last executing test programs: 1m43.261878639s ago: executing program 0 (id=143): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgctl$IPC_SET(0x0, 0x1, 0x0) 1m42.89755796s ago: executing program 0 (id=146): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x142b42, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) r4 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='+pids'], 0x6) 1m42.611874066s ago: executing program 0 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xf, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file0\x00', 0x88) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) socket(0x28, 0x801, 0x0) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = creat(0x0, 0x155adae9f4f0a7c9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) write$binfmt_elf64(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x78) close(r4) execve(0x0, 0x0, 0x0) listen(r3, 0x200204) 1m41.69197839s ago: executing program 0 (id=151): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mkdir(&(0x7f0000000540)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000400)='./bus\x00', 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7800, 0x0, 0x12) 1m38.541750475s ago: executing program 0 (id=166): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f00000003c0)={[{@delalloc}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nodioread_nolock}, {@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noinit_itable}, {@nouid32}, {@nobh}, {@noauto_da_alloc}, {@nouid32}, {@dioread_lock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x3e9}, [], {0x14, 0x3f5, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x44840}, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) 1m37.004373645s ago: executing program 0 (id=173): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) socket$rds(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) 1m36.776421527s ago: executing program 32 (id=173): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) socket$rds(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) 1m26.424068182s ago: executing program 3 (id=267): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031411002abd7000fedbdf250900020073797a50000000000800410073697700140031"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000080)=ANY=[@ANYBLOB='norock,sbsector=0x0000000000000006,check=relaxed,block=0x0000000000000200,mah=normal,\x00'], 0x0, 0x688, &(0x7f0000000100)="$eJzs3V1vFOf1APCzBAvLfwn91VYIIUIm0EogEbO7DkZWbrpdj+1J1jurmXUEVykKdoQwSQupVLgKN2krtR8it/0Q7SeKets7qp3dhQW/rEOCl6DfbwXz7MzZec4Myxw99rwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABC19mq93qhFJ+tu3UwO1l4t8s1Dlo/X9+8XJof0G1Eb/In5+Tg7nHX2V88Xnxn8dTHOD9+dj/nBZD4e/9+Z///olydPjD9/SELH4uGjx/du7+5uP5h1IjOynnazMs82W+tpkpV5srK8XL+2sVYma1knLW+V/XQzaRdpq58XyeX2laSxsrKUpIu38q3u+mqrk45n3vigWa8vJx8v9tJWUebdax8vlu2NrNPJuutVzGDxIObG4Iv4SdZP+mlrM0l27u5uL01LchDUOEpQc1pQs95sNhrNZmP5+sr1G/X6yT0z6i+JPRGz/9IyWz/xERxe3YlR/Y9OZNGNrbgZyb6vdqxGEXlsHrB8ZFz/f3MtHba+2b/fyfo/rvJnny8+F1X9vzB8d+Gg+n9ALsf3ehiP4nHci9uxG7uxHQ9mntHxvtYjjW5kUUYeWWxGq5qTjOYksRLLsRz1+Cw2Yi3KSGItsuhEGmXcijL6kVbfqHYUkUYr+pFHEUlcjnZciSQasRIrsRRJpLEYtyKPrejGeqxGq1rLTtyt9vvSITk+C2ocJah5SJD6zw81v2fO6zmQwyt4Oq7/AAAAwFurVv30fTD+n4t3q9Za1knrs04LAAAA+AlVv/k/P5jMDVrvRs34HwAAAN42teoau1pELMR7w9b4SqjxDwHmZpwiAAAA8CNVv/+/MJgsDFrvRW3P+B8AAAD4mfvr1Hvsz/dO1f71nyiKudqT3s1f1+63BnGt++8MP1dN/vt0aNDur52rnR6tpJosnxy9a6fna6O7Xz67Cebo5ILvd6blUTs0gUkHJxB/j/eHMe/fGU7vjJcMe1lYyzrpYjvvfNSIVuv0iX56s/+nL+/+OarN/1t383Qtdu7ubi9+/tXunSqXJ4O1PLk/uoHinvso7pPLeNHX1f0Wqmsu9t3iuepCjFG/C8N+65Pbf2L48RM/YPu/jYvDmIsL8fRURCy8uP3zgz4biwdt/SiLRpXF/AudHmXLn2dxaRhz6fKl4WSfLJrTsmhO7v9X2hdHyGJpWhZLPzILgFnZmVKFansL/ysc5Y6nun8bl4cxl89VB9aT5/Y5otenHdHrr1jXx339M64MY66Mgw+qsYN+//FSVf1u8IHvDuy37DRrg134ztf3/xBnHj56/MHd+7e/2P5i+8tmc2m5/mG9fr0Zc9VmjCZqDwD7mP6MnakRtQ+njKp/8eyUgsX4PL6K3bgTV6urDaozDvZd60Ls/DZGpyFcnRi1Vl4atS5MPOHl6pRR3cLEg16OHrt0DP8SAHB8Lk6pw0ep/1enjLsXJk4pvDpldDxZywGA1yMtvq8t9P9SK4qs91ljZaXR6m+kSZG3P0mKbHU9TbJuPy3aG63uepr0iryft/POoPFptpqWSbnV6+VFP1nLi6SXl9nN6snvyejR72W62er2s3bZ66StMk3aebffaveT1axsJ72t33WyciMtqg+XvbSdrWXtVj/Lu0mZbxXtdDFJyjSdCMxW024/W8sGzW7SK7LNVnEr+TTvbG2myWpatous18+HKxz3lXXX8mKzWu3irHc2ALwhHj56fO/27u72g9fYiFOz3koAYNJElQYAAAAAAAAAAAAAAN5Qx3H931vY+OPPededejPS0JhJ45vfD//nTwue9ZEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPb6XwAAAP//2kFZhw==") syz_mount_image$ext4(&(0x7f0000000800)='ext2\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000900)={[{@errors_remount}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@barrier}, {@barrier_val={'barrier', 0x3d, 0xf}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") open(&(0x7f0000000000)='./file2\x00', 0x147842, 0x1ef) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x6a4b80, 0x8e) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f00000000c0)=',{\x00', 0x3) 1m26.072626543s ago: executing program 3 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xfffffc28}}, './file0\x00'}) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000016c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="02002dbd7000ffdbdf25630000003bc82c721428f4a13aadc5d1236caf6f9c5a7985ffb8308b79edd2e1ef8dab5fa2aa1afaa2d137a6b58bc6893ad0cb1b7b54fb88cba249f7307ece8911d2222895fbd28042ee46f0098350ab4062cb958df27e6f846c430b8aebd7"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x8800) 1m26.053423934s ago: executing program 3 (id=271): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) poll(0x0, 0x0, 0x3ff) sendto$inet(r1, &(0x7f0000000280)="9f", 0x1, 0x11, &(0x7f0000004ff0)={0x2, 0x2000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) accept4(r1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 1m22.250480896s ago: executing program 3 (id=299): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) setfsgid(0xee00) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f000000b800)={[{@nodots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@dots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {}, {@fat=@fmask={'fmask', 0x3d, 0xffff}}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@quiet}, {@fat=@tz_utc}, {@nodots}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7da5}}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r1 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) fchdir(r2) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r3, &(0x7f0000000000), 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000040)='map_files\x00') fchdir(r4) creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) 1m21.981654502s ago: executing program 3 (id=305): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f00000003c0)={[{@delalloc}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nodioread_nolock}, {@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noinit_itable}, {@nouid32}, {@nobh}, {@noauto_da_alloc}, {@nouid32}, {@dioread_lock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x3e9}, [], {0x14, 0x3f5, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x44840}, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000300)=""/168) 1m21.659374521s ago: executing program 3 (id=307): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x40000000) r2 = signalfd(r0, &(0x7f0000000100)={[0x1]}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x80}}, 0x8000) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000000)=0x1) 1m21.659209951s ago: executing program 33 (id=307): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x40000000) r2 = signalfd(r0, &(0x7f0000000100)={[0x1]}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x80}}, 0x8000) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000000)=0x1) 4.237983813s ago: executing program 5 (id=629): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000200)={0x0, 0x32, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES64=r2, @ANYRESHEX=r2], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000017000000000000000010000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r4, 0x25, 0x8, @void}, 0x10) fsync(r5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="00006ac343e5d83809958069b503b3a962a7e4e132f53044e554ea1a0501", @ANYRES16=r2, @ANYBLOB="00022cbd7000fbdbdf250400000004000180080003000700000040000680080006000600000008000700", @ANYRES32=r4, @ANYBLOB="08000600010000000600010002000000060005004e20000014000400fe8800000000000000000000000000010500050008000000050005001100000005000500810000000800020005000000"], 0x80}, 0x1, 0x0, 0x0, 0x24000051}, 0x4001) r6 = openat(r0, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x200, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f1", 0x1) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, 0x0) process_madvise(r9, 0x0, 0x0, 0x4, 0x0) sendfile(r7, r6, 0x0, 0x40001) r11 = socket(0x10, 0x3, 0x0) sendto$inet6(r11, &(0x7f0000000740)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000200000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x24000040, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) capget(0x0, 0x0) timerfd_create(0x1, 0x800) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x12, 0x1300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2014018, &(0x7f00000001c0)={[{@i_version}, {@data_journal}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0xff, 0x53a, &(0x7f0000000b80)="$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") 3.4291441s ago: executing program 5 (id=645): r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000140)="9b48b5cd22451eb67071266c7ddcf828de882aef119238688c0c2f7d1b6e239842c1", 0x22}], 0x1) sendmmsg$inet6(r0, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22400049, &(0x7f0000000180)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x1, 0x471, &(0x7f0000000bc0)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) dup(r2) r3 = memfd_create(0x0, 0x1) fallocate(r3, 0x0, 0x9, 0x10001) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_disconnect(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xd2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) 2.680928743s ago: executing program 4 (id=649): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000000000004000000060000004c010000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00@'], 0x48) 2.680294934s ago: executing program 4 (id=650): r0 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000005c0)={r0, 0x1478, 0xffffffffffffffff, 0xe}) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r6 = openat(r3, &(0x7f0000000080)='./file2\x00', 0x842, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x12, 0x0, "5c08fe740391edb416749ccfe9614d53245d21b704c194ac7f5e97fe08ac2da2a0b101aa1f3daeb3bba24b482ba7f1cad889b4fc0b6093b408c87ede7131a1c7", "0ce320bdb1a450329f4c656f070588d88cfc0ac14f2ea30d14352cfb90f18442", [0x3, 0xffff]}) write$binfmt_elf32(r6, 0x0, 0x25c) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000440), 0x0, 0x114, 0xf51f0b150f2a6fcb) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_CLOSE={0x13, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000180)='\x00', 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x3004d91, &(0x7f0000000540)={[{@init_itable}, {@dioread_lock}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x80f}}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") 2.646525216s ago: executing program 4 (id=652): getgroups(0x2, &(0x7f0000000400)=[0x0, 0xee01]) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x5000) fallocate(r2, 0x0, 0x0, 0x8800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r7, 0x10e, 0x5, &(0x7f0000000540)=""/193, &(0x7f0000000280)=0xc1) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001400050126bc70007bdbdf2511000d000100da538c4f7e37eb868500000000003c2f5883cacfdb64d670db072f4972435371ccfe0a9ec641470f990790df9da261e32fead3bbef"], 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) mq_timedsend(r2, 0x0, 0x0, 0x3, &(0x7f00000002c0)={r4, r5+10000000}) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c13}], 0x188, 0x2000, 0x0, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0xfffffffd, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = getgid() getgroups(0x2, &(0x7f0000000300)=[r1, r9]) stat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x8, &(0x7f00000000c0)=[r0, r1, r1, r9, r0, r0, r10, r0]) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f00000001c0)=ANY=[@ANYBLOB='no']) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid={'resgid', 0x3d, r1}}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HHu72U2bFDhAJUqhRdkVrJ00tI16KEVCcKoElPsSEieK4sRR7LSbqIKsOHBEQgiQOJULFyROnJBQJS4cEVIlOIMAgRBs4YAEdCrb43Q3GSfZjWNn4++TJvPmeeb97zma8byZp5kARtZTEfFyRLybpun1iJjM8gvZFHudqbXeO3feWGxNSaTpq/9IIsnyumWlbY/E1WyzyxHxlS9GfD05HLexs7u2UKtVt7LlSnN9s9LY2b2xur6wUl2pbszNzT4//8L8c/MzfWnnRES89Pm/fP87P/nCS7/89Ot/vPm3a99Isvw40I77VDzqw07TS+3v4u4Nth4w2HlUbLcwM563xtihnNtnXCcAAHr7QER8IiKux2SMHX06CwAAADyE0s9OxP+S7r27Qy71yAcAAAAeIoX2GNikUM7G+05EoVAuR3sM74fiSqFWbzQ/tVzf3ljqjJWdilJhebVWncnGCk9FKWktz7bT7y8/e2B5LiIej4jvTY63l8uL9drSsC9+AAAAwIi4eqD//+/JTv8fAAAAuGCmhl0BAAAA4Mzp/wMAAMDFp/8PAAAAF9qXXnmlNaXd918vvbazvVZ/7cZStbFWXt9eLC/WtzbLK/X6SvuZfevHlVer1zc/ExvbtyrNaqNZaezs3lyvb280b67e8wpsAAAAYIAe/9hbv08iYu/F8fbUculkm55wNeC8Ku6nkmyes1v/4bHO/M8DqhQwEGPDrgAwNMVhVwAYmtKwKwAMXXLM5z0H7/wmm3+8v/UBAAD6b/oj+ff/j78uuFcYQPWAM+T+H4wu+z+MrvZ5/klH8jrjhwul5AwARt6p7/8fK03vq0IAAEDfTbSnpFDOLu9NRKFQLkc82n4tQClZXq1VZyLisYj43WTpkdbybHvL5Ng+AwAAAAAAAAAAAAAAAAAAAAAAAADQkaZJpAAAAMCFFlH4a/KrzrP8pyefmTh4feBS8p/JyF4R+vqPXv3BrYVmc2u2lf/P/fzmD7P8Z4dxBQMAAABGQvF+Vu7207v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADop3fuvLHYnQYZ9++fi4ipvPjFuNyeX45SRFz5VxLFu7ZLImKsD/HHW38+nBc/aVVrP2Re/PE3Tx9/7/aR8WMq+xby4l89fXgYaW+1jj8v5+1/hXiqPc/f/4oR9yw/qN7Hv9g//o312P8fPWGMJ97+WaVn/NsRTxTzjz/d+EmP+E/nFfjzbx/K+tpXd3d7xU/fjJjO/f1J7olVaa5vVho7uzdW1xdWqivVjbm52efnX5h/bn6msrxaq2Z/c2N896O/ePeo9l/pEX/qmPY/k1PepZy8/799684HO8lSXvxrT+fE//WPszUOxy9kv32fzNKtz6e76b1O+m5P/vS3Tx7V/qUe7T/u/3+tV6EHXP/yt/50wlUBgAFo7OyuLdRq1a3zkXgx+l5yq4c/9HY9fIn/pueiGmeb+GZfC0zTNG3tU6coJ4nBfQnJ0VUd9pEJAADot/dP+oddEwAAAAAAAAAAAAAAAAAAABhdg3jS2MGYe/uppB+P0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iv3AgAA//8ZWuAG") 2.288874807s ago: executing program 4 (id=658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r4, 0x0, 0x1c000000007400}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 2.028714962s ago: executing program 6 (id=661): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1006}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010026bd70000000002b200100000000000000000000000000007f0000010000000000000000000000000000000000000000000020002c00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000433000000ac1414aa0000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000002008f00000000000000000000000000ffffffffffffffffff0f0000000000000208000000000000000000000000000000000000000000001000000000000000020000fb29bd7000000000000a0002"], 0x140}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000017) listen(0xffffffffffffffff, 0x3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r1 = syz_clone(0x20001000, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000240), 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12011, r2, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) socket(0x10, 0x3, 0x0) rt_tgsigqueueinfo(0x0, r1, 0x33, 0x0) 1.903856069s ago: executing program 5 (id=662): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x18000}, 0x102004, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (fail_nth: 1) 1.88306684s ago: executing program 6 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000004080000000000000000000100"/28], 0x50) socket(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120, 0x20}, {0xffffffff80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x800, 0x0, 0xfffffffffffffff1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 1.691451102s ago: executing program 4 (id=667): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x57b, &(0x7f00000010c0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = creat(&(0x7f0000000280)='./file0/file0\x00', 0x21) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001500)="b2", 0x1}, {&(0x7f0000002800)="cf", 0x1}], 0x2}}], 0x1, 0x4000090) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0xd00, 0x0, 0x0, {0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040045}, 0x2000800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x7, 0xbb, 0xa, 0xfffffffffe000001}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x800, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1) r4 = creat(&(0x7f0000000280)='./file0/file0\x00', 0x21) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r4, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x7, 0xbb, 0xa, 0xfffffffffe000001}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x71) setxattr$system_posix_acl(&(0x7f00000006c0)='.\x00', &(0x7f0000000700)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {}, [], {0x4, 0x7}, [], {}, {0x20, 0x1}}, 0x24, 0x2) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000003040)={0xa2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x1f6, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_b, @random="149771521b2f", {0x2}}, @random="c63f485248a129e842b665782244facb6cda353d990603a6fa71b8d2606ca14f723639bd3757a5ba7b4914317685304248f342d72caf6541364dca97cdb65b15757f68cc4be737745c7a497577466e4f95a087673ef9bc0104adc25745ffaf6ea90742e315b3a14add725b90ec9c5c59697ea2c371cf303ae7d2213cfd01c8b9e073ee2725c3fb6e3a6f5792a224af25096203f6523763107ce676b1df5ec8228b469de51746a58c0b95461a20a4268fe9327dc25b48e5bf949e1451c0abbf33fb806f7dde4db80743b3ca9faca18389b3d0b3c5b3ecd37ee08e812e0ea9610e248e5af777da7b34e3904995ff2fb465487b5a20a1b3a45997c417f00a246c2ebb7c3e64466a39d9a5a30d7a18056093bcdc3d18f8fc3c4df727461d95911ee12cb82c908de4f502c4bee63044345a1d61a9d1affd9aa09b7a6f43f4d181780310321427c3423f4c78c460fb2f96158cc9af1313439aaf3bf5df76c230a1da9c4325d4e03d6d2e9fb0732eb11ba878ff9c8d13ea1e0db29f60688fc8a52f0c1524e31b1f7bec2beb6ecdd64a5504939297ebae76b1640591cf4796c68a0e50d096d364e8da42d30ba9f1d08333e5a64fa5e680cd5753032dd6e3ef1be4c103e367769ea816a9fe72f3f5e5da5407fb69f9849c177c23e0763434"}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x7f0, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x9}, @broadcast, @from_mac, @device_b, {0xa, 0x5}, "", @value={0x3, 0x1, 0x2, 0x0, 0xf8}}, @random="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"}}]}, 0xa2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 809.493963ms ago: executing program 5 (id=675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x9, 0x6, 0xfff, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002440)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x63) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0xffffffffffffffff, 0x2, r0}, 0x38) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x100000}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 798.546394ms ago: executing program 5 (id=676): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x3b, 0x0, 0x0, 0x4a0f0000}, 0x2404c074) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_open_pts(r1, 0x442481) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x3b, 0x0, 0x0, 0x4a0f0000}, 0x2404c074) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) syz_open_pts(r1, 0x442481) (async) 773.663525ms ago: executing program 4 (id=677): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000182bd000000000000000000000000000080000000000008"], 0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) io_setup(0x6, 0x0) socket(0x8000000010, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, 0x0, 0x0) bind$can_raw(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0xce1e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x20000) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000000)=0x4) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) socket$inet6(0x10, 0x3, 0x0) 728.802808ms ago: executing program 1 (id=678): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x884) 726.394438ms ago: executing program 5 (id=679): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x200, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) r3 = gettid() syz_pidfd_open(r3, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ce2cbfb69af7f1d23128c0cb2b62", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005c0000009500000000e90000"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 693.28864ms ago: executing program 2 (id=680): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) close(r0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1ba}) chmod(&(0x7f0000000000)='./file0\x00', 0x60) 616.335635ms ago: executing program 2 (id=681): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) close(r1) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=f\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) pread64(r0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r7, 0x1d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10, r9}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x23, &(0x7f0000000140)=""/35, 0x41000, 0x28, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000004c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x5, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r8, r5, r5], &(0x7f0000000600)=[{0x2, 0x3, 0xc, 0x7}], 0x10, 0x5}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 493.458322ms ago: executing program 2 (id=682): socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x500000000000000, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 466.945863ms ago: executing program 2 (id=683): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x21000000000000ff) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) clock_getres(0xd6360619310ef359, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) modify_ldt$write2(0x11, &(0x7f0000000080)={0x8, 0x0, 0x1000000, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) 465.142813ms ago: executing program 1 (id=684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001f0a0703000000000000000002000009080003400000000a0900010073797a30000000000c0006"], 0x70}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f31000060000380"], 0x8c}}, 0x0) 454.845834ms ago: executing program 6 (id=685): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@loopback, 0xb23, 0x1, 0x0, 0xe, 0x77f, 0x4000}, 0x20) r3 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) 328.598651ms ago: executing program 6 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x9, 0x6, 0xfff, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002440)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x63) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0xffffffffffffffff, 0x2, r0}, 0x38) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x100000}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 328.183301ms ago: executing program 2 (id=687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x5000) fallocate(r3, 0x0, 0x0, 0x8800000) r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001a14318e9601b224d512204ef079b4451275ccc9b7d64736f661fdad9555c7f17fcc5202f0a9a364392872050469c027e6e3698c9e0a55e714d6b2f01e65302bf6729910364d76d864609e015e6f67ff8fa121f22f70091445c6a8252e84347271a462c8f93a24ead3d28552307c2e8c177654c3ef7406c92ff8e00a16aae5e5e06316e50fb63f27c89d0a4788"], 0x30}, 0x1, 0x0, 0x0, 0x20008845}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x2}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 326.983691ms ago: executing program 6 (id=688): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0xda) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000500), &(0x7f00000002c0)=r2}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) r5 = syz_io_uring_complete(0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r6) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd70000000002509"], 0x14}, 0x1, 0x0, 0x0, 0x4c840}, 0x4010) write$binfmt_script(r5, &(0x7f0000000380)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'htb\x00'}, {0x20, '^$:'}, {0x20, 'mqprio\x00'}, {0x20, '\x00'}, {0x20, 'syzkaller0\x00'}], 0xa, "99e7e56360dd34c85e06c80086be10c2470f509b1c4198f52957cb365e7b8e664a5f4fe0e024fcb57660c81a84da74f83a75cc3d183be38f4f63b4110cf68a52cbd2dddb967bb2e07afacb9344a03b95a35d343afe3d14c9c3de085b7b29c7a2d67f6b89d298d037bf210a6c138ce88030bcae801c8306921ece42076ebe57fcc65c937256f99ef19aaf43a351ff9764ac0735b567fc2d98f6196488d69e38d4740532bc1bd7fa9bc8957db08f0cdd863d664be01f9c19837e8a59ede242263ffcfcffab4134df80e33906b4c970e2bf1991a2a64168203f25786a766ee20d364d17914f"}, 0x110) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtclass={0x520, 0x28, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x10, 0xffe0}, {0x2, 0xc}, {0xf, 0x7}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x9, 0x81}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_RATE={0x6, 0x5, {0x9, 0xdc}}, @tclass_kind_options=@c_htb={{0x8}, {0x424, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0x6}, @TCA_HTB_RATE64={0xc, 0x6, 0x3}, @TCA_HTB_CTAB={0x404, 0x3, [0x8, 0x0, 0x1, 0x2, 0x4, 0x2c0, 0x10000, 0x10000, 0xbc25, 0x0, 0x7, 0x6, 0x5, 0x7, 0x9, 0x0, 0x9, 0x7, 0x3, 0x9, 0x2040, 0x5, 0xe4, 0x1, 0x80000001, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x1, 0x0, 0x6, 0xfff, 0x4, 0xd95, 0x3, 0x80000001, 0x1, 0x40, 0x7, 0x81, 0x1, 0xfffffffd, 0x6, 0x5, 0x6, 0x400, 0x1, 0x9, 0x2a45, 0xfa3, 0xffff, 0xff, 0x0, 0x6, 0x7, 0x3, 0x7, 0x3, 0x0, 0x7fffffff, 0x4, 0x100, 0x1000, 0x40, 0xffffffff, 0x5, 0xfffffff7, 0x7fffffff, 0x4, 0x0, 0x2, 0x9, 0x9b6a, 0x80000001, 0xfa, 0x4, 0x80000001, 0x8, 0x0, 0x2, 0x0, 0x7, 0x3, 0x6, 0xc4, 0x3, 0x6, 0x518ebd48, 0x80000000, 0x5, 0x1, 0x1, 0x8001, 0x0, 0x7, 0x6, 0x200, 0x1ff, 0x7fff, 0x7, 0x8, 0x6, 0x3e, 0x9, 0x18c7, 0xfff, 0x5, 0x8, 0x10001, 0x5, 0x9, 0x7fff, 0x7, 0x505, 0x2, 0x9, 0x800, 0x7, 0x0, 0x8000, 0x9, 0x5, 0x80000001, 0xd82e, 0x1, 0x5, 0xff, 0xe8, 0x9, 0xc6c9, 0x7, 0x9, 0x8000, 0xffffff01, 0x1, 0x2, 0x842, 0x4, 0x6, 0xf, 0xa, 0x3, 0xf, 0x10001, 0x3da8, 0xb11c, 0x7326b67a, 0x9, 0xffffffff, 0x73, 0xe854, 0x52f, 0x3e, 0xf, 0x7fff, 0x0, 0x3, 0x72, 0x0, 0x6, 0xfffffff9, 0x7, 0x9, 0x17, 0x1, 0x5, 0xfffffff7, 0x9, 0xa0b0, 0x9, 0x80e, 0x5, 0xc7f1, 0x52fe7e13, 0x7ff, 0x9, 0x0, 0x4366, 0x40, 0xf, 0x1, 0x3, 0x4, 0x6, 0x401, 0x7, 0x4, 0xcf2, 0x5, 0x0, 0x800, 0x8, 0x3, 0x3, 0x5, 0x7fff, 0x6, 0xc, 0x9, 0x8, 0x5839, 0x6, 0x6, 0x5, 0xc95, 0x4, 0xfffffffb, 0x2, 0x10, 0x6, 0x81, 0xffffffff, 0x2ba, 0x90000, 0x6, 0x7214df32, 0x3, 0x5e, 0x101, 0x41, 0xffff8001, 0x7, 0x8, 0xff, 0x7, 0x81, 0x8, 0x401, 0x5, 0x2, 0x5, 0xffffff85, 0x7, 0x2ce, 0x7358, 0x9, 0x21, 0x6, 0x1, 0x128, 0x400, 0x2, 0x69100000, 0x62efcc40, 0x1, 0xff, 0xfffffff9, 0x7f, 0x2, 0xffffff30, 0x2, 0xbc, 0x100, 0x7fffffff]}]}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x94, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x200, 0x9, 0x10001}}, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x4cb7f9e6, 0xfffffff2}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x7ff, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x6d000000, 0xc0}}, @TCA_HFSC_FSC={0x10, 0x2, {0xac5, 0x94, 0x999}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x4, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7ffe, 0x7}}, @TCA_HFSC_USC={0x4e, 0x3, {0x5, 0x5, 0x1}}, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x6, 0x3e72}}]}}]}, 0x520}, 0x1, 0x0, 0x0, 0x4080}, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r10 = open(&(0x7f0000000280)='.\x00', 0x181000, 0x40) fcntl$notify(r10, 0x402, 0x8000003d) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="4000260b0a0002000180"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 312.646442ms ago: executing program 1 (id=689): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x600, 0x40000}, 0x0) 255.334966ms ago: executing program 6 (id=690): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x80000) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_timeval(r1, 0x1, 0x33, &(0x7f0000abaff9)={0x0, 0x2710}, 0x10) getpgrp(0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x2}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000700)=0xffffffff, 0x4) poll(&(0x7f0000000300)=[{r4, 0x80}], 0x1, 0x101) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000000080), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00'}) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback={0x2000000}, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad6e911b", 0x28}], 0x1}, 0x0) 212.820518ms ago: executing program 1 (id=691): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf7, 0x1, 0x0, 0x0, 0x0, 0x57, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xb, 0xfffffffffffffff7}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x29ce43, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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") (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf7, 0x1, 0x0, 0x0, 0x0, 0x57, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xb, 0xfffffffffffffff7}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) open(&(0x7f00000000c0)='./file1\x00', 0x29ce43, 0x0) (async) ftruncate(r0, 0x2007ffc) (async) sendfile(r0, r0, 0x0, 0x800000009) (async) 129.784523ms ago: executing program 1 (id=692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0xfff2, r2, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 81.795906ms ago: executing program 1 (id=693): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$trusted_overlay_opaque(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000640), &(0x7f0000000840), 0x2, 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) umount2(0x0, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00', 0x89901) socket$inet_sctp(0x2, 0x1, 0x84) timer_delete(r0) lseek(0xffffffffffffffff, 0x1000000, 0x0) open$dir(&(0x7f0000000580)='./file0/../file0/../file0/../file0\x00', 0x410000, 0x4) recvmmsg$unix(r1, &(0x7f0000000540)=[{{&(0x7f0000000180), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/182, 0xb6}, {&(0x7f0000000000)=""/55, 0x37}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/212, 0xd4}, {&(0x7f00000000c0)=""/52, 0x34}], 0x8, &(0x7f0000000740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}], 0x1, 0x120, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x248000, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r11) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002b40)={{r3, 0xffffffffffffffff}, &(0x7f0000002ac0), &(0x7f0000002b00)='%pS \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c00)={0x6, 0x24, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @ldst={0x1, 0x3, 0x2, 0x5, 0x4, 0xffffffffffffffc0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1b800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xb0}]}, &(0x7f0000000140)='syzkaller\x00', 0xa628, 0x28, &(0x7f00000009c0)=""/40, 0x41100, 0x2, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000002a40)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002a80)={0x4, 0x8, 0x0, 0x8634}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002b80)=[r2, r2, r11, r6, r5, r12, r7], &(0x7f0000002bc0)=[{0x0, 0x5, 0x7, 0x3}], 0x10, 0x7}, 0x94) 0s ago: executing program 2 (id=694): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x121201, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r2 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000640)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0xfffffffe, 0x10000, 0x1, 0x0, 0x0, 0x2}, 0x1c) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x2000000000004, 0x873}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000540)=""/15, 0x2}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, r6, 0x0) recvmmsg(r3, &(0x7f0000002780)=[{{&(0x7f0000000100)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000001380)=""/203, 0xcb}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f0000001480)=""/200, 0xc8}], 0x5}, 0x8}, {{&(0x7f0000001600)=@isdn, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/120, 0x78}, {&(0x7f0000002700)=""/73, 0x49}], 0x3, &(0x7f0000000340)=""/40, 0x28}, 0x2}], 0x2, 0x40, 0x0) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4092, 0xffc}], 0x1) kernel console output (not intermixed with test programs): audit(1770504320.482:110): avc: denied { setopt } for pid=3499 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.169107][ T29] audit: type=1400 audit(1770504320.482:111): avc: denied { bind } for pid=3499 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.188088][ T29] audit: type=1400 audit(1770504320.482:112): avc: denied { name_bind } for pid=3499 comm="syz.0.9" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 39.209531][ T29] audit: type=1400 audit(1770504320.482:113): avc: denied { node_bind } for pid=3499 comm="syz.0.9" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 39.230901][ T29] audit: type=1400 audit(1770504320.492:114): avc: denied { write } for pid=3499 comm="syz.0.9" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.251992][ T29] audit: type=1400 audit(1770504320.492:115): avc: denied { connect } for pid=3499 comm="syz.0.9" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.273134][ T29] audit: type=1400 audit(1770504320.492:116): avc: denied { name_connect } for pid=3499 comm="syz.0.9" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 39.465403][ T3334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.487239][ T3334] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.508394][ T352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.606850][ T3509] netlink: 'syz.0.10': attribute type 4 has an invalid length. [ 39.614491][ T3509] netlink: 1601 bytes leftover after parsing attributes in process `syz.0.10'. [ 40.473423][ T29] audit: type=1400 audit(1770504320.982:117): avc: denied { create } for pid=3501 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.493111][ T29] audit: type=1400 audit(1770504321.052:118): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.554913][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.564832][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.782704][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 41.986118][ T3553] loop0: detected capacity change from 0 to 512 [ 41.993665][ T3553] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.006765][ T3553] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.018212][ T3553] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 42.026213][ T3553] System zones: 1-12 [ 42.150865][ T3553] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.184938][ T3553] EXT4-fs (loop0): 1 truncate cleaned up [ 42.511851][ T3553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.711950][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.722444][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.199141][ T3577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 43.655002][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.860690][ T3602] loop2: detected capacity change from 0 to 512 [ 44.027900][ T3602] EXT4-fs: inline encryption not supported [ 44.033783][ T3602] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.040249][ T3602] EXT4-fs: Ignoring removed bh option [ 44.045765][ T3602] EXT4-fs: test_dummy_encryption option not supported [ 44.063344][ T3611] loop3: detected capacity change from 0 to 1024 [ 44.290930][ T3611] ======================================================= [ 44.290930][ T3611] WARNING: The mand mount option has been deprecated and [ 44.290930][ T3611] and is ignored by this kernel. Remove the mand [ 44.290930][ T3611] option from the mount to silence this warning. [ 44.290930][ T3611] ======================================================= [ 44.833324][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 44.833339][ T29] audit: type=1400 audit(1770504325.762:163): avc: denied { create } for pid=3612 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.858729][ T29] audit: type=1400 audit(1770504325.762:164): avc: denied { setopt } for pid=3612 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.877941][ T29] audit: type=1400 audit(1770504325.762:165): avc: denied { connect } for pid=3612 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.897663][ T29] audit: type=1400 audit(1770504325.762:166): avc: denied { create } for pid=3612 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.917387][ T29] audit: type=1400 audit(1770504325.762:167): avc: denied { getopt } for pid=3612 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.039572][ T3611] EXT4-fs: Ignoring removed nobh option [ 45.072118][ T3622] loop4: detected capacity change from 0 to 128 [ 45.099143][ T3611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.124992][ T29] audit: type=1400 audit(1770504326.462:168): avc: denied { mount } for pid=3620 comm="syz.4.39" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.146816][ T29] audit: type=1400 audit(1770504326.492:169): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.324228][ T29] audit: type=1400 audit(1770504326.692:170): avc: denied { getopt } for pid=3632 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.414299][ T29] audit: type=1400 audit(1770504326.782:171): avc: denied { nlmsg_write } for pid=3610 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 45.435078][ T29] audit: type=1400 audit(1770504326.782:172): avc: denied { add_name } for pid=3610 comm="syz.3.35" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.789661][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.847928][ T3653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.859715][ T3653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.859497][ T3667] loop4: detected capacity change from 0 to 512 [ 46.887052][ T3667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.916089][ T3667] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.085280][ T3673] loop0: detected capacity change from 0 to 1024 [ 47.323581][ T3673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.340973][ T3673] EXT4-fs warning (device loop0): ext4_rmdir:3185: inode #11: comm syz.0.53: empty directory 'file1' has too many links (111) [ 47.381787][ T3517] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.412579][ C1] hrtimer: interrupt took 40823 ns [ 47.439736][ T3681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 47.504754][ T3681] netlink: 'syz.2.55': attribute type 10 has an invalid length. [ 47.535991][ T3681] team0: Device vxcan1 is of different type [ 48.569038][ T3700] netlink: 'syz.2.59': attribute type 4 has an invalid length. [ 48.576657][ T3700] netlink: 1601 bytes leftover after parsing attributes in process `syz.2.59'. [ 48.616832][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.627738][ T3512] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.788370][ T3679] Bluetooth: hci0: command 0x1003 tx timeout [ 51.331513][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.315180][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 52.315195][ T29] audit: type=1400 audit(1770504333.692:197): avc: denied { nlmsg_write } for pid=3755 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.913538][ T29] audit: type=1400 audit(1770504334.232:198): avc: denied { connect } for pid=3763 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.932885][ T29] audit: type=1400 audit(1770504334.232:199): avc: denied { write } for pid=3763 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.952081][ T29] audit: type=1400 audit(1770504334.232:200): avc: denied { create } for pid=3763 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 53.236529][ T29] audit: type=1400 audit(1770504334.382:201): avc: denied { create } for pid=3767 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.322776][ T29] audit: type=1400 audit(1770504334.692:202): avc: denied { lock } for pid=3782 comm="syz.3.87" path="socket:[5569]" dev="sockfs" ino=5569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 53.427621][ T29] audit: type=1400 audit(1770504334.802:203): avc: denied { create } for pid=3782 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.447030][ T29] audit: type=1400 audit(1770504334.802:204): avc: denied { write } for pid=3782 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.601980][ T3800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.660647][ T3800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.699922][ T3805] loop2: detected capacity change from 0 to 256 [ 53.808978][ T29] audit: type=1400 audit(1770504335.182:205): avc: denied { ioctl } for pid=3809 comm="syz.0.95" path="socket:[5623]" dev="sockfs" ino=5623 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.863450][ T3805] FAT-fs (loop2): codepage cp855 not found [ 54.824442][ T29] audit: type=1400 audit(1770504336.192:206): avc: denied { relabelfrom } for pid=3822 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 55.048534][ T3844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.058346][ T3844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.068457][ T3840] syzkaller0: entered promiscuous mode [ 55.073963][ T3840] syzkaller0: entered allmulticast mode [ 55.117852][ T3851] capability: warning: `syz.3.110' uses deprecated v2 capabilities in a way that may be insecure [ 55.134027][ T3851] loop3: detected capacity change from 0 to 1024 [ 55.236789][ T3853] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.246755][ T3853] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.445129][ T3858] loop0: detected capacity change from 0 to 512 [ 55.561212][ T3858] EXT4-fs: Ignoring removed orlov option [ 55.599938][ T3858] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 55.608688][ T3858] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.112: attempt to clear invalid blocks 2 len 1 [ 55.623823][ T3858] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 55.638631][ T3858] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.112: invalid indirect mapped block 1819239214 (level 0) [ 55.652788][ T3858] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.112: invalid indirect mapped block 1819239214 (level 1) [ 55.667434][ T3858] EXT4-fs (loop0): 1 truncate cleaned up [ 55.674331][ T3858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.689036][ T3858] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.112: corrupted in-inode xattr: e_value out of bounds [ 55.717304][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.776295][ T3866] x_tables: duplicate underflow at hook 1 [ 55.787142][ T3866] vlan2: entered allmulticast mode [ 55.792279][ T3866] macsec0: entered allmulticast mode [ 55.797643][ T3866] veth1_macvtap: entered allmulticast mode [ 57.152081][ T3901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.233406][ T3901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.676718][ T3901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.730987][ T3901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.830338][ T3901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.915602][ T3901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.953078][ T3924] syzkaller0: entered promiscuous mode [ 57.958731][ T3924] syzkaller0: entered allmulticast mode [ 58.403889][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 58.403905][ T29] audit: type=1400 audit(1770504339.772:223): avc: denied { name_connect } for pid=3925 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 58.533324][ T3933] syz.2.140 uses obsolete (PF_INET,SOCK_PACKET) [ 58.547765][ T3934] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.026393][ T29] audit: type=1400 audit(1770504339.932:224): avc: denied { ioctl } for pid=3926 comm="syz.0.136" path="socket:[5909]" dev="sockfs" ino=5909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.551616][ T29] audit: type=1400 audit(1770504340.922:225): avc: denied { mount } for pid=3948 comm="syz.3.144" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 59.578364][ T29] audit: type=1400 audit(1770504340.922:226): avc: denied { watch watch_reads } for pid=3948 comm="syz.3.144" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.602136][ T3954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 59.611716][ T3954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 60.094050][ T29] audit: type=1400 audit(1770504340.982:227): avc: denied { setopt } for pid=3944 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.105094][ T3962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.298269][ T3969] kernel profiling enabled (shift: 9) [ 60.304404][ T3969] netlink: 'syz.3.148': attribute type 4 has an invalid length. [ 60.312046][ T3969] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.148'. [ 61.111237][ T3962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.201152][ T3975] loop0: detected capacity change from 0 to 512 [ 61.352862][ T3975] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.364147][ T3975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 61.372301][ T3975] System zones: 1-12 [ 61.377191][ T3975] EXT4-fs (loop0): 1 truncate cleaned up [ 61.402639][ T3975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.469070][ T3983] loop2: detected capacity change from 0 to 1024 [ 61.476061][ T3983] EXT4-fs: Ignoring removed nobh option [ 61.486314][ T3983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.534395][ T29] audit: type=1400 audit(1770504342.902:228): avc: denied { create } for pid=3973 comm="syz.0.151" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.554445][ T29] audit: type=1400 audit(1770504342.902:229): avc: denied { add_name } for pid=3973 comm="syz.0.151" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.574474][ T29] audit: type=1400 audit(1770504342.902:230): avc: denied { mounton } for pid=3973 comm="syz.0.151" path="/32/file2/bus/bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.314500][ T3975] loop0: detected capacity change from 512 to 0 [ 62.351616][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.367198][ C0] I/O error, dev loop0, sector 78 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 62.462869][ T3987] EXT4-fs error (device loop0): ext4_get_inode_loc:4968: inode #20: block 9: comm syz.0.151: unable to read itable block [ 62.484833][ T3993] loop4: detected capacity change from 0 to 256 [ 62.520155][ T3993] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.540995][ T3987] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 62.567908][ T3987] EXT4-fs (loop0): I/O error while writing superblock [ 62.574738][ T3987] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: IO failure [ 62.644587][ T3987] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 62.654888][ T3987] EXT4-fs (loop0): I/O error while writing superblock [ 62.661798][ T3987] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #20: comm syz.0.151: mark_inode_dirty error [ 62.673551][ T3987] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 62.682349][ T3987] EXT4-fs (loop0): I/O error while writing superblock [ 62.689490][ T3987] EXT4-fs error (device loop0): ext4_get_inode_loc:4968: inode #20: block 9: comm syz.0.151: unable to read itable block [ 62.702164][ T3987] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 62.748743][ T3987] EXT4-fs (loop0): I/O error while writing superblock [ 62.755586][ T3987] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: IO failure [ 62.774460][ T3987] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 62.782719][ T3987] EXT4-fs (loop0): I/O error while writing superblock [ 62.789596][ T3987] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #20: comm syz.0.151: mark_inode_dirty error [ 62.872760][ T3997] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 62.882966][ T3997] FAT-fs (loop4): Filesystem has been set read-only [ 62.889595][ T3997] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 62.899753][ T3997] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 63.572468][ T3987] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 63.599677][ T4001] loop1: detected capacity change from 0 to 1024 [ 63.605134][ T3987] EXT4-fs (loop0): I/O error while writing superblock [ 63.612869][ T4001] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (40000) [ 63.624953][ T3987] EXT4-fs error (device loop0): ext4_check_bdev_write_error:227: comm syz.0.151: Error while async write back metadata [ 63.643750][ T3987] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 63.723549][ T3987] EXT4-fs (loop0): I/O error while writing superblock [ 63.757223][ T3987] EXT4-fs error (device loop0): ext4_check_bdev_write_error:227: comm syz.0.151: Error while async write back metadata [ 63.769726][ T3987] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 63.778180][ T3987] EXT4-fs (loop0): I/O error while writing superblock [ 63.810291][ T3987] EXT4-fs error (device loop0): ext4_get_inode_loc:4968: inode #20: block 9: comm syz.0.151: unable to read itable block [ 63.865940][ T3987] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 63.909230][ T3987] EXT4-fs (loop0): I/O error while writing superblock [ 63.916056][ T3987] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: IO failure [ 64.187908][ T3987] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 65.797924][ T4048] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 65.810966][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.829750][ T29] audit: type=1400 audit(1770504347.202:231): avc: denied { bind } for pid=4045 comm="syz.3.176" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.849796][ T29] audit: type=1400 audit(1770504347.202:232): avc: denied { name_bind } for pid=4045 comm="syz.3.176" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 65.870583][ T29] audit: type=1400 audit(1770504347.202:233): avc: denied { node_bind } for pid=4045 comm="syz.3.176" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 65.949470][ T29] audit: type=1400 audit(1770504347.262:234): avc: denied { create } for pid=4049 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 65.996072][ T4056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.174'. [ 66.081405][ T4048] bond1: entered promiscuous mode [ 66.086541][ T4048] bond1: entered allmulticast mode [ 66.112819][ T29] audit: type=1400 audit(1770504603.490:235): avc: denied { module_load } for pid=4049 comm="syz.1.175" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 66.165787][ T4052] bond1: (slave ip6gretap1): making interface the new active one [ 66.173621][ T4052] ip6gretap1: entered promiscuous mode [ 66.179408][ T4052] ip6gretap1: entered allmulticast mode [ 66.231183][ T4052] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 66.287544][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.478434][ T4056] bond1: left promiscuous mode [ 66.483274][ T4056] ip6gretap1: left promiscuous mode [ 66.488666][ T4056] bond1: left allmulticast mode [ 66.493562][ T4056] ip6gretap1: left allmulticast mode [ 66.500182][ T4056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.510229][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.649017][ T29] audit: type=1400 audit(1770504604.020:236): avc: denied { name_bind } for pid=4087 comm="syz.2.186" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 66.677882][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.571330][ T29] audit: type=1400 audit(1770504604.940:237): avc: denied { module_request } for pid=4095 comm="syz.4.187" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 68.151547][ T37] bridge_slave_1: left allmulticast mode [ 68.157360][ T37] bridge_slave_1: left promiscuous mode [ 68.163076][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.480899][ T29] audit: type=1400 audit(1770504605.850:238): avc: denied { read open } for pid=4121 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.532843][ T4123] loop3: detected capacity change from 0 to 1024 [ 68.575739][ T4123] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.641208][ T4123] EXT4-fs: Ignoring removed bh option [ 68.687348][ T4123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.702215][ T29] audit: type=1400 audit(1770504605.880:239): avc: denied { getattr } for pid=4121 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.875875][ T37] bridge_slave_0: left allmulticast mode [ 68.881588][ T37] bridge_slave_0: left promiscuous mode [ 68.887268][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.899243][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.938091][ T4140] loop2: detected capacity change from 0 to 512 [ 68.976131][ T29] audit: type=1400 audit(1770504606.340:240): avc: denied { add_name } for pid=4119 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.130815][ T4140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.157090][ T4140] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.167749][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.178783][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.190471][ T37] bond0 (unregistering): Released all slaves [ 69.586481][ T37] hsr_slave_0: left promiscuous mode [ 69.615641][ T37] hsr_slave_1: left promiscuous mode [ 69.630305][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.637841][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.832213][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.839734][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.927470][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.962055][ T37] veth1_macvtap: left promiscuous mode [ 69.979450][ T37] veth0_macvtap: left promiscuous mode [ 70.085366][ T37] veth1_vlan: left promiscuous mode [ 70.090727][ T37] veth0_vlan: left promiscuous mode [ 70.634521][ T37] team0 (unregistering): Port device team_slave_1 removed [ 70.647969][ T37] team0 (unregistering): Port device team_slave_0 removed [ 70.702202][ T4168] netlink: 76 bytes leftover after parsing attributes in process `syz.1.199'. [ 70.732626][ T4176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.846951][ T4185] loop4: detected capacity change from 0 to 256 [ 70.864274][ T4176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.876042][ T4059] chnl_net:caif_netlink_parms(): no params data found [ 70.908576][ T4185] FAT-fs (loop4): IO charset cp852 not found [ 70.997365][ T4059] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.004475][ T4059] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.016687][ T4059] bridge_slave_0: entered allmulticast mode [ 71.033399][ T4059] bridge_slave_0: entered promiscuous mode [ 71.041150][ T4059] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.048323][ T4059] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.056095][ T4059] bridge_slave_1: entered allmulticast mode [ 71.062889][ T4059] bridge_slave_1: entered promiscuous mode [ 71.089367][ T4059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.126114][ T4059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.193609][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 71.193624][ T29] audit: type=1400 audit(1770504608.560:246): avc: denied { tracepoint } for pid=4212 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.240088][ T29] audit: type=1400 audit(1770504608.590:247): avc: denied { mount } for pid=4211 comm="syz.4.210" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 71.271953][ T4059] team0: Port device team_slave_0 added [ 71.283550][ T4059] team0: Port device team_slave_1 added [ 71.296904][ T29] audit: type=1400 audit(1770504608.670:248): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 71.332064][ T4059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.339078][ T4059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.365007][ T4059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.481614][ T4059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.488948][ T4059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.514956][ T4059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.542280][ T4234] loop1: detected capacity change from 0 to 512 [ 71.551643][ T29] audit: type=1400 audit(1770504608.900:249): avc: denied { create } for pid=4232 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.571030][ T29] audit: type=1400 audit(1770504608.910:250): avc: denied { write } for pid=4232 comm="syz.1.214" path="socket:[7392]" dev="sockfs" ino=7392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.603241][ T4234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.674161][ T4234] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 71.682146][ T4234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 71.741652][ T4234] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 71.751322][ T4234] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 71.939180][ T4234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 71.953662][ T29] audit: type=1400 audit(1770504609.330:251): avc: denied { remount } for pid=4232 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.973933][ T4234] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 72.000329][ T4059] hsr_slave_0: entered promiscuous mode [ 72.007016][ T4059] hsr_slave_1: entered promiscuous mode [ 72.013223][ T4059] debugfs: 'hsr0' already exists in 'hsr' [ 72.019041][ T4059] Cannot create hsr debugfs directory [ 72.202973][ T29] audit: type=1400 audit(1770504609.570:252): avc: denied { mounton } for pid=4232 comm="syz.1.214" path="/proc/118/task" dev="proc" ino=7428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 72.225388][ T29] audit: type=1400 audit(1770504609.570:253): avc: denied { ioctl } for pid=4232 comm="syz.1.214" path="socket:[7392]" dev="sockfs" ino=7392 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.319592][ T4059] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.328520][ T4059] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.357283][ T4059] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.374353][ T4059] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.488885][ T4059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.509575][ T4059] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.509807][ T4289] loop2: detected capacity change from 0 to 1024 [ 72.526475][ T4284] xt_hashlimit: size too large, truncated to 1048576 [ 72.533563][ T4284] xt_hashlimit: overflow, try lower: 18446744073709551610/3 [ 72.543091][ T4289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.558257][ T4289] EXT4-fs warning (device loop2): ext4_rmdir:3185: inode #11: comm syz.2.222: empty directory 'file1' has too many links (111) [ 72.562202][ T29] audit: type=1400 audit(1770504609.930:254): avc: denied { append } for pid=4278 comm="syz.4.225" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.613965][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.621056][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.661874][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.668994][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.757016][ T4059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.855022][ T29] audit: type=1400 audit(1770504610.230:255): avc: denied { create } for pid=4311 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 72.899788][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 72.921276][ T4316] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.952273][ T4319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 72.976542][ T4319] loop3: detected capacity change from 0 to 128 [ 73.087407][ T4316] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.140155][ T4059] veth0_vlan: entered promiscuous mode [ 73.149495][ T4059] veth1_vlan: entered promiscuous mode [ 73.163762][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.188148][ T4316] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.218894][ T4059] veth0_macvtap: entered promiscuous mode [ 73.226168][ T4059] veth1_macvtap: entered promiscuous mode [ 73.237765][ T4059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.250380][ T4059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.316623][ T4316] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.337033][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.346840][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.356112][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.366549][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.453403][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.485532][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.509215][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.524506][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.179'. [ 73.539587][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.662402][ T4340] loop1: detected capacity change from 0 to 512 [ 73.677436][ T4340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.694572][ T4340] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.767016][ T4340] team0 (unregistering): Port device team_slave_0 removed [ 73.776105][ T4340] team0 (unregistering): Port device team_slave_1 removed [ 73.911371][ T4360] netlink: 76 bytes leftover after parsing attributes in process `syz.4.240'. [ 73.921772][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.994924][ T4365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.011101][ T4365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.011699][ T4367] netlink: 'syz.3.242': attribute type 49 has an invalid length. [ 74.033590][ T4367] loop3: detected capacity change from 0 to 764 [ 74.041767][ T4367] iso9660: Unknown parameter 'mah' [ 74.063916][ T4367] loop3: detected capacity change from 0 to 2048 [ 74.073491][ T4367] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 74.130753][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 74.151074][ T4371] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.234188][ T4371] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.311497][ T4371] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.411402][ T4371] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.487584][ T352] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.507276][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.525640][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.544392][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.624426][ T3512] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.685362][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.248'. [ 74.709023][ T4385] loop5: detected capacity change from 0 to 128 [ 74.782769][ T4393] loop4: detected capacity change from 0 to 512 [ 74.806026][ T4393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.818742][ T4393] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.898785][ T4393] team0 (unregistering): Port device team_slave_0 removed [ 74.923302][ T4393] team0 (unregistering): Port device team_slave_1 removed [ 74.945450][ T4399] netlink: 76 bytes leftover after parsing attributes in process `syz.3.253'. [ 75.021739][ T4402] netlink: 'syz.5.254': attribute type 49 has an invalid length. [ 75.033306][ T4402] loop5: detected capacity change from 0 to 764 [ 75.043412][ T4402] iso9660: Unknown parameter 'mah' [ 75.067473][ T4402] loop5: detected capacity change from 0 to 2048 [ 75.075052][ T4402] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 75.136432][ T4407] loop5: detected capacity change from 0 to 512 [ 75.145383][ T4407] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.156894][ T4407] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 75.165065][ T4407] System zones: 1-12 [ 75.169706][ T4407] EXT4-fs (loop5): 1 truncate cleaned up [ 75.175969][ T4407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.797532][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.030366][ T4059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.370044][ T4447] netlink: 'syz.3.267': attribute type 49 has an invalid length. [ 76.381071][ T4447] loop3: detected capacity change from 0 to 764 [ 76.387682][ T4447] iso9660: Unknown parameter 'mah' [ 76.402815][ T4447] loop3: detected capacity change from 0 to 2048 [ 76.419507][ T4447] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 76.429488][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 76.429503][ T29] audit: type=1326 audit(1770504613.800:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6468aeb9 code=0x7ffc0000 [ 76.464408][ T29] audit: type=1326 audit(1770504613.800:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6468aeb9 code=0x7ffc0000 [ 76.487757][ T29] audit: type=1326 audit(1770504613.800:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7a6468aeb9 code=0x7ffc0000 [ 76.510952][ T29] audit: type=1326 audit(1770504613.800:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6468aeb9 code=0x7ffc0000 [ 76.534209][ T29] audit: type=1326 audit(1770504613.800:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6468aeb9 code=0x7ffc0000 [ 76.557565][ T29] audit: type=1326 audit(1770504613.800:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f7a6468aeb9 code=0x7ffc0000 [ 76.580871][ T29] audit: type=1326 audit(1770504613.800:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6468aeb9 code=0x7ffc0000 [ 76.604125][ T29] audit: type=1326 audit(1770504613.800:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6468aeb9 code=0x7ffc0000 [ 76.629494][ T29] audit: type=1326 audit(1770504613.840:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4443 comm="syz.5.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6468aeb9 code=0x7ffc0000 [ 76.652779][ T29] audit: type=1400 audit(1770504613.890:289): avc: denied { setopt } for pid=4446 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.855608][ T4462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.869884][ T4462] EXT4-fs warning (device loop3): ext4_rmdir:3185: inode #11: comm syz.3.271: empty directory 'file1' has too many links (111) [ 76.963769][ T4467] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.974685][ T4467] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 76.982668][ T4467] System zones: 1-12 [ 76.987566][ T4467] EXT4-fs (loop1): 1 truncate cleaned up [ 76.993777][ T4467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.310203][ T4472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 77.881437][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.905303][ T4489] EXT4-fs: Ignoring removed nobh option [ 77.915877][ T4489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.374870][ T4497] netlink: 'syz.5.280': attribute type 49 has an invalid length. [ 78.395750][ T4497] iso9660: Unknown parameter 'mah' [ 78.779085][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.798894][ T4516] set_capacity_and_notify: 4 callbacks suppressed [ 78.798905][ T4516] loop5: detected capacity change from 0 to 1024 [ 78.812510][ T4516] EXT4-fs: Ignoring removed nobh option [ 78.837616][ T4516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.944414][ T3512] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.974913][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.188519][ T4528] loop4: detected capacity change from 0 to 164 [ 79.221803][ T4528] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 79.239099][ T4528] sctp: [Deprecated]: syz.4.289 (pid 4528) Use of int in maxseg socket option. [ 79.239099][ T4528] Use struct sctp_assoc_value instead [ 79.687170][ T4059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.451044][ T4559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.462094][ T4559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.537404][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.559097][ T4563] loop3: detected capacity change from 0 to 256 [ 80.735971][ T4567] bond0: (slave bond_slave_0): Releasing backup interface [ 80.762776][ T4571] netlink: 108 bytes leftover after parsing attributes in process `syz.4.302'. [ 80.810632][ T4575] netlink: 'syz.5.304': attribute type 49 has an invalid length. [ 80.821963][ T4575] loop5: detected capacity change from 0 to 764 [ 80.829115][ T4575] iso9660: Unknown parameter 'mah' [ 81.032171][ T31] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.116032][ T31] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.187836][ T31] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.247832][ T31] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.453319][ T31] bridge_slave_1: left allmulticast mode [ 81.459132][ T31] bridge_slave_1: left promiscuous mode [ 81.464911][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.475495][ T31] bridge_slave_0: left allmulticast mode [ 81.481179][ T31] bridge_slave_0: left promiscuous mode [ 81.487094][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.589718][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.617540][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 81.617551][ T29] audit: type=1400 audit(1770504618.990:296): avc: denied { mount } for pid=4596 comm="syz.1.311" name="/" dev="autofs" ino=8428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 81.647945][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.659118][ T29] audit: type=1400 audit(1770504619.000:297): avc: denied { setopt } for pid=4596 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.711338][ T31] bond0 (unregistering): Released all slaves [ 81.759976][ T31] hsr_slave_0: left promiscuous mode [ 81.774785][ T31] hsr_slave_1: left promiscuous mode [ 81.780444][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.787862][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.797851][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.805423][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.827026][ T31] veth1_macvtap: left allmulticast mode [ 81.832689][ T31] veth1_macvtap: left promiscuous mode [ 81.845821][ T31] veth0_macvtap: left promiscuous mode [ 81.851912][ T31] veth1_vlan: left promiscuous mode [ 81.874381][ T31] veth0_vlan: left promiscuous mode [ 81.959823][ T31] team0 (unregistering): Port device team_slave_1 removed [ 81.970535][ T31] team0 (unregistering): Port device team_slave_0 removed [ 82.075215][ T4627] netlink: 108 bytes leftover after parsing attributes in process `syz.5.315'. [ 82.095487][ T4583] chnl_net:caif_netlink_parms(): no params data found [ 82.181375][ T4583] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.188647][ T4583] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.195879][ T4583] bridge_slave_0: entered allmulticast mode [ 82.202536][ T4583] bridge_slave_0: entered promiscuous mode [ 82.209239][ T4583] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.216355][ T4583] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.223691][ T4583] bridge_slave_1: entered allmulticast mode [ 82.230399][ T4583] bridge_slave_1: entered promiscuous mode [ 82.253443][ T4583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.265606][ T4583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.285334][ T4583] team0: Port device team_slave_0 added [ 82.297681][ T4583] team0: Port device team_slave_1 added [ 82.323602][ T4583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.330623][ T4583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.356631][ T4583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.375862][ T4583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.382831][ T4583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.408839][ T4583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.541677][ T4654] bond0: (slave bond_slave_0): Releasing backup interface [ 82.555499][ T4583] hsr_slave_0: entered promiscuous mode [ 82.556249][ T4652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.567454][ T4583] hsr_slave_1: entered promiscuous mode [ 82.575379][ T4583] debugfs: 'hsr0' already exists in 'hsr' [ 82.581103][ T4583] Cannot create hsr debugfs directory [ 82.593167][ T4652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.641395][ T4652] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 82.660096][ T4652] netlink: 252 bytes leftover after parsing attributes in process `syz.5.325'. [ 82.683559][ T4666] netlink: 'syz.1.317': attribute type 49 has an invalid length. [ 82.717746][ T4666] loop1: detected capacity change from 0 to 764 [ 82.726056][ T4583] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 82.735913][ T4583] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 82.743195][ T4666] iso9660: Unknown parameter 'mah' [ 82.750973][ T4583] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 82.787877][ T4583] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 82.869264][ T4583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.881012][ T4583] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.895543][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.902637][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.912173][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.919302][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.937505][ T4693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.946635][ T4693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.971064][ T29] audit: type=1400 audit(1770504620.340:298): avc: denied { read } for pid=3038 comm="dhcpcd" name="n31" dev="tmpfs" ino=2269 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.992818][ T29] audit: type=1400 audit(1770504620.340:299): avc: denied { open } for pid=3038 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=2269 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.016486][ T29] audit: type=1400 audit(1770504620.340:300): avc: denied { getattr } for pid=3038 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=2269 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.087042][ T4701] netlink: 144 bytes leftover after parsing attributes in process `syz.4.321'. [ 83.108112][ T29] audit: type=1400 audit(1770504620.480:301): avc: denied { getopt } for pid=4700 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.167645][ T4583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.262286][ T29] audit: type=1400 audit(1770504620.630:302): avc: denied { create } for pid=4704 comm="dhcpcd-run-hook" name="resolv.conf.eth7.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.284659][ T29] audit: type=1400 audit(1770504620.630:303): avc: denied { write } for pid=4704 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth7.link" dev="tmpfs" ino=2356 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.319231][ T29] audit: type=1400 audit(1770504620.660:304): avc: denied { append } for pid=4704 comm="dhcpcd-run-hook" name="resolv.conf.eth7.link" dev="tmpfs" ino=2356 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.383784][ T29] audit: type=1400 audit(1770504620.740:305): avc: denied { create } for pid=4733 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.491746][ T4583] veth0_vlan: entered promiscuous mode [ 83.511535][ T4583] veth1_vlan: entered promiscuous mode [ 83.545680][ T4753] loop4: detected capacity change from 0 to 512 [ 83.552909][ T4583] veth0_macvtap: entered promiscuous mode [ 83.561749][ T4753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.575132][ T4583] veth1_macvtap: entered promiscuous mode [ 83.584200][ T4753] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 83.592285][ T4753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 83.604786][ T4583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.613520][ T4583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.620952][ T4753] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 83.630462][ T4753] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 83.640821][ T4753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 83.655106][ T352] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.695611][ T4753] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 83.697404][ T352] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.739979][ T352] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.753341][ T352] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.490541][ T4793] loop1: detected capacity change from 0 to 128 [ 84.530148][ T4793] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.565965][ T4793] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.599121][ T4808] loop6: detected capacity change from 0 to 512 [ 84.679384][ T4808] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.688508][ T4808] EXT4-fs (loop6): filesystem is read-only [ 84.694372][ T4808] EXT4-fs (loop6): invalid inodes per group: 5 [ 84.694372][ T4808] [ 84.755971][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.122757][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.134376][ T4850] loop6: detected capacity change from 0 to 256 [ 85.189261][ T4850] FAT-fs (loop6): Directory bread(block 64) failed [ 85.196509][ T4850] FAT-fs (loop6): Directory bread(block 65) failed [ 85.238334][ T4850] FAT-fs (loop6): Directory bread(block 66) failed [ 85.261942][ T4850] FAT-fs (loop6): Directory bread(block 67) failed [ 85.278418][ T4850] FAT-fs (loop6): Directory bread(block 68) failed [ 85.285752][ T4850] FAT-fs (loop6): Directory bread(block 69) failed [ 85.292362][ T4850] FAT-fs (loop6): Directory bread(block 70) failed [ 85.300059][ T4850] FAT-fs (loop6): Directory bread(block 71) failed [ 85.307153][ T4850] FAT-fs (loop6): Directory bread(block 72) failed [ 85.313834][ T4850] FAT-fs (loop6): Directory bread(block 73) failed [ 85.711572][ T4867] loop5: detected capacity change from 0 to 512 [ 85.774975][ T4867] EXT4-fs: quotafile must be on filesystem root [ 85.891313][ T4867] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.081046][ T4881] FAULT_INJECTION: forcing a failure. [ 86.081046][ T4881] name failslab, interval 1, probability 0, space 0, times 1 [ 86.093730][ T4881] CPU: 0 UID: 0 PID: 4881 Comm: syz.1.357 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.093776][ T4881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 86.093787][ T4881] Call Trace: [ 86.093877][ T4881] [ 86.093897][ T4881] __dump_stack+0x1d/0x30 [ 86.093923][ T4881] dump_stack_lvl+0x95/0xd0 [ 86.093946][ T4881] dump_stack+0x15/0x1b [ 86.093995][ T4881] should_fail_ex+0x263/0x280 [ 86.094102][ T4881] should_failslab+0x8c/0xb0 [ 86.094128][ T4881] kmem_cache_alloc_noprof+0x68/0x490 [ 86.094235][ T4881] ? skb_clone+0x151/0x1f0 [ 86.094254][ T4881] skb_clone+0x151/0x1f0 [ 86.094328][ T4881] __netlink_deliver_tap+0x2c9/0x500 [ 86.094415][ T4881] netlink_unicast+0x66b/0x690 [ 86.094443][ T4881] netlink_sendmsg+0x5c8/0x6f0 [ 86.094532][ T4881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.094549][ T4881] ____sys_sendmsg+0x5af/0x600 [ 86.094568][ T4881] ___sys_sendmsg+0x195/0x1e0 [ 86.094723][ T4881] __x64_sys_sendmsg+0xd4/0x160 [ 86.094743][ T4881] x64_sys_call+0x17ba/0x3000 [ 86.094770][ T4881] do_syscall_64+0xc0/0x2a0 [ 86.094805][ T4881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.094915][ T4881] RIP: 0033:0x7f1994e3aeb9 [ 86.094931][ T4881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.094947][ T4881] RSP: 002b:00007f1993897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.095036][ T4881] RAX: ffffffffffffffda RBX: 00007f19950b5fa0 RCX: 00007f1994e3aeb9 [ 86.095047][ T4881] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 86.095082][ T4881] RBP: 00007f1993897090 R08: 0000000000000000 R09: 0000000000000000 [ 86.095096][ T4881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.095109][ T4881] R13: 00007f19950b6038 R14: 00007f19950b5fa0 R15: 00007ffccaffd548 [ 86.095130][ T4881] [ 86.284653][ T4882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.293139][ T4882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.312264][ T4885] capability: warning: `syz.4.359' uses 32-bit capabilities (legacy support in use) [ 86.354031][ T4886] loop5: detected capacity change from 0 to 512 [ 86.356214][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 86.395018][ T4879] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.439017][ T4886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.469223][ T4886] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 86.477232][ T4886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 86.512632][ T4886] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 86.522299][ T4886] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 86.570714][ T4886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 86.586474][ T4875] netlink: 252 bytes leftover after parsing attributes in process `syz.2.355'. [ 86.630959][ T4886] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 86.638116][ T4897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.651568][ T4897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.660664][ T4897] tipc: Started in network mode [ 86.665582][ T4897] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 86.672798][ T4897] tipc: Enabled bearer , priority 10 [ 87.369409][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 87.369424][ T29] audit: type=1326 audit(1770504624.740:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c28baeb9 code=0x7ffc0000 [ 87.398811][ T29] audit: type=1326 audit(1770504624.740:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c28baeb9 code=0x7ffc0000 [ 87.441016][ T29] audit: type=1326 audit(1770504624.740:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c28baeb9 code=0x7ffc0000 [ 87.464385][ T29] audit: type=1326 audit(1770504624.740:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c28baeb9 code=0x7ffc0000 [ 87.487624][ T29] audit: type=1326 audit(1770504624.790:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c28baeb9 code=0x7ffc0000 [ 87.511066][ T29] audit: type=1326 audit(1770504624.790:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c28baeb9 code=0x7ffc0000 [ 87.534369][ T29] audit: type=1326 audit(1770504624.790:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f81c28bac22 code=0x7ffc0000 [ 87.557467][ T29] audit: type=1326 audit(1770504624.790:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f81c28bacb7 code=0x7ffc0000 [ 87.580631][ T29] audit: type=1326 audit(1770504624.790:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f81c28baeb9 code=0x7ffc0000 [ 87.603890][ T29] audit: type=1326 audit(1770504624.790:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c28baeb9 code=0x7ffc0000 [ 87.675182][ T23] tipc: Node number set to 8432298 [ 87.683819][ T4937] xt_cluster: you have exceeded the maximum number of cluster nodes (3131 > 32) [ 87.793274][ T4943] loop6: detected capacity change from 0 to 1024 [ 87.807983][ T4943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.832272][ T4943] xt_hashlimit: size too large, truncated to 1048576 [ 87.934389][ T4059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.005850][ T4954] loop5: detected capacity change from 0 to 512 [ 88.018597][ T4954] loop5: detected capacity change from 0 to 512 [ 88.050791][ T4954] EXT4-fs: dax option not supported [ 88.108183][ T4959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.380'. [ 88.190941][ T4583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.296189][ T4971] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.326423][ T4973] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 88.366244][ T4976] loop2: detected capacity change from 0 to 512 [ 88.373414][ T4976] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.381829][ T4976] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 88.389873][ T4976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 88.398226][ T4976] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 88.407740][ T4976] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 88.421367][ T4976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 88.434071][ T4976] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 88.538231][ T4971] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.617562][ T4971] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.687391][ T4971] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.753024][ T3334] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.773000][ T3334] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.781340][ T3334] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.789690][ T3334] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.812162][ T4987] loop1: detected capacity change from 0 to 256 [ 88.874005][ T4987] FAT-fs (loop1): Directory bread(block 64) failed [ 88.890768][ T4995] FAULT_INJECTION: forcing a failure. [ 88.890768][ T4995] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.894394][ T4987] FAT-fs (loop1): Directory bread(block 65) failed [ 88.904003][ T4995] CPU: 0 UID: 0 PID: 4995 Comm: syz.5.392 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.904101][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 88.904135][ T4995] Call Trace: [ 88.904153][ T4995] [ 88.904166][ T4995] __dump_stack+0x1d/0x30 [ 88.904234][ T4995] dump_stack_lvl+0x95/0xd0 [ 88.904305][ T4995] dump_stack+0x15/0x1b [ 88.904366][ T4995] should_fail_ex+0x263/0x280 [ 88.904478][ T4995] should_fail+0xb/0x20 [ 88.904662][ T4995] should_fail_usercopy+0x1a/0x20 [ 88.904760][ T4995] _copy_to_user+0x20/0xa0 [ 88.904840][ T4995] simple_read_from_buffer+0xb5/0x130 [ 88.904948][ T4995] proc_fail_nth_read+0x10e/0x150 [ 88.905045][ T4995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.905116][ T4995] vfs_read+0x1ab/0x7f0 [ 88.905170][ T4995] ? __rcu_read_unlock+0x4e/0x70 [ 88.905300][ T4995] ? __fget_files+0x184/0x1c0 [ 88.905367][ T4995] ? mutex_lock+0x57/0x90 [ 88.905457][ T4995] ksys_read+0xdc/0x1a0 [ 88.905543][ T4995] __x64_sys_read+0x40/0x50 [ 88.905594][ T4995] x64_sys_call+0x2889/0x3000 [ 88.905662][ T4995] do_syscall_64+0xc0/0x2a0 [ 88.905807][ T4995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.905866][ T4995] RIP: 0033:0x7f7a6464b78e [ 88.905919][ T4995] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.905998][ T4995] RSP: 002b:00007f7a630defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.906051][ T4995] RAX: ffffffffffffffda RBX: 00007f7a630df6c0 RCX: 00007f7a6464b78e [ 88.906118][ T4995] RDX: 000000000000000f RSI: 00007f7a630df0a0 RDI: 0000000000000006 [ 88.906154][ T4995] RBP: 00007f7a630df090 R08: 0000000000000000 R09: 0000000000000000 [ 88.906178][ T4995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.906212][ T4995] R13: 00007f7a64906038 R14: 00007f7a64905fa0 R15: 00007ffd8c8cf718 [ 88.906278][ T4995] [ 89.164582][ T4987] FAT-fs (loop1): Directory bread(block 66) failed [ 89.171208][ T4987] FAT-fs (loop1): Directory bread(block 67) failed [ 89.178016][ T4987] FAT-fs (loop1): Directory bread(block 68) failed [ 89.200180][ T4987] FAT-fs (loop1): Directory bread(block 69) failed [ 89.215388][ T4987] FAT-fs (loop1): Directory bread(block 70) failed [ 89.221916][ T4987] FAT-fs (loop1): Directory bread(block 71) failed [ 89.228643][ T4987] FAT-fs (loop1): Directory bread(block 72) failed [ 89.235458][ T4987] FAT-fs (loop1): Directory bread(block 73) failed [ 89.385041][ T2999] loop1: p1 < > p4 [ 89.415175][ T2999] loop1: p4 size 8388608 extends beyond EOD, truncated [ 89.427340][ T5002] loop1: p1 < > p4 [ 89.432628][ T5002] loop1: p4 size 8388608 extends beyond EOD, truncated [ 89.459016][ T5002] isofs_fill_super: bread failed, dev=loop1p1, iso_blknum=16, block=32 [ 90.106878][ T5019] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.118402][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.146147][ T5019] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.158830][ T5024] netlink: 32 bytes leftover after parsing attributes in process `syz.2.401'. [ 90.171327][ T5020] set_capacity_and_notify: 1 callbacks suppressed [ 90.171342][ T5020] loop5: detected capacity change from 0 to 512 [ 90.191137][ T5020] EXT4-fs: Ignoring removed nobh option [ 90.203755][ T5019] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.214191][ T5020] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 90.238841][ T5020] EXT4-fs (loop5): 1 truncate cleaned up [ 90.246165][ T5019] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.258305][ T5020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.367494][ T4059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.708000][ T5044] veth0: entered promiscuous mode [ 90.713637][ T5044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 91.483736][ T5059] netlink: 76 bytes leftover after parsing attributes in process `syz.2.410'. [ 91.992104][ T5073] loop5: detected capacity change from 0 to 1024 [ 92.037519][ T5073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.061216][ T5073] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=5073 comm=syz.5.416 [ 92.078825][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.418'. [ 92.151313][ T5084] syz.1.419 (5084) used greatest stack depth: 8896 bytes left [ 92.296838][ T5090] loop4: detected capacity change from 0 to 2048 [ 92.374850][ T3305] loop4: p1 p3 p4 [ 92.417540][ T3305] loop4: p4 size 589824 extends beyond EOD, truncated [ 92.594155][ T5090] loop4: p1 p3 p4 [ 92.644932][ T5090] loop4: p4 size 589824 extends beyond EOD, truncated [ 92.770934][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 92.782192][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 92.793291][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 92.809800][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 92.814774][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 92.821959][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 92.943853][ T4059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.957241][ T5101] loop4: detected capacity change from 0 to 128 [ 93.007181][ T5101] FAT-fs (loop4): Directory bread(block 162) failed [ 93.063031][ T5101] FAT-fs (loop4): Directory bread(block 163) failed [ 93.119859][ T5101] FAT-fs (loop4): Directory bread(block 164) failed [ 93.252445][ T5101] FAT-fs (loop4): Directory bread(block 165) failed [ 93.275438][ T5101] FAT-fs (loop4): Directory bread(block 166) failed [ 93.282280][ T5101] FAT-fs (loop4): Directory bread(block 167) failed [ 93.289122][ T5101] FAT-fs (loop4): Directory bread(block 168) failed [ 93.295981][ T5101] FAT-fs (loop4): Directory bread(block 169) failed [ 93.312281][ T5101] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.327920][ T5101] netlink: 48 bytes leftover after parsing attributes in process `syz.4.424'. [ 93.337883][ T5101] FAT-fs (loop4): Directory bread(block 162) failed [ 93.344599][ T5101] FAT-fs (loop4): Directory bread(block 163) failed [ 93.354050][ T5101] syz.4.424: attempt to access beyond end of device [ 93.354050][ T5101] loop4: rw=8388611, sector=226, nr_sectors = 6 limit=128 [ 93.367965][ T5101] syz.4.424: attempt to access beyond end of device [ 93.367965][ T5101] loop4: rw=8390659, sector=232, nr_sectors = 2 limit=128 [ 93.382862][ T5101] syz.4.424: attempt to access beyond end of device [ 93.382862][ T5101] loop4: rw=8388611, sector=234, nr_sectors = 6 limit=128 [ 93.443515][ T5101] syz.4.424: attempt to access beyond end of device [ 93.443515][ T5101] loop4: rw=8390659, sector=240, nr_sectors = 2 limit=128 [ 93.705967][ T5112] loop2: detected capacity change from 0 to 8192 [ 93.713039][ T5114] loop4: detected capacity change from 0 to 512 [ 93.728493][ T5114] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.793197][ T2999] loop2: p2 p3 p4 [ 93.797102][ T2999] loop2: p2 size 64000 extends beyond EOD, truncated [ 93.804304][ T2999] loop2: p3 start 65280 is beyond EOD, truncated [ 93.810749][ T2999] loop2: p4 size 50331904 extends beyond EOD, truncated [ 93.818199][ T5114] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 93.821423][ T2999] loop2: p2 p3 p4 [ 93.826685][ T5114] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 93.830148][ T2999] loop2: p2 size 64000 extends beyond EOD, truncated [ 93.845047][ T2999] loop2: p3 start 65280 is beyond EOD, truncated [ 93.851451][ T2999] loop2: p4 size 50331904 extends beyond EOD, truncated [ 93.862601][ T5112] loop2: p2 p3 p4 [ 93.866589][ T5112] loop2: p2 size 64000 extends beyond EOD, truncated [ 93.873743][ T5114] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 93.876795][ T5119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.431'. [ 93.883457][ T5114] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 93.901898][ T5114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 93.914833][ T5112] loop2: p3 start 65280 is beyond EOD, truncated [ 93.921186][ T5112] loop2: p4 size 50331904 extends beyond EOD, truncated [ 93.961917][ T2999] loop2: p2 p3 p4 [ 93.965759][ T5114] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 93.975654][ T2999] loop2: p2 size 64000 extends beyond EOD, truncated [ 93.982624][ T5119] netlink: 104 bytes leftover after parsing attributes in process `syz.5.431'. [ 93.992294][ T2999] loop2: p3 start 65280 is beyond EOD, truncated [ 93.998688][ T2999] loop2: p4 size 50331904 extends beyond EOD, truncated [ 94.006749][ T5119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.431'. [ 94.055293][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 94.067159][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 94.084870][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 94.094835][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 94.972532][ T5156] loop1: detected capacity change from 0 to 1024 [ 94.979431][ T5156] EXT4-fs: Ignoring removed nobh option [ 95.005644][ T5156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.297410][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 95.297423][ T29] audit: type=1400 audit(1770504632.670:432): avc: denied { ioctl } for pid=5161 comm="syz.2.439" path="socket:[11486]" dev="sockfs" ino=11486 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.328496][ T5162] ipvlan0: mtu less than device minimum [ 95.540236][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.667640][ T3334] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.700983][ T3334] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.713339][ T3334] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.788103][ T3334] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.852401][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.939688][ T5180] loop6: detected capacity change from 0 to 512 [ 95.997533][ T5180] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.998619][ T29] audit: type=1326 audit(1770504633.370:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1994e3aeb9 code=0x7ffc0000 [ 96.006729][ T5180] EXT4-fs (loop6): filesystem is read-only [ 96.035803][ T5180] EXT4-fs (loop6): invalid inodes per group: 5 [ 96.035803][ T5180] [ 96.052056][ T29] audit: type=1326 audit(1770504633.420:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1994e3aeb9 code=0x7ffc0000 [ 96.075388][ T29] audit: type=1326 audit(1770504633.420:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1994e3aeb9 code=0x7ffc0000 [ 96.112257][ T29] audit: type=1326 audit(1770504633.450:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1994e3aeb9 code=0x7ffc0000 [ 96.122358][ T5185] loop1: detected capacity change from 0 to 1024 [ 96.135562][ T29] audit: type=1326 audit(1770504633.450:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1994e3ac22 code=0x7ffc0000 [ 96.164922][ T29] audit: type=1326 audit(1770504633.450:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1994dfb78e code=0x7ffc0000 [ 96.188055][ T29] audit: type=1326 audit(1770504633.450:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1994e3ace7 code=0x7ffc0000 [ 96.215776][ T29] audit: type=1326 audit(1770504633.480:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1994dfb78e code=0x7ffc0000 [ 96.216711][ T5185] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 96.239082][ T29] audit: type=1326 audit(1770504633.480:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1994e3ab4b code=0x7ffc0000 [ 96.248767][ T5185] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 96.342713][ T5195] loop5: detected capacity change from 0 to 512 [ 96.346750][ T5185] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 96.376368][ T5195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.389942][ T5185] EXT4-fs error (device loop1): ext4_get_journal_inode:5849: inode #5: comm syz.1.445: unexpected bad inode w/o EXT4_IGET_BAD [ 96.394253][ T5195] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.423788][ T5195] EXT4-fs (loop5): shut down requested (1) [ 96.436425][ T5195] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 96.446336][ T5185] EXT4-fs (loop1): no journal found [ 96.451577][ T5185] EXT4-fs (loop1): can't get journal size [ 96.453452][ T5195] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 96.476328][ T5185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.484217][ T5195] netlink: 'syz.5.447': attribute type 14 has an invalid length. [ 96.496625][ T5195] netlink: 20 bytes leftover after parsing attributes in process `syz.5.447'. [ 96.579488][ T5195] bond0: option xmit_hash_policy: invalid value (24) [ 96.645275][ T4059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.740949][ T5221] loop5: detected capacity change from 0 to 2048 [ 96.825448][ T5221] loop5: p1 p3 p4 [ 96.831069][ T5221] loop5: p4 size 589824 extends beyond EOD, truncated [ 97.071501][ T5247] loop5: detected capacity change from 0 to 512 [ 97.079477][ T5247] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.087265][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.107565][ T5247] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 97.115519][ T5247] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 97.146809][ T5247] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 97.156448][ T5247] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 97.165708][ T5247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 97.185679][ T5247] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 97.215310][ T5256] loop4: detected capacity change from 0 to 1024 [ 97.233674][ T5256] EXT4-fs: Ignoring removed nobh option [ 97.248438][ T5259] loop1: detected capacity change from 0 to 1024 [ 97.269377][ T5259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.305226][ T5256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.444992][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.082988][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.507615][ T4059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.296587][ T5277] loop5: detected capacity change from 0 to 512 [ 147.304928][ T5279] netlink: 'syz.2.462': attribute type 1 has an invalid length. [ 147.313450][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 147.313461][ T29] audit: type=1400 audit(1770504684.680:539): avc: denied { read } for pid=5280 comm="syz.6.463" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 147.335651][ T5277] EXT4-fs: dax option not supported [ 147.353420][ T5279] bond2: entered promiscuous mode [ 147.362896][ T5279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.389101][ T29] audit: type=1400 audit(1770504684.680:540): avc: denied { open } for pid=5280 comm="syz.6.463" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 147.412592][ T29] audit: type=1400 audit(1770504684.700:541): avc: denied { ioctl } for pid=5280 comm="syz.6.463" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 147.437552][ T29] audit: type=1400 audit(1770504684.700:542): avc: denied { mounton } for pid=5275 comm="syz.5.460" path="/53/file0" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.460072][ T29] audit: type=1400 audit(1770504684.730:543): avc: denied { create } for pid=5281 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.480110][ T29] audit: type=1400 audit(1770504684.790:544): avc: denied { mount } for pid=5291 comm="syz.1.465" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 147.520328][ T5289] bond2: (slave bridge1): making interface the new active one [ 147.527836][ T5289] bridge1: entered promiscuous mode [ 147.535016][ T5289] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 147.591217][ T5306] loop2: detected capacity change from 0 to 1024 [ 147.608810][ T5306] EXT4-fs: Ignoring removed nobh option [ 147.645399][ T5306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.762801][ T5320] loop6: detected capacity change from 0 to 512 [ 147.784693][ T5320] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.876691][ T5320] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 147.884707][ T5320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 147.893304][ T5320] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 147.902822][ T5320] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 147.912535][ T5320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 148.264498][ T5320] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 148.365167][ T5331] netlink: 36 bytes leftover after parsing attributes in process `syz.1.475'. [ 148.376942][ T5331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.478011][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.478216][ T5331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.527769][ T5336] loop5: detected capacity change from 0 to 128 [ 148.538308][ T5331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.543093][ T5336] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.580045][ T5336] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.607692][ T5331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.620536][ T29] audit: type=1400 audit(1770504685.990:545): avc: denied { execute } for pid=5334 comm="syz.5.477" path="/55/cpu.stat" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 148.659978][ T4059] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.678235][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.692648][ T29] audit: type=1400 audit(1770504686.060:546): avc: denied { read } for pid=5343 comm="syz.4.481" lport=54000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.722205][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.730919][ T5344] process 'syz.4.481' launched './file1' with NULL argv: empty string added [ 148.739953][ T29] audit: type=1400 audit(1770504686.110:547): avc: denied { execute_no_trans } for pid=5343 comm="syz.4.481" path="/92/file1" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 148.741870][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.771282][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.804331][ T29] audit: type=1400 audit(1770504686.170:548): avc: denied { setopt } for pid=5343 comm="syz.4.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.816701][ T5350] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 148.839494][ T5350] bond1: entered promiscuous mode [ 148.844810][ T5350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.888245][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.895539][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.931712][ T5351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.941544][ T5351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.976354][ T5358] pim6reg: entered allmulticast mode [ 148.986604][ T5350] bond1: (slave bridge1): making interface the new active one [ 148.994075][ T5350] bridge1: entered promiscuous mode [ 149.001180][ T5350] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 149.009977][ T5360] team0: entered allmulticast mode [ 149.015252][ T5360] team_slave_0: entered allmulticast mode [ 149.021207][ T5360] team_slave_1: entered allmulticast mode [ 149.027564][ T31] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.041649][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.053906][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.063104][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.371742][ T4583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.464680][ T5380] 9pnet_fd: Insufficient options for proto=fd [ 149.629508][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.496'. [ 149.656677][ T5397] FAULT_INJECTION: forcing a failure. [ 149.656677][ T5397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.669827][ T5397] CPU: 0 UID: 0 PID: 5397 Comm: syz.6.497 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.669855][ T5397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 149.669935][ T5397] Call Trace: [ 149.669942][ T5397] [ 149.669982][ T5397] __dump_stack+0x1d/0x30 [ 149.670020][ T5397] dump_stack_lvl+0x95/0xd0 [ 149.670121][ T5397] dump_stack+0x15/0x1b [ 149.670141][ T5397] should_fail_ex+0x263/0x280 [ 149.670174][ T5397] should_fail+0xb/0x20 [ 149.670230][ T5397] should_fail_usercopy+0x1a/0x20 [ 149.670273][ T5397] _copy_from_user+0x1c/0xb0 [ 149.670294][ T5397] ___sys_sendmsg+0xc1/0x1e0 [ 149.670384][ T5397] __x64_sys_sendmsg+0xd4/0x160 [ 149.670431][ T5397] x64_sys_call+0x17ba/0x3000 [ 149.670477][ T5397] do_syscall_64+0xc0/0x2a0 [ 149.670510][ T5397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.670532][ T5397] RIP: 0033:0x7f9ab8a6aeb9 [ 149.670553][ T5397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.670573][ T5397] RSP: 002b:00007f9ab74bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.670664][ T5397] RAX: ffffffffffffffda RBX: 00007f9ab8ce5fa0 RCX: 00007f9ab8a6aeb9 [ 149.670725][ T5397] RDX: 0000000004040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 149.670739][ T5397] RBP: 00007f9ab74bf090 R08: 0000000000000000 R09: 0000000000000000 [ 149.670752][ T5397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.670764][ T5397] R13: 00007f9ab8ce6038 R14: 00007f9ab8ce5fa0 R15: 00007fff6e55e8e8 [ 149.670785][ T5397] [ 149.884541][ T5399] loop5: detected capacity change from 0 to 512 [ 149.893621][ T5401] loop6: detected capacity change from 0 to 128 [ 149.905669][ T5401] SELinux: Context system_u:object_r:initrc_exec_t:s0 is not valid (left unmapped). [ 149.915961][ T5401] netlink: 32 bytes leftover after parsing attributes in process `syz.6.499'. [ 149.936375][ T5399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.944134][ T5399] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 149.952081][ T5399] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 149.994540][ T5399] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 150.004151][ T5399] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 150.013773][ T5399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 150.026600][ T5399] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 150.047926][ T5406] loop2: detected capacity change from 0 to 764 [ 150.508928][ T5432] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.575746][ T5432] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.625835][ T5432] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.685954][ T5432] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.723869][ T4059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.751678][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.763209][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.774413][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.786143][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.904041][ T5441] loop4: detected capacity change from 0 to 1024 [ 150.913442][ T5441] EXT4-fs: Ignoring removed orlov option [ 150.919238][ T5441] EXT4-fs: inline encryption not supported [ 150.953910][ T5441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.012256][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.254673][ T5468] loop2: detected capacity change from 0 to 512 [ 151.263757][ T5468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.277648][ T5468] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 151.285617][ T5468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 151.293865][ T5468] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 151.303500][ T5468] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 151.313141][ T5468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 151.326089][ T5468] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 151.363787][ T5472] netlink: 28 bytes leftover after parsing attributes in process `syz.6.522'. [ 151.406580][ T5478] netlink: 12 bytes leftover after parsing attributes in process `syz.6.524'. [ 151.451969][ T5482] loop4: detected capacity change from 0 to 512 [ 151.471703][ T5482] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 151.484196][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.528'. [ 151.487124][ T5482] EXT4-fs (loop4): mount failed [ 151.495133][ T5486] netlink: 24 bytes leftover after parsing attributes in process `syz.6.528'. [ 151.512623][ T5482] 9p: Bad value for 'rfdno' [ 151.520680][ T5486] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 151.541398][ T5486] bond1 (unregistering): Released all slaves [ 151.699421][ T5497] EXT4-fs: Ignoring removed nobh option [ 151.719533][ T5497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.175680][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.578566][ T4583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.583327][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.538'. [ 152.596385][ T5512] netlink: 24 bytes leftover after parsing attributes in process `syz.5.538'. [ 152.627481][ T5512] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 152.648150][ T5512] bond1 (unregistering): Released all slaves [ 152.669270][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 152.669284][ T29] audit: type=1400 audit(1770504690.040:601): avc: denied { connect } for pid=5514 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.737869][ T5518] set_capacity_and_notify: 1 callbacks suppressed [ 152.737886][ T5518] loop5: detected capacity change from 0 to 512 [ 152.839374][ T5518] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 152.854399][ T5518] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 152.870234][ T5518] EXT4-fs (loop5): 1 truncate cleaned up [ 152.880294][ T5518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.943978][ T29] audit: type=1400 audit(1770504690.300:602): avc: denied { associate } for pid=5528 comm="syz.4.537" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 152.984355][ T5524] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 153.045068][ T5524] EXT4-fs (loop5): Remounting filesystem read-only [ 153.056689][ T5533] loop4: detected capacity change from 0 to 512 [ 153.071082][ T4059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.103594][ T5533] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.541: inode has both inline data and extents flags [ 153.143532][ T29] audit: type=1400 audit(1770504690.510:603): avc: denied { setopt } for pid=5536 comm="syz.5.542" lport=40746 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 153.167700][ T29] audit: type=1400 audit(1770504690.510:604): avc: denied { write } for pid=5536 comm="syz.5.542" lport=40746 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 153.203908][ T5533] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.541: couldn't read orphan inode 15 (err -117) [ 153.234350][ T29] audit: type=1400 audit(1770504690.600:605): avc: denied { override_creds } for pid=5538 comm="syz.5.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 153.259816][ T5533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.290954][ T5541] loop1: detected capacity change from 0 to 512 [ 153.302143][ T5541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.310976][ T5541] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 153.318922][ T5541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 153.327136][ T5541] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 153.336699][ T5541] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 153.346715][ T5541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 153.359938][ T5541] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 153.389978][ T5509] syz.2.535 (5509) used greatest stack depth: 7464 bytes left [ 153.432432][ T29] audit: type=1400 audit(1770504690.800:606): avc: denied { create } for pid=5546 comm="syz.5.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 153.454064][ T29] audit: type=1400 audit(1770504690.830:607): avc: denied { connect } for pid=5546 comm="syz.5.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.482403][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.505573][ T5551] pim6reg: entered allmulticast mode [ 153.555792][ T5559] netlink: 'syz.4.548': attribute type 30 has an invalid length. [ 153.584873][ T5561] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.627944][ T5561] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.667502][ T5561] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.695669][ T5563] loop4: detected capacity change from 0 to 512 [ 153.702751][ T5563] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 153.713201][ T5563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 153.721261][ T5563] System zones: 1-12 [ 153.728619][ T5561] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.740488][ T5563] EXT4-fs (loop4): orphan cleanup on readonly fs [ 153.747711][ T5563] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.551: attempt to clear invalid blocks 1024 len 1 [ 153.762107][ T5563] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.551: bg 0: block 361: padding at end of block bitmap is not set [ 153.778066][ T5563] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 153.787180][ T5563] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.551: invalid indirect mapped block 1811939328 (level 0) [ 153.801498][ T5563] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.551: invalid indirect mapped block 2 (level 2) [ 153.846620][ T5563] EXT4-fs (loop4): 1 truncate cleaned up [ 153.853809][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.864462][ T5563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 153.883051][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.891357][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.899991][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.936953][ T29] audit: type=1400 audit(1770504691.310:608): avc: denied { write } for pid=5562 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.020042][ T5563] netlink: 'syz.4.551': attribute type 3 has an invalid length. [ 154.121248][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 154.284881][ T5574] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 154.292550][ T5574] audit: out of memory in audit_log_start [ 154.322338][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.382954][ T5580] FAULT_INJECTION: forcing a failure. [ 154.382954][ T5580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.396114][ T5580] CPU: 0 UID: 0 PID: 5580 Comm: syz.5.557 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.396139][ T5580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 154.396151][ T5580] Call Trace: [ 154.396156][ T5580] [ 154.396163][ T5580] __dump_stack+0x1d/0x30 [ 154.396245][ T5580] dump_stack_lvl+0x95/0xd0 [ 154.396264][ T5580] dump_stack+0x15/0x1b [ 154.396290][ T5580] should_fail_ex+0x263/0x280 [ 154.396326][ T5580] should_fail+0xb/0x20 [ 154.396402][ T5580] should_fail_usercopy+0x1a/0x20 [ 154.396440][ T5580] _copy_from_user+0x1c/0xb0 [ 154.396459][ T5580] __sys_bpf+0x183/0x7b0 [ 154.396498][ T5580] __x64_sys_bpf+0x41/0x50 [ 154.396553][ T5580] x64_sys_call+0x28e1/0x3000 [ 154.396632][ T5580] do_syscall_64+0xc0/0x2a0 [ 154.396667][ T5580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.396688][ T5580] RIP: 0033:0x7f7a6468aeb9 [ 154.396702][ T5580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.396760][ T5580] RSP: 002b:00007f7a630df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.396778][ T5580] RAX: ffffffffffffffda RBX: 00007f7a64905fa0 RCX: 00007f7a6468aeb9 [ 154.396790][ T5580] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 154.396818][ T5580] RBP: 00007f7a630df090 R08: 0000000000000000 R09: 0000000000000000 [ 154.396831][ T5580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.396845][ T5580] R13: 00007f7a64906038 R14: 00007f7a64905fa0 R15: 00007ffd8c8cf718 [ 154.396868][ T5580] [ 154.565580][ T5582] loop4: detected capacity change from 0 to 512 [ 154.572279][ T5582] EXT4-fs: Ignoring removed nobh option [ 154.584682][ T5582] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.644238][ T5585] tipc: Resetting bearer [ 154.651307][ T5582] EXT4-fs (loop4): 1 truncate cleaned up [ 154.661538][ T5582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.675374][ T5585] bridge_slave_0: left allmulticast mode [ 154.681035][ T5585] bridge_slave_0: left promiscuous mode [ 154.686767][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.802411][ T5585] bridge_slave_1: left allmulticast mode [ 154.808188][ T5585] bridge_slave_1: left promiscuous mode [ 154.813896][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.828540][ T5585] bond0: (slave bond_slave_1): Releasing backup interface [ 154.841296][ T5585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.848767][ T5585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.866615][ T5585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.874120][ T5585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.956708][ T5585] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.099600][ T5605] netlink: 822 bytes leftover after parsing attributes in process `syz.5.565'. [ 155.121140][ T5607] netlink: 822 bytes leftover after parsing attributes in process `syz.5.565'. [ 155.439301][ T5633] pim6reg: entered allmulticast mode [ 155.532158][ T5638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5638 comm=syz.6.577 [ 155.579198][ T5638] loop6: detected capacity change from 0 to 512 [ 155.618169][ T5638] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #17: comm syz.6.577: iget: immutable or append flags not allowed on symlinks [ 155.654454][ T5638] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.577: couldn't read orphan inode 17 (err -117) [ 155.685290][ T5638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.769681][ T5647] loop2: detected capacity change from 0 to 512 [ 155.790898][ T4583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.795424][ T5647] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 155.975313][ T5656] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.029926][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.045990][ T5656] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.105948][ T5656] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.189143][ T5659] loop4: detected capacity change from 0 to 128 [ 156.216276][ T5659] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.229901][ T5656] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.296756][ T52] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.353436][ T52] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.362863][ T52] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.371315][ T5659] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.381967][ T52] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.397902][ T5659] netlink: 68 bytes leftover after parsing attributes in process `syz.4.584'. [ 156.417722][ T5666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.586'. [ 156.501726][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.647084][ T5680] vlan0: entered promiscuous mode [ 156.870396][ T5702] pim6reg: entered allmulticast mode [ 157.052846][ T5717] netlink: 'syz.5.606': attribute type 39 has an invalid length. [ 157.077728][ T5715] FAULT_INJECTION: forcing a failure. [ 157.077728][ T5715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.090982][ T5715] CPU: 0 UID: 0 PID: 5715 Comm: syz.2.605 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.091010][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 157.091101][ T5715] Call Trace: [ 157.091107][ T5715] [ 157.091115][ T5715] __dump_stack+0x1d/0x30 [ 157.091141][ T5715] dump_stack_lvl+0x95/0xd0 [ 157.091183][ T5715] dump_stack+0x15/0x1b [ 157.091278][ T5715] should_fail_ex+0x263/0x280 [ 157.091311][ T5715] should_fail+0xb/0x20 [ 157.091407][ T5715] should_fail_usercopy+0x1a/0x20 [ 157.091502][ T5715] _copy_to_iter+0xd2/0xea0 [ 157.091539][ T5715] ? __rcu_read_unlock+0x4e/0x70 [ 157.091573][ T5715] ? selinux_file_permission+0x675/0x690 [ 157.091660][ T5715] eventfd_read+0x28b/0x3f0 [ 157.091682][ T5715] aio_read+0x1ea/0x2f0 [ 157.091720][ T5715] io_submit_one+0xba6/0x1350 [ 157.091762][ T5715] __se_sys_io_submit+0xfb/0x280 [ 157.091854][ T5715] __x64_sys_io_submit+0x43/0x50 [ 157.091883][ T5715] x64_sys_call+0x2e40/0x3000 [ 157.091929][ T5715] do_syscall_64+0xc0/0x2a0 [ 157.092006][ T5715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.092030][ T5715] RIP: 0033:0x7f57ca27aeb9 [ 157.092047][ T5715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.092063][ T5715] RSP: 002b:00007f57c8ccf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 157.092080][ T5715] RAX: ffffffffffffffda RBX: 00007f57ca4f5fa0 RCX: 00007f57ca27aeb9 [ 157.092126][ T5715] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 00007f57c8c20000 [ 157.092141][ T5715] RBP: 00007f57c8ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 157.092155][ T5715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.092168][ T5715] R13: 00007f57ca4f6038 R14: 00007f57ca4f5fa0 R15: 00007ffe77fb4f68 [ 157.092190][ T5715] [ 157.549323][ T3423] IPVS: starting estimator thread 0... [ 157.709201][ T5741] IPVS: using max 2304 ests per chain, 115200 per kthread [ 157.808607][ T5750] loop5: detected capacity change from 0 to 512 [ 157.861227][ T5750] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 157.910607][ T5750] EXT4-fs (loop5): mount failed [ 157.955740][ T5750] 9p: Bad value for 'rfdno' [ 157.988155][ T5754] sctp: [Deprecated]: syz.1.617 (pid 5754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.988155][ T5754] Use struct sctp_sack_info instead [ 158.225128][ T5773] netlink: 80 bytes leftover after parsing attributes in process `syz.5.625'. [ 158.244780][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 158.244794][ T29] audit: type=1400 audit(1770504695.620:668): avc: denied { bind } for pid=5772 comm="syz.6.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.250106][ T5773] 6eth1_to_bond: renamed from gre0 [ 158.288891][ T5773] A link change request failed with some changes committed already. Interface 6eth1_to_bond may have been left with an inconsistent configuration, please check. [ 158.416489][ T5776] tipc: Resetting bearer [ 158.453949][ T5781] loop2: detected capacity change from 0 to 512 [ 158.486326][ T5783] loop5: detected capacity change from 0 to 1024 [ 158.493737][ T5776] bond1: left promiscuous mode [ 158.498826][ T5776] bridge1: left promiscuous mode [ 158.506352][ T31] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.507046][ T5783] EXT4-fs: Ignoring removed oldalloc option [ 158.520681][ T5783] EXT4-fs: Ignoring removed bh option [ 158.529514][ T31] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.540653][ T5781] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 158.565269][ T31] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.565733][ T5781] EXT4-fs (loop2): mount failed [ 158.573908][ T31] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.598149][ T5783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.616174][ T5781] 9p: Bad value for 'rfdno' [ 158.653771][ T5783] netlink: 'syz.5.629': attribute type 15 has an invalid length. [ 158.661705][ T5783] netlink: 24 bytes leftover after parsing attributes in process `syz.5.629'. [ 158.674295][ T29] audit: type=1400 audit(1770504696.020:669): avc: denied { setattr } for pid=5782 comm="syz.5.629" path="pipe:[13222]" dev="pipefs" ino=13222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 158.750685][ T5793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.631'. [ 158.759870][ T5793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.631'. [ 158.820438][ T5793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.631'. [ 158.829486][ T5793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.631'. [ 158.926554][ T5798] netlink: 'syz.6.633': attribute type 13 has an invalid length. [ 159.001122][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.008316][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.048164][ T5810] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 159.080978][ T5810] loop4: detected capacity change from 0 to 1024 [ 159.093554][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.101568][ T5810] EXT4-fs: Ignoring removed nobh option [ 159.119399][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.129182][ T5810] EXT4-fs (loop4): unsupported inode size: 16384 [ 159.135650][ T5810] EXT4-fs (loop4): blocksize: 1024 [ 159.186654][ T31] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.202532][ T31] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.220253][ T5823] ±ÿ: renamed from team_slave_1 (while UP) [ 159.229838][ T5824] ieee802154 phy0 wpan0: encryption failed: -90 [ 159.340719][ T4059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.352259][ T31] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.367319][ T31] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.397086][ T5835] loop5: detected capacity change from 0 to 512 [ 159.404579][ T5835] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.434496][ T5835] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 159.442463][ T5835] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 159.513146][ T5835] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 159.522710][ T5835] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 159.563188][ T5835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 159.576093][ T5841] loop4: detected capacity change from 0 to 128 [ 159.704491][ T5835] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 159.951983][ T29] audit: type=1400 audit(1770504697.320:670): avc: denied { map } for pid=5840 comm="syz.4.647" path="socket:[14355]" dev="sockfs" ino=14355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.975336][ T29] audit: type=1400 audit(1770504697.320:671): avc: denied { read } for pid=5840 comm="syz.4.647" path="socket:[14355]" dev="sockfs" ino=14355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.141797][ T5856] loop2: detected capacity change from 0 to 512 [ 160.148666][ T5856] ext4: Unknown parameter 'obj_role' [ 160.161891][ T5858] __nla_validate_parse: 2 callbacks suppressed [ 160.161909][ T5858] netlink: 12 bytes leftover after parsing attributes in process `syz.6.653'. [ 160.190545][ T5855] loop4: detected capacity change from 0 to 4096 [ 160.207956][ T5855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.240443][ T29] audit: type=1400 audit(1770504697.610:672): avc: denied { map } for pid=5854 comm="syz.4.652" path="/124/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 160.270361][ T29] audit: type=1400 audit(1770504697.610:673): avc: denied { execute } for pid=5854 comm="syz.4.652" path="/124/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 160.293992][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.655'. [ 160.303509][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.655'. [ 160.324960][ T5868] loop6: detected capacity change from 0 to 512 [ 160.332736][ T5868] EXT4-fs: Ignoring removed bh option [ 160.338275][ T5868] EXT4-fs: Ignoring removed oldalloc option [ 160.345189][ T5868] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 160.366443][ T5868] EXT4-fs (loop6): 1 truncate cleaned up [ 160.372166][ T29] audit: type=1400 audit(1770504697.740:674): avc: denied { connect } for pid=5872 comm="syz.2.656" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.372380][ T5873] loop2: detected capacity change from 0 to 256 [ 160.393722][ T5868] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.399755][ T5873] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.452287][ T29] audit: type=1400 audit(1770504697.820:675): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 160.454155][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.546267][ T4583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.734211][ T5888] netlink: 80 bytes leftover after parsing attributes in process `syz.6.661'. [ 160.789322][ T29] audit: type=1400 audit(1770504698.160:676): avc: denied { execstack } for pid=5887 comm="syz.6.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 160.876418][ T4059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.044353][ T29] audit: type=1400 audit(1770504698.410:677): avc: denied { read } for pid=5892 comm="syz.5.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 161.091195][ T5894] FAULT_INJECTION: forcing a failure. [ 161.091195][ T5894] name failslab, interval 1, probability 0, space 0, times 0 [ 161.105745][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: syz.5.662 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.105820][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 161.105833][ T5894] Call Trace: [ 161.105838][ T5894] [ 161.105844][ T5894] __dump_stack+0x1d/0x30 [ 161.105868][ T5894] dump_stack_lvl+0x95/0xd0 [ 161.105888][ T5894] dump_stack+0x15/0x1b [ 161.105906][ T5894] should_fail_ex+0x263/0x280 [ 161.106058][ T5894] should_failslab+0x8c/0xb0 [ 161.106084][ T5894] __kmalloc_cache_noprof+0x64/0x4a0 [ 161.106135][ T5894] ? resv_map_alloc+0x32/0x190 [ 161.106165][ T5894] ? vfs_write+0x86e/0x9f0 [ 161.106188][ T5894] resv_map_alloc+0x32/0x190 [ 161.106271][ T5894] hugetlbfs_get_inode+0x67/0x370 [ 161.106300][ T5894] ? mutex_unlock+0x4e/0x90 [ 161.106332][ T5894] hugetlb_file_setup+0x192/0x3d0 [ 161.106380][ T5894] ksys_mmap_pgoff+0x156/0x310 [ 161.106413][ T5894] x64_sys_call+0x16bb/0x3000 [ 161.106441][ T5894] do_syscall_64+0xc0/0x2a0 [ 161.106530][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.106554][ T5894] RIP: 0033:0x7f7a6468aeb9 [ 161.106617][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.106637][ T5894] RSP: 002b:00007f7a630be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 161.106658][ T5894] RAX: ffffffffffffffda RBX: 00007f7a64906090 RCX: 00007f7a6468aeb9 [ 161.106674][ T5894] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 161.106688][ T5894] RBP: 00007f7a630be090 R08: ffffffffffffffff R09: 0000000000000000 [ 161.106764][ T5894] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001 [ 161.106779][ T5894] R13: 00007f7a64906128 R14: 00007f7a64906090 R15: 00007ffd8c8cf718 [ 161.106828][ T5894] [ 161.392770][ T5902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.415797][ T5902] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.434616][ T5902] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.667: corrupted inode contents [ 161.456758][ T5902] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.667: mark_inode_dirty error [ 161.475947][ T5902] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.667: corrupted inode contents [ 161.498257][ T5902] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.667: mark_inode_dirty error [ 161.581814][ T5902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=5902 comm=syz.4.667 [ 161.680202][ T5902] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.667: corrupted inode contents [ 161.770137][ T5902] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.667: mark_inode_dirty error [ 161.801109][ T5902] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.667: corrupted inode contents [ 161.959824][ T5936] netlink: 300 bytes leftover after parsing attributes in process `syz.1.674'. [ 161.995607][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.030384][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 162.071696][ T5947] EXT4-fs: Ignoring removed oldalloc option [ 162.077674][ T5947] EXT4-fs: Ignoring removed bh option [ 162.107727][ T5947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.149609][ T5944] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 162.177359][ T5947] futex_wake_op: syz.5.679 tries to shift op by -1; fix this program [ 162.201166][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 162.219151][ T5954] 9p: Could not find request transport: f [ 162.235468][ T5944] macvlan2: entered promiscuous mode [ 162.240811][ T5944] macvlan2: entered allmulticast mode [ 162.352061][ T5963] netlink: 92 bytes leftover after parsing attributes in process `syz.1.684'. [ 162.491743][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.688'. [ 162.500758][ T5973] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 162.579931][ T5971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.737264][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.795699][ T5966] ================================================================== [ 162.803910][ T5966] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 162.811060][ T5966] [ 162.813400][ T5966] write to 0xffff8881070d9894 of 4 bytes by task 5957 on cpu 0: [ 162.821053][ T5966] xas_set_mark+0x12b/0x140 [ 162.825664][ T5966] tag_pages_for_writeback+0xe3/0x2e0 [ 162.831088][ T5966] ext4_do_writepages+0x6a8/0x2800 [ 162.836243][ T5966] ext4_writepages+0x18f/0x320 [ 162.841018][ T5966] do_writepages+0x1c6/0x310 [ 162.845643][ T5966] file_write_and_wait_range+0x178/0x2f0 [ 162.851299][ T5966] generic_buffers_fsync_noflush+0x45/0x130 [ 162.857209][ T5966] ext4_sync_file+0x1aa/0x680 [ 162.861916][ T5966] vfs_fsync_range+0x10d/0x130 [ 162.866725][ T5966] ext4_buffered_write_iter+0x34f/0x3c0 [ 162.872302][ T5966] ext4_file_write_iter+0x380/0xf70 [ 162.877525][ T5966] iter_file_splice_write+0x6bc/0xa80 [ 162.882917][ T5966] direct_splice_actor+0x156/0x2a0 [ 162.888041][ T5966] splice_direct_to_actor+0x311/0x670 [ 162.893427][ T5966] do_splice_direct+0x119/0x1a0 [ 162.898291][ T5966] do_sendfile+0x382/0x650 [ 162.902737][ T5966] __x64_sys_sendfile64+0x105/0x150 [ 162.907968][ T5966] x64_sys_call+0x2db1/0x3000 [ 162.912674][ T5966] do_syscall_64+0xc0/0x2a0 [ 162.917203][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.923148][ T5966] [ 162.925483][ T5966] read to 0xffff8881070d9894 of 4 bytes by task 5966 on cpu 1: [ 162.933025][ T5966] xas_find_marked+0x5d7/0x620 [ 162.937805][ T5966] filemap_get_folios_tag+0xfa/0x510 [ 162.943109][ T5966] mpage_prepare_extent_to_map+0x328/0xc50 [ 162.948938][ T5966] ext4_do_writepages+0x9f6/0x2800 [ 162.954085][ T5966] ext4_writepages+0x18f/0x320 [ 162.958871][ T5966] do_writepages+0x1c6/0x310 [ 162.963476][ T5966] file_write_and_wait_range+0x178/0x2f0 [ 162.969129][ T5966] generic_buffers_fsync_noflush+0x45/0x130 [ 162.975041][ T5966] ext4_sync_file+0x1aa/0x680 [ 162.979736][ T5966] vfs_fsync_range+0x10d/0x130 [ 162.984519][ T5966] ext4_buffered_write_iter+0x34f/0x3c0 [ 162.990111][ T5966] ext4_file_write_iter+0x380/0xf70 [ 162.995353][ T5966] iter_file_splice_write+0x6bc/0xa80 [ 163.000741][ T5966] direct_splice_actor+0x156/0x2a0 [ 163.005878][ T5966] splice_direct_to_actor+0x311/0x670 [ 163.011267][ T5966] do_splice_direct+0x119/0x1a0 [ 163.016135][ T5966] do_sendfile+0x382/0x650 [ 163.020576][ T5966] __x64_sys_sendfile64+0x105/0x150 [ 163.025786][ T5966] x64_sys_call+0x2db1/0x3000 [ 163.030493][ T5966] do_syscall_64+0xc0/0x2a0 [ 163.035025][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.040935][ T5966] [ 163.043281][ T5966] value changed: 0x02000021 -> 0x04000021 [ 163.049023][ T5966] [ 163.051348][ T5966] Reported by Kernel Concurrency Sanitizer on: [ 163.057499][ T5966] CPU: 1 UID: 0 PID: 5966 Comm: syz.5.679 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.067140][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 163.077200][ T5966] ================================================================== [ 163.274763][ T4059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.