last executing test programs: 10m21.307538128s ago: executing program 32 (id=1374): r0 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1404, &(0x7f0000004d40)=ANY=[@ANYBLOB="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"]) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[], 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00001bbbad5e00", "a4a29fc056ff9a20f4a86004353069db721b0f7962cba47da6a163ed9db4e6f1", "235883a9", "db03265fc16fbbe1"}, 0x38) syz_io_uring_setup(0x64a, &(0x7f0000000400)={0x0, 0x69f0, 0x0, 0x1, 0x284, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0x25, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x196, 0x4fc, 0x5d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0xdd, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x8000, 0x6, 0x1, {0x22, 0x36f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x10, 0x7, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x32, 0xfb, 0x8}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x1, 0x6, 0x7, 0x20, 0xc7}, 0x3c, &(0x7f0000000140)={0x5, 0xf, 0x3c, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0xe, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x1, 0xff00, 0x7, [0xbfb29c20496fefda, 0xc0ff, 0xc0]}, @ssp_cap={0x18, 0x10, 0xa, 0xee, 0x3, 0x6, 0x78f, 0xfffd, [0xff0000, 0x30, 0x3fc0]}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4c0a}}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000003c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "f77ef089", {0x3, 0x2, 0x0, 0x5, 0xfcb, 0x7, 0x2}}) 7m58.161643588s ago: executing program 33 (id=2374): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc4, &(0x7f0000000340)=""/196, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x4010, r2, 0xfffffffffffff000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c}) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') setns(r5, 0x0) tgkill(0x0, 0x0, 0x6) 7m29.477559255s ago: executing program 34 (id=2557): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0xb60e}, 0x9092, 0x0, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) pwrite64(r0, &(0x7f0000000180)="bdd06be700c70d24c3248c5c58fc755c2971e7b2029310ea8af63191cf64a4c9e6eec19d", 0x24, 0xd6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b800800090003"], 0x184}}, 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x2, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) pread64(r4, &(0x7f0000000600)=""/151, 0x97, 0x59) 7m28.791496045s ago: executing program 35 (id=2565): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000880)={0xf, 0x8e, 0x20000}, 0x20) 7m23.683851546s ago: executing program 36 (id=2586): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10, &(0x7f0000006680)) (async) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 6m48.116403711s ago: executing program 37 (id=2785): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e29004218030018258000000000000002", 0x29}], 0x1}, 0x0) 2m40.08540239s ago: executing program 38 (id=4239): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x7ff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000200000800040001000000", 0x24) 2m2.009734199s ago: executing program 6 (id=4462): syz_emit_ethernet(0x85, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080047000030000000000106907864010101ac1414aa010707caffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c001baaf3000090780000e101be77b5f60a1647e1b264ce6146843c426ca01f6392bd1256e012a2370adf98e0ce25275ef7ca7a5e23910a8b9a8aa8825ba733df5702ac24b5643a52942750690000000000a79b6e019389f761cc5af84bcb214de5769ac8817c1c858e3f35e3b62df80875294ec36d2834c08b6cd972e0ff72c74346e31efb43f48c70d46c6955adc72791751680"], 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x21, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0xe0, 0x21, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="91106b00000000009500000000000000fa2e602f18fb91d5491093a5b5d88d5e274ac73cc28e6dc7e62baba45bf7ed715f834afb29e2d59b4815244208cf4626f67c9c1946895a20f80bb890018b880f4ce8368d7d038a77e1fd4d3ddbfe6b00000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10008, 0x8, 0x1, 0x5, 0x20009, 0x1b, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x5, 0x0, 0x1534a1bca631fc4, 0xfc8, 0x20c202a1, r5}) write$binfmt_elf32(r3, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x1c, 0x2, 0x8, 0x401, 0x2, 0x3, 0x4, 0x1ff, 0x38, 0x165, 0xfffffff9, 0xfff7, 0x20, 0x0, 0xe, 0x2, 0x7}, [], "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1538) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89fc, &(0x7f0000000080)) r7 = socket(0x840000000002, 0x1, 0xfffffb31) sendmmsg$inet(r7, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="a905000000007464000100000000000000e5c09a0349f9cd417e5d4c8ba3d218c4f7e4ebebee6335ac4ca8c4e946", 0x2e}], 0x1}}], 0x1, 0x24004044) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007"], 0x1c}, 0x1, 0xfff0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x83, &(0x7f0000000140)={r11}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000100)={r11, 0x7}, 0x8) 2m1.115271041s ago: executing program 6 (id=4469): ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x4a1002, 0x0) unshare(0x80) open_by_handle_at(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="08000000fe0000003c40000000000000"], 0x745c00) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 2m0.053320103s ago: executing program 4 (id=4473): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f0000002280)={'syzkaller0\x00'}) 1m59.904338782s ago: executing program 6 (id=4474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000206010a000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008001340000003fd9a8457ae6718ef1a646114d2180426169a1c6944d58b7369712afe663d863c9727c82f1b75ebc582463e11c2e0cce5d7443ca3bb8a869b9b9e12"], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2, 0x0, 0x3}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1m59.620813948s ago: executing program 4 (id=4476): rmdir(&(0x7f0000004340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = io_uring_setup(0x332f, &(0x7f0000004680)={0x0, 0xeddc, 0x2, 0x2, 0x100}) io_uring_enter(r0, 0x4520, 0x6fdd, 0x4d, 0x0, 0x0) munlockall() r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x28000600) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES64=r6], 0x60}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x38, r7, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x38}}, 0x4000040) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) listen(r9, 0x8) mount$9p_fd(0x0, &(0x7f0000000480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200), 0x80, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noxattr}], [{@obj_type={'obj_type', 0x3d, '&-}#z-}^-\'$(W&\\-)'}}, {@seclabel}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r10, @in={{0x2, 0x4e20, @empty}}, 0x8, 0x5}, &(0x7f0000000000)=0x90) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) 1m59.411145771s ago: executing program 6 (id=4478): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[], 0x1, 0x291, &(0x7f0000000280)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x0, 0xbc, 0x0, 0x1, 0xfffffffc}, 0x28) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r0, 0xfffffffffffffffe, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r1, 0x0, 0x0, 0x40, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x22, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000140)={0x2, 0x6}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) 1m58.925327639s ago: executing program 4 (id=4482): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x7, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_int(r0, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) get_mempolicy(0x0, &(0x7f00000001c0), 0x4, &(0x7f0000001000/0x1000)=nil, 0x1) r2 = socket$inet6(0xa, 0x3, 0x1) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96}) 1m58.887788472s ago: executing program 6 (id=4483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x6, 0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m58.606180268s ago: executing program 6 (id=4485): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[], 0x1, 0x291, &(0x7f0000000280)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) 1m58.507691663s ago: executing program 39 (id=4485): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[], 0x1, 0x291, &(0x7f0000000280)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) 1m57.464516215s ago: executing program 4 (id=4493): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[], 0x1, 0x291, &(0x7f0000000280)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x0, 0xbc, 0x0, 0x1, 0xfffffffc}, 0x28) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r0, 0xfffffffffffffffe, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r1, 0x0, 0x0, 0x40, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x22, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000140)={0x2, 0x6}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) 1m57.03873862s ago: executing program 7 (id=4495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x6, 0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m57.03015502s ago: executing program 4 (id=4496): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x100270566b3, 0x1f0519, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefe, 0x1, @perf_bp={0x0}, 0x4, 0x7, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0xe, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x20000000000007, 0xa}, 0x110c, 0x10000, 0x33f8, 0x1, 0x400000000000006, 0x8020007, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, r0, 0x2) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 1m56.505130481s ago: executing program 4 (id=4499): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x100270566b3, 0x1f0519, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefe, 0x1, @perf_bp={0x0}, 0x4, 0x7, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0xe, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x20000000000007, 0xa}, 0x110c, 0x10000, 0x33f8, 0x1, 0x400000000000006, 0x8020007, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, r0, 0x2) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0xc00) r3 = gettid() fcntl$setown(r1, 0x8, r3) fcntl$setsig(r2, 0xa, 0xe) inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x6d}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x31, 0x7ff, 0x7, 0x3, 0x6, 0x12, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84a, 0x1, @perf_config_ext={0xffffffff, 0xe093}, 0x0, 0x0, 0x800000, 0x5, 0x2, 0xcb, 0xfffb, 0x0, 0x4, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) gettid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x282}], 0x1, 0x0, 0x0, 0x0) 1m56.422725026s ago: executing program 40 (id=4499): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x100270566b3, 0x1f0519, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefe, 0x1, @perf_bp={0x0}, 0x4, 0x7, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0xe, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x20000000000007, 0xa}, 0x110c, 0x10000, 0x33f8, 0x1, 0x400000000000006, 0x8020007, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, r0, 0x2) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0xc00) r3 = gettid() fcntl$setown(r1, 0x8, r3) fcntl$setsig(r2, 0xa, 0xe) inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x6d}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x31, 0x7ff, 0x7, 0x3, 0x6, 0x12, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84a, 0x1, @perf_config_ext={0xffffffff, 0xe093}, 0x0, 0x0, 0x800000, 0x5, 0x2, 0xcb, 0xfffb, 0x0, 0x4, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) gettid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x282}], 0x1, 0x0, 0x0, 0x0) 1m56.272159754s ago: executing program 7 (id=4501): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") 1m55.479252241s ago: executing program 7 (id=4504): openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x30}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) 1m54.947087132s ago: executing program 7 (id=4505): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[], 0x1, 0x291, &(0x7f0000000280)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x0, 0xbc, 0x0, 0x1, 0xfffffffc}, 0x28) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r0, 0xfffffffffffffffe, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r1, 0x0, 0x0, 0x40, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x22, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000140)={0x2, 0x6}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4, 0x8000000000000003, {}, 0xfd}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) 1m54.627816281s ago: executing program 7 (id=4508): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x100270566b3, 0x1f0519, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefe, 0x1, @perf_bp={0x0}, 0x4, 0x7, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0xe, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x20000000000007, 0xa}, 0x110c, 0x10000, 0x33f8, 0x1, 0x400000000000006, 0x8020007, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, r0, 0x2) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 1m53.861911215s ago: executing program 7 (id=4512): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x1, 0xff}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r2 = syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)=""/135, 0x87}], 0x1}) io_uring_enter(r2, 0x47ba, 0xeffd, 0x28, 0x0, 0x0) 1m53.860197635s ago: executing program 41 (id=4512): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x1, 0xff}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r2 = syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)=""/135, 0x87}], 0x1}) io_uring_enter(r2, 0x47ba, 0xeffd, 0x28, 0x0, 0x0) 1m45.833013386s ago: executing program 1 (id=4500): msgsnd(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0200e9ea"], 0x8, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x8, 0x800) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/4092}, 0x1004, 0xbd8e6b799bcfd099, 0x2800) 1m45.548093412s ago: executing program 1 (id=4538): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8c46, 0x0) r1 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x3, 0x171}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r0, 0xffff, 0x0}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 1m44.996114475s ago: executing program 1 (id=4542): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0x1de) pwrite64(r0, &(0x7f0000000480)='c', 0x1, 0x100006) 1m44.467466205s ago: executing program 1 (id=4547): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140)=0xffffffce, 0x4) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r2, 0x0, 0x141) 1m43.911356348s ago: executing program 1 (id=4550): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x92) getdents(r0, &(0x7f0000000080)=""/49, 0x31) getdents(r0, 0xfffffffffffffffd, 0x58) 1m43.114917625s ago: executing program 1 (id=4557): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0x1de) pwrite64(r0, &(0x7f0000000480)='c', 0x1, 0x100006) 1m43.02855262s ago: executing program 42 (id=4557): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0x1de) pwrite64(r0, &(0x7f0000000480)='c', 0x1, 0x100006) 1m30.823867314s ago: executing program 0 (id=4656): unshare(0x6020400) r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, 0x0, 0x4048806) bind$tipc(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1m30.186700631s ago: executing program 0 (id=4660): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m29.833041852s ago: executing program 0 (id=4662): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4008801}, 0x8880) 1m29.338730611s ago: executing program 0 (id=4666): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140)=0xffffffce, 0x4) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m28.742986145s ago: executing program 0 (id=4672): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x3, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m28.482389101s ago: executing program 0 (id=4675): ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f00000000c0)=0x3f00) 1m28.343186789s ago: executing program 43 (id=4675): ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f00000000c0)=0x3f00) 8.137744174s ago: executing program 3 (id=5216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x200026, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 7.287641904s ago: executing program 2 (id=5219): openat$tun(0xffffffffffffff9c, 0x0, 0x14a900, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@noauto_da_alloc}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x7fffffff}}, {@jqfmt_vfsv1}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@noquota}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000003800128009000100766c616e000000002800028006000100040000001c0003800c00010400000000010000000c000100f7ffffff0300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n', @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) 7.074203126s ago: executing program 3 (id=5220): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000000"], 0x48) setgroups(0x0, 0x0) read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0xc2, 0x2, 0xd, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x80, 0x700, 0xc4, 0x101}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x4, 0xfffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x9, 0x0, 0x80000000}}]}}}]}, 0x78}}, 0x8c0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x7800, 0x20, 0x8, 0x24, {{0x24, 0x4, 0x1, 0x3, 0x90, 0x68, 0x0, 0x7, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x44, 0xf7, 0x1, 0x0, [{@rand_addr=0x64010100, 0x1}, {@multicast2, 0x5}, {@remote, 0x6}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffa9}, {@empty, 0x1}]}, @timestamp_addr={0x44, 0xc, 0xbe, 0x1, 0xb, [{@broadcast, 0xc90d}]}, @rr={0x7, 0x7, 0xc0, [@broadcast]}, @timestamp={0x44, 0x24, 0x51, 0x0, 0x3, [0x8c2, 0x9, 0xffffffff, 0x81, 0xe3, 0x2, 0x1, 0xa]}]}}}}}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r6, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r6, 0x407, 0x7000000) write(r6, &(0x7f0000000280)='9f', 0x2) 6.285422833s ago: executing program 8 (id=5223): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 6.209248317s ago: executing program 2 (id=5224): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x2, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b8", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0xa}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.183416729s ago: executing program 9 (id=5225): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x100270566b3, 0x1f0519, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefe, 0x1, @perf_bp={0x0}, 0x4, 0x7, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0xe, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x20000000000007, 0xa}, 0x110c, 0x10000, 0x33f8, 0x1, 0x400000000000006, 0x8020007, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, r0, 0x2) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) inotify_init1(0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 5.716229186s ago: executing program 3 (id=5226): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") creat(&(0x7f0000010280)='./file0\x00', 0x182) mount(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x14c) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000400)=@random={'user.', 'ext4\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 5.671259698s ago: executing program 8 (id=5227): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_pidfd_open(0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x4000) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000a00", 0x1b) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 5.567127925s ago: executing program 2 (id=5228): writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='4', 0x1}, {0x0}], 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0)) pidfd_getfd(r2, r3, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1216, 0x0, 0x5, 0x6, 0xea64, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) getsockopt$inet_opts(r4, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) listen(r0, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x10, {[@sack_perm={0x4, 0x2}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x4, @empty, 0x4}]}}}}}}}}, 0x0) 4.659432138s ago: executing program 9 (id=5230): openat$tun(0xffffffffffffff9c, 0x0, 0x14a900, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@noauto_da_alloc}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x7fffffff}}, {@jqfmt_vfsv1}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@noquota}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000003800128009000100766c616e000000002800028006000100040000001c0003800c00010400000000010000000c000100f7ffffff0300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00', @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.62635925s ago: executing program 8 (id=5231): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000000"], 0x48) setgroups(0x0, 0x0) read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0xc2, 0x2, 0xd, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x80, 0x700, 0xc4, 0x101}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x4, 0xfffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x9, 0x0, 0x80000000}}]}}}]}, 0x78}}, 0x8c0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x7800, 0x20, 0x8, 0x24, {{0x24, 0x4, 0x1, 0x3, 0x90, 0x68, 0x0, 0x7, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x44, 0xf7, 0x1, 0x0, [{@rand_addr=0x64010100, 0x1}, {@multicast2, 0x5}, {@remote, 0x6}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffa9}, {@empty, 0x1}]}, @timestamp_addr={0x44, 0xc, 0xbe, 0x1, 0xb, [{@broadcast, 0xc90d}]}, @rr={0x7, 0x7, 0xc0, [@broadcast]}, @timestamp={0x44, 0x24, 0x51, 0x0, 0x3, [0x8c2, 0x9, 0xffffffff, 0x81, 0xe3, 0x2, 0x1, 0xa]}]}}}}}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r6, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r6, 0x407, 0x7000000) write(r6, 0x0, 0x0) 4.563842113s ago: executing program 2 (id=5232): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x100270566b3, 0x1f0519, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefe, 0x1, @perf_bp={0x0}, 0x4, 0x7, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0xe, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x20000000000007, 0xa}, 0x110c, 0x10000, 0x33f8, 0x1, 0x400000000000006, 0x8020007, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, r0, 0x2) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0xc00) gettid() fcntl$setsig(r2, 0xa, 0xe) inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x6d}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x31, 0x7ff, 0x7, 0x3, 0x6, 0x12, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84a, 0x1, @perf_config_ext={0xffffffff, 0xe093}, 0x0, 0x0, 0x800000, 0x5, 0x2, 0xcb, 0xfffb, 0x0, 0x4, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) ppoll(&(0x7f0000000080)=[{r5, 0x282}], 0x1, 0x0, 0x0, 0x0) 4.167788466s ago: executing program 3 (id=5233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x200026, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 3.792641728s ago: executing program 8 (id=5234): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) socket$inet6_sctp(0xa, 0x1, 0x84) msgsnd(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0200e9ea"], 0x8, 0x0) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/4092}, 0x1004, 0xbd8e6b799bcfd099, 0x2800) 3.76264118s ago: executing program 5 (id=5235): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x100270566b3, 0x1f0519, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefe, 0x1, @perf_bp={0x0}, 0x4, 0x7, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0xe, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x20000000000007, 0xa}, 0x110c, 0x10000, 0x33f8, 0x1, 0x400000000000006, 0x8020007, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, r0, 0x2) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) inotify_init1(0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 3.658290586s ago: executing program 9 (id=5236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x200026, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2.955076997s ago: executing program 5 (id=5237): writev(0xffffffffffffffff, &(0x7f0000000080)=[{}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18030000000000000000000000100000851400000600000018000000000000000000000000000000650000000000000018000000000000000000000000000000950000000000000004030000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0)) pidfd_getfd(r2, r3, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1216, 0x0, 0x5, 0x6, 0xea64, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) getsockopt$inet_opts(r4, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) listen(r0, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x10, {[@sack_perm={0x4, 0x2}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x4, @empty, 0x4}]}}}}}}}}, 0x0) 2.816333645s ago: executing program 2 (id=5238): ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x4a1002, 0x0) unshare(0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r1, 0x0, 0x745c00) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 2.504900534s ago: executing program 3 (id=5239): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x200026, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2.162813954s ago: executing program 5 (id=5240): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0xc}) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0xd, "0062ba7d820700000000000000000000096304"}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0xdacc, 0x8000000, {"ab2a4f21faeebdad8404bf9400000008"}, 0x8, 0x7, 0x2}}}, 0xa0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x400, 0x7, 0x8, 0x8, 0x9, "edbd952c25f77335"}) r2 = syz_open_pts(r0, 0x82080) dup3(r2, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) 2.019545112s ago: executing program 9 (id=5241): socket$nl_route(0x10, 0x3, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000500)=""/167) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 1.780141306s ago: executing program 5 (id=5242): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_pidfd_open(0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x4000) ioctl$TCFLSH(0xffffffffffffffff, 0x40085500, 0x100000) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000a00", 0x1b) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 1.476031364s ago: executing program 2 (id=5243): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) llistxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)=""/22, 0x16) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.214140049s ago: executing program 8 (id=5244): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x100270566b3, 0x1f0519, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefe, 0x1, @perf_bp={0x0}, 0x4, 0x7, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, r0, 0x2) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) inotify_init1(0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 1.19492557s ago: executing program 5 (id=5245): socket$nl_route(0x10, 0x3, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000500)=""/167) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 967.012394ms ago: executing program 3 (id=5246): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) syz_io_uring_setup(0x6209, 0x0, &(0x7f0000000400), &(0x7f0000000380)) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 930.471086ms ago: executing program 9 (id=5247): openat$tun(0xffffffffffffff9c, 0x0, 0x14a900, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@noauto_da_alloc}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x7fffffff}}, {@jqfmt_vfsv1}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@noquota}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000003800128009000100766c616e000000002800028006000100040000001c0003800c00010400000000010000000c000100f7ffffff0300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) 157.997431ms ago: executing program 8 (id=5248): ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x4a1002, 0x0) unshare(0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r1, 0x0, 0x745c00) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 86.777725ms ago: executing program 9 (id=5249): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x228000, 0x1000, 0x0, 0x4}, 0x20) close_range(r0, r0, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x3, 0xf7, 0x3, 0x9, 0x0, 0x8000, 0x45008, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x7}, 0x12, 0xc8b, 0x646b, 0x7, 0x4, 0x5, 0x8, 0x0, 0xff, 0x0, 0x4}, r5, 0x2, 0xffffffffffffffff, 0x9) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 0s ago: executing program 5 (id=5250): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = msgget$private(0x0, 0x421) msgsnd(r1, &(0x7f0000001200)=ANY=[@ANYBLOB="0200e9ea"], 0x8, 0x0) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x8, 0x800) msgrcv(r1, &(0x7f0000000280)={0x0, ""/4092}, 0x1004, 0xbd8e6b799bcfd099, 0x2800) kernel console output (not intermixed with test programs): T21140] loop5: detected capacity change from 0 to 128 [ 761.546438][T21132] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 761.568764][T21132] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.668571][T21144] syz.5.4935: attempt to access beyond end of device [ 761.668571][T21144] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 761.690104][T21132] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4934: bg 0: block 112: padding at end of block bitmap is not set [ 761.768165][T21132] EXT4-fs (loop9): Remounting filesystem read-only [ 761.838327][T21144] syz.5.4935: attempt to access beyond end of device [ 761.838327][T21144] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 761.878018][T21150] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4936'. [ 761.915938][T21144] syz.5.4935: attempt to access beyond end of device [ 761.915938][T21144] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 761.977204][T21144] syz.5.4935: attempt to access beyond end of device [ 761.977204][T21144] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 762.032587][T12252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 762.037427][T21144] syz.5.4935: attempt to access beyond end of device [ 762.037427][T21144] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 762.168604][T21144] syz.5.4935: attempt to access beyond end of device [ 762.168604][T21144] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 762.500404][T21160] syzkaller0: entered promiscuous mode [ 762.505930][T21160] syzkaller0: entered allmulticast mode [ 763.042226][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4946'. [ 763.089459][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4946'. [ 763.119788][T21189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.158833][T21189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.468628][T21199] loop9: detected capacity change from 0 to 1024 [ 763.558349][T21199] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 763.595161][T21206] loop5: detected capacity change from 0 to 128 [ 763.658434][T21199] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.698471][T21207] syz.5.4952: attempt to access beyond end of device [ 763.698471][T21207] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 763.790395][T21207] syz.5.4952: attempt to access beyond end of device [ 763.790395][T21207] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 763.812587][T21199] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4950: bg 0: block 112: padding at end of block bitmap is not set [ 763.870172][T21205] netlink: 27 bytes leftover after parsing attributes in process `syz.8.4951'. [ 763.901312][T21199] EXT4-fs (loop9): Remounting filesystem read-only [ 763.944361][T21207] syz.5.4952: attempt to access beyond end of device [ 763.944361][T21207] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 764.018402][ T28] kauditd_printk_skb: 1776 callbacks suppressed [ 764.018417][ T28] audit: type=1400 audit(1770691654.608:156341): avc: denied { ioctl } for pid=20077 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 764.078510][T21207] syz.5.4952: attempt to access beyond end of device [ 764.078510][T21207] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 764.164172][T12252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 764.176697][ T28] audit: type=1400 audit(1770691654.648:156342): avc: denied { map_create } for pid=21196 comm="syz.9.4950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 764.196216][ T28] audit: type=1400 audit(1770691654.648:156343): avc: denied { map_read map_write } for pid=21196 comm="syz.9.4950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 764.216365][ T28] audit: type=1400 audit(1770691654.648:156344): avc: denied { create } for pid=21214 comm="syz.2.4954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 764.237173][ T28] audit: type=1400 audit(1770691654.648:156345): avc: denied { write } for pid=21214 comm="syz.2.4954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 764.257805][ T28] audit: type=1400 audit(1770691654.648:156346): avc: denied { read } for pid=21214 comm="syz.2.4954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 764.278981][ T28] audit: type=1400 audit(1770691654.648:156347): avc: denied { read } for pid=21214 comm="syz.2.4954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 764.299574][ T28] audit: type=1400 audit(1770691654.658:156348): avc: denied { read write } for pid=19181 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 764.324065][ T28] audit: type=1400 audit(1770691654.658:156349): avc: denied { read write open } for pid=19181 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 764.349441][ T28] audit: type=1400 audit(1770691654.658:156350): avc: denied { ioctl } for pid=19181 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 764.516505][T21225] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 764.630819][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4959'. [ 764.649527][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4959'. [ 765.154048][T21245] xt_hashlimit: size too large, truncated to 1048576 [ 765.500484][T21258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.563363][T21258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.705012][T21257] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4965'. [ 765.782959][T21267] loop8: detected capacity change from 0 to 512 [ 765.855111][T21267] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 765.866671][T21267] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 765.876795][T21267] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4967: Corrupt directory, running e2fsck is recommended [ 765.928864][T21267] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 765.937163][T21267] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.4967: corrupted in-inode xattr: e_name out of bounds [ 765.951048][T21267] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 765.958325][T21267] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4967: couldn't read orphan inode 15 (err -117) [ 765.979298][T21267] loop8: lost filesystem error report for type 5 error -117 [ 766.000171][T21267] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.045007][T21274] loop2: detected capacity change from 0 to 128 [ 766.052249][T21267] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 766.063764][T21267] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 766.073885][T21267] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4967: Corrupt directory, running e2fsck is recommended [ 766.125298][T21276] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 766.136845][T21276] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 766.147014][T21276] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4967: Corrupt directory, running e2fsck is recommended [ 766.183383][T21267] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 766.194923][T21267] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 766.205015][T21267] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4967: Corrupt directory, running e2fsck is recommended [ 766.226086][T21267] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 766.324653][T20077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.594131][T21286] loop3: detected capacity change from 0 to 1764 [ 766.626412][T21288] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4973'. [ 766.689294][T21288] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4973'. [ 767.083992][T21302] loop5: detected capacity change from 0 to 128 [ 767.165198][T21302] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 767.313760][T21302] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.393081][T21303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=21303 comm=syz.8.4978 [ 767.463567][T18060] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 767.488310][T21313] loop9: detected capacity change from 0 to 512 [ 767.524406][T21313] EXT4-fs: Ignoring removed bh option [ 767.552593][T21313] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 767.591463][T21316] loop3: detected capacity change from 0 to 1024 [ 767.606900][T21313] EXT4-fs (loop9): 1 truncate cleaned up [ 767.613114][T21313] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.630081][T21316] EXT4-fs: Ignoring removed bh option [ 767.635570][T21316] EXT4-fs: inline encryption not supported [ 767.651806][T21316] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 767.688330][T21316] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 767.752247][T21316] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.4980: lblock 2 mapped to illegal pblock 2 (length 1) [ 767.760896][T12252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.766239][T21316] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 767.777599][T21316] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.4980: lblock 0 mapped to illegal pblock 48 (length 1) [ 767.801010][T21316] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 767.835428][T21316] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.4980: Failed to acquire dquot type 0 [ 767.855865][T21316] loop3: lost filesystem error report for type 5 error -117 [ 767.926704][T21326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.959442][T21316] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 767.968881][T21316] loop3: lost filesystem error report for type 5 error -117 [ 767.988447][T21326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.008363][T21316] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.4980: mark_inode_dirty error [ 768.019673][T21316] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 768.038036][T21316] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 768.098530][T21316] EXT4-fs (loop3): 1 orphan inode deleted [ 768.118053][T20577] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 768.132260][T20577] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 768.139077][T21316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.191130][T20577] EXT4-fs error (device loop3): ext4_release_dquot:7027: comm kworker/u8:3: Failed to release dquot type 0 [ 768.202595][T20577] loop3: lost filesystem error report for type 5 error -117 [ 768.247291][T21316] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 768.275779][T21316] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 768.310046][T21316] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 768.318213][T21316] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.4980: lblock 0 mapped to illegal pblock 48 (length 1) [ 768.369929][T21316] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 768.484850][T19181] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.669134][T21345] loop2: detected capacity change from 0 to 128 [ 768.760122][T21350] netlink: 'syz.9.4988': attribute type 10 has an invalid length. [ 768.805939][T21353] bio_check_eod: 17 callbacks suppressed [ 768.805957][T21353] syz.2.4986: attempt to access beyond end of device [ 768.805957][T21353] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 768.812085][T21349] loop3: detected capacity change from 0 to 1024 [ 768.870401][T21350] 8021q: adding VLAN 0 to HW filter on device bond10 [ 768.909679][T21353] syz.2.4986: attempt to access beyond end of device [ 768.909679][T21353] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 768.949697][T21349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 768.975457][T21350] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 768.995044][T21353] syz.2.4986: attempt to access beyond end of device [ 768.995044][T21353] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 769.018628][T21349] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.035710][ T28] kauditd_printk_skb: 1538 callbacks suppressed [ 769.035727][ T28] audit: type=1400 audit(1770691659.638:157783): avc: denied { read write } for pid=21362 comm="syz.5.4990" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 769.053076][T21353] syz.2.4986: attempt to access beyond end of device [ 769.053076][T21353] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 769.111975][T21353] syz.2.4986: attempt to access beyond end of device [ 769.111975][T21353] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 769.168228][ T28] audit: type=1400 audit(1770691659.638:157784): avc: denied { read open } for pid=21362 comm="syz.5.4990" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 769.192803][ T28] audit: type=1400 audit(1770691659.638:157785): avc: denied { read write } for pid=21348 comm="syz.3.4987" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 769.217161][ T28] audit: type=1400 audit(1770691659.638:157786): avc: denied { read write open } for pid=21348 comm="syz.3.4987" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 769.242340][ T28] audit: type=1400 audit(1770691659.648:157787): avc: denied { write } for pid=21352 comm="syz.8.4989" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 769.265866][ T28] audit: type=1400 audit(1770691659.648:157788): avc: denied { write open } for pid=21352 comm="syz.8.4989" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 769.268727][T21353] syz.2.4986: attempt to access beyond end of device [ 769.268727][T21353] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 769.291416][ T28] audit: type=1400 audit(1770691659.688:157789): avc: denied { ioctl } for pid=21362 comm="syz.5.4990" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 769.330309][ T28] audit: type=1400 audit(1770691659.688:157790): avc: denied { open } for pid=21348 comm="syz.3.4987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 769.340095][T21367] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4987: bg 0: block 112: padding at end of block bitmap is not set [ 769.349808][ T28] audit: type=1400 audit(1770691659.688:157791): avc: denied { perfmon } for pid=21348 comm="syz.3.4987" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 769.385199][ T28] audit: type=1400 audit(1770691659.698:157792): avc: denied { kernel } for pid=21348 comm="syz.3.4987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 769.422844][T21367] EXT4-fs (loop3): Remounting filesystem read-only [ 769.533729][T21353] syz.2.4986: attempt to access beyond end of device [ 769.533729][T21353] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 769.547511][T21353] syz.2.4986: attempt to access beyond end of device [ 769.547511][T21353] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 769.977513][T19181] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 770.278343][T21391] loop5: detected capacity change from 0 to 1024 [ 770.364892][T21391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.539306][T21399] loop3: detected capacity change from 0 to 1024 [ 770.629842][T21399] EXT4-fs: Ignoring removed bh option [ 770.635343][T21399] EXT4-fs: inline encryption not supported [ 770.650568][T21406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=21406 comm=syz.2.4998 [ 770.708290][T21399] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 770.794455][T18060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.837659][T21399] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 770.878514][T21399] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.4997: lblock 2 mapped to illegal pblock 2 (length 1) [ 770.892535][T21399] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 770.912725][T21399] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.4997: lblock 0 mapped to illegal pblock 48 (length 1) [ 770.935988][T21399] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 770.938208][T21399] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.4997: Failed to acquire dquot type 0 [ 770.958493][T21399] loop3: lost filesystem error report for type 5 error -117 [ 770.985499][T21399] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 770.994907][T21399] loop3: lost filesystem error report for type 5 error -117 [ 771.044031][T21399] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.4997: mark_inode_dirty error [ 771.062650][T21399] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 771.104179][T21399] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 771.134448][T21416] loop9: detected capacity change from 0 to 128 [ 771.162875][T21417] netlink: 'syz.5.5002': attribute type 10 has an invalid length. [ 771.176826][T21399] EXT4-fs (loop3): 1 orphan inode deleted [ 771.198787][T20577] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 771.212988][T20577] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 771.238791][T21399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.266365][T20577] EXT4-fs error (device loop3): ext4_release_dquot:7027: comm kworker/u8:3: Failed to release dquot type 0 [ 771.277879][T20577] loop3: lost filesystem error report for type 5 error -117 [ 771.322940][T21423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.375293][T21399] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 771.436189][T21427] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 771.472871][T21427] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 771.481138][T21427] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.4997: lblock 0 mapped to illegal pblock 48 (length 1) [ 771.551242][T21427] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 771.597246][T19181] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.049576][T21449] loop8: detected capacity change from 0 to 1764 [ 772.659415][T21467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=21467 comm=syz.5.5013 [ 772.700809][T21468] loop9: detected capacity change from 0 to 1024 [ 772.800947][T21468] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.862083][T21477] loop3: detected capacity change from 0 to 128 [ 773.140938][T21486] loop5: detected capacity change from 0 to 1024 [ 773.176926][T21486] EXT4-fs: Ignoring removed bh option [ 773.189173][T21486] EXT4-fs: inline encryption not supported [ 773.238802][T12252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.247940][T21486] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 773.289249][T21486] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 773.361662][T21486] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.5016: lblock 2 mapped to illegal pblock 2 (length 1) [ 773.375695][T21486] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 773.468983][T21486] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.5016: lblock 0 mapped to illegal pblock 48 (length 1) [ 773.470643][T21498] netlink: 'syz.9.5019': attribute type 10 has an invalid length. [ 773.478188][T21486] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 773.511375][T21486] EXT4-fs error (device loop5): ext4_acquire_dquot:6991: comm syz.5.5016: Failed to acquire dquot type 0 [ 773.531823][T21486] loop5: lost filesystem error report for type 5 error -117 [ 773.657685][T21502] 8021q: adding VLAN 0 to HW filter on device bond11 [ 773.677172][T21486] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 773.686664][T21486] loop5: lost filesystem error report for type 5 error -117 [ 773.698140][T21486] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.5016: mark_inode_dirty error [ 773.716693][T21486] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 773.717129][T21486] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 773.736680][T21486] EXT4-fs (loop5): 1 orphan inode deleted [ 773.742949][T21486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.755568][ T3877] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 773.769802][ T3877] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 773.785579][ T3877] EXT4-fs error (device loop5): ext4_release_dquot:7027: comm kworker/u8:18: Failed to release dquot type 0 [ 773.806150][ T3877] loop5: lost filesystem error report for type 5 error -117 [ 773.863973][T21486] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 773.925341][T21513] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 773.981159][T21513] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 773.989374][T21513] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.5016: lblock 0 mapped to illegal pblock 48 (length 1) [ 774.040535][T21513] __quota_error: 1913 callbacks suppressed [ 774.040550][T21513] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 774.073649][ T28] audit: type=1400 audit(1770691664.668:159699): avc: denied { search } for pid=21514 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.095058][ T28] audit: type=1400 audit(1770691664.668:159700): avc: denied { read } for pid=21514 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 774.145633][T21513] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 774.328342][ T28] audit: type=1400 audit(1770691664.668:159701): avc: denied { read open } for pid=21514 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 774.332918][T18060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.351394][ T28] audit: type=1400 audit(1770691664.668:159702): avc: denied { search } for pid=21514 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.382846][ T28] audit: type=1400 audit(1770691664.668:159703): avc: denied { search } for pid=21514 comm="cmp" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.405802][ T28] audit: type=1400 audit(1770691664.668:159704): avc: denied { search } for pid=21514 comm="cmp" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.428115][ T28] audit: type=1400 audit(1770691664.668:159705): avc: denied { read } for pid=21514 comm="cmp" name="resolv.conf.eth11.ipv4ll" dev="tmpfs" ino=26803 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 774.451995][ T28] audit: type=1400 audit(1770691664.668:159706): avc: denied { read open } for pid=21514 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth11.ipv4ll" dev="tmpfs" ino=26803 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 774.456459][T21525] audit: audit_backlog=65 > audit_backlog_limit=64 [ 774.581804][T21527] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 775.073493][T21534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=21534 comm=syz.5.5026 [ 775.411698][T21552] netlink: 27 bytes leftover after parsing attributes in process `syz.9.5030'. [ 775.574181][T21559] loop8: detected capacity change from 0 to 1024 [ 775.602502][T21559] EXT4-fs: Ignoring removed bh option [ 775.621648][T21559] EXT4-fs: inline encryption not supported [ 775.698736][T21559] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 775.778472][T21559] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 775.839917][T21559] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.5036: lblock 2 mapped to illegal pblock 2 (length 1) [ 775.849701][T21570] netlink: 'syz.9.5040': attribute type 10 has an invalid length. [ 775.853963][T21559] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 775.872272][T21568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.875998][T21570] bond1: (slave macvlan6): Error -98 calling set_mac_address [ 775.905284][T21559] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.5036: lblock 0 mapped to illegal pblock 48 (length 1) [ 775.919792][T21559] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 775.920471][T21559] EXT4-fs error (device loop8): ext4_acquire_dquot:6991: comm syz.8.5036: Failed to acquire dquot type 0 [ 775.940829][T21559] loop8: lost filesystem error report for type 5 error -117 [ 775.978276][T21568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.060613][T21559] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 776.070068][T21559] loop8: lost filesystem error report for type 5 error -117 [ 776.123179][T21559] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.5036: mark_inode_dirty error [ 776.141777][T21559] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 776.184072][T21559] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 776.196416][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5041'. [ 776.212502][T21580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5041'. [ 776.228615][T21559] EXT4-fs (loop8): 1 orphan inode deleted [ 776.234732][T21559] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.258301][ T30] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 776.272269][T21582] loop9: detected capacity change from 0 to 1024 [ 776.272583][ T30] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 776.309077][T20577] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.321754][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5041'. [ 776.332415][T20577] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.335792][T21580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5041'. [ 776.356413][ T30] EXT4-fs error (device loop8): ext4_release_dquot:7027: comm kworker/u8:1: Failed to release dquot type 0 [ 776.378625][T21582] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.398789][T21559] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 776.417366][T20577] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.441258][T20577] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.453741][T21587] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 776.556644][T21587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 776.565139][T21587] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.5036: lblock 0 mapped to illegal pblock 48 (length 1) [ 776.648510][T21587] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 776.697829][T21593] loop5: detected capacity change from 0 to 512 [ 776.745532][T12252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.768999][T21593] EXT4-fs: Ignoring removed i_version option [ 776.775174][T21593] EXT4-fs: Ignoring removed oldalloc option [ 776.788114][T20077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.830140][T21593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.979504][T18060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.341083][T21606] loop9: detected capacity change from 0 to 512 [ 777.421438][T21606] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.5045: error while reading EA inode 32 err=-116 [ 777.433861][T21606] loop9: lost filesystem error report for type 5 error -117 [ 777.454147][T21606] EXT4-fs (loop9): Remounting filesystem read-only [ 777.548461][T21606] EXT4-fs (loop9): 1 orphan inode deleted [ 777.559737][T21606] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.594895][T21618] loop8: detected capacity change from 0 to 512 [ 777.606507][T21618] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 777.618109][T21618] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 777.628256][T21618] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.5049: Corrupt directory, running e2fsck is recommended [ 777.678624][T21618] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 777.692804][T21618] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.5049: corrupted in-inode xattr: e_name out of bounds [ 777.706716][T21618] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 777.744707][T21618] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.5049: couldn't read orphan inode 15 (err -117) [ 777.765739][T21618] loop8: lost filesystem error report for type 5 error -117 [ 777.798623][T21618] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.897191][T21618] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 777.908782][T21618] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 777.918917][T21618] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.5049: Corrupt directory, running e2fsck is recommended [ 777.963384][T21627] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 777.974941][T21627] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 777.985164][T21627] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.5049: Corrupt directory, running e2fsck is recommended [ 778.067595][T21618] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 778.079183][T21618] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 778.090177][T21618] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.5049: Corrupt directory, running e2fsck is recommended [ 778.105039][T12252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.140209][T21627] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 778.220870][T21636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.246203][T20077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.262484][T21636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.619700][T21645] loop8: detected capacity change from 0 to 512 [ 778.620782][T21646] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5058'. [ 778.627974][T21645] EXT4-fs: Ignoring removed nobh option [ 778.635001][T21646] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5058'. [ 778.683298][T21645] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.693543][T21651] netlink: 'syz.9.5059': attribute type 10 has an invalid length. [ 778.697923][T21646] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5058'. [ 778.712559][T21646] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5058'. [ 778.715332][T21651] bond1: (slave macvlan6): Error -98 calling set_mac_address [ 778.733448][T21645] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 778.772045][T21645] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 3: comm syz.8.5057: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 778.965955][T20077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.051473][ T28] kauditd_printk_skb: 1808 callbacks suppressed [ 779.051488][ T28] audit: type=1400 audit(1770691669.648:161509): avc: denied { read write } for pid=20077 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 779.082519][ T28] audit: type=1400 audit(1770691669.648:161510): avc: denied { read write open } for pid=20077 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 779.174983][T21655] audit: audit_backlog=65 > audit_backlog_limit=64 [ 779.181662][T21655] audit: audit_lost=2659 audit_rate_limit=0 audit_backlog_limit=64 [ 779.189590][T21655] audit: backlog limit exceeded [ 779.194439][T21655] audit: audit_backlog=65 > audit_backlog_limit=64 [ 779.200969][T21655] audit: audit_lost=2660 audit_rate_limit=0 audit_backlog_limit=64 [ 779.208941][T21655] audit: backlog limit exceeded [ 779.213840][T21655] audit: audit_backlog=65 > audit_backlog_limit=64 [ 779.214961][T21656] audit: audit_backlog=65 > audit_backlog_limit=64 [ 779.317747][T21658] loop9: detected capacity change from 0 to 512 [ 779.351140][T21658] EXT4-fs: Ignoring removed nobh option [ 779.382955][T21666] loop3: detected capacity change from 0 to 1024 [ 779.393730][T21658] EXT4-fs error (device loop9): __ext4_iget:5426: inode #11: block 1: comm syz.9.5060: invalid block [ 779.404658][T21658] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 779.421474][T21658] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5060: couldn't read orphan inode 11 (err -117) [ 779.442524][T21658] loop9: lost filesystem error report for type 5 error -117 [ 779.478806][T21658] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.519780][T21666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.719610][T12252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.920551][T19181] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.993711][T21685] loop5: detected capacity change from 0 to 512 [ 780.036549][T21685] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 780.048113][T21685] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 780.058298][T21685] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5067: Corrupt directory, running e2fsck is recommended [ 780.075168][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5066'. [ 780.098771][T21685] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 780.139936][T21685] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.5067: corrupted in-inode xattr: e_name out of bounds [ 780.153801][T21685] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 780.229273][T21685] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5067: couldn't read orphan inode 15 (err -117) [ 780.250377][T21685] loop5: lost filesystem error report for type 5 error -117 [ 780.369473][T21685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.498961][T21685] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 780.510546][T21685] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 780.521024][T21685] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5067: Corrupt directory, running e2fsck is recommended [ 780.564282][T21698] loop8: detected capacity change from 0 to 512 [ 780.600636][T21699] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 780.612173][T21699] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 780.622277][T21699] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5067: Corrupt directory, running e2fsck is recommended [ 780.631018][T21698] EXT4-fs: Ignoring removed i_version option [ 780.641187][T21698] EXT4-fs: Ignoring removed oldalloc option [ 780.708823][T21685] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 780.720365][T21685] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 780.730475][T21685] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5067: Corrupt directory, running e2fsck is recommended [ 780.751402][T21685] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 780.780620][T21698] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.968916][T18060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.993080][T20077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.331249][T21715] netlink: 'syz.2.5073': attribute type 10 has an invalid length. [ 781.412314][T21715] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 781.493900][T21724] loop9: detected capacity change from 0 to 1024 [ 781.565167][T21721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 781.605837][T21724] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.614546][T21733] loop5: detected capacity change from 0 to 512 [ 781.699631][T21733] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 781.711551][T21733] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 781.721726][T21733] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5080: Corrupt directory, running e2fsck is recommended [ 781.746567][T21733] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 781.818583][T21733] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.5080: corrupted in-inode xattr: e_name out of bounds [ 781.832557][T21733] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 781.886566][T21733] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5080: couldn't read orphan inode 15 (err -117) [ 781.907660][T21733] loop5: lost filesystem error report for type 5 error -117 [ 781.956458][T21733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.077194][T21733] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 782.088747][T21733] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 782.098869][T21733] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5080: Corrupt directory, running e2fsck is recommended [ 782.134277][T21747] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 782.145900][T21747] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 782.156203][T21747] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5080: Corrupt directory, running e2fsck is recommended [ 782.178848][T12252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.179498][T21733] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 782.199772][T21733] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 782.209898][T21733] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5080: Corrupt directory, running e2fsck is recommended [ 782.239128][T21747] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 782.424564][T18060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.630037][T21753] loop8: detected capacity change from 0 to 512 [ 782.681586][T21753] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 782.693150][T21753] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 782.703650][T21753] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.5085: Corrupt directory, running e2fsck is recommended [ 782.747078][T21753] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 782.787148][T21757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.809936][T21760] __nla_validate_parse: 3 callbacks suppressed [ 782.809954][T21760] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5086'. [ 782.820487][T21753] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.5085: corrupted in-inode xattr: e_name out of bounds [ 782.838977][T21753] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 782.868591][T21757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.920237][T21753] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.5085: couldn't read orphan inode 15 (err -117) [ 782.932125][T21753] loop8: lost filesystem error report for type 5 error -117 [ 782.951949][T21753] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.999935][T21763] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5087'. [ 783.008980][T21763] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5087'. [ 783.031494][T21753] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 783.043013][T21753] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 783.053115][T21753] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.5085: Corrupt directory, running e2fsck is recommended [ 783.086822][T21763] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5087'. [ 783.102221][T21753] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 783.113770][T21753] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 783.123953][T21753] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.5085: Corrupt directory, running e2fsck is recommended [ 783.139100][T21753] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 783.150689][T21753] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 783.160818][T21753] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.5085: Corrupt directory, running e2fsck is recommended [ 783.200091][T21769] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 783.328576][T20077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.940698][T21788] loop2: detected capacity change from 0 to 1024 [ 784.031020][T21788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.068035][ T28] kauditd_printk_skb: 1805 callbacks suppressed [ 784.068053][ T28] audit: type=1400 audit(1770691674.658:163309): avc: denied { search } for pid=21790 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.076549][T21790] audit: audit_backlog=65 > audit_backlog_limit=64 [ 784.096675][ T28] audit: type=1400 audit(1770691674.658:163310): avc: denied { search } for pid=21790 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.096750][ T28] audit: type=1400 audit(1770691674.658:163311): avc: denied { search } for pid=21790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.096777][ T28] audit: type=1400 audit(1770691674.658:163312): avc: denied { read open } for pid=21790 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.096822][ T28] audit: type=1400 audit(1770691674.658:163313): avc: denied { getattr } for pid=21790 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.096874][ T28] audit: type=1400 audit(1770691674.658:163314): avc: denied { search } for pid=21790 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.096946][ T28] audit: type=1400 audit(1770691674.658:163315): avc: denied { search } for pid=21790 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.103556][T21790] audit: audit_lost=2664 audit_rate_limit=0 audit_backlog_limit=64 [ 784.103578][T21790] audit: backlog limit exceeded [ 784.315157][T21800] loop5: detected capacity change from 0 to 512 [ 784.374486][T21800] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 784.386083][T21800] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 784.396278][T21800] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5096: Corrupt directory, running e2fsck is recommended [ 784.514954][T21800] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 784.555377][T21800] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.5096: corrupted in-inode xattr: e_name out of bounds [ 784.569684][T21800] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 784.588401][T19320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.648431][T21800] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5096: couldn't read orphan inode 15 (err -117) [ 784.660322][T21800] loop5: lost filesystem error report for type 5 error -117 [ 784.681404][T21800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.810429][T21800] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 784.821996][T21800] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 784.832109][T21800] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5096: Corrupt directory, running e2fsck is recommended [ 784.901103][T21800] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 784.912680][T21800] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 784.922849][T21800] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5096: Corrupt directory, running e2fsck is recommended [ 784.939467][T21810] loop8: detected capacity change from 0 to 512 [ 784.973430][T21812] loop2: detected capacity change from 0 to 512 [ 784.985246][T21800] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 784.997556][T21800] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 785.007666][T21800] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5096: Corrupt directory, running e2fsck is recommended [ 785.070049][T21812] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 785.081605][T21812] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 785.091733][T21812] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5100: Corrupt directory, running e2fsck is recommended [ 785.152542][T21815] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.5099'. [ 785.162791][T18060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.191502][T21815] 0猉功D龌: renamed from gretap0 (while UP) [ 785.219496][T21812] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 785.227717][T21812] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.5100: corrupted in-inode xattr: e_name out of bounds [ 785.241665][T21812] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 785.289420][T21815] 0猉功D龌: entered allmulticast mode [ 785.328007][T21812] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5100: couldn't read orphan inode 15 (err -117) [ 785.339881][T21812] loop2: lost filesystem error report for type 5 error -117 [ 785.384574][T21812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.477210][T21822] loop9: detected capacity change from 0 to 1024 [ 785.487303][T21812] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 785.498844][T21812] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 785.509013][T21812] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5100: Corrupt directory, running e2fsck is recommended [ 785.573859][T21822] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 785.609304][T21829] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 785.621217][T21829] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 785.627417][T21822] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 785.631367][T21829] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5100: Corrupt directory, running e2fsck is recommended [ 785.727794][T21822] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5103: bg 0: block 112: padding at end of block bitmap is not set [ 785.769496][T21832] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 785.781036][T21832] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 785.791142][T21832] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5100: Corrupt directory, running e2fsck is recommended [ 785.826583][T21822] EXT4-fs (loop9): Remounting filesystem read-only [ 785.857796][T21812] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 785.923874][T19320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.960792][T12252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 786.192120][T21842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.230203][T21842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.441127][T21845] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5107'. [ 786.592123][T21854] loop5: detected capacity change from 0 to 1024 [ 786.663925][T21854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.919346][T21864] loop2: detected capacity change from 0 to 128 [ 787.088839][T21870] syz.2.5111: attempt to access beyond end of device [ 787.088839][T21870] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 787.198632][T18060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.229142][T21870] syz.2.5111: attempt to access beyond end of device [ 787.229142][T21870] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 787.251730][T21870] syz.2.5111: attempt to access beyond end of device [ 787.251730][T21870] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 787.436594][T21870] syz.2.5111: attempt to access beyond end of device [ 787.436594][T21870] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 787.475348][T21878] sctp: [Deprecated]: syz.9.5115 (pid 21878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 787.475348][T21878] Use struct sctp_sack_info instead [ 787.479913][T21874] loop8: detected capacity change from 0 to 512 [ 787.619934][T21874] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 787.644365][T21874] EXT4-fs (loop8): orphan cleanup on readonly fs [ 787.719724][T21874] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5114: bg 0: block 248: padding at end of block bitmap is not set [ 787.734062][T21874] loop8: lost filesystem error report for type 5 error -117 [ 787.764907][T21883] loop3: detected capacity change from 0 to 1024 [ 787.821180][T21874] EXT4-fs error (device loop8): ext4_acquire_dquot:6991: comm syz.8.5114: Failed to acquire dquot type 1 [ 787.832536][T21874] loop8: lost filesystem error report for type 5 error -117 [ 787.885807][T21874] EXT4-fs (loop8): 1 truncate cleaned up [ 787.949495][T21874] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 787.967169][T21890] loop9: detected capacity change from 0 to 128 [ 788.098152][T21892] syz.9.5117: attempt to access beyond end of device [ 788.098152][T21892] loop9: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 788.180699][T20077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.198165][T21892] syz.9.5117: attempt to access beyond end of device [ 788.198165][T21892] loop9: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 788.201860][T21894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5119'. [ 788.264962][T21892] syz.9.5117: attempt to access beyond end of device [ 788.264962][T21892] loop9: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 788.277580][T21894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5119'. [ 788.369526][T21892] syz.9.5117: attempt to access beyond end of device [ 788.369526][T21892] loop9: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 788.389184][T21883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 788.458042][T21892] syz.9.5117: attempt to access beyond end of device [ 788.458042][T21892] loop9: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 788.538676][T21883] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.568667][T21892] syz.9.5117: attempt to access beyond end of device [ 788.568667][T21892] loop9: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 788.960037][T21917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.000493][T21917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.079366][T19181] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 789.090258][ T28] kauditd_printk_skb: 1701 callbacks suppressed [ 789.090273][ T28] audit: type=1400 audit(1770691679.678:165015): avc: denied { search } for pid=21915 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.118937][ T28] audit: type=1400 audit(1770691679.678:165016): avc: denied { search } for pid=21915 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.128445][T21921] audit: audit_backlog=65 > audit_backlog_limit=64 [ 789.141898][ T28] audit: type=1400 audit(1770691679.678:165017): avc: denied { search } for pid=21915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.141931][ T28] audit: type=1400 audit(1770691679.678:165018): avc: denied { read open } for pid=21915 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.148476][T21921] audit: audit_lost=2665 audit_rate_limit=0 audit_backlog_limit=64 [ 789.171767][ T28] audit: type=1400 audit(1770691679.678:165019): avc: denied { getattr } for pid=21915 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.171876][ T28] audit: type=1400 audit(1770691679.678:165020): avc: denied { search } for pid=21915 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.171903][ T28] audit: type=1400 audit(1770691679.678:165021): avc: denied { search } for pid=21915 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.171930][ T28] audit: type=1400 audit(1770691679.678:165022): avc: denied { search } for pid=21915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.335265][T21926] loop2: detected capacity change from 0 to 512 [ 789.374450][T21926] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 789.384765][T21926] EXT4-fs (loop2): orphan cleanup on readonly fs [ 789.392243][T21926] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5125: bg 0: block 248: padding at end of block bitmap is not set [ 789.406592][T21926] loop2: lost filesystem error report for type 5 error -117 [ 789.412215][T21926] EXT4-fs error (device loop2): ext4_acquire_dquot:6991: comm syz.2.5125: Failed to acquire dquot type 1 [ 789.430857][T21926] loop2: lost filesystem error report for type 5 error -117 [ 789.448367][T21926] EXT4-fs (loop2): 1 truncate cleaned up [ 789.469771][T21926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 789.711923][T21936] loop9: detected capacity change from 0 to 1024 [ 789.720382][T21936] EXT4-fs: Ignoring removed bh option [ 789.725841][T21936] EXT4-fs: inline encryption not supported [ 789.733010][T21936] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 789.779301][T19320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.791035][T21936] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 789.800311][T21936] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 2: comm syz.9.5128: lblock 2 mapped to illegal pblock 2 (length 1) [ 789.814278][T21936] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 789.814528][T21936] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 48: comm syz.9.5128: lblock 0 mapped to illegal pblock 48 (length 1) [ 789.838057][T21936] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 789.878541][T21936] EXT4-fs error (device loop9): ext4_acquire_dquot:6991: comm syz.9.5128: Failed to acquire dquot type 0 [ 789.898886][T21936] loop9: lost filesystem error report for type 5 error -117 [ 789.906419][T21936] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 789.915947][T21936] loop9: lost filesystem error report for type 5 error -117 [ 789.918204][T21936] EXT4-fs error (device loop9): ext4_evict_inode:253: inode #11: comm syz.9.5128: mark_inode_dirty error [ 789.936825][T21936] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 789.936965][T21936] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 789.956333][T21936] EXT4-fs (loop9): 1 orphan inode deleted [ 789.962779][T21936] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.978944][T20577] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 790.047666][T20577] EXT4-fs error (device loop9): ext4_release_dquot:7027: comm kworker/u8:3: Failed to release dquot type 0 [ 790.115122][T21936] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 790.149053][T12252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.348641][T21949] loop2: detected capacity change from 0 to 1024 [ 790.372732][T21949] EXT4-fs: inline encryption not supported [ 790.378625][T21949] EXT4-fs: Ignoring removed i_version option [ 790.438194][T21949] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 790.459483][T21951] loop5: detected capacity change from 0 to 512 [ 790.502583][T21949] netlink: 'syz.2.5129': attribute type 1 has an invalid length. [ 790.548640][T21951] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 790.578280][T21951] EXT4-fs (loop5): orphan cleanup on readonly fs [ 790.604763][T21949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 790.623205][T21951] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5131: bg 0: block 248: padding at end of block bitmap is not set [ 790.637566][T21951] loop5: lost filesystem error report for type 5 error -117 [ 790.713547][T21951] EXT4-fs error (device loop5): ext4_acquire_dquot:6991: comm syz.5.5131: Failed to acquire dquot type 1 [ 790.732139][T21951] loop5: lost filesystem error report for type 5 error -117 [ 790.734619][T21958] vlan2: entered allmulticast mode [ 790.747188][T21958] veth0_to_bond: entered allmulticast mode [ 790.766150][T21958] bond2: (slave vlan2): making interface the new active one [ 790.818531][T21951] EXT4-fs (loop5): 1 truncate cleaned up [ 790.867532][T21958] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 791.118356][T21951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 791.269081][T18060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.502727][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5136'. [ 791.511707][T21977] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5136'. [ 791.613050][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5136'. [ 791.622073][T21977] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5136'. [ 792.181021][T22001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.258257][T22001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.278191][T22002] loop2: detected capacity change from 0 to 1024 [ 792.301872][T22002] EXT4-fs: inline encryption not supported [ 792.307718][T22002] EXT4-fs: Ignoring removed i_version option [ 792.368674][T22002] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 792.418795][T22002] netlink: 'syz.2.5142': attribute type 1 has an invalid length. [ 792.489091][T22002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 792.706298][T22019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.740587][T22019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.767171][T22017] loop2: detected capacity change from 0 to 512 [ 792.835093][T22017] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 792.868708][T22017] EXT4-fs (loop2): orphan cleanup on readonly fs [ 792.916869][T22017] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5147: bg 0: block 248: padding at end of block bitmap is not set [ 792.931236][T22017] loop2: lost filesystem error report for type 5 error -117 [ 792.957075][T22017] EXT4-fs error (device loop2): ext4_acquire_dquot:6991: comm syz.2.5147: Failed to acquire dquot type 1 [ 792.975979][T22017] loop2: lost filesystem error report for type 5 error -117 [ 793.012917][T22017] EXT4-fs (loop2): 1 truncate cleaned up [ 793.033916][T22017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 793.136876][T19320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.139509][T22031] loop9: detected capacity change from 0 to 1024 [ 793.169981][T22032] loop8: detected capacity change from 0 to 512 [ 793.170241][T22031] EXT4-fs: inline encryption not supported [ 793.182138][T22031] EXT4-fs: Ignoring removed i_version option [ 793.214924][T22032] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 793.256490][T22031] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 793.262356][T22032] EXT4-fs (loop8): orphan cleanup on readonly fs [ 793.274004][T22032] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5148: bg 0: block 248: padding at end of block bitmap is not set [ 793.288727][T22032] loop8: lost filesystem error report for type 5 error -117 [ 793.289074][T22032] EXT4-fs error (device loop8): ext4_acquire_dquot:6991: comm syz.8.5148: Failed to acquire dquot type 1 [ 793.307646][T22032] loop8: lost filesystem error report for type 5 error -117 [ 793.319412][T22032] EXT4-fs (loop8): 1 truncate cleaned up [ 793.358662][T22032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 793.400812][T22031] netlink: 'syz.9.5149': attribute type 1 has an invalid length. [ 793.473748][T22031] 8021q: adding VLAN 0 to HW filter on device bond12 [ 793.614217][T20077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.688537][T22051] xt_hashlimit: size too large, truncated to 1048576 [ 793.783708][T22055] loop5: detected capacity change from 0 to 1024 [ 793.831005][T22055] EXT4-fs: inline encryption not supported [ 793.836864][T22055] EXT4-fs: Ignoring removed i_version option [ 793.920427][T22055] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 793.972499][T22055] netlink: 'syz.5.5152': attribute type 1 has an invalid length. [ 794.074334][T22063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5152'. [ 794.126314][ T28] kauditd_printk_skb: 1970 callbacks suppressed [ 794.126357][ T28] audit: type=1400 audit(1770691684.718:166981): avc: denied { search } for pid=22061 comm="sed" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.154663][T22055] 8021q: adding VLAN 0 to HW filter on device bond2 [ 794.155162][ T28] audit: type=1400 audit(1770691684.718:166982): avc: denied { read } for pid=22061 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 794.183855][ T28] audit: type=1400 audit(1770691684.718:166983): avc: denied { read open } for pid=22061 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 794.212624][ T28] audit: type=1400 audit(1770691684.738:166984): avc: denied { open } for pid=22062 comm="syz.3.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 794.232165][ T28] audit: type=1400 audit(1770691684.738:166985): avc: denied { perfmon } for pid=22062 comm="syz.3.5154" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 794.253346][ T28] audit: type=1400 audit(1770691684.738:166986): avc: denied { kernel } for pid=22062 comm="syz.3.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 794.273048][ T28] audit: type=1400 audit(1770691684.738:166987): avc: denied { perfmon } for pid=22062 comm="syz.3.5154" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 794.294234][ T28] audit: type=1400 audit(1770691684.768:166988): avc: denied { getattr } for pid=22061 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 794.410338][T22065] xt_hashlimit: size too large, truncated to 1048576 [ 794.707468][ T28] audit: type=1400 audit(1770691684.828:166989): avc: denied { map_create } for pid=22062 comm="syz.3.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 794.726915][ T28] audit: type=1400 audit(1770691684.918:166990): avc: denied { create } for pid=22068 comm="syz.8.5153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 794.740368][T22071] netlink: 27 bytes leftover after parsing attributes in process `syz.9.5155'. [ 794.925442][T22084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5156'. [ 795.021959][T22087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5156'. [ 795.082653][T22083] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5157'. [ 795.278933][T22084] loop5: detected capacity change from 0 to 512 [ 795.408305][T22084] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.5156: error while reading EA inode 32 err=-116 [ 795.420622][T22084] loop5: lost filesystem error report for type 5 error -117 [ 795.474187][T22084] EXT4-fs (loop5): Remounting filesystem read-only [ 795.489046][T22084] EXT4-fs (loop5): 1 orphan inode deleted [ 795.541075][T22084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.574196][T22100] loop8: detected capacity change from 0 to 1024 [ 795.612675][T22100] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 795.697321][T22100] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 795.778031][T22111] loop9: detected capacity change from 0 to 128 [ 795.884477][T22116] bio_check_eod: 29 callbacks suppressed [ 795.884494][T22116] syz.9.5163: attempt to access beyond end of device [ 795.884494][T22116] loop9: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 795.980798][T18060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.991116][T22116] syz.9.5163: attempt to access beyond end of device [ 795.991116][T22116] loop9: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 796.041084][T20077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 796.050580][T22116] syz.9.5163: attempt to access beyond end of device [ 796.050580][T22116] loop9: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 796.128138][T22116] syz.9.5163: attempt to access beyond end of device [ 796.128138][T22116] loop9: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 796.208298][T22116] syz.9.5163: attempt to access beyond end of device [ 796.208298][T22116] loop9: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 796.269835][T22116] syz.9.5163: attempt to access beyond end of device [ 796.269835][T22116] loop9: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 796.408514][T22116] syz.9.5163: attempt to access beyond end of device [ 796.408514][T22116] loop9: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 796.593252][T22133] loop5: detected capacity change from 0 to 1024 [ 796.632128][T22133] EXT4-fs: inline encryption not supported [ 796.638395][T22133] EXT4-fs: Ignoring removed i_version option [ 796.684606][T22133] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 796.717130][T22133] netlink: 'syz.5.5167': attribute type 1 has an invalid length. [ 796.777096][T22135] loop2: detected capacity change from 0 to 512 [ 796.808386][T22136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5167'. [ 796.859652][T22135] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 796.889332][T22133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 796.904549][T22135] EXT4-fs (loop2): orphan cleanup on readonly fs [ 796.919164][T22135] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5168: bg 0: block 248: padding at end of block bitmap is not set [ 796.933476][T22135] loop2: lost filesystem error report for type 5 error -117 [ 796.937224][T22141] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 796.951082][T22141] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 796.958574][T22141] vhci_hcd vhci_hcd.0: Device attached [ 796.972149][T22135] EXT4-fs error (device loop2): ext4_acquire_dquot:6991: comm syz.2.5168: Failed to acquire dquot type 1 [ 796.983454][T22135] loop2: lost filesystem error report for type 5 error -117 [ 796.987069][T22135] EXT4-fs (loop2): 1 truncate cleaned up [ 797.002363][T22142] vhci_hcd: connection closed [ 797.009542][T20606] vhci_hcd vhci_hcd.3: stop threads [ 797.019581][T20606] vhci_hcd vhci_hcd.3: release socket [ 797.024986][T20606] vhci_hcd vhci_hcd.3: disconnect device [ 797.055758][T22135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 797.135084][T19320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.447973][T22155] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5171'. [ 797.509377][T22157] loop2: detected capacity change from 0 to 1024 [ 797.517916][T22157] EXT4-fs: Ignoring removed bh option [ 797.523471][T22157] EXT4-fs: inline encryption not supported [ 797.532325][T22157] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 797.563799][T22157] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 797.573517][T22157] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.5172: lblock 2 mapped to illegal pblock 2 (length 1) [ 797.574840][T22156] loop8: detected capacity change from 0 to 1024 [ 797.587457][T22157] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 797.589990][T22157] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.5172: lblock 0 mapped to illegal pblock 48 (length 1) [ 797.617044][T22157] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 797.619265][T22157] EXT4-fs error (device loop2): ext4_acquire_dquot:6991: comm syz.2.5172: Failed to acquire dquot type 0 [ 797.639563][T22157] loop2: lost filesystem error report for type 5 error -117 [ 797.647267][T22157] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 797.656670][T22157] loop2: lost filesystem error report for type 5 error -117 [ 797.657702][T22157] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.5172: mark_inode_dirty error [ 797.659193][T22156] EXT4-fs: inline encryption not supported [ 797.665470][T22157] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 797.676297][T22156] EXT4-fs: Ignoring removed i_version option [ 797.698287][T22157] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 797.708510][T22157] EXT4-fs (loop2): 1 orphan inode deleted [ 797.714602][T22157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.738022][ T30] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 797.770502][T22163] EXT4-fs: Ignoring removed bh option [ 797.776000][T22163] EXT4-fs: inline encryption not supported [ 797.784637][T22163] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 797.792877][T22156] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 797.808814][T22163] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 797.817947][T22163] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.5175: lblock 2 mapped to illegal pblock 2 (length 1) [ 797.831894][T22163] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 797.832063][T22163] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.5175: lblock 0 mapped to illegal pblock 48 (length 1) [ 797.832386][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7027: comm kworker/u8:1: Failed to release dquot type 0 [ 797.841211][T22163] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 797.841682][T22163] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.5175: Failed to acquire dquot type 0 [ 797.887401][T22163] loop3: lost filesystem error report for type 5 error -117 [ 797.895067][T22163] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 797.905487][T22163] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.5175: mark_inode_dirty error [ 797.916762][T22163] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 797.916942][T22163] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 797.936370][T22163] EXT4-fs (loop3): 1 orphan inode deleted [ 797.942484][T22163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.978800][ T30] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 798.031488][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7027: comm kworker/u8:1: Failed to release dquot type 0 [ 798.063087][T22156] netlink: 'syz.8.5173': attribute type 1 has an invalid length. [ 798.078809][T22157] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 798.079014][T22163] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 798.102037][T22165] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 798.113910][T22170] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 798.159706][T22170] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 798.167848][T22170] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.5175: lblock 0 mapped to illegal pblock 48 (length 1) [ 798.188068][T22165] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 798.196163][T22165] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.5172: lblock 0 mapped to illegal pblock 48 (length 1) [ 798.235295][T22156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 798.326553][T22170] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 798.335021][T22165] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 798.521522][T19320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.558649][T19181] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.903509][T22188] set_capacity_and_notify: 1 callbacks suppressed [ 798.903530][T22188] loop9: detected capacity change from 0 to 512 [ 798.953579][T22196] loop2: detected capacity change from 0 to 512 [ 798.984173][T22196] EXT4-fs: Ignoring removed bh option [ 799.018601][T22188] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 799.038124][T22196] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 799.070153][T22188] EXT4-fs (loop9): orphan cleanup on readonly fs [ 799.114735][T22188] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5179: bg 0: block 248: padding at end of block bitmap is not set [ 799.129158][T22188] fserror_report: 1 callbacks suppressed [ 799.129173][T22188] loop9: lost filesystem error report for type 5 error -117 [ 799.131121][ T28] kauditd_printk_skb: 1443 callbacks suppressed [ 799.131136][ T28] audit: type=1400 audit(1770691689.738:168424): avc: denied { search } for pid=22197 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.139615][T22196] EXT4-fs (loop2): 1 truncate cleaned up [ 799.142483][ T28] audit: type=1400 audit(1770691689.738:168425): avc: denied { search } for pid=22197 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.185086][T22196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 799.200403][ T28] audit: type=1400 audit(1770691689.738:168426): avc: denied { search } for pid=22197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.234981][ T28] audit: type=1400 audit(1770691689.738:168427): avc: denied { read open } for pid=22197 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.263560][ T28] audit: type=1400 audit(1770691689.758:168428): avc: denied { prog_load } for pid=22201 comm="syz.8.5182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 799.282937][ T28] audit: type=1400 audit(1770691689.758:168429): avc: denied { bpf } for pid=22201 comm="syz.8.5182" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 799.285436][T22197] audit: audit_backlog=65 > audit_backlog_limit=64 [ 799.303725][ T28] audit: type=1400 audit(1770691689.758:168430): avc: denied { perfmon } for pid=22201 comm="syz.8.5182" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 799.303790][ T28] audit: type=1400 audit(1770691689.758:168431): avc: denied { prog_load } for pid=22201 comm="syz.8.5182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 799.310603][T22197] audit: audit_lost=2666 audit_rate_limit=0 audit_backlog_limit=64 [ 799.416451][T22203] netlink: 45349 bytes leftover after parsing attributes in process `syz.8.5182'. [ 799.436716][T22188] EXT4-fs error (device loop9): ext4_acquire_dquot:6991: comm syz.9.5179: Failed to acquire dquot type 1 [ 799.448100][T22188] loop9: lost filesystem error report for type 5 error -117 [ 799.485774][T22203] 0猉功D龌: renamed from gretap0 (while UP) [ 799.543431][T22188] EXT4-fs (loop9): 1 truncate cleaned up [ 799.629071][T22188] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 799.670053][T22203] 0猉功D龌: entered allmulticast mode [ 799.818717][T12252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.969947][T22216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5183'. [ 800.009619][T19320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.070495][T22218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5183'. [ 800.214690][T22216] loop5: detected capacity change from 0 to 512 [ 800.308440][T22216] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.5183: error while reading EA inode 32 err=-116 [ 800.320825][T22216] loop5: lost filesystem error report for type 5 error -117 [ 800.365237][T22216] EXT4-fs (loop5): Remounting filesystem read-only [ 800.379208][T22216] EXT4-fs (loop5): 1 orphan inode deleted [ 800.386735][T22216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 800.758822][T22243] loop9: detected capacity change from 0 to 128 [ 800.791130][T22243] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 800.833711][T22243] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.888526][T22248] loop2: detected capacity change from 0 to 1024 [ 800.894850][T18060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.959650][T12252] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 800.966137][T22248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 801.039759][T22248] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 801.324445][T22248] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5189: bg 0: block 112: padding at end of block bitmap is not set [ 801.417969][T22248] EXT4-fs (loop2): Remounting filesystem read-only [ 801.519494][T22254] syzkaller0: entered promiscuous mode [ 801.525086][T22254] syzkaller0: entered allmulticast mode [ 801.788652][T19320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 801.882232][T22258] syzkaller0: entered promiscuous mode [ 801.887786][T22258] syzkaller0: entered allmulticast mode [ 802.100672][T22282] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 802.129752][T22282] SELinux: failed to load policy [ 802.155614][T22280] loop5: detected capacity change from 0 to 1024 [ 802.298802][T22280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 802.321104][T22283] loop2: detected capacity change from 0 to 512 [ 802.369171][T22280] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.401008][T22283] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 802.469104][T22283] EXT4-fs (loop2): orphan cleanup on readonly fs [ 802.499446][T22280] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5196: bg 0: block 112: padding at end of block bitmap is not set [ 802.529341][T22292] loop9: detected capacity change from 0 to 512 [ 802.535713][T22283] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5194: bg 0: block 248: padding at end of block bitmap is not set [ 802.550043][T22283] loop2: lost filesystem error report for type 5 error -117 [ 802.555832][T22280] EXT4-fs (loop5): Remounting filesystem read-only [ 802.557512][T22292] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 802.581259][T22292] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 802.591802][T22292] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5197: Corrupt directory, running e2fsck is recommended [ 802.605959][T22283] EXT4-fs error (device loop2): ext4_acquire_dquot:6991: comm syz.2.5194: Failed to acquire dquot type 1 [ 802.617263][T22283] loop2: lost filesystem error report for type 5 error -117 [ 802.621933][T22292] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 802.623534][T22283] EXT4-fs (loop2): 1 truncate cleaned up [ 802.679965][T22292] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.5197: corrupted in-inode xattr: e_name out of bounds [ 802.693868][T22292] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 802.700279][T22283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 802.732661][T22296] loop3: detected capacity change from 0 to 1024 [ 802.773450][T22292] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5197: couldn't read orphan inode 15 (err -117) [ 802.785408][T22292] loop9: lost filesystem error report for type 5 error -117 [ 802.823240][T22292] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.868711][T18060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 802.889802][T22296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 802.917097][T22296] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 803.059162][T22292] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 803.070781][T22292] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 803.081052][T22292] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5197: Corrupt directory, running e2fsck is recommended [ 803.178764][T22303] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 803.190358][T22303] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 803.199210][T22296] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5198: bg 0: block 112: padding at end of block bitmap is not set [ 803.200552][T22303] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5197: Corrupt directory, running e2fsck is recommended [ 803.242306][T22304] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 803.253935][T22304] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 803.264394][T22304] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5197: Corrupt directory, running e2fsck is recommended [ 803.308705][T22296] EXT4-fs (loop3): Remounting filesystem read-only [ 803.340897][T22305] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 803.483069][T22313] loop2: detected capacity change from 0 to 1024 [ 803.512154][T22313] EXT4-fs: inline encryption not supported [ 803.518100][T22313] EXT4-fs: Ignoring removed i_version option [ 803.534856][T22313] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 803.574684][T22313] netlink: 'syz.2.5201': attribute type 1 has an invalid length. [ 803.652024][T22313] 8021q: adding VLAN 0 to HW filter on device bond4 [ 803.653312][T22319] EXT4-fs: inline encryption not supported [ 803.664592][T22319] EXT4-fs: Ignoring removed i_version option [ 803.694774][T22319] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 803.765507][T22319] netlink: 'syz.5.5202': attribute type 1 has an invalid length. [ 803.876445][T22319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 804.177838][ T28] kauditd_printk_skb: 2205 callbacks suppressed [ 804.177856][ T28] audit: type=1400 audit(1770691694.768:169792): avc: denied { read write } for pid=20077 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 804.248623][ T28] audit: type=1400 audit(1770691694.778:169793): avc: denied { read write open } for pid=20077 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 804.274054][ T28] audit: type=1400 audit(1770691694.778:169794): avc: denied { write } for pid=22328 comm="syz.9.5203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 804.293798][ T28] audit: type=1400 audit(1770691694.778:169795): avc: denied { create } for pid=22328 comm="syz.9.5203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 804.313572][ T28] audit: type=1400 audit(1770691694.818:169796): avc: denied { recv } for pid=2998 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.1.70 dest=40330 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 804.338830][ T28] audit: type=1400 audit(1770691694.818:169797): avc: denied { recv } for pid=10 comm="kworker/0:1" saddr=10.128.0.163 src=30036 daddr=10.128.1.70 dest=40330 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 804.364283][ T28] audit: type=1400 audit(1770691694.818:169798): avc: denied { ioctl } for pid=20077 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 804.390178][ T28] audit: type=1400 audit(1770691694.838:169799): avc: denied { search } for pid=22334 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.412735][ T28] audit: type=1400 audit(1770691694.838:169800): avc: denied { search } for pid=22334 comm="rm" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.434684][ T28] audit: type=1400 audit(1770691694.838:169801): avc: denied { search } for pid=22334 comm="rm" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.633117][T22345] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5206'. [ 804.684461][T22346] set_capacity_and_notify: 1 callbacks suppressed [ 804.684539][T22346] loop8: detected capacity change from 0 to 1024 [ 804.739582][T22346] EXT4-fs: Ignoring removed bh option [ 804.745196][T22346] EXT4-fs: inline encryption not supported [ 804.783069][T22346] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 804.873334][T22346] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 804.943578][T22346] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.5207: lblock 2 mapped to illegal pblock 2 (length 1) [ 804.957580][T22346] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 804.998852][T22346] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.5207: lblock 0 mapped to illegal pblock 48 (length 1) [ 805.022401][T22346] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 805.093582][T22352] loop2: detected capacity change from 0 to 128 [ 805.110557][T22346] EXT4-fs error (device loop8): ext4_acquire_dquot:6991: comm syz.8.5207: Failed to acquire dquot type 0 [ 805.121898][T22346] loop8: lost filesystem error report for type 5 error -117 [ 805.173405][T22357] loop9: detected capacity change from 0 to 512 [ 805.208274][T22346] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 805.217682][T22346] loop8: lost filesystem error report for type 5 error -117 [ 805.219021][T22356] loop5: detected capacity change from 0 to 1024 [ 805.243079][T22346] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.5207: mark_inode_dirty error [ 805.254368][T22346] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 805.269048][T22356] EXT4-fs: inline encryption not supported [ 805.284161][T22356] EXT4-fs: Ignoring removed i_version option [ 805.298680][T22346] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 805.309939][T22357] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 805.321466][T22357] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 805.331582][T22357] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5211: Corrupt directory, running e2fsck is recommended [ 805.361164][T22357] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 805.371161][T22346] EXT4-fs (loop8): 1 orphan inode deleted [ 805.377689][T22356] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 805.398473][T20577] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 805.412983][T20577] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 805.416763][T22365] syz.2.5209: attempt to access beyond end of device [ 805.416763][T22365] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 805.473155][T22357] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.5211: corrupted in-inode xattr: e_name out of bounds [ 805.487126][T22357] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 805.514582][T22365] syz.2.5209: attempt to access beyond end of device [ 805.514582][T22365] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 805.518040][T20577] EXT4-fs error (device loop8): ext4_release_dquot:7027: comm kworker/u8:3: Failed to release dquot type 0 [ 805.550841][T22356] netlink: 'syz.5.5210': attribute type 1 has an invalid length. [ 805.554766][T22357] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5211: couldn't read orphan inode 15 (err -117) [ 805.570655][T22357] loop9: lost filesystem error report for type 5 error -117 [ 805.608623][T22356] 8021q: adding VLAN 0 to HW filter on device bond5 [ 805.623045][T22365] syz.2.5209: attempt to access beyond end of device [ 805.623045][T22365] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 805.637841][T22346] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 805.688104][T22370] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 805.700043][T22370] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 805.708256][T22370] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.5207: lblock 0 mapped to illegal pblock 48 (length 1) [ 805.713667][T22365] syz.2.5209: attempt to access beyond end of device [ 805.713667][T22365] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 805.737252][T22370] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 805.769404][T22357] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 805.778474][T22356] vlan2: entered allmulticast mode [ 805.781394][T22357] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 805.797696][T22357] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5211: Corrupt directory, running e2fsck is recommended [ 805.799929][T22365] syz.2.5209: attempt to access beyond end of device [ 805.799929][T22365] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 805.845682][T22357] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 805.857293][T22357] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 805.867594][T22357] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5211: Corrupt directory, running e2fsck is recommended [ 805.980423][T22357] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 805.992023][T22357] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 806.002134][T22357] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5211: Corrupt directory, running e2fsck is recommended [ 806.041881][T22357] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 806.091276][T22377] netlink: 'syz.8.5213': attribute type 10 has an invalid length. [ 806.146202][T22377] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 806.361634][T22379] loop5: detected capacity change from 0 to 4096 [ 806.388032][T22382] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.5215'. [ 806.441879][T22382] 0猉功D龌: renamed from gretap0 (while UP) [ 806.471800][T22382] 0猉功D龌: entered allmulticast mode [ 806.551640][T22387] loop3: detected capacity change from 0 to 1024 [ 806.560115][T22387] EXT4-fs: Ignoring removed bh option [ 806.565524][T22387] EXT4-fs: inline encryption not supported [ 806.574152][T22387] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 806.596144][T22387] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 806.619636][T22387] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.5216: lblock 2 mapped to illegal pblock 2 (length 1) [ 806.633879][T22387] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 806.634051][T22387] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.5216: lblock 0 mapped to illegal pblock 48 (length 1) [ 806.657252][T22387] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 806.657842][T22387] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.5216: Failed to acquire dquot type 0 [ 806.678219][T22387] loop3: lost filesystem error report for type 5 error -117 [ 806.686920][T22387] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 806.696366][T22387] loop3: lost filesystem error report for type 5 error -117 [ 806.697551][T22387] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.5216: mark_inode_dirty error [ 806.716164][T22387] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 806.721884][T22387] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 806.741254][T22387] EXT4-fs (loop3): 1 orphan inode deleted [ 806.770845][T20606] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 806.840548][T20606] EXT4-fs error (device loop3): ext4_release_dquot:7027: comm kworker/u8:16: Failed to release dquot type 0 [ 806.919135][T22387] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 806.927883][T22398] tap0: tun_chr_ioctl cmd 2147767521 [ 806.945290][T22400] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 806.984615][T22400] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 806.992779][T22400] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.5216: lblock 0 mapped to illegal pblock 48 (length 1) [ 807.060389][T22400] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 807.154454][T22406] loop8: detected capacity change from 0 to 128 [ 807.251109][T22406] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 807.474946][T22410] loop2: detected capacity change from 0 to 1024 [ 807.561246][T22410] EXT4-fs: inline encryption not supported [ 807.567099][T22410] EXT4-fs: Ignoring removed i_version option [ 807.629116][T22410] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 807.753015][T22410] netlink: 'syz.2.5219': attribute type 1 has an invalid length. [ 807.818645][T22410] 8021q: adding VLAN 0 to HW filter on device bond5 [ 807.853585][T22417] loop9: detected capacity change from 0 to 1764 [ 808.244210][T22430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 808.366407][T22435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5224'. [ 808.375390][T22435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5224'. [ 808.402208][T20606] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.403543][T22435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5224'. [ 808.419888][T22435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5224'. [ 808.436716][T20606] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.538185][ T3877] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.569952][ T3877] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.616274][T22438] loop9: detected capacity change from 0 to 1024 [ 808.776508][T22438] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.993434][T22438] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5225: bg 0: block 112: padding at end of block bitmap is not set [ 809.055647][T22448] netlink: 'syz.8.5227': attribute type 10 has an invalid length. [ 809.069744][T22446] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 809.081350][T22446] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 809.091517][T22446] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.5226: Corrupt directory, running e2fsck is recommended [ 809.150017][T22446] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 809.158317][T22438] EXT4-fs (loop9): Remounting filesystem read-only [ 809.191031][ T28] kauditd_printk_skb: 1315 callbacks suppressed [ 809.191047][ T28] audit: type=1400 audit(1770691699.788:170776): avc: denied { search } for pid=22455 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 809.196592][T22452] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.5228'. [ 809.197323][ T28] audit: type=1400 audit(1770691699.788:170777): avc: denied { search } for pid=22455 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 809.197351][ T28] audit: type=1400 audit(1770691699.788:170778): avc: denied { search } for pid=22455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 809.197375][ T28] audit: type=1400 audit(1770691699.788:170779): avc: denied { search } for pid=22455 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 809.284268][T22446] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.5226: corrupted in-inode xattr: e_name out of bounds [ 809.312558][T22446] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 809.318010][ T28] audit: type=1400 audit(1770691699.908:170780): avc: denied { read } for pid=22450 comm="syz.2.5228" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 809.348596][ T28] audit: type=1400 audit(1770691699.908:170781): avc: denied { read open } for pid=22450 comm="syz.2.5228" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 809.382428][T22452] 1猉功D龌: renamed from 00猉功D龌 (while UP) [ 809.424688][T22446] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.5226: couldn't read orphan inode 15 (err -117) [ 809.434234][ T28] audit: type=1400 audit(1770691700.008:170782): avc: denied { name_bind } for pid=22450 comm="syz.2.5228" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 809.436642][T22446] loop3: lost filesystem error report for type 5 error -117 [ 809.458523][ T28] audit: type=1400 audit(1770691700.008:170783): avc: denied { node_bind } for pid=22450 comm="syz.2.5228" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 809.488281][ T28] audit: type=1400 audit(1770691700.008:170784): avc: denied { open } for pid=22450 comm="syz.2.5228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 809.507797][ T28] audit: type=1400 audit(1770691700.018:170785): avc: denied { perfmon } for pid=22450 comm="syz.2.5228" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 809.562378][T22446] EXT4-fs mount: 13 callbacks suppressed [ 809.562396][T22446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.589225][T12252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 809.629120][T18060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.738853][T22446] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 809.750491][T22446] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 809.760620][T22446] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.5226: Corrupt directory, running e2fsck is recommended [ 809.790937][T22446] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 809.802593][T22446] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 809.812711][T22446] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.5226: Corrupt directory, running e2fsck is recommended [ 809.890312][T22446] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 809.901840][T22446] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 809.911974][T22446] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.5226: Corrupt directory, running e2fsck is recommended [ 809.968675][T22468] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 810.032174][T22469] set_capacity_and_notify: 1 callbacks suppressed [ 810.032247][T22469] loop9: detected capacity change from 0 to 1024 [ 810.104642][T19181] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.112789][T22472] loop2: detected capacity change from 0 to 1024 [ 810.132565][T22469] EXT4-fs: inline encryption not supported [ 810.138454][T22469] EXT4-fs: Ignoring removed i_version option [ 810.188441][T22469] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 810.234165][T22475] loop5: detected capacity change from 0 to 1024 [ 810.252470][T22472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 810.253456][T22469] netlink: 'syz.9.5230': attribute type 1 has an invalid length. [ 810.292957][T22472] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.351306][T22475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.354975][T22469] 8021q: adding VLAN 0 to HW filter on device bond13 [ 810.485062][T18060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.529727][T22484] loop3: detected capacity change from 0 to 1024 [ 810.554882][T22472] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5232: bg 0: block 112: padding at end of block bitmap is not set [ 810.558531][T22484] EXT4-fs: Ignoring removed bh option [ 810.629212][T22484] EXT4-fs: inline encryption not supported [ 810.648833][T22484] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 810.671650][T22472] EXT4-fs (loop2): Remounting filesystem read-only [ 810.709935][T22484] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 810.794446][T22484] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.5233: lblock 2 mapped to illegal pblock 2 (length 1) [ 810.808648][T22484] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 810.891966][T22484] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.5233: lblock 0 mapped to illegal pblock 48 (length 1) [ 810.915229][T22484] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 811.033897][T22484] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.5233: Failed to acquire dquot type 0 [ 811.042739][T22494] loop9: detected capacity change from 0 to 1024 [ 811.043005][T22484] loop3: lost filesystem error report for type 5 error -117 [ 811.102928][T22494] EXT4-fs: Ignoring removed bh option [ 811.165633][T22494] EXT4-fs: inline encryption not supported [ 811.171495][T22484] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 811.180943][T22484] loop3: lost filesystem error report for type 5 error -117 [ 811.205697][T22484] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.5233: mark_inode_dirty error [ 811.224458][T22484] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 811.237621][T22484] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 811.318581][T22494] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 811.350563][T22484] EXT4-fs (loop3): 1 orphan inode deleted [ 811.383198][ T30] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 811.397525][ T30] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 811.408450][T19320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 811.408874][T22484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.459797][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7027: comm kworker/u8:1: Failed to release dquot type 0 [ 811.471402][ T30] loop3: lost filesystem error report for type 5 error -117 [ 811.481080][T22494] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 811.511217][T22494] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 2: comm syz.9.5236: lblock 2 mapped to illegal pblock 2 (length 1) [ 811.525344][T22494] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 811.530878][T22484] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 811.567194][T22494] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 48: comm syz.9.5236: lblock 0 mapped to illegal pblock 48 (length 1) [ 811.581768][T22494] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 811.631526][T22506] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 811.650494][T22506] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 811.658378][T22494] EXT4-fs error (device loop9): ext4_acquire_dquot:6991: comm syz.9.5236: Failed to acquire dquot type 0 [ 811.658615][T22506] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.5233: lblock 0 mapped to illegal pblock 48 (length 1) [ 811.669796][T22494] loop9: lost filesystem error report for type 5 error -117 [ 811.684308][T22506] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 811.751023][T19181] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.763470][T22494] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 811.770817][T22508] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.5237'. [ 811.773202][T22494] loop9: lost filesystem error report for type 5 error -117 [ 811.784660][T22494] EXT4-fs error (device loop9): ext4_evict_inode:253: inode #11: comm syz.9.5236: mark_inode_dirty error [ 811.803331][T22494] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 811.805423][T22508] 0猉功D龌: renamed from gretap0 [ 811.871431][T22508] 0猉功D龌: entered allmulticast mode [ 811.910222][T22494] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 811.967978][T22494] EXT4-fs (loop9): 1 orphan inode deleted [ 811.988613][ T3877] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 812.002849][ T3877] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 812.017670][T22494] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.062079][ T3877] EXT4-fs error (device loop9): ext4_release_dquot:7027: comm kworker/u8:18: Failed to release dquot type 0 [ 812.115971][T22494] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 812.179840][T22515] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 812.189894][T22515] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 812.198012][T22515] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 48: comm syz.9.5236: lblock 0 mapped to illegal pblock 48 (length 1) [ 812.214064][T22515] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 812.215218][T22518] loop3: detected capacity change from 0 to 1024 [ 812.251747][T12252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.261917][T22518] EXT4-fs: Ignoring removed bh option [ 812.298557][T22518] EXT4-fs: inline encryption not supported [ 812.339672][T22518] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 812.411528][T22518] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 812.437841][T22518] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.5239: lblock 2 mapped to illegal pblock 2 (length 1) [ 812.451848][T22518] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 812.557237][T22518] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.5239: lblock 0 mapped to illegal pblock 48 (length 1) [ 812.646101][T22518] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.5239: Failed to acquire dquot type 0 [ 812.657382][T22518] loop3: lost filesystem error report for type 5 error -117 [ 812.694127][T22518] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 812.703913][T22518] loop3: lost filesystem error report for type 5 error -117 [ 812.715190][T22518] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.5239: mark_inode_dirty error [ 812.753169][T22518] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 812.846156][T22535] netlink: 'syz.5.5242': attribute type 10 has an invalid length. [ 812.863416][T22518] EXT4-fs (loop3): 1 orphan inode deleted [ 812.878266][T20606] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 812.905092][T22535] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 812.921531][T22518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.934986][T20606] EXT4-fs error (device loop3): ext4_release_dquot:7027: comm kworker/u8:16: Failed to release dquot type 0 [ 812.946587][T20606] loop3: lost filesystem error report for type 5 error -117 [ 812.956875][T22535] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 813.033928][T22518] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 813.076196][T22518] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 813.128150][T22518] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 813.136298][T22518] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.5239: lblock 0 mapped to illegal pblock 48 (length 1) [ 813.170833][T22518] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 813.268323][T19181] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.421333][T22549] loop8: detected capacity change from 0 to 1024 [ 813.498855][T22549] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 813.520333][T22549] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 813.689550][T22549] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5244: bg 0: block 112: padding at end of block bitmap is not set [ 813.714098][T22560] loop9: detected capacity change from 0 to 1024 [ 813.714893][T22549] EXT4-fs (loop8): Remounting filesystem read-only [ 813.765354][T22560] EXT4-fs: inline encryption not supported [ 813.771268][T22560] EXT4-fs: Ignoring removed i_version option [ 813.827734][T22560] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 813.878259][T22560] netlink: 'syz.9.5247': attribute type 1 has an invalid length. [ 813.943389][T22560] 8021q: adding VLAN 0 to HW filter on device bond14 [ 814.047534][T22560] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5247'. [ 814.071783][T20077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 814.227593][ T28] kauditd_printk_skb: 1882 callbacks suppressed [ 814.227611][ T28] audit: type=1400 audit(1770691704.818:172656): avc: denied { recv } for pid=3298 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.70 dest=40330 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 814.378437][T22557] ================================================================== [ 814.386571][T22557] BUG: KCSAN: data-race in touch_atime / touch_atime [ 814.393273][T22557] [ 814.395609][T22557] write to 0xffff88811b64b828 of 4 bytes by task 22559 on cpu 1: [ 814.403329][T22557] touch_atime+0x1d7/0x330 [ 814.407761][T22557] shmem_file_read_iter+0x477/0x540 [ 814.412980][T22557] copy_splice_read+0x471/0x6c0 [ 814.417860][T22557] splice_direct_to_actor+0x28f/0x670 [ 814.423257][T22557] do_splice_direct+0x119/0x1a0 [ 814.428132][T22557] do_sendfile+0x382/0x650 [ 814.432567][T22557] __x64_sys_sendfile64+0x105/0x150 [ 814.437780][T22557] x64_sys_call+0x2db1/0x3000 [ 814.442483][T22557] do_syscall_64+0xc0/0x2a0 [ 814.447007][T22557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.452922][T22557] [ 814.455255][T22557] read to 0xffff88811b64b828 of 4 bytes by task 22557 on cpu 0: [ 814.462891][T22557] touch_atime+0x16c/0x330 [ 814.467333][T22557] shmem_file_read_iter+0x477/0x540 [ 814.472557][T22557] copy_splice_read+0x471/0x6c0 [ 814.477433][T22557] splice_direct_to_actor+0x28f/0x670 [ 814.482835][T22557] do_splice_direct+0x119/0x1a0 [ 814.487708][T22557] do_sendfile+0x382/0x650 [ 814.492140][T22557] __x64_sys_sendfile64+0x105/0x150 [ 814.497359][T22557] x64_sys_call+0x2db1/0x3000 [ 814.502047][T22557] do_syscall_64+0xc0/0x2a0 [ 814.506567][T22557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.512483][T22557] [ 814.514808][T22557] value changed: 0x39b8bf73 -> 0x3a5155f3 [ 814.520529][T22557] [ 814.522858][T22557] Reported by Kernel Concurrency Sanitizer on: [ 814.529019][T22557] CPU: 0 UID: 0 PID: 22557 Comm: syz.3.5246 Not tainted syzkaller #0 PREEMPT(voluntary) [ 814.538466][ T28] audit: type=1400 audit(1770691704.868:172657): avc: denied { recv } for pid=3298 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.70 dest=40330 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 814.538841][T22557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 814.564466][ T28] audit: type=1400 audit(1770691704.878:172658): avc: denied { read write } for pid=12252 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.574491][T22557] ================================================================== [ 814.607088][ T28] audit: type=1400 audit(1770691704.878:172659): avc: denied { read write open } for pid=12252 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.632729][ T28] audit: type=1400 audit(1770691704.878:172660): avc: denied { ioctl } for pid=12252 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.658585][ T28] audit: type=1400 audit(1770691704.888:172661): avc: denied { read write } for pid=18060 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.683016][ T28] audit: type=1400 audit(1770691704.888:172662): avc: denied { read write open } for pid=18060 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.708361][ T28] audit: type=1400 audit(1770691704.888:172663): avc: denied { ioctl } for pid=18060 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.734227][ T28] audit: type=1400 audit(1770691704.968:172664): avc: denied { search } for pid=22567 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.756589][ T28] audit: type=1400 audit(1770691704.968:172665): avc: denied { search } for pid=22567 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 815.071387][T22581] netlink: 27 bytes leftover after parsing attributes in process `syz.9.5249'. [ 820.906649][ T28] kauditd_printk_skb: 1340 callbacks suppressed [ 820.906667][ T28] audit: type=1400 audit(1770691711.498:173829): avc: denied { search } for pid=22619 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.931699][T22620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 820.940006][ T28] audit: type=1400 audit(1770691711.498:173830): avc: denied { search } for pid=22619 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.941872][T22620] audit: audit_lost=3117 audit_rate_limit=0 audit_backlog_limit=64 [ 820.965172][ T28] audit: type=1400 audit(1770691711.498:173831): avc: denied { search } for pid=22619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.972675][T22620] audit: backlog limit exceeded [ 820.977132][T22620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 820.996026][ T28] audit: type=1400 audit(1770691711.498:173832): avc: denied { search } for pid=22619 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.000940][T22620] audit: audit_lost=3118 audit_rate_limit=0 audit_backlog_limit=64 [ 821.007418][ T28] audit: type=1400 audit(1770691711.518:173833): avc: denied { search } for pid=22620 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1