last executing test programs: 1m2.461406683s ago: executing program 4 (id=18): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ptrace$pokeuser(0x6, 0x0, 0x4, 0xe714) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040810}, 0x30) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7, 0x0, 0x7, 0x4, 0x53}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1m2.357924575s ago: executing program 4 (id=19): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ppoll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0) 1m2.146097822s ago: executing program 1 (id=25): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @remote}, 0x80, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000000)='ipvlan1\x00', 0x4, 0xb}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@sysvgroups}, {@orlov}, {@bsdgroups}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f0000000b00)="$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") r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000088) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) 1m1.86616967s ago: executing program 1 (id=28): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_io_uring_setup(0x111, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0xff24, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) close(r0) 1m1.740881104s ago: executing program 1 (id=30): socket$inet_smc(0x2b, 0x1, 0x0) socket(0x18, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1, 0x0, 0x33}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m1.692094406s ago: executing program 1 (id=31): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) listen(0xffffffffffffffff, 0xfff) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000001) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x6) gettid() gettid() 1m1.55642628s ago: executing program 1 (id=32): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x100) capset(&(0x7f0000000000)={0x20071026}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030003000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfafb70ee09c", 0x14}], 0x2}, 0x4000000) mkdirat(r1, &(0x7f00000002c0)='./file0\x00', 0x334) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='sockfs\x00', 0x8001, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) 1m1.480034782s ago: executing program 4 (id=33): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x0, 0x1}, 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x26}, 0x94) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0xa109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) keyctl$set_reqkey_keyring(0xe, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{}, {&(0x7f0000000340)='2{', 0x2}], 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000200)="a5", 0x1}], 0x1) 1m1.420310184s ago: executing program 4 (id=34): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7e}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a00012200000000000000050a000000000000000000000006001d000000000008001e80"], 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010861a2d7540000102030109026000030101280a0904000000010100000a24010e000a00020102090d010000010200000904010101010200000905010900"], 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x7) syz_usb_connect(0x5, 0x12f, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) 1m0.855857411s ago: executing program 1 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0xc9f, 0x10, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000040)='./file1\x00', 0x2000040, &(0x7f0000000580)={[{@rodir}, {@shortname_lower}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8}, {@uni_xlateno}, {@shortname_win95}, {@shortname_winnt}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_mixed}, {@uni_xlate}]}, 0x1, 0x36c, &(0x7f0000000200)="$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") syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x10000) io_uring_enter(r2, 0x1, 0x20, 0x1, 0x0, 0x0) io_uring_enter(r2, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 1m0.855711141s ago: executing program 32 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0xc9f, 0x10, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000040)='./file1\x00', 0x2000040, &(0x7f0000000580)={[{@rodir}, {@shortname_lower}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8}, {@uni_xlateno}, {@shortname_win95}, {@shortname_winnt}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_mixed}, {@uni_xlate}]}, 0x1, 0x36c, &(0x7f0000000200)="$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") syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x10000) io_uring_enter(r2, 0x1, 0x20, 0x1, 0x0, 0x0) io_uring_enter(r2, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 1m0.587385039s ago: executing program 4 (id=53): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x221c, 0x134d, 0x16, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x1ff) shutdown(r0, 0x0) 1m0.009932727s ago: executing program 4 (id=55): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) ftruncate(0xffffffffffffffff, 0xc17a) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom$unix(r2, &(0x7f0000000480)=""/238, 0xee, 0x10120, 0x0, 0x0) 1m0.009719027s ago: executing program 33 (id=55): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) ftruncate(0xffffffffffffffff, 0xc17a) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom$unix(r2, &(0x7f0000000480)=""/238, 0xee, 0x10120, 0x0, 0x0) 2.268738381s ago: executing program 2 (id=857): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x3d, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 2.236320512s ago: executing program 3 (id=858): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000a80)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '-\x00', 0x19, 0x84, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], "a5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) modify_ldt$read(0x0, 0x0, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000140)) syz_usbip_server_init(0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYBLOB="bfefd36fd4e3c642c51541d5955847ac49a4d624353f82113b7e3dee1c389dda7f8de905d06e453179eedeefa09b8363f986de90d064e747320ee7ecb7a68f2636fdb3889ae9"], 0x57) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) 2.152206855s ago: executing program 2 (id=859): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = getpgrp(0xffffffffffffffff) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) kcmp(0x0, r1, 0x1, r2, r0) tkill(r1, 0x1) select(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x8001, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 2.087651807s ago: executing program 2 (id=860): perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8a309, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x18, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x1) recvfrom(r2, &(0x7f0000000480)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB="21ae0e3493bd617fe20e44f8a8fd78282c646566636f6e746578743d22227d22226fe68b62f696183f3362e6f16ce6ca479c9d3b6fd4ccf11dfa90cd786f8bd9ff19a464696755fc"]) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 1.935263641s ago: executing program 6 (id=862): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x831, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000180), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) 1.886037363s ago: executing program 2 (id=864): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20025094) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000040)={0x7, 0x0, 0x4}) r2 = getpgrp(0x0) r3 = gettid() r4 = getpgid(r3) rt_tgsigqueueinfo(r4, r3, 0x5, &(0x7f0000000200)={0x5, 0x8}) rt_tgsigqueueinfo(r2, r3, 0x2c, &(0x7f0000000100)={0x11, 0x905, 0x4}) ppoll(0x0, 0x0, 0x0, &(0x7f0000002d40)={[0x100000001]}, 0x8) 1.837448784s ago: executing program 2 (id=867): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) semop(0x0, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x2, 0x0) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r2, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r2, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) 1.692849449s ago: executing program 6 (id=870): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x5) add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket(0x28, 0x5, 0x0) r1 = socket(0x2c, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x11b, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10000000000005, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_config_ext={0x2, 0x8}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x24000000000, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffffffff08000000180001801400020073797a5f74756e000000000040795a7a180002800400010010000380"], 0x44}}, 0x0) 1.64841445s ago: executing program 0 (id=871): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = getpgrp(0xffffffffffffffff) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) kcmp(0x0, r1, 0x1, r2, r0) tkill(r1, 0x1) select(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x8001, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 1.6480323s ago: executing program 6 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa9) 1.627062141s ago: executing program 6 (id=874): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) msgget$private(0x0, 0x1c0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4044800, &(0x7f00000000c0)={0x11, 0x88a8, r0, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x48}}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000004c0)="9745010000002000010000ac0a3324491fbb00000098894633120b5585f0b902cd17f3", 0x23}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x2004c000) 1.616232941s ago: executing program 3 (id=875): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x4173, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.565928593s ago: executing program 0 (id=877): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x5, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4804) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, r3, 0x309, 0x70bd27, 0x0, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20040000) 1.461338706s ago: executing program 0 (id=878): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x0, 0x20d, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) 1.351964509s ago: executing program 0 (id=879): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r3 = dup2(r1, 0xffffffffffffffff) close_range(r3, 0xffffffffffffffff, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) 1.3098074s ago: executing program 6 (id=880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1551], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.30934812s ago: executing program 3 (id=881): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000280)={0x0, 0x68, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu'], 0xb) 1.285566651s ago: executing program 0 (id=882): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x831, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000180), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) 1.175984294s ago: executing program 5 (id=884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3c}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) 1.099090197s ago: executing program 3 (id=885): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) r3 = dup2(r1, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) fcntl$setown(r2, 0x8, r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) tkill(r0, 0x13) 1.084001267s ago: executing program 5 (id=886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000004000000040000001500000000000000", @ANYRES32, @ANYBLOB="0000000000003635000000000000000000006faf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000340), &(0x7f0000000180)=""/122}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = timerfd_create(0x7, 0x800) timerfd_gettime(r4, &(0x7f0000000140)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0xfff3}, {}, {0xf, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r5, r1, 0x0) 523.997674ms ago: executing program 2 (id=887): mremap(&(0x7f0000780000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00004fe000/0x3000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 523.642364ms ago: executing program 5 (id=888): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = getpgrp(0xffffffffffffffff) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) kcmp(0x0, r1, 0x1, r2, r0) tkill(r1, 0x1) select(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x8001, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 517.362704ms ago: executing program 5 (id=889): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000240)={0x9b, 0x0, 0x4, 0x1, 0x5}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x3fd, 0x0, 0xb1, 0x0, 0x2}, 0x9c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000020003000b"], 0xffc99a3b) 496.345315ms ago: executing program 0 (id=890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) unshare(0x20040600) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x8, 0x4}, 0x0, &(0x7f0000000140)={0x3ff, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0)='1', 0x1, 0x20008084, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 318.90547ms ago: executing program 6 (id=891): r0 = gettid() r1 = socket$inet(0x2, 0x3, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) recvfrom(r1, 0x0, 0x0, 0x10002, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x4, 0x34482, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x0, 0x0, 0x800000, 0x2, 0x200005, 0xcb, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, &(0x7f0000000080), 0x8) dup2(r2, r3) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x13) 310.92178ms ago: executing program 5 (id=892): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x4173, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 194.040444ms ago: executing program 3 (id=893): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet6(0xa, 0x802, 0x0) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 113.724277ms ago: executing program 3 (id=894): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = eventfd2(0x74a6, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) 0s ago: executing program 5 (id=895): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x6}, 0x2732, 0x0, 0x8000, 0x3, 0xfff, 0x7fff, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r1 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffffffffffff, @perf_config_ext={0xfd9, 0x922}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) shmdt(r1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa7, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1a2d, 0x0, 0x7fc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) kernel console output (not intermixed with test programs): process `syz.1.28'. [ 30.683780][ T3579] netlink: 68 bytes leftover after parsing attributes in process `syz.1.28'. [ 30.693334][ T3579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 30.702981][ T3579] netlink: 68 bytes leftover after parsing attributes in process `syz.1.28'. [ 30.714247][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.736137][ T3579] syz.1.28 (3579) used greatest stack depth: 10832 bytes left [ 30.808155][ T3585] loop1: detected capacity change from 0 to 1024 [ 30.816189][ T3585] ======================================================= [ 30.816189][ T3585] WARNING: The mand mount option has been deprecated and [ 30.816189][ T3585] and is ignored by this kernel. Remove the mand [ 30.816189][ T3585] option from the mount to silence this warning. [ 30.816189][ T3585] ======================================================= [ 30.879020][ T3585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 30.897194][ T3585] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.927925][ T3306] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /7/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 30.948885][ T3306] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /7/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 30.974254][ T3306] EXT4-fs error (device loop1): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 30.995574][ T3306] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /7/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 31.024622][ T3306] EXT4-fs error (device loop1): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 31.069006][ T3306] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /7/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 31.085150][ T3595] loop4: detected capacity change from 0 to 4096 [ 31.099073][ T3306] EXT4-fs error (device loop1): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 31.131026][ T3306] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /7/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 31.154255][ T3306] EXT4-fs error (device loop1): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 31.160682][ T3595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.186843][ T3306] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /7/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 31.225124][ T3595] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.34: Failed to acquire dquot type 1 [ 31.236909][ T3595] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 31.255275][ T3595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.296993][ T3595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.315936][ T3595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.327251][ T3595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.377413][ T3606] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 31.490719][ T3591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 31.508802][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.570386][ T3306] syz-executor (3306) used greatest stack depth: 10784 bytes left [ 31.608052][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.690954][ T3624] loop3: detected capacity change from 0 to 256 [ 31.709927][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.794374][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.903030][ T3308] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 31.933338][ T3308] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 31.942571][ T3644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.988964][ T3644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.036297][ T49] bridge_slave_1: left allmulticast mode [ 32.042074][ T49] bridge_slave_1: left promiscuous mode [ 32.048239][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.060553][ T49] bridge_slave_0: left allmulticast mode [ 32.078835][ T49] bridge_slave_0: left promiscuous mode [ 32.089845][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.199473][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.209846][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.219719][ T49] bond0 (unregistering): Released all slaves [ 32.275669][ T49] hsr_slave_0: left promiscuous mode [ 32.288421][ T49] hsr_slave_1: left promiscuous mode [ 32.310365][ T49] veth1_macvtap: left promiscuous mode [ 32.317040][ T49] veth0_macvtap: left promiscuous mode [ 32.327006][ T49] veth1_vlan: left promiscuous mode [ 32.338457][ T49] veth0_vlan: left promiscuous mode [ 32.504466][ T49] team0 (unregistering): Port device team_slave_1 removed [ 32.523942][ T49] team0 (unregistering): Port device team_slave_0 removed [ 32.585147][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 32.709283][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.719287][ T3682] loop3: detected capacity change from 0 to 256 [ 32.744990][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.753652][ T3620] bridge_slave_0: entered allmulticast mode [ 32.763565][ T3620] bridge_slave_0: entered promiscuous mode [ 32.771026][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.779050][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.788027][ T3620] bridge_slave_1: entered allmulticast mode [ 32.797555][ T3620] bridge_slave_1: entered promiscuous mode [ 32.828332][ T3620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.844691][ T3620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.892552][ T3620] team0: Port device team_slave_0 added [ 32.925024][ T3620] team0: Port device team_slave_1 added [ 32.955638][ T3024] 8021q: adding VLAN 0 to HW filter on device eth3 [ 32.973066][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.992627][ T3620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.999790][ T3620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.033861][ T3620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.053818][ T3712] loop0: detected capacity change from 0 to 256 [ 33.061059][ T3620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.068344][ T3620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.077220][ T3712] vfat: Unknown parameter 'gi1/-Id!' [ 33.099237][ T3620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.191054][ T3620] hsr_slave_0: entered promiscuous mode [ 33.209226][ T3620] hsr_slave_1: entered promiscuous mode [ 33.215375][ T3620] debugfs: 'hsr0' already exists in 'hsr' [ 33.224110][ T3620] Cannot create hsr debugfs directory [ 33.343628][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.376745][ T3736] loop0: detected capacity change from 0 to 512 [ 33.384582][ T3736] EXT4-fs: Ignoring removed nobh option [ 33.390483][ T3736] EXT4-fs: Ignoring removed orlov option [ 33.399972][ T3736] EXT4-fs error (device loop0): __ext4_iget:5481: inode #11: block 1: comm syz.0.68: invalid block [ 33.413160][ T3736] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.413295][ T3736] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.68: couldn't read orphan inode 11 (err -117) [ 33.421324][ T3024] 8021q: adding VLAN 0 to HW filter on device eth2 [ 33.422643][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 33.422656][ C0] EXT4-fs (loop0): initial error at time 1779969286: __ext4_iget:5481: inode 11: block 1 [ 33.422689][ C0] EXT4-fs (loop0): last error at time 1779969286: __ext4_iget:5481 [ 33.443258][ T3663] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.447318][ C0] : inode 11: block 1 [ 33.448225][ T3736] loop0: lost filesystem error report for type 5 error -117 [ 33.459538][ T3663] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.466298][ T3736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.472928][ T3663] bridge_slave_0: entered allmulticast mode [ 33.510059][ T3663] bridge_slave_0: entered promiscuous mode [ 33.520728][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.532288][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.559183][ T3663] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.566423][ T3663] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.573926][ T3663] bridge_slave_1: entered allmulticast mode [ 33.580705][ T3663] bridge_slave_1: entered promiscuous mode [ 33.604927][ T3663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.627801][ T3663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.646883][ T3663] team0: Port device team_slave_0 added [ 33.654773][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.672877][ T3663] team0: Port device team_slave_1 added [ 33.716361][ T3620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 33.741005][ T3620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.759148][ T3663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.767954][ T3663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.831158][ T3663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.851076][ T3663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.858400][ T3663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.885192][ T3663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.899713][ T3620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 33.970790][ T3770] set_capacity_and_notify: 1 callbacks suppressed [ 33.970805][ T3770] loop3: detected capacity change from 0 to 8192 [ 34.071680][ T3620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.087730][ T3620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 34.106457][ T3620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.124853][ T3024] 8021q: adding VLAN 0 to HW filter on device eth4 [ 34.182629][ T3620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 34.193064][ T3620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.222146][ T3663] hsr_slave_0: entered promiscuous mode [ 34.241018][ T3663] hsr_slave_1: entered promiscuous mode [ 34.246756][ T28] kauditd_printk_skb: 269 callbacks suppressed [ 34.246770][ T28] audit: type=1400 audit(1779969287.525:456): avc: denied { perfmon } for pid=3776 comm="syz.0.77" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.309809][ T3663] debugfs: 'hsr0' already exists in 'hsr' [ 34.321682][ T3663] Cannot create hsr debugfs directory [ 34.361574][ T28] audit: type=1400 audit(1779969287.645:457): avc: denied { module_request } for pid=3663 comm="syz-executor" kmod="rtnl-link-virt_wifi" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 34.460363][ T28] audit: type=1400 audit(1779969287.745:458): avc: denied { write } for pid=3773 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 34.481053][ T49] bridge_slave_1: left allmulticast mode [ 34.486812][ T49] bridge_slave_1: left promiscuous mode [ 34.492925][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.521672][ T49] bridge_slave_0: left allmulticast mode [ 34.534509][ T49] bridge_slave_0: left promiscuous mode [ 34.541007][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.551871][ T3790] loop2: detected capacity change from 0 to 2048 [ 34.652288][ T28] audit: type=1400 audit(1779969287.935:459): avc: denied { setopt } for pid=3791 comm="syz.0.80" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.660834][ T3792] xt_hashlimit: size too large, truncated to 1048576 [ 34.703722][ T28] audit: type=1400 audit(1779969287.985:460): avc: denied { ioctl } for pid=3791 comm="syz.0.80" path="socket:[6579]" dev="sockfs" ino=6579 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.740016][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.751694][ T28] audit: type=1400 audit(1779969288.015:461): avc: denied { getopt } for pid=3791 comm="syz.0.80" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.751917][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.787455][ T28] audit: type=1400 audit(1779969288.015:462): avc: denied { connect } for pid=3791 comm="syz.0.80" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.811417][ T49] bond0 (unregistering): Released all slaves [ 34.822929][ T28] audit: type=1400 audit(1779969288.015:463): avc: denied { write } for pid=3791 comm="syz.0.80" laddr=fe80::13 lport=60 faddr=ff01::1 fport=20132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.905370][ T49] hsr_slave_0: left promiscuous mode [ 34.918618][ T49] hsr_slave_1: left promiscuous mode [ 34.932001][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.939804][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.950301][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.957939][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.969207][ T49] veth1_macvtap: left promiscuous mode [ 34.974773][ T49] veth0_macvtap: left promiscuous mode [ 34.980604][ T49] veth1_vlan: left promiscuous mode [ 34.985951][ T49] veth0_vlan: left promiscuous mode [ 35.038809][ T28] audit: type=1400 audit(1779969288.325:464): avc: denied { write } for pid=3798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.100202][ T28] audit: type=1400 audit(1779969288.355:465): avc: denied { mount } for pid=3809 comm="syz.0.82" name="/" dev="autofs" ino=6653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 35.154290][ T3820] xt_hashlimit: size too large, truncated to 1048576 [ 35.189361][ T49] team0 (unregistering): Port device team_slave_1 removed [ 35.200337][ T49] team0 (unregistering): Port device team_slave_0 removed [ 35.384257][ T3024] 8021q: adding VLAN 0 to HW filter on device eth5 [ 35.434048][ T3663] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 35.444312][ T3663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.453736][ T3663] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 35.464215][ T3663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.477219][ T3663] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 35.486755][ T3663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.494477][ T3663] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 35.503399][ T3663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.530591][ T3620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.552529][ T3620] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.579423][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.586552][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.600106][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.607278][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.642082][ T3663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.665218][ T3663] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.674882][ T2154] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.681974][ T2154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.695218][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.702373][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.803148][ T3024] 8021q: adding VLAN 0 to HW filter on device eth6 [ 35.916411][ T3620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.982482][ T3663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.142138][ T3620] veth0_vlan: entered promiscuous mode [ 36.151534][ T3620] veth1_vlan: entered promiscuous mode [ 36.162129][ T3024] 8021q: adding VLAN 0 to HW filter on device eth7 [ 36.176942][ T3620] veth0_macvtap: entered promiscuous mode [ 36.190073][ T3620] veth1_macvtap: entered promiscuous mode [ 36.214468][ T3620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.234403][ T3620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.249928][ T2154] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.265972][ T2154] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.275354][ T2154] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.287742][ T2154] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.303559][ T3663] veth0_vlan: entered promiscuous mode [ 36.352195][ T3663] veth1_vlan: entered promiscuous mode [ 36.366177][ T3024] 8021q: adding VLAN 0 to HW filter on device eth8 [ 36.408130][ T3663] veth0_macvtap: entered promiscuous mode [ 36.443463][ T3663] veth1_macvtap: entered promiscuous mode [ 36.477589][ T3663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.504521][ T3663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.565806][ T361] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.610272][ T361] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.654333][ T3954] netlink: 763 bytes leftover after parsing attributes in process `syz.0.95'. [ 36.675033][ T361] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.691597][ T361] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.835837][ T3969] netlink: 24 bytes leftover after parsing attributes in process `syz.6.99'. [ 36.877552][ T3969] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3969 comm=syz.6.99 [ 36.912117][ T3974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=3974 comm=syz.5.101 [ 37.314632][ T3982] netlink: 'syz.5.104': attribute type 83 has an invalid length. [ 37.566071][ T3991] syz.6.108 (3991) used greatest stack depth: 10496 bytes left [ 37.897215][ T4013] loop0: detected capacity change from 0 to 8192 [ 38.866057][ T4013] loop0: p1 < > p2 p4 < p5 > [ 38.870846][ T4013] loop0: partition table partially beyond EOD, truncated [ 39.088113][ T4013] loop0: p1 start 134217728 is beyond EOD, truncated [ 39.191273][ T4013] loop0: p2 size 67072 extends beyond EOD, truncated [ 39.285263][ T4013] loop0: p5 size 67072 extends beyond EOD, truncated [ 39.606939][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 39.629420][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 39.640654][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 39.640668][ T28] audit: type=1400 audit(1779969292.925:507): avc: denied { bind } for pid=4040 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 39.667373][ T4045] udevd[4045]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 39.763585][ T4056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 39.775372][ T4054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 39.786487][ T28] audit: type=1400 audit(1779969293.065:508): avc: denied { bind } for pid=4053 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.824042][ T4054] team1: entered promiscuous mode [ 39.829484][ T28] audit: type=1400 audit(1779969293.065:509): avc: denied { setopt } for pid=4053 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.855835][ T4054] team1: entered allmulticast mode [ 39.864105][ T4054] 8021q: adding VLAN 0 to HW filter on device team1 [ 39.875837][ T4064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 39.896686][ T28] audit: type=1400 audit(1779969293.095:510): avc: denied { ioctl } for pid=4055 comm="syz.2.134" path="socket:[8226]" dev="sockfs" ino=8226 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 39.922431][ T4064] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 39.959171][ T4064] team2: entered promiscuous mode [ 39.989071][ T4064] team2: entered allmulticast mode [ 39.994401][ T4064] 8021q: adding VLAN 0 to HW filter on device team2 [ 40.047790][ T4069] netlink: 'syz.2.137': attribute type 1 has an invalid length. [ 40.069461][ T4069] netlink: 'syz.2.137': attribute type 2 has an invalid length. [ 40.093982][ T4069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 40.221660][ T28] audit: type=1400 audit(1779969293.505:511): avc: denied { watch watch_reads } for pid=4075 comm="syz.2.140" path="/26" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.355772][ T4079] loop0: detected capacity change from 0 to 1024 [ 40.387894][ T4079] EXT4-fs: inline encryption not supported [ 40.439521][ T4079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.677234][ T28] audit: type=1400 audit(1779969293.965:512): avc: denied { write } for pid=4070 comm="syz.0.138" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.761083][ T28] audit: type=1400 audit(1779969293.965:513): avc: denied { read append open } for pid=4070 comm="syz.0.138" path="/29/file1/cpuset.effective_mems" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.813711][ T4088] syz.2.142 uses obsolete (PF_INET,SOCK_PACKET) [ 40.842080][ T28] audit: type=1400 audit(1779969294.015:514): avc: denied { map } for pid=4070 comm="syz.0.138" path="/29/file1/cpuset.effective_mems" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.909819][ T28] audit: type=1400 audit(1779969294.015:515): avc: denied { write } for pid=4070 comm="syz.0.138" path="/29/file1/cpuset.effective_mems" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.941578][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.961876][ T28] audit: type=1400 audit(1779969294.125:516): avc: denied { ioctl } for pid=4087 comm="syz.2.142" path="socket:[8276]" dev="sockfs" ino=8276 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.044898][ T4095] tipc: Failed to remove unknown binding: 66,0,0/0:914251010/914251012 [ 41.077220][ T4095] tipc: Failed to remove unknown binding: 66,0,0/0:914251010/914251011 [ 41.100873][ T4102] tipc: Failed to remove unknown binding: 66,0,0/0:914251010/914251012 [ 41.153221][ T4102] tipc: Failed to remove unknown binding: 66,0,0/0:914251010/914251011 [ 41.279724][ T4110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=4110 comm=syz.0.150 [ 41.346108][ T4114] tipc: Failed to remove unknown binding: 66,0,0/0:3715574207/3715574209 [ 41.356094][ T4114] tipc: Failed to remove unknown binding: 66,0,0/0:3715574207/3715574208 [ 41.374646][ T4114] tipc: Failed to remove unknown binding: 66,0,0/0:3715574207/3715574209 [ 41.374673][ T4114] tipc: Failed to remove unknown binding: 66,0,0/0:3715574207/3715574208 [ 41.427805][ T4117] loop2: detected capacity change from 0 to 512 [ 41.447948][ T4117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.448067][ T4117] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.509433][ T4104] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz.2.148: Directory hole found for htree leaf block 0 [ 41.510347][ T4104] EXT4-fs (loop2): Remounting filesystem read-only [ 41.702663][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.726049][ T40] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 41.781123][ T4130] capability: warning: `syz.2.155' uses 32-bit capabilities (legacy support in use) [ 42.880724][ T4165] loop0: detected capacity change from 0 to 512 [ 43.189538][ T4171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'. [ 43.456566][ T4192] netlink: 132 bytes leftover after parsing attributes in process `syz.0.180'. [ 43.512017][ T4195] loop0: detected capacity change from 0 to 512 [ 43.534444][ T4195] EXT4-fs (loop0): bad s_min_extra_isize: 2304 [ 43.763739][ T4198] loop2: detected capacity change from 0 to 128 [ 43.900755][ T4198] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.916534][ T4198] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.097219][ T4194] Set syz1 is full, maxelem 65536 reached [ 44.103841][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.439353][ T4220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.450156][ T4220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.661850][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 44.661865][ T28] audit: type=1400 audit(1779969553.953:583): avc: denied { create } for pid=4230 comm="syz.5.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 44.732725][ T4235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.196'. [ 44.732762][ T28] audit: type=1400 audit(1779969554.023:584): avc: denied { ioctl } for pid=4234 comm="syz.0.196" path="socket:[7607]" dev="sockfs" ino=7607 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.748413][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 44.852842][ T28] audit: type=1400 audit(1779969554.144:585): avc: denied { read } for pid=4236 comm="syz.5.197" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 44.907816][ T28] audit: type=1400 audit(1779969554.144:586): avc: denied { open } for pid=4236 comm="syz.5.197" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 44.943196][ T28] audit: type=1400 audit(1779969554.174:587): avc: denied { ioctl } for pid=4236 comm="syz.5.197" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 44.944957][ T4241] loop5: detected capacity change from 0 to 512 [ 44.979495][ T28] audit: type=1400 audit(1779969554.265:588): avc: denied { ioctl } for pid=4238 comm="syz.6.198" path="socket:[8523]" dev="sockfs" ino=8523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.014508][ T4239] netlink: 'syz.6.198': attribute type 10 has an invalid length. [ 45.024361][ T28] audit: type=1400 audit(1779969554.305:589): avc: denied { bind } for pid=4238 comm="syz.6.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.058415][ T4241] EXT4-fs: Ignoring removed nobh option [ 45.115778][ T4241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.153974][ T4241] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.198424][ T23] bridge0: entered promiscuous mode [ 45.215986][ T4239] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.241213][ T4239] bond0: (slave team0): Enslaving as an active interface with an up link [ 45.335976][ T4243] syz.0.200 (4243) used greatest stack depth: 10240 bytes left [ 45.611765][ T28] audit: type=1400 audit(1779969554.920:590): avc: denied { setopt } for pid=4265 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.809001][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.822626][ T28] audit: type=1400 audit(1779969555.122:591): avc: denied { write } for pid=4269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.874100][ T28] audit: type=1400 audit(1779969555.162:592): avc: denied { write } for pid=4285 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.079430][ T4319] loop5: detected capacity change from 0 to 512 [ 46.278590][ T4319] Driver unsupported XDP return value 0 on prog (id 59) dev N/A, expect packet loss! [ 46.502558][ T4301] loop2: detected capacity change from 0 to 512 [ 46.647706][ T4301] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 46.663346][ T4301] EXT4-fs (loop2): 1 truncate cleaned up [ 46.680759][ T4301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.764999][ T4338] loop5: detected capacity change from 0 to 4096 [ 46.780309][ T4301] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.213: bg 0: block 465: padding at end of block bitmap is not set [ 46.801677][ T4301] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 117 [ 46.808094][ T4338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.815632][ T4301] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.815632][ T4301] [ 47.029207][ T4301] syz.2.213 (4301) used greatest stack depth: 8792 bytes left [ 47.093212][ T3301] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 47.106217][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.137501][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.333009][ T4397] netlink: 24 bytes leftover after parsing attributes in process `syz.5.231'. [ 47.528555][ T4410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.231'. [ 47.985540][ T4430] netlink: 'syz.5.236': attribute type 1 has an invalid length. [ 47.994750][ T4428] geneve2: entered promiscuous mode [ 48.032458][ T4430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.128990][ T4435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.185273][ T3381] Process accounting resumed [ 48.198555][ T4435] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 48.226153][ T4447] loop0: detected capacity change from 0 to 512 [ 48.244155][ T4447] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.249256][ T4435] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 48.268990][ T4447] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.311530][ T4447] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.312855][ T4430] gretap1: entered promiscuous mode [ 48.364184][ T4447] EXT4-fs (loop0): 1 truncate cleaned up [ 48.372189][ T4430] bond1: (slave gretap1): making interface the new active one [ 48.395798][ T4447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.435963][ T4430] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 48.495171][ T227] IPVS: starting estimator thread 0... [ 48.577146][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.599020][ T4460] IPVS: using max 2064 ests per chain, 103200 per kthread [ 48.843991][ T4502] loop6: detected capacity change from 0 to 512 [ 48.865085][ T4502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.937040][ T3663] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.978507][ T4514] loop3: detected capacity change from 0 to 1024 [ 49.000869][ T4514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.016885][ T4514] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.083240][ T30] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 6) [ 49.151463][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 49.192680][ T4526] loop5: detected capacity change from 0 to 512 [ 49.199324][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.199324][ T30] [ 49.224668][ T4526] EXT4-fs: Ignoring removed orlov option [ 49.236444][ T30] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 49.254823][ T4526] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 49.268196][ T4526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 49.277055][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 49.283970][ T4526] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.256: corrupted in-inode xattr: e_value size too large [ 49.289522][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.289522][ T30] [ 49.320651][ T4526] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.321055][ T4526] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.256: couldn't read orphan inode 15 (err -117) [ 49.330622][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 49.330648][ C0] EXT4-fs (loop5): initial error at time 1779969558: ext4_iget_extra_inode:5128: inode 15 [ 49.330702][ C0] EXT4-fs (loop5): last error at time 1779969558: ext4_iget_extra_inode:5128: inode 15 [ 49.369233][ T4526] loop5: lost filesystem error report for type 5 error -117 [ 49.371070][ T4526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.475502][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.533877][ T4562] tipc: Started in network mode [ 49.544949][ T4562] tipc: Node identity 7f000001, cluster identity 4711 [ 49.564669][ T4562] tipc: Enabled bearer , priority 10 [ 49.589954][ T4562] netlink: 104 bytes leftover after parsing attributes in process `syz.5.261'. [ 49.615645][ T4562] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 49.624665][ T4562] tipc: Enabled bearer , priority 10 [ 49.790449][ T4514] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.253: bg 0: block 112: padding at end of block bitmap is not set [ 49.818454][ T4514] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 49.841899][ T4514] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.841899][ T4514] [ 49.865362][ T4514] EXT4-fs (loop3): Total free blocks count 0 [ 49.882009][ T4514] EXT4-fs (loop3): Free/Dirty block details [ 49.898733][ T4514] EXT4-fs (loop3): free_blocks=0 [ 50.037945][ T3304] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 50.233451][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 50.280814][ T4571] hsr_slave_1 (unregistering): left promiscuous mode [ 50.503866][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 50.503881][ T28] audit: type=1400 audit(1779969559.836:626): avc: denied { ioctl } for pid=4579 comm="syz.3.269" path="socket:[8881]" dev="sockfs" ino=8881 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.582087][ T4585] loop3: detected capacity change from 0 to 128 [ 50.594838][ T4585] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 50.603747][ T4585] FAT-fs (loop3): Filesystem has been set read-only [ 50.619624][ T4585] loop3: Can't mount, would change RO state [ 50.620237][ T28] audit: type=1400 audit(1779969559.957:627): avc: denied { mounton } for pid=4584 comm="syz.3.271" path="/72/file1" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 50.673990][ T9] tipc: Node number set to 2130706433 [ 50.694096][ T28] audit: type=1400 audit(1779969560.037:628): avc: denied { create } for pid=4594 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.277425][ T4607] loop2: detected capacity change from 0 to 1024 [ 51.324194][ T4607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.398538][ T28] audit: type=1400 audit(1779969560.732:629): avc: denied { bind } for pid=4615 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.417757][ T4607] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.440424][ T28] audit: type=1400 audit(1779969560.732:630): avc: denied { write } for pid=4615 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.512143][ T28] audit: type=1400 audit(1779969560.853:631): avc: denied { write } for pid=4615 comm="syz.0.282" path="socket:[7962]" dev="sockfs" ino=7962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.574126][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.591941][ T28] audit: type=1400 audit(1779969560.934:632): avc: denied { append } for pid=4632 comm="syz.5.287" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.639483][ T4635] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.285'. [ 51.651082][ T28] audit: type=1400 audit(1779969560.974:633): avc: denied { create } for pid=4632 comm="syz.5.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 51.672427][ T4633] sg_write: data in/out 32768/136 bytes for SCSI command 0x0-- guessing data in; [ 51.672427][ T4633] program syz.5.287 not setting count and/or reply_len properly [ 51.714700][ T28] audit: type=1326 audit(1779969560.984:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4637 comm="syz.2.286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f857ce59 code=0x7ffc0000 [ 51.817598][ T28] audit: type=1326 audit(1779969560.984:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4637 comm="syz.2.286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f857ce59 code=0x7ffc0000 [ 52.376117][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.296'. [ 52.466238][ T4746] process 'syz.6.299' launched './file1' with NULL argv: empty string added [ 53.313474][ T4780] IPVS: Scheduler module ip_vs_ not found [ 53.705420][ T4786] loop2: detected capacity change from 0 to 8192 [ 53.781725][ T4791] loop5: detected capacity change from 0 to 512 [ 53.837096][ T4788] macsec1: entered promiscuous mode [ 53.902906][ T4791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.921733][ T4791] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.953555][ T4801] netlink: 'syz.3.321': attribute type 1 has an invalid length. [ 54.056868][ T4804] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.065488][ T4804] bond1: (slave bond2): making interface the new active one [ 54.082725][ T4804] bond1: (slave bond2): Enslaving as an active interface with an up link [ 54.108349][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.165069][ T4804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.321'. [ 54.180446][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.187651][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.330089][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.344639][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.452982][ T4803] team1: left promiscuous mode [ 54.462750][ T4803] team1: left allmulticast mode [ 54.480057][ T4803] team2: left promiscuous mode [ 54.485090][ T4803] team2: left allmulticast mode [ 54.517378][ T4801] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 54.540972][ T4804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.577212][ T2677] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.598853][ T2677] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.609037][ T2677] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.625492][ T2677] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.723192][ T4837] ref_ctr_offset mismatch. inode: 0x21 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 55.085893][ T4849] loop6: detected capacity change from 0 to 512 [ 55.092631][ T4844] loop2: detected capacity change from 0 to 256 [ 55.122546][ T4844] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.143578][ T4844] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.314103][ T4853] loop0: detected capacity change from 0 to 8192 [ 55.475624][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 55.475636][ T28] audit: type=1400 audit(1779969564.850:687): avc: denied { unlink } for pid=3301 comm="syz-executor" name="file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.779784][ T4875] loop2: detected capacity change from 0 to 512 [ 55.794030][ T4873] ref_ctr_offset mismatch. inode: 0xab offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 55.823037][ T4869] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.830217][ T4869] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.857184][ T4880] loop3: detected capacity change from 0 to 512 [ 55.870801][ T4875] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.905149][ T4880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.924672][ T4880] ext4 filesystem being mounted at /88/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.943828][ T4875] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.967759][ T4875] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 55.987896][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 55.991527][ T4875] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.341: corrupted inode contents [ 55.994386][ C0] EXT4-fs (loop2): initial error at time 1779969565: mb_free_blocks:2049: inode 12: block 14 [ 56.016261][ C0] EXT4-fs (loop2): last error at time 1779969565: mb_free_blocks:2049: inode 12: block 14 [ 56.026410][ T4875] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 56.028043][ T4875] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.341: mark_inode_dirty error [ 56.054289][ T4875] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 56.057396][ T4875] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.341: corrupted inode contents [ 56.079774][ T4875] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 56.082326][ T4875] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.341: mark_inode_dirty error [ 56.106203][ T4875] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 56.107243][ T4875] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.341: corrupted inode contents [ 56.160467][ T4875] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 56.160648][ T4875] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 56.199058][ T4875] loop2: lost filesystem error report for type 5 error -117 [ 56.199551][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.216672][ T4875] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.341: corrupted inode contents [ 56.227574][ T4869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.240673][ T4875] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 56.240886][ T4875] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.341: mark_inode_dirty error [ 56.261713][ T4869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.264656][ T4898] loop0: detected capacity change from 0 to 128 [ 56.276723][ T4875] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 56.276928][ T4875] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 56.339074][ T4875] loop2: lost filesystem error report for type 5 error -117 [ 56.339368][ T4875] EXT4-fs (loop2): 1 truncate cleaned up [ 56.354530][ T4723] Quota error (device loop2): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 56.374381][ T4898] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.388531][ T4723] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:15: Failed to release dquot type 1 [ 56.402602][ T4898] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.405349][ T4723] loop2: lost filesystem error report for type 5 error -5 [ 56.453524][ T4875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.477173][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.486632][ T4905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.351'. [ 56.549331][ T4908] loop3: detected capacity change from 0 to 512 [ 56.561397][ T4908] EXT4-fs: Ignoring removed oldalloc option [ 56.589347][ T4908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.605032][ T4869] gretap1: left promiscuous mode [ 56.611561][ T4908] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.627236][ T4883] 6: renamed from wg2 (while UP) [ 56.640943][ T4908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.351'. [ 56.677013][ T4723] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.687715][ T4723] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.696890][ T2677] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.697514][ T28] audit: type=1400 audit(1779969566.068:688): avc: denied { write } for pid=4913 comm="syz.5.354" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.726555][ T28] audit: type=1400 audit(1779969566.088:689): avc: denied { read } for pid=4913 comm="syz.5.354" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.729481][ T2677] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.758782][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.761717][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.354'. [ 56.802277][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.839134][ T4922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.356'. [ 56.866033][ T4922] loop3: detected capacity change from 0 to 128 [ 56.873922][ T4922] FAT-fs (loop3): bogus number of FAT structure [ 56.885021][ T4922] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 56.897428][ T4922] FAT-fs (loop3): Can't find a valid FAT filesystem [ 56.948623][ T28] audit: type=1326 audit(1779969566.329:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.0.359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a04bace59 code=0x7ffc0000 [ 56.979508][ T28] audit: type=1326 audit(1779969566.329:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.0.359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a04bace59 code=0x7ffc0000 [ 57.008804][ T28] audit: type=1326 audit(1779969566.329:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.0.359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a04bace59 code=0x7ffc0000 [ 57.049866][ T28] audit: type=1326 audit(1779969566.329:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.0.359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a04bace59 code=0x7ffc0000 [ 57.106896][ T4936] xt_hashlimit: size too large, truncated to 1048576 [ 57.125235][ T28] audit: type=1326 audit(1779969566.329:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.0.359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6a04bace59 code=0x7ffc0000 [ 57.198051][ T28] audit: type=1326 audit(1779969566.329:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.0.359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a04bace59 code=0x7ffc0000 [ 57.239459][ T4934] loop6: detected capacity change from 0 to 512 [ 57.287896][ T4934] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 57.298768][ T4934] EXT4-fs (loop6): 1 truncate cleaned up [ 57.305613][ T4934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.325081][ T4934] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.362: bg 0: block 465: padding at end of block bitmap is not set [ 57.340520][ T4934] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 117 [ 57.363881][ T4934] EXT4-fs (loop6): This should not happen!! Data will be lost [ 57.363881][ T4934] [ 57.406397][ T3663] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 57.430750][ T3663] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.430772][ T4950] 6: renamed from wg2 [ 57.481166][ T4944] loop3: detected capacity change from 0 to 256 [ 57.489807][ T4944] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.521949][ T4944] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.625733][ T4971] xt_hashlimit: size too large, truncated to 1048576 [ 57.686043][ T4975] loop0: detected capacity change from 0 to 512 [ 57.707670][ T4975] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 57.724004][ T4975] EXT4-fs (loop0): 1 truncate cleaned up [ 57.734523][ T4975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.861592][ T4975] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.378: bg 0: block 465: padding at end of block bitmap is not set [ 57.882181][ T4975] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 57.914281][ T4975] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.914281][ T4975] [ 57.929259][ T4989] 6: renamed from wg2 (while UP) [ 57.943079][ T4975] EXT4-fs (loop0): Total free blocks count 0 [ 57.951539][ T4975] EXT4-fs (loop0): Free/Dirty block details [ 57.961641][ T4975] EXT4-fs (loop0): free_blocks=0 [ 57.979815][ T4975] EXT4-fs (loop0): dirty_blocks=10 [ 57.986368][ T4975] EXT4-fs (loop0): Block reservation details [ 57.994213][ T4975] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 58.057825][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 58.087856][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.126674][ T5007] netlink: 4 bytes leftover after parsing attributes in process `syz.6.390'. [ 58.232642][ T5021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.241477][ T5021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.412339][ T5035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.400'. [ 58.436360][ T5035] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5035 comm=syz.0.400 [ 58.516600][ T5040] loop5: detected capacity change from 0 to 512 [ 58.533401][ T5040] EXT4-fs: Invalid want_extra_isize 1969 [ 58.537585][ T5044] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.404'. [ 58.586379][ T5049] loop0: detected capacity change from 0 to 512 [ 58.593106][ T5049] EXT4-fs: Ignoring removed bh option [ 58.598532][ T5049] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.622711][ T5049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.635717][ T5049] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.662204][ T5049] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.407: invalid fast symlink length 10 [ 58.917375][ T5060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.409'. [ 59.421144][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.805389][ T5096] netlink: 'syz.2.423': attribute type 10 has an invalid length. [ 59.813374][ T5096] netlink: 55 bytes leftover after parsing attributes in process `syz.2.423'. [ 59.858950][ T5101] netlink: 'syz.2.423': attribute type 1 has an invalid length. [ 59.894521][ T5103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'. [ 60.004092][ T5114] 6: renamed from wg2 [ 60.214983][ T5123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=5123 comm=syz.5.433 [ 60.229832][ T5125] loop0: detected capacity change from 0 to 512 [ 60.245752][ T5125] EXT4-fs: Ignoring removed orlov option [ 60.264841][ T5125] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 60.286369][ T5125] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 60.307533][ T5125] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.432: corrupted in-inode xattr: e_value size too large [ 60.321715][ T5125] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.330695][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 60.346397][ C1] EXT4-fs (loop0): initial error at time 1779969569: ext4_iget_extra_inode:5128: inode 15 [ 60.350745][ T5125] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.432: couldn't read orphan inode 15 (err -117) [ 60.356367][ C1] EXT4-fs (loop0): last error at time 1779969569: ext4_iget_extra_inode:5128: inode 15 [ 60.390133][ T5125] loop0: lost filesystem error report for type 5 error -117 [ 60.394333][ T5125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.446478][ T5136] loop6: detected capacity change from 0 to 512 [ 60.457385][ T5136] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 60.474488][ T5136] EXT4-fs (loop6): group descriptors corrupted! [ 60.539757][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 60.539772][ T28] audit: type=1400 audit(1779969569.932:759): avc: denied { getopt } for pid=5115 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.594177][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.824592][ T5155] 6: renamed from wg2 (while UP) [ 60.992435][ T28] audit: type=1107 audit(1779969570.394:760): pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 61.427366][ T5186] loop2: detected capacity change from 0 to 512 [ 61.459426][ T5183] macsec1: entered promiscuous mode [ 61.477784][ T5186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.508138][ T5186] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.778442][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.926027][ T28] audit: type=1107 audit(1779969571.340:761): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 61.956554][ T5200] Set syz1 is full, maxelem 6117 reached [ 62.023497][ T28] audit: type=1400 audit(1779969571.431:762): avc: denied { read } for pid=5207 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.126342][ T28] audit: type=1400 audit(1779969571.531:763): avc: denied { create } for pid=5218 comm="syz.6.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.271575][ T5213] loop2: detected capacity change from 0 to 8192 [ 62.337473][ T5213] loop2: p1 < > p2 p4 < p5 > [ 62.342546][ T5213] loop2: partition table partially beyond EOD, truncated [ 62.350491][ T5213] loop2: p1 start 134217728 is beyond EOD, truncated [ 62.357456][ T5213] loop2: p2 size 591360 extends beyond EOD, truncated [ 62.371883][ T5213] loop2: p5 size 591360 extends beyond EOD, truncated [ 62.536368][ T5231] loop2: detected capacity change from 0 to 512 [ 62.549736][ T5231] EXT4-fs: Ignoring removed orlov option [ 62.564403][ T5231] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 62.585663][ T5231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 62.604841][ T5231] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.474: corrupted in-inode xattr: e_value size too large [ 62.619550][ T5231] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.627085][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 62.642797][ C1] EXT4-fs (loop2): initial error at time 1779969572: ext4_iget_extra_inode:5128: inode 15 [ 62.645266][ T5231] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.474: couldn't read orphan inode 15 (err -117) [ 62.652723][ C1] EXT4-fs (loop2): last error at time 1779969572: ext4_iget_extra_inode:5128: inode 15 [ 62.730486][ T5231] loop2: lost filesystem error report for type 5 error -117 [ 62.732465][ T5231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.745432][ T5241] loop0: detected capacity change from 0 to 1024 [ 62.792815][ T28] audit: type=1400 audit(1779969572.205:764): avc: denied { write } for pid=5230 comm="syz.2.474" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.822485][ T5241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.836713][ T5241] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.861181][ T28] audit: type=1400 audit(1779969572.275:765): avc: denied { write } for pid=5240 comm="syz.0.477" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.888247][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.938534][ T4717] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm kworker/u8:12: lblock 0 mapped to illegal pblock 0 (length 6) [ 62.965605][ T4717] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 62.978853][ T4717] EXT4-fs (loop0): This should not happen!! Data will be lost [ 62.978853][ T4717] [ 62.991920][ T4717] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 63.026704][ T4717] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 63.039479][ T4717] EXT4-fs (loop0): This should not happen!! Data will be lost [ 63.039479][ T4717] [ 63.437681][ T5261] netlink: 24 bytes leftover after parsing attributes in process `syz.6.482'. [ 63.476487][ T5261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5261 comm=syz.6.482 [ 63.626978][ T28] audit: type=1400 audit(1779969573.050:766): avc: denied { ioctl } for pid=5264 comm="syz.6.484" path="socket:[10067]" dev="sockfs" ino=10067 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.662644][ T5241] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.477: bg 0: block 112: padding at end of block bitmap is not set [ 63.717819][ T5241] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 63.744462][ T28] audit: type=1400 audit(1779969573.050:767): avc: denied { bind } for pid=5266 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.771119][ T5241] EXT4-fs (loop0): This should not happen!! Data will be lost [ 63.771119][ T5241] [ 63.785694][ T5241] EXT4-fs (loop0): Total free blocks count 0 [ 63.801740][ T5241] EXT4-fs (loop0): Free/Dirty block details [ 63.808880][ T5241] EXT4-fs (loop0): free_blocks=0 [ 63.929220][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 64.089833][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.494'. [ 64.116873][ T28] audit: type=1400 audit(1779969573.533:768): avc: denied { watch watch_reads } for pid=5285 comm="syz.2.493" path="/eth0" dev="mqueue" ino=10100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.714543][ T5304] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 64.728242][ T5304] bond1 (unregistering): Released all slaves [ 64.759508][ T5306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.499'. [ 64.858174][ T5304] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 64.865652][ T5308] loop5: detected capacity change from 0 to 8192 [ 64.872665][ T5304] netlink: 'syz.2.499': attribute type 30 has an invalid length. [ 64.964499][ T5313] netlink: 'syz.6.501': attribute type 7 has an invalid length. [ 64.978902][ T5313] netlink: 'syz.6.501': attribute type 7 has an invalid length. [ 64.981170][ T4721] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.996053][ T4721] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.005089][ T4721] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.050455][ T4721] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.146135][ T5320] loop5: detected capacity change from 0 to 512 [ 65.204994][ T5320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.232086][ T5320] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.309925][ T5320] EXT4-fs error (device loop5): ext4_empty_dir:3085: inode #12: comm syz.5.504: Directory hole found for htree leaf block 0 [ 65.326177][ T5320] EXT4-fs (loop5): Remounting filesystem read-only [ 65.356103][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.365291][ T2677] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.434420][ T5343] netlink: 'syz.5.512': attribute type 1 has an invalid length. [ 65.448459][ T5343] bond2: entered promiscuous mode [ 65.454012][ T5343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.479194][ T5343] bond2: (slave bridge1): making interface the new active one [ 65.493998][ T5343] bridge1: entered promiscuous mode [ 65.508374][ T5343] bridge1: left promiscuous mode [ 65.743817][ T5351] mmap: syz.5.515 (5351) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.363812][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 66.363827][ T28] audit: type=1400 audit(1779969575.795:774): avc: denied { bind } for pid=5366 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.396168][ T28] audit: type=1400 audit(1779969575.795:775): avc: denied { node_bind } for pid=5366 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 66.490887][ T5371] netlink: 28 bytes leftover after parsing attributes in process `syz.5.523'. [ 66.502712][ T5373] loop2: detected capacity change from 0 to 256 [ 66.549982][ T5373] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.604850][ T28] audit: type=1400 audit(1779969576.027:776): avc: denied { getopt } for pid=5374 comm="syz.6.525" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.606689][ T9] IPVS: starting estimator thread 0... [ 66.614179][ T5381] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.528'. [ 66.733240][ T5379] IPVS: using max 2448 ests per chain, 122400 per kthread [ 66.753354][ T5387] netlink: 20 bytes leftover after parsing attributes in process `syz.5.530'. [ 66.756031][ T5387] ip6gre1: entered promiscuous mode [ 66.756051][ T5387] ip6gre1: entered allmulticast mode [ 66.781331][ T5387] netlink: 'syz.5.530': attribute type 6 has an invalid length. [ 66.781349][ T5387] netlink: 72 bytes leftover after parsing attributes in process `syz.5.530'. [ 66.823153][ T5394] loop3: detected capacity change from 0 to 512 [ 66.823592][ T5394] EXT4-fs: Ignoring removed bh option [ 66.823614][ T5394] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.836488][ T5391] loop2: detected capacity change from 0 to 512 [ 66.839284][ T5394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.839409][ T5394] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.860340][ T5394] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.534: invalid fast symlink length 10 [ 66.860768][ T28] audit: type=1400 audit(1779969576.298:777): avc: denied { write } for pid=5393 comm="syz.3.534" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.871077][ T5391] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.882263][ T5391] EXT4-fs (loop2): 1 truncate cleaned up [ 66.890306][ T5391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.041385][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.073606][ T9] IPVS: starting estimator thread 0... [ 67.105134][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.261406][ T5404] IPVS: using max 2352 ests per chain, 117600 per kthread [ 67.355583][ T5413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.538'. [ 67.507823][ T5417] syzkaller0: entered promiscuous mode [ 67.507969][ T5417] syzkaller0: entered allmulticast mode [ 67.767658][ T5430] loop6: detected capacity change from 0 to 512 [ 67.776059][ T5430] EXT4-fs: Ignoring removed bh option [ 67.781937][ T5430] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.852079][ T5430] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.883085][ T5430] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.899167][ T28] audit: type=1400 audit(1779969577.344:778): avc: denied { write } for pid=5427 comm="syz.6.546" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.899624][ T5430] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.546: invalid fast symlink length 10 [ 68.004380][ T3663] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.162614][ T28] audit: type=1400 audit(1779969577.605:779): avc: denied { bind } for pid=5450 comm="syz.5.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 68.183123][ T28] audit: type=1400 audit(1779969577.635:780): avc: denied { execute } for pid=5447 comm="syz.2.552" path="/memory.swap.current" dev="ramfs" ino=11422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 68.266168][ T3417] IPVS: starting estimator thread 0... [ 68.377403][ T5458] IPVS: using max 2448 ests per chain, 122400 per kthread [ 68.578781][ T5472] loop3: detected capacity change from 0 to 512 [ 68.607939][ T5472] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.622279][ T5468] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 68.624910][ T5472] EXT4-fs (loop3): 1 truncate cleaned up [ 68.648940][ T5472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.686903][ T4899] IPVS: starting estimator thread 0... [ 68.722783][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.773133][ T5478] IPVS: using max 2400 ests per chain, 120000 per kthread [ 68.837467][ T28] audit: type=1400 audit(1779969578.289:781): avc: denied { cpu } for pid=5488 comm="syz.5.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.873595][ T5489] netlink: 'syz.5.568': attribute type 10 has an invalid length. [ 68.902108][ T5489] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 68.921990][ T5489] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.942832][ T5489] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 68.986053][ T5483] loop0: detected capacity change from 0 to 4096 [ 69.027637][ T5483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.055895][ T28] audit: type=1400 audit(1779969578.500:782): avc: denied { write } for pid=5480 comm="syz.0.565" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.134751][ T5483] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz.0.565: invalid fast symlink length 131109 [ 69.155180][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.195091][ T28] audit: type=1400 audit(1779969578.640:783): avc: denied { getopt } for pid=5508 comm="syz.0.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.393400][ T5497] loop6: detected capacity change from 0 to 8192 [ 69.452038][ T5497] loop6: p1 < > p2 p4 < p5 > [ 69.458241][ T5497] loop6: partition table partially beyond EOD, truncated [ 69.469164][ T5497] loop6: p1 start 134217728 is beyond EOD, truncated [ 69.476636][ T5497] loop6: p2 size 591360 extends beyond EOD, truncated [ 69.487056][ T5497] loop6: p5 size 591360 extends beyond EOD, truncated [ 69.541647][ T5518] SELinux: failed to load policy [ 69.557805][ T5520] loop6: detected capacity change from 0 to 512 [ 69.564995][ T5520] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 69.574366][ T5520] EXT4-fs (loop6): failed to open journal device unknown-block(8,0) -16 [ 69.594488][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 69.596106][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 69.613380][ T4045] udevd[4045]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 69.709693][ T5534] tipc: Failed to remove unknown binding: 66,0,0/0:2757156552/2757156553 [ 69.719707][ T5534] tipc: Failed to remove unknown binding: 66,0,0/0:2757156552/2757156553 [ 69.824236][ T5543] macsec1: entered promiscuous mode [ 69.846464][ T5546] loop3: detected capacity change from 0 to 512 [ 69.896331][ T5546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.918494][ T5546] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.049314][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.152388][ T5572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.159691][ T5572] IPv6: NLM_F_CREATE should be set when creating new route [ 70.222804][ T5572] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.229963][ T5572] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.308415][ T5572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.319293][ T5572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.359962][ T2076] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.376111][ T2076] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.394352][ T2076] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.427113][ T2076] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.551750][ T5585] macsec1: entered promiscuous mode [ 70.562383][ T5589] loop0: detected capacity change from 0 to 512 [ 70.608463][ T5589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.621386][ T5589] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.669460][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.691070][ T5595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.603'. [ 70.789443][ T5603] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 70.789713][ T5603] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.869625][ T3620] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.063152][ T5620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'. [ 71.210041][ T5625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.224854][ T5625] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.279483][ T5616] EXT4-fs error (device loop3): ext4_empty_dir:3085: inode #12: comm syz.3.610: Directory hole found for htree leaf block 0 [ 71.655414][ T5616] EXT4-fs (loop3): Remounting filesystem read-only [ 71.685766][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.695109][ T2076] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.705857][ T2076] __quota_error: 10 callbacks suppressed [ 71.705873][ T2076] Quota error (device loop3): write_blk: dquota write failed [ 71.718991][ T2076] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 74.242458][ T5681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.630'. [ 74.307327][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.630'. [ 74.367520][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 74.416772][ T5695] set_capacity_and_notify: 2 callbacks suppressed [ 74.416801][ T5695] loop6: detected capacity change from 0 to 512 [ 74.463538][ T5695] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 74.480019][ T28] audit: type=1400 audit(1779969839.947:794): avc: denied { mounton } for pid=5703 comm="syz.2.640" path="/file0" dev="ramfs" ino=12750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 74.502257][ T5695] EXT4-fs (loop6): orphan cleanup on readonly fs [ 74.509428][ T5695] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 74.524668][ T5695] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 74.532323][ T5695] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #16: comm syz.6.636: corrupted xattr block 31: invalid header [ 74.552602][ T5695] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.552932][ T5695] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 74.562218][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 74.562250][ C0] EXT4-fs (loop6): initial error at time 1779969840: ext4_xattr_delete_inode:2972: inode 16 [ 74.562333][ C0] EXT4-fs (loop6): last error at time 1779969840: ext4_xattr_delete_inode:2972: inode 16 [ 74.577267][ T28] audit: type=1400 audit(1779969839.977:795): avc: denied { getopt } for pid=5700 comm="syz.5.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.582842][ T5695] EXT4-fs (loop6): 1 orphan inode deleted [ 74.636271][ T5713] loop5: detected capacity change from 0 to 128 [ 74.645680][ T5695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.705229][ T5713] netlink: 'syz.5.644': attribute type 21 has an invalid length. [ 74.713555][ T5713] netlink: 132 bytes leftover after parsing attributes in process `syz.5.644'. [ 74.731836][ T3663] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.735763][ T5716] loop2: detected capacity change from 0 to 512 [ 74.789964][ T5720] netlink: 180 bytes leftover after parsing attributes in process `syz.6.646'. [ 74.797614][ T5716] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.645: corrupted in-inode xattr: invalid ea_ino [ 74.818125][ T5716] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.819214][ T5716] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.645: couldn't read orphan inode 15 (err -117) [ 74.820266][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 74.831547][ T5716] loop2: lost filesystem error report for type 5 error -117 [ 74.840250][ C0] EXT4-fs (loop2): initial error at time 1779969840: ext4_iget_extra_inode:5128: inode 15 [ 74.840285][ C0] EXT4-fs (loop2): last error at time 1779969840: ext4_iget_extra_inode:5128: inode 15 [ 74.881538][ T5716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.922232][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.968968][ T5731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.650'. [ 74.996905][ T5731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 75.085903][ T5738] loop6: detected capacity change from 0 to 4096 [ 75.119769][ T5738] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.141058][ T28] audit: type=1400 audit(1779969840.617:796): avc: denied { write } for pid=5737 comm="syz.6.654" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.185963][ T5738] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz.6.654: invalid fast symlink length 131109 [ 75.208226][ T3663] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.249572][ T5746] netlink: 44 bytes leftover after parsing attributes in process `syz.2.657'. [ 75.308244][ T5750] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 75.308382][ T28] audit: type=1400 audit(1779969840.777:797): avc: denied { mounton } for pid=5749 comm="syz.0.659" path="/140/file0" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 75.345270][ T5748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.371973][ T5748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.493653][ T28] audit: type=1400 audit(1779969840.967:798): avc: denied { read write } for pid=5762 comm="syz.0.664" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.518224][ T4817] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 75.530385][ T28] audit: type=1400 audit(1779969840.967:799): avc: denied { open } for pid=5762 comm="syz.0.664" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.530667][ T4817] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.613817][ T5764] fido_id[5764]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.660658][ T5767] syzkaller0: entered promiscuous mode [ 75.666307][ T5767] syzkaller0: entered allmulticast mode [ 75.822961][ T5773] capability: warning: `syz.0.677' uses deprecated v2 capabilities in a way that may be insecure [ 75.923116][ T5772] loop5: detected capacity change from 0 to 4096 [ 75.962335][ T5772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.012008][ T28] audit: type=1400 audit(1779969841.477:800): avc: denied { write } for pid=5771 comm="syz.5.667" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.050137][ T5772] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz.5.667: invalid fast symlink length 131109 [ 76.081279][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.852351][ T5789] macsec1: entered promiscuous mode [ 76.882646][ T5797] loop6: detected capacity change from 0 to 512 [ 76.915872][ T5797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.939147][ T5797] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.969112][ T5803] __nla_validate_parse: 1 callbacks suppressed [ 76.969139][ T5803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.674'. [ 77.043954][ T3663] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.065704][ T5805] SELinux: security_context_str_to_sid (}ob?3blG;oxodigU) failed with errno=-22 [ 77.111757][ T5814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.128672][ T5814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.155786][ T5814] netlink: 100 bytes leftover after parsing attributes in process `syz.5.681'. [ 77.262699][ T5825] tipc: Failed to remove unknown binding: 66,0,0/0:3271414991/3271414992 [ 77.262852][ T5825] tipc: Failed to remove unknown binding: 66,0,0/0:3271414991/3271414992 [ 77.443012][ T5829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 77.512037][ T5832] loop0: detected capacity change from 0 to 512 [ 77.535865][ T5832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.555463][ T5832] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.581487][ T28] audit: type=1400 audit(1779969843.047:801): avc: denied { write } for pid=5826 comm="syz.0.689" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.607313][ T5827] EXT4-fs error (device loop0): ext4_empty_dir:3085: inode #12: comm syz.0.689: Directory hole found for htree leaf block 0 [ 77.620777][ T28] audit: type=1400 audit(1779969843.057:802): avc: denied { write } for pid=5826 comm="syz.0.689" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.620820][ T28] audit: type=1400 audit(1779969843.077:803): avc: denied { write } for pid=5826 comm="syz.0.689" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.620853][ T28] audit: type=1326 audit(1779969843.077:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54356cce59 code=0x7ffc0000 [ 77.620878][ T28] audit: type=1326 audit(1779969843.077:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54356cce59 code=0x7ffc0000 [ 77.620926][ T28] audit: type=1326 audit(1779969843.077:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54356cce59 code=0x7ffc0000 [ 77.620950][ T28] audit: type=1326 audit(1779969843.077:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54356cce59 code=0x7ffc0000 [ 77.620980][ T28] audit: type=1326 audit(1779969843.077:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54356cce59 code=0x7ffc0000 [ 77.621070][ T28] audit: type=1326 audit(1779969843.077:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f54356cce59 code=0x7ffc0000 [ 77.621094][ T28] audit: type=1326 audit(1779969843.077:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54356cce59 code=0x7ffc0000 [ 77.702796][ T5840] sch_tbf: burst 18 is lower than device lo mtu (65550) ! [ 77.776604][ T5827] EXT4-fs (loop0): Remounting filesystem read-only [ 77.897731][ T5847] netlink: 'syz.3.698': attribute type 11 has an invalid length. [ 77.925350][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.934988][ T4723] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.082996][ T5864] loop5: detected capacity change from 0 to 512 [ 78.086146][ T5864] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 78.086494][ T5864] EXT4-fs (loop5): orphan cleanup on readonly fs [ 78.086855][ T5864] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 78.124865][ T5864] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 78.125506][ T5864] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #16: comm syz.5.705: corrupted xattr block 31: invalid header [ 78.125624][ T5864] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 78.125890][ T5864] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 78.125987][ T5864] EXT4-fs (loop5): 1 orphan inode deleted [ 78.127169][ T5864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.235925][ T5872] loop6: detected capacity change from 0 to 512 [ 78.258788][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.262794][ T5872] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.262878][ T5872] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.300978][ T3663] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.456983][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.714'. [ 78.476649][ T5890] bond1: entered promiscuous mode [ 78.482112][ T5890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.499018][ T5890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.517323][ T5890] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 78.529528][ T5890] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 78.552690][ T5894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.559933][ T5894] IPv6: NLM_F_CREATE should be set when creating new route [ 78.567256][ T5894] IPv6: NLM_F_CREATE should be set when creating new route [ 78.576505][ T5894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.593409][ T5894] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 78.608881][ T5894] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 78.619640][ T5881] loop5: detected capacity change from 0 to 8192 [ 78.661096][ T5881] loop5: p1 < > p2 p4 < p5 > [ 78.665972][ T5881] loop5: partition table partially beyond EOD, truncated [ 78.673927][ T5881] loop5: p1 start 134217728 is beyond EOD, truncated [ 78.681704][ T5881] loop5: p2 size 591360 extends beyond EOD, truncated [ 78.689972][ T5881] loop5: p5 size 591360 extends beyond EOD, truncated [ 78.754194][ T5903] EXT4-fs: Ignoring removed bh option [ 78.778663][ T5907] netlink: 'syz.5.721': attribute type 1 has an invalid length. [ 78.791891][ T5903] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 78.834852][ T5903] EXT4-fs (loop3): 1 truncate cleaned up [ 78.855413][ T5906] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 78.874396][ T5903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.889793][ T5907] 8021q: adding VLAN 0 to HW filter on device bond3 [ 78.898620][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 78.900166][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 78.912755][ T4045] udevd[4045]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 78.931453][ T5906] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.942200][ T5906] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 78.956704][ T5911] macvlan2: entered promiscuous mode [ 78.962351][ T5911] macvlan2: entered allmulticast mode [ 78.968744][ T5911] bond3: entered promiscuous mode [ 78.974803][ T5911] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 78.979800][ T5903] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.718: bg 0: block 465: padding at end of block bitmap is not set [ 78.996716][ T5906] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 79.003912][ T5911] bond3: left promiscuous mode [ 79.004065][ T5903] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 79.023965][ T5906] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #16: comm syz.0.720: corrupted xattr block 31: invalid header [ 79.038679][ T5903] EXT4-fs (loop3): This should not happen!! Data will be lost [ 79.038679][ T5903] [ 79.048665][ T5906] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 79.049006][ T5906] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 79.058317][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 79.058427][ C1] EXT4-fs (loop0): initial error at time 1779969844: ext4_xattr_delete_inode:2972: inode 16 [ 79.058527][ C1] EXT4-fs (loop0): last error at time 1779969844: ext4_xattr_delete_inode:2972: inode 16 [ 79.094700][ T5906] EXT4-fs (loop0): 1 orphan inode deleted [ 79.101365][ T5906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.139541][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.155314][ T40] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 79.170372][ T40] EXT4-fs (loop3): This should not happen!! Data will be lost [ 79.170372][ T40] [ 79.191507][ T40] EXT4-fs (loop3): Total free blocks count 0 [ 79.204350][ T40] EXT4-fs (loop3): Free/Dirty block details [ 79.211123][ T5923] tipc: Started in network mode [ 79.221810][ T40] EXT4-fs (loop3): free_blocks=0 [ 79.222929][ T5923] tipc: Node identity 5e32709d21ac, cluster identity 4711 [ 79.232972][ T40] EXT4-fs (loop3): dirty_blocks=1 [ 79.236800][ T5923] tipc: Enabled bearer , priority 0 [ 79.255508][ T40] EXT4-fs (loop3): Block reservation details [ 79.271112][ T3304] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 79.323873][ T5927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.339222][ T5923] syzkaller0: entered promiscuous mode [ 79.346704][ T5923] syzkaller0: entered allmulticast mode [ 79.357065][ T5923] tipc: Resetting bearer [ 79.377045][ T5927] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.413127][ T5922] tipc: Resetting bearer [ 79.431175][ T5927] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 79.468780][ T5922] tipc: Disabling bearer [ 79.484822][ T5927] EXT4-fs (loop3): This should not happen!! Data will be lost [ 79.484822][ T5927] [ 79.518245][ T5927] EXT4-fs (loop3): Total free blocks count 0 [ 79.518562][ T5936] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 79.539671][ T5927] EXT4-fs (loop3): Free/Dirty block details [ 79.564271][ T5927] EXT4-fs (loop3): free_blocks=2415919104 [ 79.575129][ T5936] EXT4-fs (loop3): This should not happen!! Data will be lost [ 79.575129][ T5936] [ 79.596828][ T5936] EXT4-fs (loop3): Total free blocks count 0 [ 79.606283][ T5927] EXT4-fs (loop3): dirty_blocks=16 [ 79.643682][ T4900] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.651709][ T4900] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.684005][ T3304] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 79.842871][ T5951] syzkaller0: entered promiscuous mode [ 79.861893][ T5951] syzkaller0: entered allmulticast mode [ 80.006058][ T5948] set_capacity_and_notify: 3 callbacks suppressed [ 80.006079][ T5948] loop3: detected capacity change from 0 to 512 [ 80.028197][ T5955] loop2: detected capacity change from 0 to 512 [ 80.094254][ T5955] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 80.129702][ T5955] EXT4-fs (loop2): orphan cleanup on readonly fs [ 80.147611][ T5948] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 80.162511][ T5955] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 80.192080][ T5948] EXT4-fs (loop3): 1 truncate cleaned up [ 80.204723][ T5948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.210578][ T5955] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 80.260756][ T5955] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #16: comm syz.2.735: corrupted xattr block 31: invalid header [ 80.288854][ T5955] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 80.289254][ T5955] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 80.298627][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 80.298678][ C0] EXT4-fs (loop2): initial error at time 1779970101: ext4_xattr_delete_inode:2972: inode 16 [ 80.298726][ C0] EXT4-fs (loop2): last error at time 1779970101: ext4_xattr_delete_inode:2972: inode 16 [ 80.338079][ T5955] EXT4-fs (loop2): 1 orphan inode deleted [ 80.353777][ T5955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.366542][ T5948] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.732: bg 0: block 465: padding at end of block bitmap is not set [ 80.395629][ T5948] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 117 [ 80.424121][ T5948] EXT4-fs (loop3): This should not happen!! Data will be lost [ 80.424121][ T5948] [ 80.439843][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.473482][ T4900] kernel read not supported for file bpf-prog (pid: 4900 comm: kworker/1:18) [ 80.504029][ T3304] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 80.524252][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.693276][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.744'. [ 81.172776][ T5990] netlink: 'syz.2.747': attribute type 10 has an invalid length. [ 81.182292][ T5990] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.747'. [ 81.740145][ T6003] loop5: detected capacity change from 0 to 512 [ 81.803320][ T6003] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.754: corrupted in-inode xattr: invalid ea_ino [ 81.820964][ T6003] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.822864][ T6003] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.754: couldn't read orphan inode 15 (err -117) [ 81.832484][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 81.832655][ C1] EXT4-fs (loop5): initial error at time 1779970359: ext4_iget_extra_inode:5128: inode 15 [ 81.833306][ C1] EXT4-fs (loop5): last error at time 1779970359: ext4_iget_extra_inode:5128: inode 15 [ 81.907733][ T6003] loop5: lost filesystem error report for type 5 error -117 [ 81.912256][ T6003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.999980][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.093286][ T6017] netlink: 'syz.5.759': attribute type 10 has an invalid length. [ 82.105325][ T6001] loop3: detected capacity change from 0 to 8192 [ 82.121133][ T6017] netlink: 16154 bytes leftover after parsing attributes in process `syz.5.759'. [ 82.162950][ T6001] loop3: p1 < > p2 p4 < p5 > [ 82.171100][ T6001] loop3: partition table partially beyond EOD, truncated [ 82.184338][ T6001] loop3: p1 start 134217728 is beyond EOD, truncated [ 82.191853][ T6001] loop3: p2 size 591360 extends beyond EOD, truncated [ 82.201962][ T6001] loop3: p5 size 591360 extends beyond EOD, truncated [ 82.304304][ T4045] udevd[4045]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 82.314769][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 82.324827][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 82.336171][ T6025] loop3: detected capacity change from 0 to 512 [ 82.391250][ T6025] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 82.402631][ T6025] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.435400][ T6025] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 82.461423][ T6025] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 82.489063][ T6025] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #16: comm syz.3.761: corrupted xattr block 31: invalid header [ 82.510586][ T6025] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.520254][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 82.535963][ C1] EXT4-fs (loop3): initial error at time 1779970359: ext4_xattr_delete_inode:2972: inode 16 [ 82.546056][ C1] EXT4-fs (loop3): last error at time 1779970359: ext4_xattr_delete_inode:2972: inode 16 [ 82.564974][ T6025] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 82.932947][ T6025] EXT4-fs (loop3): 1 orphan inode deleted [ 82.950883][ T6025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.981532][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 82.981545][ T28] audit: type=1400 audit(1779970360.459:853): avc: denied { create } for pid=6034 comm="syz.5.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 83.041640][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.063056][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz.5.768'. [ 83.118594][ T6039] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6039 comm=syz.5.768 [ 83.286773][ T6047] raw_sendmsg: syz.5.781 forgot to set AF_INET. Fix it! [ 83.414534][ T6049] loop3: detected capacity change from 0 to 512 [ 83.465719][ T6049] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.770: corrupted in-inode xattr: invalid ea_ino [ 83.504696][ T6049] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.515295][ T6049] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.770: couldn't read orphan inode 15 (err -117) [ 83.524592][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 83.524850][ C1] EXT4-fs (loop3): initial error at time 1779970360: ext4_iget_extra_inode:5128: inode 15 [ 83.525731][ C1] EXT4-fs (loop3): last error at time 1779970360: ext4_iget_extra_inode:5128: inode 15 [ 83.574970][ T6049] loop3: lost filesystem error report for type 5 error -117 [ 83.603559][ T6049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.649245][ T6070] loop6: detected capacity change from 0 to 512 [ 83.692107][ T6066] loop0: detected capacity change from 0 to 512 [ 83.709943][ T6070] FAT-fs (loop6): FAT read failed (blocknr 128) [ 83.726531][ T6066] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 83.726749][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.748557][ T6066] EXT4-fs (loop0): 1 truncate cleaned up [ 83.779762][ T6066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.871836][ T28] audit: type=1400 audit(1779970361.339:854): avc: denied { write } for pid=6063 comm="syz.0.777" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.935641][ T6089] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.777: bg 0: block 465: padding at end of block bitmap is not set [ 83.945524][ T28] audit: type=1400 audit(1779970361.349:855): avc: denied { write } for pid=6063 comm="syz.0.777" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.972652][ T6089] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 117 [ 83.985533][ T6089] EXT4-fs (loop0): This should not happen!! Data will be lost [ 83.985533][ T6089] [ 84.419419][ T28] audit: type=1400 audit(1779970361.889:856): avc: denied { ioctl } for pid=6092 comm="syz.3.786" path="socket:[13599]" dev="sockfs" ino=13599 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.471697][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 84.480622][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 84.484029][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.492261][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 84.506955][ T6094] SELinux: security_context_str_to_sid (}ob?3blG;oxodigU) failed with errno=-22 [ 84.962457][ T6128] geneve2: left promiscuous mode [ 84.968886][ T6128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.296716][ T4900] IPVS: starting estimator thread 0... [ 85.296929][ T6130] IPVS: lc: FWM 3 0x00000003 - no destination available [ 85.400389][ T6131] IPVS: using max 2592 ests per chain, 129600 per kthread [ 85.570533][ T28] audit: type=1400 audit(1779970363.049:857): avc: denied { create } for pid=6135 comm="syz.0.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.694749][ T28] audit: type=1400 audit(1779970363.169:858): avc: denied { create } for pid=6135 comm="syz.0.810" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.695745][ T6139] loop6: detected capacity change from 0 to 512 [ 85.748117][ T28] audit: type=1400 audit(1779970363.189:859): avc: denied { write } for pid=6135 comm="syz.0.810" path="socket:[14405]" dev="sockfs" ino=14405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.776526][ T6139] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 85.795093][ T6139] EXT4-fs (loop6): 1 truncate cleaned up [ 85.818124][ T6139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.861341][ T28] audit: type=1400 audit(1779970363.329:860): avc: denied { write } for pid=6136 comm="syz.6.800" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.936216][ T28] audit: type=1400 audit(1779970363.339:861): avc: denied { write } for pid=6136 comm="syz.6.800" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.992967][ T6139] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.800: bg 0: block 465: padding at end of block bitmap is not set [ 86.005508][ T28] audit: type=1400 audit(1779970363.339:862): avc: denied { rename } for pid=6136 comm="syz.6.800" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.035713][ T6139] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 86.054743][ T6139] EXT4-fs (loop6): This should not happen!! Data will be lost [ 86.054743][ T6139] [ 86.068776][ T6139] EXT4-fs (loop6): Total free blocks count 0 [ 86.076504][ T6139] EXT4-fs (loop6): Free/Dirty block details [ 86.085988][ T6139] EXT4-fs (loop6): free_blocks=0 [ 86.092162][ T6139] EXT4-fs (loop6): dirty_blocks=10 [ 86.098118][ T6139] EXT4-fs (loop6): Block reservation details [ 86.106255][ T6139] EXT4-fs (loop6): i_reserved_data_blocks=10 [ 86.157849][ T3663] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 86.169683][ T3663] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.262186][ T4723] IPVS: stop unused estimator thread 0... [ 86.352475][ T6170] loop3: detected capacity change from 0 to 512 [ 86.362677][ T6170] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 86.372495][ T6170] EXT4-fs (loop3): orphan cleanup on readonly fs [ 86.379436][ T6170] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 86.397720][ T6170] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 86.407380][ T6170] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #16: comm syz.3.814: corrupted xattr block 31: invalid header [ 86.421557][ T6170] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 86.422226][ T6170] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 86.431651][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 86.431698][ C0] EXT4-fs (loop3): initial error at time 1779970363: ext4_xattr_delete_inode:2972: inode 16 [ 86.431780][ C0] EXT4-fs (loop3): last error at time 1779970363: ext4_xattr_delete_inode:2972: inode 16 [ 86.815693][ T6170] EXT4-fs (loop3): 1 orphan inode deleted [ 86.826755][ T6174] loop2: detected capacity change from 0 to 128 [ 86.838810][ T6170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.905402][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.908823][ T6174] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.938956][ T6174] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.025165][ T6183] loop0: detected capacity change from 0 to 1024 [ 87.122115][ T6183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.142952][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.302059][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.403245][ T6203] netlink: 'syz.0.824': attribute type 10 has an invalid length. [ 87.419548][ T6203] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.824'. [ 87.659388][ T6210] sch_tbf: burst 18 is lower than device lo mtu (65550) ! [ 87.734969][ T6212] loop3: detected capacity change from 0 to 512 [ 87.760706][ T6212] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 87.770690][ T6212] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.778634][ T6212] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 87.794459][ T6212] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 87.802340][ T6212] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #16: comm syz.3.828: corrupted xattr block 31: invalid header [ 87.819219][ T6212] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 87.819561][ T6212] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 87.828985][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 87.829019][ C1] EXT4-fs (loop3): initial error at time 1779970365: ext4_xattr_delete_inode:2972: inode 16 [ 87.829081][ C1] EXT4-fs (loop3): last error at time 1779970365: ext4_xattr_delete_inode:2972: inode 16 [ 87.866800][ T6212] EXT4-fs (loop3): 1 orphan inode deleted [ 87.873934][ T6212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.900482][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.329379][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 88.329394][ T28] audit: type=1400 audit(1779970365.799:873): avc: denied { write } for pid=6231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.395633][ T28] audit: type=1400 audit(1779970365.849:874): avc: denied { write } for pid=6248 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.475980][ T28] audit: type=1400 audit(1779970365.949:875): avc: denied { ioctl } for pid=6255 comm="syz.3.840" path="socket:[14592]" dev="sockfs" ino=14592 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.528156][ T28] audit: type=1400 audit(1779970365.979:876): avc: denied { write } for pid=6252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.587173][ T28] audit: type=1400 audit(1779970366.029:877): avc: denied { write } for pid=6268 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.652257][ T28] audit: type=1400 audit(1779970366.029:878): avc: denied { bind } for pid=6267 comm="syz.6.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.691955][ T28] audit: type=1400 audit(1779970366.119:879): avc: denied { create } for pid=6276 comm="syz.6.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.732213][ T28] audit: type=1400 audit(1779970366.119:880): avc: denied { bind } for pid=6276 comm="syz.6.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.456287][ T6259] Process accounting resumed [ 89.526932][ T6281] syzkaller0: entered promiscuous mode [ 89.540024][ T6281] syzkaller0: entered allmulticast mode [ 89.703358][ T6291] loop6: detected capacity change from 0 to 1024 [ 89.713008][ T28] audit: type=1400 audit(1779970367.189:881): avc: denied { read } for pid=6288 comm="syz.0.850" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.724366][ T6291] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.771751][ T28] audit: type=1400 audit(1779970367.189:882): avc: denied { open } for pid=6288 comm="syz.0.850" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.807680][ T6291] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.851: Invalid block bitmap block 0 in block_group 0 [ 89.831339][ T6291] loop6: lost filesystem error report for type 5 error -117 [ 89.832247][ T6291] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.851: Failed to acquire dquot type 0 [ 89.851103][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 89.851218][ C1] EXT4-fs (loop6): initial error at time 1779970367: ext4_read_block_bitmap_nowait:483 [ 89.851378][ C1] EXT4-fs (loop6): last error at time 1779970367: ext4_read_block_bitmap_nowait:483 [ 89.950988][ T6291] loop6: lost filesystem error report for type 5 error -117 [ 89.951705][ T6291] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.851: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.999307][ T6291] loop6: lost filesystem error report for type 5 error -117 [ 90.000807][ T6291] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.851: Invalid inode bitmap blk 0 in block_group 0 [ 90.024519][ T40] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 0 [ 90.047221][ T40] loop6: lost filesystem error report for type 5 error -117 [ 90.051274][ T6291] loop6: lost filesystem error report for type 5 error -117 [ 90.065526][ T6291] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 90.091688][ T6291] loop6: lost filesystem error report for type 5 error -117 [ 90.092194][ T6291] EXT4-fs (loop6): 1 orphan inode deleted [ 90.115130][ T6291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.153129][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 90.178698][ T3663] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.272067][ T6310] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 90.278649][ T6310] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.297851][ T6310] vhci_hcd vhci_hcd.0: Device attached [ 90.311238][ T6311] vhci_hcd: connection closed [ 90.312082][ T40] vhci_hcd vhci_hcd.3: stop threads [ 90.327936][ T40] vhci_hcd vhci_hcd.3: release socket [ 90.341853][ T40] vhci_hcd vhci_hcd.3: disconnect device [ 90.507714][ T6318] SELinux: security_context_str_to_sid (}ob?3blG;oxodigU) failed with errno=-22 [ 90.912668][ T6352] loop6: detected capacity change from 0 to 512 [ 90.929960][ T6352] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 90.977458][ T6352] EXT4-fs (loop6): orphan cleanup on readonly fs [ 90.992699][ T6352] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 91.032798][ T6352] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 91.048362][ T6352] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #16: comm syz.6.874: corrupted xattr block 31: invalid header [ 91.075309][ T6352] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 91.077130][ T6352] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 91.086373][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 91.086405][ C0] EXT4-fs (loop6): initial error at time 1779970368: ext4_xattr_delete_inode:2972: inode 16 [ 91.086474][ C0] EXT4-fs (loop6): last error at time 1779970368: ext4_xattr_delete_inode:2972: inode 16 [ 91.129620][ T6352] EXT4-fs (loop6): 1 orphan inode deleted [ 91.141188][ T6352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.183930][ T3663] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.269889][ T6375] syzkaller0: entered promiscuous mode [ 91.282278][ T6375] syzkaller0: entered allmulticast mode [ 92.013806][ T6390] loop5: detected capacity change from 0 to 128 [ 92.049434][ T6390] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.075404][ T6390] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.168097][ T3620] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.307920][ T6409] batman_adv: batadv0: Adding interface: dummy0 [ 92.314414][ T6409] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.341763][ T6409] batman_adv: batadv0: Interface activated: dummy0 [ 92.587934][ T6385] ================================================================== [ 92.596328][ T6385] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 92.603399][ T6385] [ 92.605741][ T6385] read-write to 0xffff88813c782724 of 4 bytes by task 6391 on cpu 0: [ 92.613814][ T6385] fifo_open+0x86/0x5d0 [ 92.617998][ T6385] do_dentry_open+0x4be/0xa90 [ 92.622686][ T6385] vfs_open+0x37/0x1e0 [ 92.626762][ T6385] path_openat+0x1b70/0x2050 [ 92.631367][ T6385] do_file_open+0x16c/0x290 [ 92.635888][ T6385] do_sys_openat2+0x94/0x130 [ 92.640494][ T6385] __x64_sys_openat+0xf2/0x120 [ 92.645272][ T6385] x64_sys_call+0x1e39/0x3020 [ 92.649965][ T6385] do_syscall_64+0x12c/0x3b0 [ 92.654580][ T6385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.660484][ T6385] [ 92.662806][ T6385] read to 0xffff88813c782724 of 4 bytes by task 6385 on cpu 1: [ 92.670525][ T6385] wait_for_partner+0xd5/0x1e0 [ 92.675315][ T6385] fifo_open+0x462/0x5d0 [ 92.679677][ T6385] do_dentry_open+0x4be/0xa90 [ 92.684361][ T6385] vfs_open+0x37/0x1e0 [ 92.688446][ T6385] path_openat+0x1b70/0x2050 [ 92.693058][ T6385] do_file_open+0x16c/0x290 [ 92.697668][ T6385] do_sys_openat2+0x94/0x130 [ 92.702272][ T6385] __se_sys_openat2+0x193/0x1f0 [ 92.707136][ T6385] __x64_sys_openat2+0x55/0x70 [ 92.711908][ T6385] x64_sys_call+0x2170/0x3020 [ 92.716680][ T6385] do_syscall_64+0x12c/0x3b0 [ 92.721280][ T6385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.727421][ T6385] [ 92.729730][ T6385] value changed: 0x00000001 -> 0x00000002 [ 92.735436][ T6385] [ 92.737740][ T6385] Reported by Kernel Concurrency Sanitizer on: [ 92.743894][ T6385] CPU: 1 UID: 0 PID: 6385 Comm: syz.2.887 Not tainted syzkaller #0 PREEMPT(lazy) [ 92.753097][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 92.763312][ T6385] ==================================================================