of range [ 143.773012][ T7654] loop4: detected capacity change from 0 to 128 [ 143.801122][ T7633] netlink: zone id is out of range [ 143.838197][ T7633] netlink: zone id is out of range [ 143.868204][ T7633] netlink: zone id is out of range [ 143.914086][ T7633] netlink: zone id is out of range [ 143.919272][ T7633] netlink: zone id is out of range [ 143.919833][ T7663] loop4: detected capacity change from 0 to 128 [ 143.976932][ T7374] veth0_vlan: entered promiscuous mode [ 143.986386][ T7633] netlink: zone id is out of range [ 144.025170][ T7374] veth1_vlan: entered promiscuous mode [ 144.062292][ T7374] veth0_macvtap: entered promiscuous mode [ 144.089833][ T7374] veth1_macvtap: entered promiscuous mode [ 144.114659][ T7374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.132262][ T7676] loop4: detected capacity change from 0 to 128 [ 144.155428][ T7374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.186916][ T5425] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.245796][ T5425] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.262193][ T5425] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.271138][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.291004][ T7681] loop3: detected capacity change from 0 to 512 [ 144.311284][ T28] kauditd_printk_skb: 191 callbacks suppressed [ 144.311298][ T28] audit: type=1400 audit(1771868797.153:7979): avc: denied { mounton } for pid=7374 comm="syz-executor" path="/root/syzkaller.VSsuOM/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 144.313980][ T7681] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 144.329995][ T28] audit: type=1400 audit(1771868797.173:7980): avc: denied { mount } for pid=7374 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.399786][ T28] audit: type=1400 audit(1771868797.173:7981): avc: denied { mount } for pid=7374 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 144.424253][ T28] audit: type=1400 audit(1771868797.173:7982): avc: denied { mounton } for pid=7374 comm="syz-executor" path="/root/syzkaller.VSsuOM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 144.451596][ T28] audit: type=1400 audit(1771868797.173:7983): avc: denied { mounton } for pid=7374 comm="syz-executor" path="/root/syzkaller.VSsuOM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 144.479462][ T7681] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 144.488019][ T28] audit: type=1400 audit(1771868797.243:7984): avc: denied { mounton } for pid=7374 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 144.494137][ T7681] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1228: bad orphan inode 4 [ 144.511080][ T28] audit: type=1400 audit(1771868797.243:7985): avc: denied { mount } for pid=7374 comm="syz-executor" name="/" dev="gadgetfs" ino=4525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 144.552483][ T7689] syz.4.1225: attempt to access beyond end of device [ 144.552483][ T7689] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 144.572620][ T7681] loop3: lost filesystem error report for type 5 error -117 [ 144.573073][ T7681] EXT4-fs (loop3): 1 orphan inode deleted [ 144.586254][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 144.586273][ C1] EXT4-fs (loop3): initial error at time 1771868797: ext4_orphan_get:1417 [ 144.586311][ C1] EXT4-fs (loop3): last error at time 1771868797: ext4_orphan_get:1417 [ 144.624254][ T7681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.887370][ T7700] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 4: comm syz.3.1228: lblock 0 mapped to illegal pblock 4 (length 1) [ 145.380140][ T7702] loop6: detected capacity change from 0 to 128 [ 145.445146][ T7703] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.1154'. [ 145.454516][ T7703] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.1154'. [ 145.500115][ T7704] vhci_hcd vhci_hcd.4: invalid port number 254 [ 145.506535][ T7704] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 145.777810][ T5428] kworker/u8:13: attempt to access beyond end of device [ 145.777810][ T5428] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 145.801842][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.854232][ T28] audit: type=1400 audit(1771868798.693:7986): avc: denied { ioctl } for pid=7709 comm="syz.4.1234" path="socket:[19674]" dev="sockfs" ino=19674 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.015552][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.067776][ T7722] bridge_slave_1: left allmulticast mode [ 146.076828][ T7722] bridge_slave_1: left promiscuous mode [ 146.100042][ T7735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7735 comm=syz.5.1238 [ 146.103286][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.162519][ T28] audit: type=1400 audit(1771868799.004:7987): avc: denied { create } for pid=7721 comm="syz.3.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.185586][ T7719] netlink: 'syz.5.1238': attribute type 4 has an invalid length. [ 146.199273][ T7743] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.227477][ T7740] loop6: detected capacity change from 0 to 8192 [ 146.235390][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 146.244736][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 146.270137][ T7740] FAT-fs (loop6): bogus logical sector size 0 [ 146.277284][ T7740] FAT-fs (loop6): Can't find a valid FAT filesystem [ 146.317694][ T28] audit: type=1400 audit(1771868799.154:7988): avc: denied { write } for pid=7745 comm="syz.5.1246" path="socket:[19732]" dev="sockfs" ino=19732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 146.347553][ T7746] loop5: detected capacity change from 0 to 512 [ 146.371291][ T7746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.387623][ T7746] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.455406][ T7757] loop6: detected capacity change from 0 to 512 [ 146.478986][ T7757] ext4: Unknown parameter 'fowner' [ 146.500452][ T4370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.570274][ T7760] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 146.682892][ T7767] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 146.787900][ T7774] loop4: detected capacity change from 0 to 256 [ 146.812131][ T7773] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 146.838687][ T7773] FAT-fs (loop4): Filesystem has been set read-only [ 146.851086][ T7773] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 146.859963][ T7773] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 146.873589][ T7773] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 146.884174][ T7773] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 146.893253][ T7773] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 146.916581][ T7773] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 146.935746][ T7773] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 146.944634][ T7780] netlink: 'syz.3.1258': attribute type 2 has an invalid length. [ 146.944996][ T7773] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 147.011204][ T7773] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 147.029780][ T7791] loop5: detected capacity change from 0 to 512 [ 147.042621][ T7791] msdos: Bad value for 'dmask' [ 147.134616][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'. [ 147.215048][ T7805] loop3: detected capacity change from 0 to 256 [ 147.257835][ T7805] vfat: Deprecated parameter 'posix' [ 147.279956][ T7807] syzkaller0: entered promiscuous mode [ 147.285888][ T7807] syzkaller0: entered allmulticast mode [ 147.300044][ T7805] FAT-fs: "posix" option is obsolete, not supported now [ 147.373908][ T7809] loop6: detected capacity change from 0 to 1024 [ 147.406712][ T7809] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 147.500524][ T7810] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 147.680469][ T7805] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 147.699265][ T7817] loop4: detected capacity change from 0 to 512 [ 147.712855][ T7805] batadv_slave_0: entered promiscuous mode [ 147.718808][ T7805] batadv_slave_0: left promiscuous mode [ 147.740276][ T7817] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 147.750848][ T7805] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 147.770471][ T7817] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 147.794107][ T7817] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1271: bad orphan inode 4 [ 147.828001][ T7825] loop5: detected capacity change from 0 to 1024 [ 147.835259][ T7825] EXT4-fs: inline encryption not supported [ 147.841641][ T7825] EXT4-fs: Invalid want_extra_isize 32767 [ 147.843500][ T7817] loop4: lost filesystem error report for type 5 error -117 [ 147.879711][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 147.893548][ C1] EXT4-fs (loop4): initial error at time 1771868800: ext4_orphan_get:1417 [ 147.902139][ C1] EXT4-fs (loop4): last error at time 1771868800: ext4_orphan_get:1417 [ 147.928744][ T7817] EXT4-fs (loop4): 1 orphan inode deleted [ 147.936839][ T7817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.133358][ T7844] msdos: Bad value for 'dmask' [ 148.293173][ T7856] macvtap1: entered promiscuous mode [ 148.326683][ T7856] bond0: entered promiscuous mode [ 148.338862][ T7856] macvtap1: entered allmulticast mode [ 148.356805][ T7856] bond0: entered allmulticast mode [ 148.364283][ T7856] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 148.409959][ T7856] bond0: left allmulticast mode [ 148.415114][ T7856] bond0: left promiscuous mode [ 148.453100][ T7869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.523124][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'. [ 148.620361][ T7878] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1280'. [ 148.629795][ T7878] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1280'. [ 148.674415][ T7879] vhci_hcd vhci_hcd.4: invalid port number 254 [ 148.680745][ T7879] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 150.484419][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.535291][ T7987] set_capacity_and_notify: 3 callbacks suppressed [ 150.535309][ T7987] loop3: detected capacity change from 0 to 128 [ 150.625905][ T7374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.696907][ T8008] loop6: detected capacity change from 0 to 2048 [ 150.720726][ T8008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.745478][ T8008] netlink: 'syz.6.1288': attribute type 21 has an invalid length. [ 150.778002][ T8008] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.786022][ T8008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.793299][ T8008] IPv6: NLM_F_CREATE should be set when creating new route [ 150.793321][ T8008] IPv6: NLM_F_CREATE should be set when creating new route [ 150.807767][ T8008] IPv6: NLM_F_CREATE should be set when creating new route [ 150.892739][ T8008] ip6_vti0 speed is unknown, defaulting to 1000 [ 151.055948][ T8008] lo speed is unknown, defaulting to 1000 [ 151.177371][ T8006] syz.3.1284: attempt to access beyond end of device [ 151.177371][ T8006] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 151.204958][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 151.204974][ T28] audit: type=1400 audit(1771868804.046:7996): avc: denied { connect } for pid=8025 comm="syz.0.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 151.213167][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1294'. [ 151.263963][ T139] kworker/u8:5: attempt to access beyond end of device [ 151.263963][ T139] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 151.296195][ T28] audit: type=1400 audit(1771868804.136:7997): avc: denied { map } for pid=8007 comm="syz.6.1288" path="/9/bus/blkio.bfq.io_wait_time_recursive" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 151.408065][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'. [ 151.447610][ T28] audit: type=1400 audit(1771868804.266:7998): avc: denied { create } for pid=8039 comm="syz.3.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 151.471117][ T28] audit: type=1400 audit(1771868804.266:7999): avc: denied { getopt } for pid=8039 comm="syz.3.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 151.503933][ T28] audit: type=1400 audit(1771868804.276:8000): avc: denied { accept } for pid=8039 comm="syz.3.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.550533][ T7374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.689684][ T8049] loop4: detected capacity change from 0 to 512 [ 151.699726][ T8049] EXT4-fs: Ignoring removed i_version option [ 151.705755][ T8049] EXT4-fs: Ignoring removed nobh option [ 151.794102][ T8051] loop3: detected capacity change from 0 to 128 [ 151.806811][ T8051] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1300'. [ 151.816174][ T8051] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1300'. [ 151.861432][ T8052] vhci_hcd vhci_hcd.4: invalid port number 254 [ 151.867734][ T8052] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 152.066287][ T28] audit: type=1400 audit(1771868804.906:8001): avc: denied { setopt } for pid=8053 comm="syz.6.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.087694][ T28] audit: type=1400 audit(1771868804.926:8002): avc: denied { ioctl } for pid=8053 comm="syz.6.1299" path="socket:[19992]" dev="sockfs" ino=19992 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.397063][ T8049] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.412297][ T8049] EXT4-fs (loop4): 1 truncate cleaned up [ 152.422243][ T8049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.538513][ T8071] loop3: detected capacity change from 0 to 128 [ 152.667359][ T28] audit: type=1400 audit(1771868805.507:8003): avc: denied { bind } for pid=8067 comm="syz.6.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.729280][ T8085] loop5: detected capacity change from 0 to 4096 [ 152.781153][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.806714][ T8085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.831559][ T8085] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1311: corrupted in-inode xattr: bad e_name length [ 153.137593][ T8094] loop3: detected capacity change from 0 to 256 [ 153.222101][ T8093] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 153.460856][ T8099] sd 0:0:1:0: device reset [ 153.470200][ T28] audit: type=1400 audit(1771868806.317:8004): avc: denied { mounton } for pid=8081 comm="syz.5.1311" path="/194/file1/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.594780][ T8108] ip6_vti0 speed is unknown, defaulting to 1000 [ 153.648056][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1316'. [ 153.675386][ T8108] lo speed is unknown, defaulting to 1000 [ 153.840512][ T4370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.852793][ T8113] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1319'. [ 154.034185][ T28] audit: type=1400 audit(1771868806.877:8005): avc: denied { bind } for pid=8130 comm="syz.5.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.079812][ T8138] delete_channel: no stack [ 154.425069][ T8171] netlink: 'syz.5.1341': attribute type 1 has an invalid length. [ 154.433251][ T8171] netlink: 'syz.5.1341': attribute type 2 has an invalid length. [ 154.458567][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1341'. [ 154.559194][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1339'. [ 154.582812][ T8183] loop5: detected capacity change from 0 to 512 [ 154.609580][ T8183] EXT4-fs: Ignoring removed bh option [ 154.643632][ T8183] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 154.786946][ T8183] EXT4-fs (loop5): 1 truncate cleaned up [ 154.796981][ T8183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.872901][ T8199] netlink: 'syz.0.1346': attribute type 29 has an invalid length. [ 155.028579][ T8199] netlink: 'syz.0.1346': attribute type 29 has an invalid length. [ 155.053545][ T8199] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1346'. [ 155.076889][ T8207] loop4: detected capacity change from 0 to 1024 [ 155.111282][ T8207] EXT4-fs: inline encryption not supported [ 155.128272][ T8207] EXT4-fs: inline encryption not supported [ 155.137272][ T8207] EXT4-fs: Mount option(s) incompatible with ext2 [ 155.151296][ T4370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.227461][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1350'. [ 155.239456][ T8221] loop3: detected capacity change from 0 to 128 [ 155.353599][ T8232] syz.3.1352: attempt to access beyond end of device [ 155.353599][ T8232] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 155.390405][ T8232] syz.3.1352: attempt to access beyond end of device [ 155.390405][ T8232] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 155.426832][ T8225] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.1354: corrupted inode contents [ 155.439017][ T8225] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.439293][ T8225] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #3: comm syz.5.1354: mark_inode_dirty error [ 155.448968][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 155.448989][ C1] EXT4-fs (loop5): initial error at time 1771868808: ext4_do_update_inode:5569: inode 3 [ 155.449010][ T8232] syz.3.1352: attempt to access beyond end of device [ 155.449010][ T8232] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 155.449025][ C1] EXT4-fs (loop5): last error at time 1771868808: ext4_do_update_inode:5569: inode 3 [ 155.449067][ T8232] syz.3.1352: attempt to access beyond end of device [ 155.449067][ T8232] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 155.449079][ C1] [ 155.449113][ T8232] syz.3.1352: attempt to access beyond end of device [ 155.449113][ T8232] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 155.449149][ T8232] syz.3.1352: attempt to access beyond end of device [ 155.449149][ T8232] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 155.470799][ T8225] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.552121][ T8229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.578047][ T8232] syz.3.1352: attempt to access beyond end of device [ 155.578047][ T8232] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 155.596378][ T8225] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.1354: corrupted inode contents [ 155.602039][ T8232] syz.3.1352: attempt to access beyond end of device [ 155.602039][ T8232] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 155.673327][ T8225] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.673512][ T8225] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.1354: mark_inode_dirty error [ 155.725894][ T8225] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.728199][ T8225] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1354: Failed to acquire dquot type 0 [ 155.752654][ T8229] netlink: 'syz.6.1348': attribute type 21 has an invalid length. [ 155.825798][ T8225] loop5: lost filesystem error report for type 5 error -117 [ 155.842709][ T8225] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1354: corrupted inode contents [ 155.869373][ T8264] syzkaller0: entered promiscuous mode [ 155.874973][ T8264] syzkaller0: entered allmulticast mode [ 155.883044][ T8264] net_ratelimit: 159 callbacks suppressed [ 155.883062][ T8264] 0: reclassify loop, rule prio 0, protocol 800 [ 155.914389][ T8225] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 155.925142][ T8225] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.1354: mark_inode_dirty error [ 155.965769][ T8225] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 155.966245][ T8225] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1354: corrupted inode contents [ 156.013655][ T8225] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 156.020106][ T8225] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1354: mark_inode_dirty error [ 156.067546][ T8229] wireguard0: entered promiscuous mode [ 156.073100][ T8229] wireguard0: entered allmulticast mode [ 156.080833][ T8225] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 156.081372][ T8225] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1354: corrupted inode contents [ 156.103031][ T8225] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 156.116145][ T8225] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 156.144264][ T8225] loop5: lost filesystem error report for type 5 error -117 [ 156.144547][ T8225] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1354: corrupted inode contents [ 156.168255][ T8225] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 156.168577][ T8225] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.1354: mark_inode_dirty error [ 156.249963][ T8225] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 156.267976][ T8273] ip6_vti0 speed is unknown, defaulting to 1000 [ 156.295936][ T7374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.315632][ T8225] loop5: lost filesystem error report for type 5 error -117 [ 156.316201][ T8225] EXT4-fs (loop5): 1 truncate cleaned up [ 156.380211][ T8225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.425554][ T8225] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.481792][ T8273] lo speed is unknown, defaulting to 1000 [ 156.572303][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 156.572321][ T28] audit: type=1400 audit(1771868809.419:8042): avc: denied { kexec_image_load } for pid=8274 comm="syz.3.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 156.607771][ T8300] set_capacity_and_notify: 2 callbacks suppressed [ 156.607791][ T8300] loop6: detected capacity change from 0 to 512 [ 156.674271][ T8300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.713741][ T8300] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.788412][ T28] audit: type=1400 audit(1771868809.639:8043): avc: denied { create } for pid=8299 comm="syz.6.1366" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 156.831467][ T8308] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz.6.1366: directory missing '..' [ 156.963181][ T28] audit: type=1400 audit(1771868809.679:8044): avc: denied { rename } for pid=8299 comm="syz.6.1366" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 157.008756][ T28] audit: type=1400 audit(1771868809.679:8045): avc: denied { rmdir } for pid=8299 comm="syz.6.1366" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.032366][ T28] audit: type=1400 audit(1771868809.719:8046): avc: denied { cmd } for pid=8299 comm="syz.6.1366" path="socket:[20347]" dev="sockfs" ino=20347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 157.083434][ T8320] random: crng reseeded on system resumption [ 157.085580][ T28] audit: type=1400 audit(1771868809.929:8047): avc: denied { write } for pid=8318 comm="syz.3.1373" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 157.142894][ T28] audit: type=1400 audit(1771868809.929:8048): avc: denied { open } for pid=8318 comm="syz.3.1373" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 157.205492][ T8320] loop3: detected capacity change from 0 to 512 [ 157.220448][ T8320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.270484][ T4370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.287510][ T8320] Restarting kernel threads ... [ 157.295067][ T28] audit: type=1400 audit(1771868810.139:8049): avc: denied { ioctl } for pid=8318 comm="syz.3.1373" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 157.320898][ T8320] Done restarting kernel threads. [ 157.414597][ T8328] program syz.4.1374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.599297][ T7374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.804385][ T28] audit: type=1400 audit(1771868810.259:8050): avc: denied { append } for pid=8321 comm="syz.4.1374" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 157.855074][ T28] audit: type=1400 audit(1771868810.419:8051): avc: denied { create } for pid=8327 comm="syz.5.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.878232][ T8335] __nla_validate_parse: 5 callbacks suppressed [ 157.878249][ T8335] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1377'. [ 158.079355][ T8345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1380'. [ 158.192112][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.329598][ T8354] syzkaller1: entered promiscuous mode [ 158.344272][ T8357] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 158.358900][ T8354] syzkaller1: entered allmulticast mode [ 158.379875][ T8361] loop6: detected capacity change from 0 to 512 [ 158.389941][ T8361] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 158.416929][ T8361] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 158.431555][ T8361] System zones: 1-12 [ 158.438786][ T8361] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1386: corrupted in-inode xattr: e_value size too large [ 158.463304][ T8361] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1386: couldn't read orphan inode 15 (err -117) [ 158.475204][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 158.475242][ C0] EXT4-fs (loop6): initial error at time 1771868811: ext4_iget_extra_inode:5025: inode 15 [ 158.475280][ C0] EXT4-fs (loop6): last error at time 1771868811: ext4_iget_extra_inode:5025: inode 15 [ 158.526900][ T8370] tipc: Started in network mode [ 158.532335][ T8361] loop6: lost filesystem error report for type 5 error -117 [ 158.532875][ T8361] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.558884][ T8370] tipc: Node identity 266d3fa79592, cluster identity 4711 [ 158.569729][ T8370] tipc: Enabled bearer , priority 0 [ 158.592550][ T8373] syzkaller0: entered promiscuous mode [ 158.604414][ T8373] syzkaller0: entered allmulticast mode [ 158.619887][ T7374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.635547][ T8370] tipc: Resetting bearer [ 158.648650][ T8356] ip6_vti0 speed is unknown, defaulting to 1000 [ 158.661093][ T8369] tipc: Resetting bearer [ 158.669637][ T8369] tipc: Disabling bearer [ 158.710408][ T8356] lo speed is unknown, defaulting to 1000 [ 158.777688][ T8381] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 158.825176][ T8356] chnl_net:caif_netlink_parms(): no params data found [ 158.967198][ T8356] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.988204][ T8356] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.007481][ T8356] bridge_slave_0: entered allmulticast mode [ 159.018431][ T8356] bridge_slave_0: entered promiscuous mode [ 159.027866][ T8356] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.035214][ T8356] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.042997][ T8356] bridge_slave_1: entered allmulticast mode [ 159.051884][ T8356] bridge_slave_1: entered promiscuous mode [ 159.183380][ T8356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.197636][ T8356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.284820][ T8356] team0: Port device team_slave_0 added [ 159.310902][ T8356] team0: Port device team_slave_1 added [ 159.405146][ T8356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.433996][ T8356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.647029][ T8356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.759064][ T8356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.814015][ T8356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.866593][ T8413] loop4: detected capacity change from 0 to 256 [ 159.915042][ T8356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.930930][ T8413] FAT-fs (loop4): IO charset macgaelic not found [ 160.024895][ T8356] hsr_slave_0: entered promiscuous mode [ 160.041354][ T8356] hsr_slave_1: entered promiscuous mode [ 160.053716][ T8356] debugfs: 'hsr0' already exists in 'hsr' [ 160.063863][ T8356] Cannot create hsr debugfs directory [ 160.360108][ T8356] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.396476][ T8423] loop3: detected capacity change from 0 to 512 [ 160.489621][ T8356] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.511561][ T8423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.609914][ T8423] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.667698][ T8356] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.862237][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.892815][ T8356] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.029621][ T8356] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.057314][ T8356] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.093748][ T8356] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 161.115322][ T8356] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.364254][ T8356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.402670][ T8356] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.423899][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.431031][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.489607][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.496756][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.560247][ T8356] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.601136][ T8356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.747636][ T8356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.260612][ T8460] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1410'. [ 162.425424][ T8467] IPVS: set_ctl: invalid protocol: 12 100.1.1.1:20002 [ 162.556506][ T8470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1414'. [ 162.644689][ T8356] veth0_vlan: entered promiscuous mode [ 162.683225][ T8356] veth1_vlan: entered promiscuous mode [ 162.800255][ T8356] veth0_macvtap: entered promiscuous mode [ 162.824391][ T8356] veth1_macvtap: entered promiscuous mode [ 162.836600][ T8356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.864648][ T8356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.944626][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.955512][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.973479][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.982387][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.992047][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 162.992063][ T28] audit: type=1400 audit(1771869071.823:8060): avc: denied { ioctl } for pid=8482 comm="syz.4.1421" path="socket:[20687]" dev="sockfs" ino=20687 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 163.419517][ T28] audit: type=1400 audit(1771869072.263:8061): avc: denied { write } for pid=8496 comm="syz.6.1422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 163.843429][ T28] audit: type=1400 audit(1771869072.683:8062): avc: denied { setopt } for pid=8492 comm="syz.5.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.950861][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.982113][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.312459][ T8522] loop4: detected capacity change from 0 to 256 [ 164.389890][ T8522] FAT-fs (loop4): codepage cp950 not found [ 164.557052][ T8527] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 164.704673][ T8533] loop6: detected capacity change from 0 to 256 [ 164.848539][ T8533] FAT-fs (loop6): codepage cp862 not found [ 165.616612][ T8545] program syz.4.1441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.781304][ T28] audit: type=1400 audit(1771869074.623:8063): avc: denied { setopt } for pid=8546 comm="syz.4.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.022442][ T8557] loop6: detected capacity change from 0 to 512 [ 166.059414][ T8557] EXT4-fs: Ignoring removed i_version option [ 166.113848][ T8557] EXT4-fs: Ignoring removed bh option [ 166.154281][ T8557] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.196275][ T8557] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.496109][ T7374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.313263][ T28] audit: type=1400 audit(1771869077.153:8064): avc: denied { name_bind } for pid=8596 comm="syz.4.1461" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 168.502560][ T8605] loop4: detected capacity change from 0 to 1024 [ 168.516357][ T8605] EXT4-fs: inline encryption not supported [ 168.531588][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1456'. [ 168.583632][ T8605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.656802][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.770589][ T28] audit: type=1400 audit(1771869077.613:8065): avc: denied { read } for pid=8625 comm="syz.3.1467" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.849978][ T8631] loop3: detected capacity change from 0 to 164 [ 168.919184][ T8633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.948152][ T8633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.195790][ T28] audit: type=1400 audit(1771869078.043:8066): avc: denied { getopt } for pid=8641 comm="syz.0.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.267522][ T8645] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 169.267522][ T8645] program syz.5.1471 not setting count and/or reply_len properly [ 169.324383][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 169.334368][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 169.395937][ T8649] xt_cgroup: invalid path, errno=-2 [ 169.869891][ T7374] ================================================================== [ 169.878061][ T7374] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 169.886054][ T7374] [ 169.888418][ T7374] read-write to 0xffff88811d47d3b8 of 8 bytes by task 8628 on cpu 0: [ 169.896508][ T7374] shmem_add_to_page_cache+0x4b2/0x5b0 [ 169.902020][ T7374] shmem_get_folio_gfp+0x4f3/0xd60 [ 169.907171][ T7374] shmem_write_begin+0xfc/0x1f0 [ 169.912068][ T7374] generic_perform_write+0x183/0x490 [ 169.917389][ T7374] shmem_file_write_iter+0xc5/0xf0 [ 169.922544][ T7374] __kernel_write_iter+0x319/0x590 [ 169.927700][ T7374] dump_user_range+0xa7d/0xdb0 [ 169.932492][ T7374] elf_core_dump+0x21a2/0x2330 [ 169.937300][ T7374] coredump_write+0xacc/0xdd0 [ 169.942022][ T7374] vfs_coredump+0x26c7/0x3130 [ 169.946732][ T7374] get_signal+0xd80/0xf60 [ 169.951116][ T7374] arch_do_signal_or_restart+0x96/0x450 [ 169.956711][ T7374] irqentry_exit+0xf7/0x520 [ 169.961251][ T7374] asm_exc_page_fault+0x26/0x30 [ 169.966167][ T7374] [ 169.968513][ T7374] read to 0xffff88811d47d3b8 of 8 bytes by task 7374 on cpu 1: [ 169.976178][ T7374] shmem_getattr+0x68/0x200 [ 169.980738][ T7374] vfs_getattr_nosec+0x146/0x1e0 [ 169.985720][ T7374] vfs_getattr+0x48/0x60 [ 169.989991][ T7374] vfs_statx_path+0x28/0x140 [ 169.995159][ T7374] vfs_statx+0xc4/0x170 [ 169.999352][ T7374] vfs_fstatat+0x118/0x170 [ 170.003808][ T7374] __se_sys_newfstatat+0x55/0x3e0 [ 170.008878][ T7374] __x64_sys_newfstatat+0x55/0x70 [ 170.013943][ T7374] x64_sys_call+0x2c64/0x3020 [ 170.018660][ T7374] do_syscall_64+0x12c/0x370 [ 170.023292][ T7374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.029219][ T7374] [ 170.031565][ T7374] value changed: 0x0000000000003893 -> 0x0000000000003895 [ 170.038703][ T7374] [ 170.041050][ T7374] Reported by Kernel Concurrency Sanitizer on: [ 170.047241][ T7374] CPU: 1 UID: 0 PID: 7374 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 170.058307][ T7374] Tainted: [W]=WARN [ 170.062176][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.072278][ T7374] ==================================================================