last executing test programs: 22.154814619s ago: executing program 4 (id=562): perf_event_open(0x0, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) socket(0x2, 0x3, 0x6) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000000)={0x200000000000001}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, r1, 0x200000000000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1e, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "ef5b437f60a69553e70015869873f94b"}]}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000200), 0x10106, 0x2, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000280)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$netlink(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x141a82, 0xe0) sendfile(r7, r7, 0x0, 0x3) 21.231343683s ago: executing program 4 (id=569): perf_event_open(&(0x7f0000000dc0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x780, 0xffff}, 0x204, 0xf016000000000, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') renameat2(r1, &(0x7f0000000340)='./cgroup\x00', r1, &(0x7f0000000380)='./mnt\x00', 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000004c0), 0x11000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r2, &(0x7f0000000500)=[{&(0x7f0000000540), 0x3528a9c0}], 0x1, 0x0) r4 = openat(r1, &(0x7f00000003c0)='./mnt\x00', 0xb779c857fb9009e9, 0x0) mkdirat(r4, &(0x7f0000000000)='./file0\x00', 0xa1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "0e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) getdents64(r1, &(0x7f0000000440)=""/85, 0x55) 21.015735196s ago: executing program 4 (id=571): socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, 0x0, &(0x7f0000000080)='gfs2\x00', 0x802002, &(0x7f00000000c0)='\x00') r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x22, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0x1}, 0x4, 0x200000000001, 0xfff9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000480)={{[0xda84, 0xfff, 0x6c2c, 0xffffffff]}, 0x0, 0x3, 0x7ff, 0x0, &(0x7f0000001240)=[{{@_ha_fsid={[0xf10a, 0x1]}, {0x7, 0x7, 0x5, 0x4}}, 0xffffffff, 0x0, 's\x00\x00\x00\x00ller\x00H\xe1@\xcel\x0f\xf3\x11\x1bEo\x1f!w\x9fs@Q\xdb&\x99\x06K:\xbb'}, {{@align, {0xf, 0xf001, 0x3, 0x8}}, 0x4, 0x0, '!+[&\x00'}, {{@_ha_fsid={[0x9]}, {0xb, 0xfff, 0x4, 0x1}}, 0x40, 0x0, '*.-}$\x00'}, {{@_ha_fsid={[0x6a, 0x3]}, {0x6000, 0xd38, 0xff, 0x4e4c}}, 0x8b9, 0x0, ')&\x00'}, {{@align=0x7fffffff, {0x0, 0x0, 0x2002, 0x9}}, 0x8, 0x0, 'gfs2\x00'}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000440)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, 0x0, 0x1008, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}, 0x1c) setsockopt$inet6_mtu(r2, 0x29, 0x1e, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x232700, 0x48) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x200000, &(0x7f0000000580)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000005c0)="$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") r3 = open(&(0x7f0000001180)='./file0/file0\x00', 0xecb42, 0x83) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) pwritev2(r3, &(0x7f00000011c0)=[{&(0x7f0000001200)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 18.741751319s ago: executing program 4 (id=582): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x200008, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=r0], 0x1, 0x39a, &(0x7f0000000600)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000580)={0x0, 0xea60}, 0x10) readv(r1, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/82, 0x52}], 0x1) truncate(&(0x7f00000009c0)='./file2\x00', 0x3) mount(0x0, &(0x7f0000000a00)='.\x00', 0x0, 0x2390024, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x82, 0x90) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) socket$kcm(0xa, 0x3, 0x3a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000080)='fd', 0x0, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000091123f0000000001080000000000000000fffffff50000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x2) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x79) r6 = open(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0/file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f00000012c0)=@newtfilter={0x58, 0x2c, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xf}, {0x1, 0x5}, {0x4, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @TCA_RATE={0x6, 0x5, {0xf9, 0x69}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28000}, 0x40488c3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 18.457874288s ago: executing program 4 (id=586): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x10080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x7, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x9, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x180) read(0xffffffffffffffff, &(0x7f0000000740), 0x1000) syz_clone(0xa802400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xf, 0x1}, 0x10ecc8, 0x1225, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./trace\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r1, &(0x7f0000000840)='enable_event', 0xc) 18.203493944s ago: executing program 4 (id=589): epoll_create(0x9252) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x80000000000008}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000800)={0x0, 0x953a, &(0x7f0000000840)=[{&(0x7f0000000880)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 18.160619329s ago: executing program 32 (id=589): epoll_create(0x9252) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x80000000000008}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000800)={0x0, 0x953a, &(0x7f0000000840)=[{&(0x7f0000000880)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.790575186s ago: executing program 5 (id=678): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x800000000008, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x29, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x10c100, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r3, 0xffff}, &(0x7f0000000280)=0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000002c0)={0x1, 0x4, 0xb, 0xa}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x110e22fff2) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/69, 0xfffffffffffffd01, 0x1d) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)={0x5e, 0x2, 0x2, 0x1, 0x0, [@empty]}, 0x18) 5.622238143s ago: executing program 5 (id=680): socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, 0x0, &(0x7f0000000080)='gfs2\x00', 0x802002, &(0x7f00000000c0)='\x00') r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x22, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0x1}, 0x4, 0x200000000001, 0xfff9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000480)={{[0xda84, 0xfff, 0x6c2c, 0xffffffff]}, 0x0, 0x3, 0x7ff, 0x0, &(0x7f0000001240)=[{{@_ha_fsid={[0xf10a, 0x1]}, {0x7, 0x7, 0x5, 0x4}}, 0xffffffff, 0x0, 's\x00\x00\x00\x00ller\x00H\xe1@\xcel\x0f\xf3\x11\x1bEo\x1f!w\x9fs@Q\xdb&\x99\x06K:\xbb'}, {{@align, {0xf, 0xf001, 0x3, 0x8}}, 0x4, 0x0, '!+[&\x00'}, {{@_ha_fsid={[0x9]}, {0xb, 0xfff, 0x4, 0x1}}, 0x40, 0x0, '*.-}$\x00'}, {{@_ha_fsid={[0x6a, 0x3]}, {0x6000, 0xd38, 0xff, 0x4e4c}}, 0x8b9, 0x0, ')&\x00'}, {{@align=0x7fffffff, {0x0, 0x0, 0x2002, 0x9}}, 0x8, 0x0, 'gfs2\x00'}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000440)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, 0x0, 0x1008, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}, 0x1c) setsockopt$inet6_mtu(r4, 0x29, 0x1e, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, 0x0) msgctl$IPC_RMID(0x0, 0x0) write(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x232700, 0x48) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x200000, &(0x7f0000000580)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000005c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r5 = open(&(0x7f0000001180)='./file0/file0\x00', 0xecb42, 0x83) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) pwritev2(r5, &(0x7f00000011c0)=[{&(0x7f0000001200)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 3.830745627s ago: executing program 5 (id=693): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000300)="b73f0da6d05b38ca9cbbce709c72aa728fc8e537ff02cb691d35e2a5a0cad47127f2b5950b319ccd6509031e021bdf5585", 0x31) syz_io_uring_setup(0x3, &(0x7f00000003c0)={0x0, 0x6738, 0x13500, 0xffffffff, 0xfffffffd}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x15e) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f00000005c0), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000600)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r2, &(0x7f0000000640), 0x0, 0x100000000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000680), 0x806000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000006c0)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) listen(r3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000800)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), 0xffffffffffffffff) accept4$inet6(r3, 0x0, 0x0, 0x80000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socket$inet6_sctp(0xa, 0x1, 0x84) 3.669726674s ago: executing program 5 (id=696): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x10102) sendmsg$inet(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001c40)="f5", 0x1}], 0x1}, 0x4000040) close(r1) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) splice(r3, 0x0, r4, 0x0, 0x80000038f9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x1, 0x1, 0xc1, '\x00', 0x0, r4}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9b, 0x40}, 0x10000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f00000000c0), 0x4) recvmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/169, 0xa9}], 0x1, &(0x7f0000000240)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000500)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x400d5}, 0x4800) sendmmsg$inet6(r6, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0xa, 0x4e21, 0x8, @private1, 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="b4", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_hci(r6, 0x84, 0x84, &(0x7f00000006c0)=""/4127, &(0x7f0000001700)=0x101f) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000001740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa9b01, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, &(0x7f0000001880)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x800, 0x0, 0x30}]}) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001a00)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6d23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x33}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.957106567s ago: executing program 1 (id=707): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x802040, &(0x7f0000000080)={[{@data_err_ignore}, {@resgid}, {@abort}, {@orlov}, {@nobarrier}, {@lazytime}]}, 0x9, 0x637, &(0x7f0000000340)="$eJzs3ctvVGUbAPDnnJleaL/vayFfUDbSxBhIlJYWMMSYCHFLCF52riotBCmU0BotklAS3GiMGxcmrlyI/4WSuHXh1oUbF8aQNMawEAMy5kxn6Exnpte59PL7Jac9l5nzPjPN0/edd973nAB2raHsRxpxICKuJREDFcfyUTo4tPi4B3/ePJ8tSRQKb/2RxM1byXzluZLS7/7Sk/8ZiOSnNGJfrrbcmbkbl8enpiavl7ZHZq9cG5mZu3Hk0pXxi5MXJ6+OvTx28sTxEydHj27q9eUr1s/cee+DgU/OvvPNV4+S0W9/OZvEqXhSii17Xcuf27OpkrP3bCgKix4u7U2LP09u8txbxV8D1e9xJlm+gy3rQkTsj4iuiHgmBiJX8dcciI/f6GhwQEsVkijXUcCuk6ye/121u3pbEwzQRuV2QPmzfb3PwbXSFrdKgHZYOL3YSbaY+10RUc7//GLfYPQW+wb6HiRV/TxJRGyuZ25RVsaPP5y9ky3RoB8OaI352+Ve7uX1f1LMzcHoLW71PUir8j+tWLL9b26w/KFl2/If2mf+dkQ8W6r/u2PD+f/uBsuX/wAAAAAAANA8905HxEv1xv+lT8f/dNcZ/9MfEaeaUP7q3/+l90srSROKAyosnI54tWb87+PK0cGDudL3/P8tjgfoSi9cmpo8GhH/i4jD0dWTbY9Wn7ZqgPCRz/Z92aj8yvF/2ZKVXx4LWDrV/fyyibgT47PjzXn1sLst3I54WBz/e7C0p3r8T1b/JzX1/6evZwl+bY1l7Hvh7rmqHb8t/XtYPf+BVil8HXGo7vyfpeZ2svL1OUaK7YGRcqug1nMfff5do/LlP3ROVv/3rZz/PUnl9Xpm1nf+7og4NpcvNDq+0fZ/d/J2rnz+zIfjs7PXRyO6kzO1+8fWFzPsVOV8KOdLlv+Hn1+5/+9p+78iD/dExPway9z/pP/XRsfU/9A5Wf5PrFz/D1bX/+td6Y2xu4Pfly4xVuPcivn/uFT/Hy/W6YdLz9H/B5Vqr8ex1gTtSLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsM2lEfGfSNLhp+tpOjwc0R8R/4++dGp6ZvbFC9PvX53IjlXf/39gcTsp3/9/sGJ7bNn2sYjYGxFf5PYUt4fPT09NdPrFAwAAAAAAAAAAAAAAAAAAwBbRX5zzX+hZPv8/83tu6XFJxyIEWipf+p3rcBxA++U3/MxCT1MDAdpu4/kPbHdrz/+ulsYBtF/j/H/4qFDU1nCANtL+h91rg/nv6wLYAdT/sFutsU+vt9VxAJ2w5vp/obVxAAAAAAAATbH34L2fk4iYf2VPccl0l44Z7A87W9rpAICOMYYXdq/8dKcjADrFZ3xg6fqef9ed7N949L8rgwIAAAAAAAAAAABAuxw6sP75//MmDcKOkEascAtvY/thJ1uhKq+X/Gp+2EEa3/pjLXV/ooUA25j5/8Bq9fjm5/8Xbq0rIAAAAAAAAAAAAACgVu+Ny+NTU5PXZ+a238prWyOMuiu5iKh7aH58i0TYxJUnqz2mfJv59Z25q9F7WLVSPnen34RmrpQvwdHBMDr0/wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjxbwAAAP//eSMrrw==") syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x280440e, &(0x7f0000000200), 0x1, 0xbdb, &(0x7f0000000f00)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001b00)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000980)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000a40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000b80), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x1d, 0x2, 0x6) setsockopt$inet_tcp_int(r3, 0x6, 0x2b, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000c40)={0xa, 0x8000002, 0x2004}, 0x1c) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="bf42000000000000000000000000000000000000c94c42e8a6a14b20fd9eff0bb29bcb1f3a3a54c021e605e99b6f4cbbd2e615e9b3a250ea3453985210a0e2a52eb36df544da064e21666222d23663c7e40c6d5dafbb08c3eaa49206a776ac0cdf900e572970ddd452438ae5a6e28f4fa73641fdf3f397505f523c4db9a21eef275394deda27235d5c84b34f4d559fce371dc4d272cbf2969f1ea265e53dbd119329e7f529d387f9515a27f93660fa4e4032ba6283839eefc824f60121dd5f05edde14f8acffa182ea4c1c844d5551d1c11a37e1594367e2d2d8e55e06cab240a706fe1ef76e25a3e21684584a732e0c14d5b1ba44a67d974bec7167f9ff0eaaf316077466d5ae658dee6616994c718bbe", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mkdir(&(0x7f0000000280)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./my_configfs\x00', &(0x7f0000000b40)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./my_configfs/target/dbroot\x00', 0x1, 0x0) pwritev(r5, &(0x7f0000001b40)=[{0x0, 0x53}, {&(0x7f0000001b80)="000000e6e150425d120b6b932acaa3ab3246005fa433fc0fb0897cc35be685656bf21c809ed2c15c1cd939c4a156f81bcb6c027f9b7d97f38046798a62eadc0ca2638b36e8c787c7c214f465a23666b772b45aea12417483517eb366a338d047494d5e0aed18297ea90e6e132a1f51e3ec47adce9f0324af3c685d1d19fa8002312e0deffaac95efe6b247072ae0b2067708635d975f10d09d7514cf410a4122de4bc22502708b9510d8cf532a32b32ffeedf844fe47000000000000000000", 0xbf}], 0x2, 0x1002, 0xab75) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x10, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ec0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) socket$inet(0x2, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="9000000001010102000000000000000001000005090007400000006c100005800900010070707470000000001000058009000100736e6d70000000004c001980080002000800000008000200200400000800010060040000080001008004000008000200280000000800020090000000130002"], 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.73141914s ago: executing program 0 (id=709): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x100}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x4, 0x8, 0x2}, 0x50) syz_mount_image$iso9660(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='map=off,iocharset=iso8859-1,dmode=0x0000000000006ad5,hide,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c636865636b3d7374956963742c63727566742c756e686964652c7362736563746f723d3078303030303030303030303030303030312c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x0, 0x57a, &(0x7f0000000800)="$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") write$cgroup_devices(0xffffffffffffffff, 0x0, 0xb8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d80)={r2, 0x0, 0x0}, 0x20) select(0x46, 0x0, 0x0, &(0x7f0000000340)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000380)={0x0, 0x2710}) 2.275460586s ago: executing program 3 (id=713): socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, 0x0, &(0x7f0000000080)='gfs2\x00', 0x802002, &(0x7f00000000c0)='\x00') r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x22, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0x1}, 0x4, 0x200000000001, 0xfff9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000480)={{[0xda84, 0xfff, 0x6c2c, 0xffffffff]}, 0x0, 0x3, 0x7ff, 0x0, &(0x7f0000001240)=[{{@_ha_fsid={[0xf10a, 0x1]}, {0x7, 0x7, 0x5, 0x4}}, 0xffffffff, 0x0, 's\x00\x00\x00\x00ller\x00H\xe1@\xcel\x0f\xf3\x11\x1bEo\x1f!w\x9fs@Q\xdb&\x99\x06K:\xbb'}, {{@align, {0xf, 0xf001, 0x3, 0x8}}, 0x4, 0x0, '!+[&\x00'}, {{@_ha_fsid={[0x9]}, {0xb, 0xfff, 0x4, 0x1}}, 0x40, 0x0, '*.-}$\x00'}, {{@_ha_fsid={[0x6a, 0x3]}, {0x6000, 0xd38, 0xff, 0x4e4c}}, 0x8b9, 0x0, ')&\x00'}, {{@align=0x7fffffff, {0x0, 0x0, 0x2002, 0x9}}, 0x8, 0x0, 'gfs2\x00'}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000440)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, 0x0, 0x1008, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}, 0x1c) setsockopt$inet6_mtu(r4, 0x29, 0x1e, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, 0x0) msgctl$IPC_RMID(0x0, 0x0) write(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x232700, 0x48) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x200000, &(0x7f0000000580)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000005c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r5 = open(&(0x7f0000001180)='./file0/file0\x00', 0xecb42, 0x83) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) pwritev2(r5, &(0x7f00000011c0)=[{&(0x7f0000001200)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 2.14712309s ago: executing program 3 (id=714): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x0, 0xc034}, &(0x7f0000000140)=0xc) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './bus\x00'}) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe11) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unshare(0x6020400) r2 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x82) syz_clone3(&(0x7f0000000240)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x100, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x100c404, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRESHEX=0xee00, @ANYRES8, @ANYRESDEC, @ANYRESDEC=r4, @ANYBLOB="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"], 0x4, 0x206, &(0x7f00000005c0)="$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") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000980)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000009c0)={0x0, 0x6d207ee5}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000a00)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000c00)={0x0, 0x1d, 0xdf}, 0x8) semget$private(0x0, 0x0, 0x3ca) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3f74, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.087250946s ago: executing program 2 (id=715): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp(0x2, 0x3, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') open_by_handle_at(r3, &(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r2], 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000001600)={&(0x7f00000000c0), 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 1.967730978s ago: executing program 1 (id=716): socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, 0x0, &(0x7f0000000080)='gfs2\x00', 0x802002, &(0x7f00000000c0)='\x00') r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x22, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0x1}, 0x4, 0x200000000001, 0xfff9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000480)={{[0xda84, 0xfff, 0x6c2c, 0xffffffff]}, 0x0, 0x3, 0x7ff, 0x0, &(0x7f0000001240)=[{{@_ha_fsid={[0xf10a, 0x1]}, {0x7, 0x7, 0x5, 0x4}}, 0xffffffff, 0x0, 's\x00\x00\x00\x00ller\x00H\xe1@\xcel\x0f\xf3\x11\x1bEo\x1f!w\x9fs@Q\xdb&\x99\x06K:\xbb'}, {{@align, {0xf, 0xf001, 0x3, 0x8}}, 0x4, 0x0, '!+[&\x00'}, {{@_ha_fsid={[0x9]}, {0xb, 0xfff, 0x4, 0x1}}, 0x40, 0x0, '*.-}$\x00'}, {{@_ha_fsid={[0x6a, 0x3]}, {0x6000, 0xd38, 0xff, 0x4e4c}}, 0x8b9, 0x0, ')&\x00'}, {{@align=0x7fffffff, {0x0, 0x0, 0x2002, 0x9}}, 0x8, 0x0, 'gfs2\x00'}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000440)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, 0x0, 0x1008, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r4, 0x29, 0x1e, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, 0x0) msgctl$IPC_RMID(0x0, 0x0) write(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x232700, 0x48) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x200000, &(0x7f0000000580)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000005c0)="$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") r5 = open(&(0x7f0000001180)='./file0/file0\x00', 0xecb42, 0x83) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) pwritev2(r5, &(0x7f00000011c0)=[{&(0x7f0000001200)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 1.967397238s ago: executing program 2 (id=717): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000400)={[{@stripe={'stripe', 0x3d, 0x10000}}, {@noinit_itable}, {@nombcache}, {@dioread_lock}, {@errors_remount}, {@nodiscard}, {@block_validity}]}, 0x5, 0x4bf, &(0x7f0000000480)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="a80000000000000004010000020000009100766244016fc09d20a20b9f6b376fdae08500f316ed56c17f960e84b77cd2f75a9bb94cfd6e31db4f27db136b8404e58cfa9885f6f92a4d7073464d4476ef4d3560ac59f177494b4109a2aee228040213960b37791b468826d348f760ad9b0c31fa55e1b684521bffa6239d8f8aa570bc4283f51622f77f580934e41b7bfab280f335171b173fe7a98536b696ea9d3bf6d50000000000900000000000000014010000060000006e2b06b1e19921d73b675f0aec2af236c0c6c6fca727282390e623558afbd6a3b2e6a76de224b6cf3f65390d5041c002eed93811"], 0x158}, 0x24000010) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000b80)={0x0, 0x8000}, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000009c0)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a80)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000f00)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00000000", 0x83}, {&(0x7f0000000fc0)="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", 0x187}, {&(0x7f0000001180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0xd851) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ustat(0x11, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000011c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000001200)=0x2, 0x4) syz_emit_ethernet(0x6f, &(0x7f0000001240)={@random="c3ad7f0ceb48", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @opaque="655e8237f01a299beeab0a8a344bee504666aed1ed94d5ab520bf601efda56948085bfd121c3b3a47792f744c457d2fbe42cc55f99cef098c3094b8d6da79df04e9838f312"}}}}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c00)={0x280, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc7e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x87ad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4917}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ec}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9ac}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x789}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x280}}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80), 0x100}, 0x0) 1.795571586s ago: executing program 0 (id=718): symlink(0x0, 0x0) r0 = memfd_create(&(0x7f0000000c80)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc020000000000000000000000000001000107144e230000000000003a00", @ANYRES32=0x0, @ANYRES32=0x0], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000003c0), 0x4) sendto$inet(r7, &(0x7f0000000400), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000440)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xfffffffffffffe36, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$key(r8, &(0x7f0000000580)={0x900, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="020afc000700000028bdc16bafccdf2505001a0000000000000000000000000000000000ac14bf194c2f815114890000000000000a0049"], 0x38}}, 0x40408c0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000640)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000f00)={0x0, 0x1, 0x71f2, 0x1000007}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r9, &(0x7f0000000f80)='4', 0x1) 1.253260671s ago: executing program 3 (id=719): socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, 0x0, &(0x7f0000000080)='gfs2\x00', 0x802002, &(0x7f00000000c0)='\x00') r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x22, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0x1}, 0x4, 0x200000000001, 0xfff9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000480)={{[0xda84, 0xfff, 0x6c2c, 0xffffffff]}, 0x0, 0x3, 0x7ff, 0x0, &(0x7f0000001240)=[{{@_ha_fsid={[0xf10a, 0x1]}, {0x7, 0x7, 0x5, 0x4}}, 0xffffffff, 0x0, 's\x00\x00\x00\x00ller\x00H\xe1@\xcel\x0f\xf3\x11\x1bEo\x1f!w\x9fs@Q\xdb&\x99\x06K:\xbb'}, {{@align, {0xf, 0xf001, 0x3, 0x8}}, 0x4, 0x0, '!+[&\x00'}, {{@_ha_fsid={[0x9]}, {0xb, 0xfff, 0x4, 0x1}}, 0x40, 0x0, '*.-}$\x00'}, {{@_ha_fsid={[0x6a, 0x3]}, {0x6000, 0xd38, 0xff, 0x4e4c}}, 0x8b9, 0x0, ')&\x00'}, {{@align=0x7fffffff, {0x0, 0x0, 0x2002, 0x9}}, 0x8, 0x0, 'gfs2\x00'}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000440)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, 0x0, 0x1008, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, 0x0) msgctl$IPC_RMID(0x0, 0x0) write(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x232700, 0x48) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x200000, &(0x7f0000000580)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000005c0)="$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") r5 = open(&(0x7f0000001180)='./file0/file0\x00', 0xecb42, 0x83) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) pwritev2(r5, &(0x7f00000011c0)=[{&(0x7f0000001200)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 1.146768653s ago: executing program 1 (id=720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a00000000046c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd"], 0x11c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0xcd, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$inet6_buf(r2, 0x29, 0xcd, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) 1.133123514s ago: executing program 2 (id=721): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.011777966s ago: executing program 2 (id=722): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp(0x2, 0x3, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') open_by_handle_at(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r2], 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)={0xc0, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 1.011535776s ago: executing program 1 (id=723): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1e, 0x2000000000000216, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x7, 0xc, &(0x7f0000001480)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 983.258149ms ago: executing program 1 (id=724): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'rose0\x00', {0x2, 0x0, @remote}}) statx(0xffffffffffffffff, 0x0, 0x2000, 0x7ff, 0x0) openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x1, &(0x7f0000000700)={[{@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@min_batch_time={'min_batch_time', 0x3d, 0x42c7}}, {@usrjquota}]}, 0x0, 0x44d, &(0x7f0000000dc0)="$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") chdir(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='A\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000001300), &(0x7f0000001340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000013c0)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x400, 0x7) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) pipe2$9p(0x0, 0x800) r3 = getuid() ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0xac4004, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}], [{@obj_user={'obj_user', 0x3d, 'vfat\x00'}}, {@euid_lt={'euid<', r3}}]}}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x2800, 0x0, 0x2, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) write(r4, &(0x7f00000006c0)="2700000014000707030e0000120f0a0011000100f5fe0012744600000000000075080039000500", 0x27) 862.754762ms ago: executing program 2 (id=725): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000300)="b73f0da6d05b38ca9cbbce709c72aa728fc8e537ff02cb691d35e2a5a0cad47127f2b5950b319ccd6509031e021bdf5585", 0x31) syz_io_uring_setup(0x3, &(0x7f00000003c0)={0x0, 0x6738, 0x13500, 0xffffffff, 0xfffffffd}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x15e) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f00000005c0), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000600)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r2, &(0x7f0000000640), 0x0, 0x100000000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000680), 0x806000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000006c0)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) listen(r3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000800)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), 0xffffffffffffffff) accept4$inet6(r3, 0x0, 0x0, 0x80000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socket$inet6_sctp(0xa, 0x1, 0x84) 798.766288ms ago: executing program 0 (id=726): io_uring_setup(0x1612, &(0x7f0000000a00)={0x0, 0x0, 0x3040}) pselect6(0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000380)={0x8}, 0x0, 0x0) (fail_nth: 3) 657.529792ms ago: executing program 0 (id=727): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp(0x2, 0x3, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') open_by_handle_at(r3, &(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r2], 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000001600)={&(0x7f00000000c0), 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 618.644316ms ago: executing program 5 (id=728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="04000000040000000400000001000000000000", @ANYRES32, @ANYRES32=0x0], 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100, 0x10000, 0x1000000, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000015c0)={'ip6tnl0\x00', &(0x7f0000001540)={'syztnl1\x00', 0x0, 0x0, 0x1, 0xc, 0xffff119f, 0x30, @local, @local, 0x8701, 0x700, 0x18ac, 0x1000}}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002080), 0x109082, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x0, 0x0, 0x0, &(0x7f0000001b80)='GPL\x00', 0xe60, 0x46, &(0x7f0000001bc0)=""/70, 0x41000, 0x42, '\x00', r1, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001c40)={0x4, 0x3, 0x100}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001c80)=[{0x1, 0x2, 0xb}], 0x10, 0x7fff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001dc0)={{}, &(0x7f0000000300), &(0x7f0000001d80)=r3}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000016c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000001700)='.\x00', &(0x7f0000001740), 0x218888, &(0x7f0000001780)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = openat(0xffffffffffffff9c, &(0x7f00000017c0)='.\x00', 0x100, 0x52) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$packet(0x11, 0x2, 0x300) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000001f40)=0x28, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x400ad84, &(0x7f0000001f80)={0xa, 0x4e20, 0x5b3, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000002040)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) inotify_add_watch(r5, 0x0, 0x81000000) r7 = syz_open_dev$usbfs(&(0x7f0000001800), 0x200, 0xa401) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc181600000e0a010200000000000000000a0000020900010073797a31000000000900020073797a3100000000ec150380e81500800c00018006000100cd9a000008000340000000010800034000000003"], 0x167c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000001840)=@urb_type_control={0x2, {}, 0xfffffffe, 0xe0, &(0x7f0000001880)={0x20, 0x1, 0x0, 0x3}, 0x8, 0x101, 0x1, 0x0, 0x0, 0x0, 0x0}) 485.10731ms ago: executing program 1 (id=729): socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, 0x0, &(0x7f0000000080)='gfs2\x00', 0x802002, &(0x7f00000000c0)='\x00') r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x22, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0x1}, 0x4, 0x200000000001, 0xfff9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000480)={{[0xda84, 0xfff, 0x6c2c, 0xffffffff]}, 0x0, 0x3, 0x7ff, 0x0, &(0x7f0000001240)=[{{@_ha_fsid={[0xf10a, 0x1]}, {0x7, 0x7, 0x5, 0x4}}, 0xffffffff, 0x0, 's\x00\x00\x00\x00ller\x00H\xe1@\xcel\x0f\xf3\x11\x1bEo\x1f!w\x9fs@Q\xdb&\x99\x06K:\xbb'}, {{@align, {0xf, 0xf001, 0x3, 0x8}}, 0x4, 0x0, '!+[&\x00'}, {{@_ha_fsid={[0x9]}, {0xb, 0xfff, 0x4, 0x1}}, 0x40, 0x0, '*.-}$\x00'}, {{@_ha_fsid={[0x6a, 0x3]}, {0x6000, 0xd38, 0xff, 0x4e4c}}, 0x8b9, 0x0, ')&\x00'}, {{@align=0x7fffffff, {0x0, 0x0, 0x2002, 0x9}}, 0x8, 0x0, 'gfs2\x00'}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000440)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, 0x0, 0x1008, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}, 0x1c) setsockopt$inet6_mtu(r3, 0x29, 0x1e, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) write(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x232700, 0x48) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x200000, &(0x7f0000000580)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000005c0)="$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") r4 = open(&(0x7f0000001180)='./file0/file0\x00', 0xecb42, 0x83) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) pwritev2(r4, &(0x7f00000011c0)=[{&(0x7f0000001200)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 430.502716ms ago: executing program 0 (id=730): perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x35c5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmdt(0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)="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", 0x1000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000140)='GPL\x00'}, 0x94) 429.323496ms ago: executing program 5 (id=731): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000400)={[{@stripe={'stripe', 0x3d, 0x10000}}, {@noinit_itable}, {@nombcache}, {@dioread_lock}, {@errors_remount}, {@nodiscard}, {@block_validity}]}, 0x5, 0x4bf, &(0x7f0000000480)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="a80000000000000004010000020000009100766244016fc09d20a20b9f6b376fdae08500f316ed56c17f960e84b77cd2f75a9bb94cfd6e31db4f27db136b8404e58cfa9885f6f92a4d7073464d4476ef4d3560ac59f177494b4109a2aee228040213960b37791b468826d348f760ad9b0c31fa55e1b684521bffa6239d8f8aa570bc4283f51622f77f580934e41b7bfab280f335171b173fe7a98536b696ea9d3bf6d50000000000900000000000000014010000060000006e2b06b1e19921d73b675f0aec2af236c0c6c6fca727282390e623558afbd6a3b2e6a76de224b6cf3f65390d5041c002eed93811"], 0x158}, 0x24000010) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000b80)={0x0, 0x8000}, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000009c0)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a80)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000f00)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000", 0x81}, {&(0x7f0000000fc0)="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", 0x187}, {&(0x7f0000001180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0xd851) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ustat(0x11, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000011c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000001200)=0x2, 0x4) syz_emit_ethernet(0x6f, &(0x7f0000001240)={@random="c3ad7f0ceb48", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @opaque="655e8237f01a299beeab0a8a344bee504666aed1ed94d5ab520bf601efda56948085bfd121c3b3a47792f744c457d2fbe42cc55f99cef098c3094b8d6da79df04e9838f312"}}}}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c00)={0x280, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc7e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x87ad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4917}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ec}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9ac}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x789}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x280}}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80), 0x100}, 0x0) 404.702469ms ago: executing program 0 (id=732): socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, 0x0, &(0x7f0000000080)='gfs2\x00', 0x802002, &(0x7f00000000c0)='\x00') r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x22, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0x1}, 0x4, 0x200000000001, 0xfff9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000480)={{[0xda84, 0xfff, 0x6c2c, 0xffffffff]}, 0x0, 0x3, 0x7ff, 0x0, &(0x7f0000001240)=[{{@_ha_fsid={[0xf10a, 0x1]}, {0x7, 0x7, 0x5, 0x4}}, 0xffffffff, 0x0, 's\x00\x00\x00\x00ller\x00H\xe1@\xcel\x0f\xf3\x11\x1bEo\x1f!w\x9fs@Q\xdb&\x99\x06K:\xbb'}, {{@align, {0xf, 0xf001, 0x3, 0x8}}, 0x4, 0x0, '!+[&\x00'}, {{@_ha_fsid={[0x9]}, {0xb, 0xfff, 0x4, 0x1}}, 0x40, 0x0, '*.-}$\x00'}, {{@_ha_fsid={[0x6a, 0x3]}, {0x6000, 0xd38, 0xff, 0x4e4c}}, 0x8b9, 0x0, ')&\x00'}, {{@align=0x7fffffff, {0x0, 0x0, 0x2002, 0x9}}, 0x8, 0x0, 'gfs2\x00'}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000440)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, 0x0, 0x1008, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r4, 0x29, 0x1e, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, 0x0) msgctl$IPC_RMID(0x0, 0x0) write(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x232700, 0x48) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x200000, &(0x7f0000000580)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000005c0)="$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") r5 = open(&(0x7f0000001180)='./file0/file0\x00', 0xecb42, 0x83) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) pwritev2(r5, &(0x7f00000011c0)=[{&(0x7f0000001200)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 328.666126ms ago: executing program 3 (id=733): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = io_uring_setup(0x527, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0xc) 221.208467ms ago: executing program 3 (id=734): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1e, 0x2000000000000216, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 195.80685ms ago: executing program 3 (id=735): socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, 0x0, &(0x7f0000000080)='gfs2\x00', 0x802002, &(0x7f00000000c0)='\x00') r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x22, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0x1}, 0x4, 0x200000000001, 0xfff9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000480)={{[0xda84, 0xfff, 0x6c2c, 0xffffffff]}, 0x0, 0x3, 0x7ff, 0x0, &(0x7f0000001240)=[{{@_ha_fsid={[0xf10a, 0x1]}, {0x7, 0x7, 0x5, 0x4}}, 0xffffffff, 0x0, 's\x00\x00\x00\x00ller\x00H\xe1@\xcel\x0f\xf3\x11\x1bEo\x1f!w\x9fs@Q\xdb&\x99\x06K:\xbb'}, {{@align, {0xf, 0xf001, 0x3, 0x8}}, 0x4, 0x0, '!+[&\x00'}, {{@_ha_fsid={[0x9]}, {0xb, 0xfff, 0x4, 0x1}}, 0x40, 0x0, '*.-}$\x00'}, {{@_ha_fsid={[0x6a, 0x3]}, {0x6000, 0xd38, 0xff, 0x4e4c}}, 0x8b9, 0x0, ')&\x00'}, {{@align=0x7fffffff, {0x0, 0x0, 0x2002, 0x9}}, 0x8, 0x0, 'gfs2\x00'}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000440)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, 0x0, 0x1008, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}, 0x1c) setsockopt$inet6_mtu(r3, 0x29, 0x1e, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) write(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x232700, 0x48) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x200000, &(0x7f0000000580)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000005c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r4 = open(&(0x7f0000001180)='./file0/file0\x00', 0xecb42, 0x83) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) pwritev2(r4, &(0x7f00000011c0)=[{&(0x7f0000001200)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 0s ago: executing program 2 (id=736): symlink(0x0, 0x0) r0 = memfd_create(&(0x7f0000000c80)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc020000000000000000000000000001000107144e230000000000003a00", @ANYRES32=0x0, @ANYRES32=0x0], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000003c0), 0x4) sendto$inet(r7, &(0x7f0000000400), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000440)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xfffffffffffffe36, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$key(r8, &(0x7f0000000580)={0x900, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="020afc000700000028bdc16bafccdf2505001a0000000000000000000000000000000000ac14bf194c2f815114890000000000000a0049"], 0x38}}, 0x40408c0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000640)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000f00)={0x0, 0x1, 0x71f2, 0x1000007}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r9, &(0x7f0000000f80)='4', 0x1) kernel console output (not intermixed with test programs): 4][ T4507] iso9660: Bad value for 'check' [ 63.580586][ T4510] sctp: [Deprecated]: syz.1.222 (pid 4510) Use of int in max_burst socket option. [ 63.580586][ T4510] Use struct sctp_assoc_value instead [ 63.641903][ T4514] sctp: [Deprecated]: syz.4.223 (pid 4514) Use of int in max_burst socket option. [ 63.641903][ T4514] Use struct sctp_assoc_value instead [ 63.832290][ T4510] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.832331][ T4510] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 63.865484][ T4510] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 63.876880][ T4510] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 63.877331][ T4510] System zones: 0-2, 18-18, 34-34 [ 63.883757][ T4510] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.222: bad orphan inode 15 [ 63.883877][ T4510] loop1: lost filesystem error report for type 5 error -117 [ 63.886250][ T4510] ext4_test_bit(bit=14, block=18) = 1 [ 63.886371][ T4510] is_bad_inode(inode)=0 [ 63.886389][ T4510] NEXT_ORPHAN(inode)=2264924160 [ 63.886409][ T4510] max_ino=32 [ 63.886431][ T4510] i_nlink=0 [ 63.886771][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 63.886800][ C0] EXT4-fs (loop1): initial error at time 1793577937: ext4_orphan_get:1430 [ 63.886868][ C0] EXT4-fs (loop1): last error at time 1793577937: ext4_orphan_get:1430 [ 63.939202][ T4510] EXT4-fs error (device loop1): ext4_do_update_inode:6707: inode #15: comm syz.1.222: corrupted inode contents [ 63.939402][ T4510] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.940883][ T4510] EXT4-fs error (device loop1): ext4_dirty_inode:7679: inode #15: comm syz.1.222: mark_inode_dirty error [ 63.940950][ T4510] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.942759][ T4510] EXT4-fs error (device loop1): ext4_do_update_inode:6707: inode #15: comm syz.1.222: corrupted inode contents [ 63.942829][ T4510] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.943525][ T4510] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.222: mark_inode_dirty error [ 63.943564][ T4510] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.945903][ T4510] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2965: inode #15: comm syz.1.222: mark inode dirty (error -117) [ 63.945973][ T4510] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.947710][ T4510] EXT4-fs warning (device loop1): ext4_evict_inode:355: xattr delete (err -117) [ 64.036384][ T29] audit: type=1400 audit(1793577937.748:463): avc: denied { write } for pid=4523 comm="syz.3.228" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.111537][ T29] audit: type=1400 audit(1793577937.828:464): avc: denied { write } for pid=4509 comm="syz.1.222" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.116148][ T4510] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.222: bg 0: block 80: padding at end of block bitmap is not set [ 64.501895][ T29] audit: type=1400 audit(1793577938.218:465): avc: denied { write } for pid=4530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.594168][ T29] audit: type=1400 audit(1793577938.308:466): avc: denied { write } for pid=4551 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.646316][ T4554] set_capacity_and_notify: 4 callbacks suppressed [ 64.646332][ T4554] loop4: detected capacity change from 0 to 512 [ 64.674248][ T4541] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 64.685154][ T4554] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 64.685235][ T4554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 64.685397][ T4554] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.685494][ T4554] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #13: comm syz.4.232: iget: bad i_size value: 12154761577498 [ 64.685600][ T4554] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.685745][ T4554] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.232: couldn't read orphan inode 13 (err -117) [ 64.685846][ T4554] loop4: lost filesystem error report for type 5 error -117 [ 64.803092][ T4541] ext2 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.851066][ T4554] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.232: dx entry: limit 65535 != root limit 120 [ 64.851115][ T4554] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.232: Corrupt directory, running e2fsck is recommended [ 64.937629][ T4567] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.232: dx entry: limit 65535 != root limit 120 [ 64.937667][ T4567] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.232: Corrupt directory, running e2fsck is recommended [ 64.940429][ T4567] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.232: dx entry: limit 65535 != root limit 120 [ 64.940461][ T4567] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.232: Corrupt directory, running e2fsck is recommended [ 65.183295][ T4578] netlink: 108 bytes leftover after parsing attributes in process `syz.1.233'. [ 65.297789][ T4596] sctp: [Deprecated]: syz.2.236 (pid 4596) Use of int in max_burst socket option. [ 65.297789][ T4596] Use struct sctp_assoc_value instead [ 66.444061][ T4618] loop3: detected capacity change from 0 to 4096 [ 66.600291][ T4618] EXT4-fs mount: 70 callbacks suppressed [ 66.600383][ T4618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.634574][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 66.634667][ T29] audit: type=1400 audit(1793577940.348:475): avc: denied { write } for pid=4617 comm="syz.3.239" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.722871][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.091479][ T4590] loop0: detected capacity change from 0 to 4096 [ 67.176650][ T29] audit: type=1400 audit(1793577940.888:476): avc: denied { write } for pid=4624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.183690][ T4590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.225767][ T29] audit: type=1400 audit(1793577940.938:477): avc: denied { write } for pid=4589 comm="syz.0.235" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.264296][ T29] audit: type=1400 audit(1793577940.978:478): avc: denied { write } for pid=4649 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.328279][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.361257][ T4620] loop4: detected capacity change from 0 to 4096 [ 67.442414][ T4620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.442857][ T29] audit: type=1400 audit(1793577941.158:479): avc: denied { write } for pid=4653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.495338][ T29] audit: type=1400 audit(1793577941.208:480): avc: denied { write } for pid=4667 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.518679][ T29] audit: type=1400 audit(1793577941.228:481): avc: denied { write } for pid=4619 comm="syz.4.240" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.564571][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.698848][ T4682] netlink: 108 bytes leftover after parsing attributes in process `syz.4.251'. [ 67.871941][ T4691] sctp: [Deprecated]: syz.1.253 (pid 4691) Use of int in max_burst socket option. [ 67.871941][ T4691] Use struct sctp_assoc_value instead [ 67.908464][ T29] audit: type=1400 audit(1793577941.628:482): avc: denied { write } for pid=4688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.969257][ T29] audit: type=1400 audit(1793577941.688:483): avc: denied { write } for pid=4702 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.007192][ T4691] loop1: detected capacity change from 0 to 512 [ 68.048467][ T4691] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.048597][ T4691] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 68.074843][ T4691] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 68.085251][ T4691] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 68.085531][ T4691] System zones: 0-2, 18-18, 34-34 [ 68.090585][ T4671] loop0: detected capacity change from 0 to 4096 [ 68.115522][ T4691] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.253: bad orphan inode 15 [ 68.115562][ T4691] loop1: lost filesystem error report for type 5 error -117 [ 68.116642][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 68.116662][ C1] EXT4-fs (loop1): initial error at time 1793577941: ext4_orphan_get:1430 [ 68.116688][ C1] EXT4-fs (loop1): last error at time 1793577941: ext4_orphan_get:1430 [ 68.132976][ T4671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.173173][ T29] audit: type=1400 audit(1793577941.888:484): avc: denied { write } for pid=4670 comm="syz.0.247" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.195518][ T4691] ext4_test_bit(bit=14, block=18) = 1 [ 68.195589][ T4691] is_bad_inode(inode)=0 [ 68.195607][ T4691] NEXT_ORPHAN(inode)=2264924160 [ 68.195709][ T4691] max_ino=32 [ 68.195737][ T4691] i_nlink=0 [ 68.207957][ T4691] EXT4-fs error (device loop1): ext4_do_update_inode:6707: inode #15: comm syz.1.253: corrupted inode contents [ 68.208108][ T4691] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.210290][ T4691] EXT4-fs error (device loop1): ext4_dirty_inode:7679: inode #15: comm syz.1.253: mark_inode_dirty error [ 68.210348][ T4691] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.212745][ T4691] EXT4-fs error (device loop1): ext4_do_update_inode:6707: inode #15: comm syz.1.253: corrupted inode contents [ 68.212935][ T4691] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.213434][ T4691] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.253: mark_inode_dirty error [ 68.213555][ T4691] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.214103][ T4691] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2965: inode #15: comm syz.1.253: mark inode dirty (error -117) [ 68.216548][ T4691] EXT4-fs warning (device loop1): ext4_evict_inode:355: xattr delete (err -117) [ 68.232646][ T4691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.284078][ T4691] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.253: bg 0: block 80: padding at end of block bitmap is not set [ 68.302893][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.391826][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.564249][ T4728] loop0: detected capacity change from 0 to 128 [ 68.601843][ T4728] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 68.659947][ T4728] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.682821][ T4728] ext2 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.964726][ T3292] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.005214][ T4749] loop4: detected capacity change from 0 to 128 [ 69.049711][ T4749] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 69.100011][ T4749] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.103889][ T4749] ext2 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.294457][ T4718] loop3: detected capacity change from 0 to 4096 [ 69.404621][ T4718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.532691][ T3293] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.610513][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.677214][ T4819] sctp: [Deprecated]: syz.3.270 (pid 4819) Use of int in max_burst socket option. [ 69.677214][ T4819] Use struct sctp_assoc_value instead [ 69.708095][ T4730] loop2: detected capacity change from 0 to 4096 [ 69.708291][ T4821] netlink: 108 bytes leftover after parsing attributes in process `syz.0.271'. [ 69.751195][ T4730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.835089][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.140742][ T4843] sctp: [Deprecated]: syz.2.276 (pid 4843) Use of int in max_burst socket option. [ 70.140742][ T4843] Use struct sctp_assoc_value instead [ 70.214593][ T4845] loop4: detected capacity change from 0 to 512 [ 70.235616][ T4845] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.277: iget: bad i_size value: 38620345925642 [ 70.235660][ T4845] fserror_report: 1 callbacks suppressed [ 70.235671][ T4845] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.235864][ T4845] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.277: couldn't read orphan inode 15 (err -117) [ 70.235891][ T4845] loop4: lost filesystem error report for type 5 error -117 [ 70.236659][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 70.236678][ C1] EXT4-fs (loop4): initial error at time 1793577943: ext4_orphan_get:1404: inode 15 [ 70.236711][ C1] EXT4-fs (loop4): last error at time 1793577943: ext4_orphan_get:1409 [ 70.311365][ T4845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.341821][ T4850] loop3: detected capacity change from 0 to 512 [ 70.353162][ T4850] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 70.353269][ T4850] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 70.353379][ T4850] EXT4-fs (loop3): orphan cleanup on readonly fs [ 70.353538][ T4850] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.279: iget: bad i_size value: 12154761577498 [ 70.353576][ T4850] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 70.353757][ T4850] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.279: couldn't read orphan inode 13 (err -117) [ 70.353784][ T4850] loop3: lost filesystem error report for type 5 error -117 [ 70.354208][ T4850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 70.360547][ T4843] loop2: detected capacity change from 0 to 512 [ 70.444779][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.445148][ T4843] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.445218][ T4843] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 70.449911][ T4843] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 70.450391][ T4843] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 70.450553][ T4843] System zones: 0-2, 18-18, 34-34 [ 70.453971][ T4843] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.276: bad orphan inode 15 [ 70.454033][ T4843] loop2: lost filesystem error report for type 5 error -117 [ 70.454618][ T4843] ext4_test_bit(bit=14, block=18) = 1 [ 70.454647][ T4843] is_bad_inode(inode)=0 [ 70.454664][ T4843] NEXT_ORPHAN(inode)=2264924160 [ 70.454685][ T4843] max_ino=32 [ 70.454726][ T4843] i_nlink=0 [ 70.456668][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 70.456687][ C0] EXT4-fs (loop2): initial error at time 1793577944: ext4_orphan_get:1430 [ 70.456709][ C0] EXT4-fs (loop2): last error at time 1793577944: ext4_orphan_get:1430 [ 70.458584][ T4843] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #15: comm syz.2.276: corrupted inode contents [ 70.458666][ T4843] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.459178][ T4843] EXT4-fs error (device loop2): ext4_dirty_inode:7679: inode #15: comm syz.2.276: mark_inode_dirty error [ 70.459260][ T4843] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.459827][ T4843] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #15: comm syz.2.276: corrupted inode contents [ 70.459919][ T4843] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.460344][ T4843] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.276: mark_inode_dirty error [ 70.460454][ T4843] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.460862][ T4843] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2965: inode #15: comm syz.2.276: mark inode dirty (error -117) [ 70.460943][ T4843] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.461569][ T4843] EXT4-fs warning (device loop2): ext4_evict_inode:355: xattr delete (err -117) [ 70.585370][ T4843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.615811][ T4850] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.279: dx entry: limit 65535 != root limit 120 [ 70.615843][ T4850] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.279: Corrupt directory, running e2fsck is recommended [ 70.672515][ T4855] loop4: detected capacity change from 0 to 128 [ 70.686805][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.780626][ T4855] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 70.814127][ T4855] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.815680][ T4855] ext2 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.841216][ T4843] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.276: bg 0: block 80: padding at end of block bitmap is not set [ 70.899293][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.952901][ T4868] sctp: [Deprecated]: syz.2.285 (pid 4868) Use of int in max_burst socket option. [ 70.952901][ T4868] Use struct sctp_assoc_value instead [ 71.070854][ T4872] ./dev/sda1: Can't lookup blockdev [ 71.083858][ T3293] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.133347][ T4877] loop4: detected capacity change from 0 to 512 [ 71.138516][ T4877] EXT4-fs: Ignoring removed i_version option [ 71.151724][ T4877] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.160966][ T4877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.161113][ T4877] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.213089][ T4887] FAULT_INJECTION: forcing a failure. [ 71.213089][ T4887] name failslab, interval 1, probability 0, space 0, times 1 [ 71.213122][ T4887] CPU: 1 UID: 0 PID: 4887 Comm: syz.3.290 Not tainted syzkaller #0 PREEMPT(lazy) [ 71.213234][ T4887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.213247][ T4887] Call Trace: [ 71.213255][ T4887] [ 71.213265][ T4887] __dump_stack+0x1d/0x30 [ 71.213325][ T4887] dump_stack_lvl+0x95/0xd0 [ 71.213350][ T4887] dump_stack+0x15/0x1b [ 71.213370][ T4887] should_fail_ex+0x259/0x270 [ 71.213455][ T4887] ? security_bpf_prog_load+0x60/0x140 [ 71.213489][ T4887] should_failslab+0x8c/0xb0 [ 71.213577][ T4887] __kmalloc_noprof+0xb6/0x4b0 [ 71.213619][ T4887] ? security_bpf_prog_load+0x60/0x140 [ 71.213654][ T4887] security_bpf_prog_load+0x60/0x140 [ 71.213715][ T4887] bpf_check+0xcd7/0x20e0 [ 71.213743][ T4887] bpf_prog_load+0xf52/0x10b0 [ 71.213772][ T4887] ? vfs_write+0x760/0x990 [ 71.213828][ T4887] __sys_bpf+0xbce/0xc50 [ 71.213852][ T4887] ? vfs_write+0x760/0x990 [ 71.213953][ T4887] ? vfs_write+0x760/0x990 [ 71.213984][ T4887] __x64_sys_bpf+0x69/0x80 [ 71.214006][ T4887] x64_sys_call+0xf26/0x2550 [ 71.214031][ T4887] do_syscall_64+0x112/0x360 [ 71.214129][ T4887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.214150][ T4887] RIP: 0033:0x7fd3a4e1f559 [ 71.214167][ T4887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.214185][ T4887] RSP: 002b:00007fd3a386f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.214276][ T4887] RAX: ffffffffffffffda RBX: 00007fd3a50a5fa0 RCX: 00007fd3a4e1f559 [ 71.214292][ T4887] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 71.214352][ T4887] RBP: 00007fd3a386f090 R08: 0000000000000000 R09: 0000000000000000 [ 71.214364][ T4887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.214375][ T4887] R13: 00007fd3a50a6038 R14: 00007fd3a50a5fa0 R15: 00007ffeb196e168 [ 71.214394][ T4887] [ 71.289403][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.321085][ T4891] loop4: detected capacity change from 0 to 512 [ 71.332106][ T4891] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.332158][ T4891] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 71.332330][ T4891] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.332401][ T4891] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #13: comm syz.4.292: iget: bad i_size value: 12154761577498 [ 71.332495][ T4891] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 71.332672][ T4891] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.292: couldn't read orphan inode 13 (err -117) [ 71.332698][ T4891] loop4: lost filesystem error report for type 5 error -117 [ 71.333180][ T4891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 71.342911][ T4891] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.292: dx entry: limit 65535 != root limit 120 [ 71.342943][ T4891] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.292: Corrupt directory, running e2fsck is recommended [ 71.397752][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.420484][ T4894] netlink: 108 bytes leftover after parsing attributes in process `syz.4.293'. [ 72.198036][ T4908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 72.412289][ T4889] loop3: detected capacity change from 0 to 4096 [ 72.569197][ T4889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.636100][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 72.636120][ T29] audit: type=1400 audit(1793577946.348:505): avc: denied { write } for pid=4888 comm="syz.3.291" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.693928][ T4915] sctp: [Deprecated]: syz.4.299 (pid 4915) Use of int in max_burst socket option. [ 72.693928][ T4915] Use struct sctp_assoc_value instead [ 72.752417][ T4910] loop1: detected capacity change from 0 to 4096 [ 72.816823][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.831189][ T4900] loop0: detected capacity change from 0 to 4096 [ 72.883009][ T4910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.904070][ T29] audit: type=1400 audit(1793577946.628:506): avc: denied { write } for pid=4909 comm="syz.1.298" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.932658][ T4900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.955013][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.956171][ T4920] sctp: [Deprecated]: syz.4.301 (pid 4920) Use of int in max_burst socket option. [ 72.956171][ T4920] Use struct sctp_assoc_value instead [ 72.989585][ T29] audit: type=1400 audit(1793577946.698:507): avc: denied { write } for pid=4899 comm="syz.0.294" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.038150][ T4924] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 73.038177][ T4924] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 73.038391][ T4924] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.038459][ T4924] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #13: comm syz.1.302: iget: bad i_size value: 12154761577498 [ 73.038487][ T4924] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 73.038737][ T4924] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.302: couldn't read orphan inode 13 (err -117) [ 73.038759][ T4924] loop1: lost filesystem error report for type 5 error -117 [ 73.039197][ T4924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.053387][ T4924] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.302: dx entry: limit 65535 != root limit 120 [ 73.053424][ T4924] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.302: Corrupt directory, running e2fsck is recommended [ 73.056113][ T4924] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.302: dx entry: limit 65535 != root limit 120 [ 73.056228][ T4924] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.302: Corrupt directory, running e2fsck is recommended [ 73.105242][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.223916][ T4920] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.223956][ T4920] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 73.248994][ T4920] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 73.249344][ T4920] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 73.249788][ T4920] System zones: 0-2, 18-18, 34-34 [ 73.252928][ T4927] ./dev/sda1: Can't lookup blockdev [ 73.253258][ T4920] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.301: bad orphan inode 15 [ 73.253328][ T4920] loop4: lost filesystem error report for type 5 error -117 [ 73.253849][ T4920] ext4_test_bit(bit=14, block=18) = 1 [ 73.253902][ T4920] is_bad_inode(inode)=0 [ 73.253950][ T4920] NEXT_ORPHAN(inode)=2264924160 [ 73.253971][ T4920] max_ino=32 [ 73.253990][ T4920] i_nlink=0 [ 73.254829][ T4920] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #15: comm syz.4.301: corrupted inode contents [ 73.254888][ T4920] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.255136][ T4920] EXT4-fs error (device loop4): ext4_dirty_inode:7679: inode #15: comm syz.4.301: mark_inode_dirty error [ 73.255620][ T4920] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #15: comm syz.4.301: corrupted inode contents [ 73.256677][ C0] EXT4-fs (loop4): error count since last fsck: 4 [ 73.256693][ C0] EXT4-fs (loop4): initial error at time 1793577946: ext4_orphan_get:1430 [ 73.256713][ C0] EXT4-fs (loop4): last error at time 1793577946: ext4_do_update_inode:6707: inode 15 [ 73.345056][ T4932] netlink: 40 bytes leftover after parsing attributes in process `syz.1.304'. [ 73.377540][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.411650][ T4920] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.301: mark_inode_dirty error [ 73.412957][ T4920] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2965: inode #15: comm syz.4.301: mark inode dirty (error -117) [ 73.415540][ T4920] EXT4-fs warning (device loop4): ext4_evict_inode:355: xattr delete (err -117) [ 73.550383][ T4920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.579507][ T29] audit: type=1400 audit(1793577947.298:508): avc: denied { write } for pid=4918 comm="syz.4.301" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.579742][ T4920] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.301: bg 0: block 80: padding at end of block bitmap is not set [ 73.768390][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.077236][ T4943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 74.134516][ T4946] netlink: 108 bytes leftover after parsing attributes in process `syz.3.309'. [ 74.224985][ T4953] sctp: [Deprecated]: syz.1.311 (pid 4953) Use of int in max_burst socket option. [ 74.224985][ T4953] Use struct sctp_assoc_value instead [ 75.173301][ T4969] set_capacity_and_notify: 2 callbacks suppressed [ 75.173406][ T4969] loop4: detected capacity change from 0 to 136 [ 75.208397][ T4969] iso9660: Bad value for 'uid' [ 75.208558][ T4969] iso9660: Bad value for 'uid' [ 75.218277][ T4956] loop0: detected capacity change from 0 to 4096 [ 75.255216][ T4964] loop2: detected capacity change from 0 to 4096 [ 75.380165][ T4964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.407993][ T4956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.434236][ T29] audit: type=1400 audit(1793577949.148:509): avc: denied { write } for pid=4955 comm="syz.0.312" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.487478][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.511060][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.063275][ T4976] loop4: detected capacity change from 0 to 4096 [ 76.101270][ T4976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.146884][ T29] audit: type=1400 audit(1793577949.858:510): avc: denied { write } for pid=4975 comm="syz.4.319" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.281418][ T29] audit: type=1400 audit(1793577949.998:511): avc: denied { read } for pid=4989 comm="syz.3.323" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.311503][ T4987] loop2: detected capacity change from 0 to 4096 [ 76.326507][ T4987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.340425][ T29] audit: type=1400 audit(1793577950.048:512): avc: denied { write } for pid=4978 comm="syz.2.320" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.377896][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.400231][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.657683][ T5000] sctp: [Deprecated]: syz.4.324 (pid 5000) Use of int in max_burst socket option. [ 76.657683][ T5000] Use struct sctp_assoc_value instead [ 76.988229][ T5005] netlink: 108 bytes leftover after parsing attributes in process `syz.2.328'. [ 77.285732][ T4980] loop0: detected capacity change from 0 to 4096 [ 77.372714][ T4980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.448144][ T29] audit: type=1400 audit(1793577951.138:513): avc: denied { write } for pid=4979 comm="syz.0.321" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.555043][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.596738][ T29] audit: type=1400 audit(1793577951.318:514): avc: denied { read } for pid=5024 comm="syz.0.336" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 77.608172][ T5025] loop0: detected capacity change from 0 to 736 [ 77.645384][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 77.645400][ T29] audit: type=1400 audit(1793577951.358:516): avc: denied { create } for pid=5024 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.672854][ T3629] IPVS: starting estimator thread 0... [ 77.711406][ T29] audit: type=1400 audit(1793577951.428:517): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 77.826715][ T5027] IPVS: using max 2688 ests per chain, 134400 per kthread [ 78.435820][ T5039] sctp: [Deprecated]: syz.1.340 (pid 5039) Use of int in max_burst socket option. [ 78.435820][ T5039] Use struct sctp_assoc_value instead [ 78.471955][ T5023] loop3: detected capacity change from 0 to 4096 [ 78.574397][ T5023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.626757][ T29] audit: type=1400 audit(1793577952.298:518): avc: denied { write } for pid=5022 comm="syz.3.335" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.629878][ T5047] loop2: detected capacity change from 0 to 128 [ 78.661121][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.684977][ T5047] 9pnet_fd: p9_fd_create_tcp (5047): problem connecting socket to 127.0.0.1 [ 78.685061][ T29] audit: type=1400 audit(1793577952.398:519): avc: denied { mounton } for pid=5046 comm="syz.2.343" path="/48/file1" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 78.722777][ T5010] loop4: detected capacity change from 0 to 4096 [ 78.772899][ T29] audit: type=1400 audit(1793577952.488:520): avc: denied { allowed } for pid=5052 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.824394][ T5010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.842481][ T29] audit: type=1400 audit(1793577952.568:521): avc: denied { create } for pid=5060 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.879529][ T29] audit: type=1400 audit(1793577952.588:522): avc: denied { write } for pid=5008 comm="syz.4.330" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.986087][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.806467][ T5076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.831020][ T29] audit: type=1400 audit(1793577953.548:523): avc: denied { write } for pid=5075 comm="syz.0.351" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.928694][ T5059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.952278][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.979410][ T29] audit: type=1400 audit(1793577953.698:524): avc: denied { write } for pid=5058 comm="syz.3.346" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.105472][ T5067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.133118][ T29] audit: type=1400 audit(1793577953.848:525): avc: denied { write } for pid=5066 comm="syz.1.349" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.186341][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.241905][ T5086] No source specified [ 80.256071][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.688815][ T5103] set_capacity_and_notify: 3 callbacks suppressed [ 80.688890][ T5103] loop2: detected capacity change from 0 to 512 [ 80.693610][ T5103] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 80.693678][ T5103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 80.693871][ T5103] EXT4-fs (loop2): orphan cleanup on readonly fs [ 80.694176][ T5103] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #13: comm syz.2.357: iget: bad i_size value: 12154761577498 [ 80.694237][ T5103] fserror_report: 4 callbacks suppressed [ 80.694302][ T5103] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 80.694637][ T5103] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.357: couldn't read orphan inode 13 (err -117) [ 80.694701][ T5103] loop2: lost filesystem error report for type 5 error -117 [ 80.695608][ T5103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 80.699152][ T5103] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.357: dx entry: limit 65535 != root limit 120 [ 80.699205][ T5103] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.357: Corrupt directory, running e2fsck is recommended [ 80.825782][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.991694][ T5106] Restarting kernel threads ... [ 80.993169][ T5106] Done restarting kernel threads. [ 80.999045][ T5106] SELinux: policydb string does not match my string SE Linux [ 80.999355][ T5106] SELinux: failed to load policy [ 81.115564][ T5112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 81.224851][ T5118] loop0: detected capacity change from 0 to 512 [ 81.227124][ T5118] EXT4-fs: Ignoring removed oldalloc option [ 81.241382][ T5118] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 81.244852][ T5118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.363'. [ 81.351341][ T5120] sctp: [Deprecated]: syz.2.364 (pid 5120) Use of int in max_burst socket option. [ 81.351341][ T5120] Use struct sctp_assoc_value instead [ 81.378082][ T5121] mmap: syz.1.361 (5121) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.444527][ T5120] loop2: detected capacity change from 0 to 512 [ 81.459222][ T5120] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.459283][ T5120] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 81.484154][ T5120] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 81.486015][ T5120] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 81.486279][ T5120] System zones: 0-2, 18-18, 34-34 [ 81.514470][ T5120] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.364: bad orphan inode 15 [ 81.514539][ T5120] loop2: lost filesystem error report for type 5 error -117 [ 81.516661][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 81.516680][ C0] EXT4-fs (loop2): initial error at time 1793577955: ext4_orphan_get:1430 [ 81.516702][ C0] EXT4-fs (loop2): last error at time 1793577955: ext4_orphan_get:1430 [ 81.527007][ T5120] ext4_test_bit(bit=14, block=18) = 1 [ 81.527048][ T5120] is_bad_inode(inode)=0 [ 81.527064][ T5120] NEXT_ORPHAN(inode)=2264924160 [ 81.527085][ T5120] max_ino=32 [ 81.527158][ T5120] i_nlink=0 [ 81.581702][ T5120] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #15: comm syz.2.364: corrupted inode contents [ 81.581793][ T5120] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.584910][ T5120] EXT4-fs error (device loop2): ext4_dirty_inode:7679: inode #15: comm syz.2.364: mark_inode_dirty error [ 81.585052][ T5120] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.586418][ T5120] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #15: comm syz.2.364: corrupted inode contents [ 81.586466][ T5120] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.594017][ T5131] xt_hashlimit: size too large, truncated to 1048576 [ 81.597215][ T5135] netlink: 'syz.3.368': attribute type 10 has an invalid length. [ 81.605848][ T5135] team0: Port device dummy0 added [ 81.631046][ T5120] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.364: mark_inode_dirty error [ 81.631336][ T5120] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.633194][ T5120] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2965: inode #15: comm syz.2.364: mark inode dirty (error -117) [ 81.633362][ T5120] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.639051][ T5120] EXT4-fs warning (device loop2): ext4_evict_inode:355: xattr delete (err -117) [ 81.653664][ T5120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.739880][ T5114] xt_l2tp: missing protocol rule (udp|l2tpip) [ 81.759633][ T5120] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.364: bg 0: block 80: padding at end of block bitmap is not set [ 81.785514][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.978821][ T5143] loop2: detected capacity change from 0 to 4096 [ 83.044072][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 83.044090][ T29] audit: type=1400 audit(1793577956.758:539): avc: denied { write } for pid=5142 comm="syz.2.369" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.100419][ T5163] loop3: detected capacity change from 0 to 512 [ 83.113780][ T5163] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 83.113799][ T5163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 83.114004][ T5163] EXT4-fs (loop3): orphan cleanup on readonly fs [ 83.114164][ T5163] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.375: iget: bad i_size value: 12154761577498 [ 83.114193][ T5163] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 83.114326][ T5163] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.375: couldn't read orphan inode 13 (err -117) [ 83.114435][ T5163] loop3: lost filesystem error report for type 5 error -117 [ 83.116209][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 83.119814][ T5163] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.375: dx entry: limit 65535 != root limit 120 [ 83.119891][ T5163] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.375: Corrupt directory, running e2fsck is recommended [ 83.227805][ T5171] loop3: detected capacity change from 0 to 736 [ 84.022904][ T5187] loop1: detected capacity change from 0 to 4096 [ 84.087435][ T29] audit: type=1400 audit(1793577957.798:540): avc: denied { write } for pid=5186 comm="syz.1.372" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.087909][ T5193] loop3: detected capacity change from 0 to 164 [ 84.090084][ T5193] iso9660: Bad value for 'check' [ 84.181702][ T5187] syz.1.372 (5187) used greatest stack depth: 8832 bytes left [ 84.228914][ T5180] loop4: detected capacity change from 0 to 4096 [ 84.296235][ T29] audit: type=1400 audit(1793577958.008:541): avc: denied { write } for pid=5179 comm="syz.4.381" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.355910][ T5204] loop3: detected capacity change from 0 to 512 [ 84.374957][ T5204] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 84.374980][ T5204] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 84.375069][ T5204] EXT4-fs (loop3): orphan cleanup on readonly fs [ 84.379667][ T5204] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.387: iget: bad i_size value: 12154761577498 [ 84.379701][ T5204] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 84.386643][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 84.386683][ C1] EXT4-fs (loop3): initial error at time 1793577958: ext4_orphan_get:1404: inode 13 [ 84.386708][ C1] EXT4-fs (loop3): last error at time 1793577958: ext4_orphan_get:1404: inode 13 [ 84.412675][ T5204] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.387: couldn't read orphan inode 13 (err -117) [ 84.412709][ T5204] loop3: lost filesystem error report for type 5 error -117 [ 84.417990][ T5201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 84.490491][ T5204] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.387: dx entry: limit 65535 != root limit 120 [ 84.490525][ T5204] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.387: Corrupt directory, running e2fsck is recommended [ 84.601052][ T29] audit: type=1400 audit(1793577958.318:542): avc: denied { mount } for pid=5213 comm="syz.3.390" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 84.735260][ T29] audit: type=1400 audit(1793577958.448:543): avc: denied { write } for pid=5219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.790069][ T29] audit: type=1400 audit(1793577958.508:544): avc: denied { write } for pid=5234 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.960878][ T29] audit: type=1400 audit(1793577958.678:545): avc: denied { write } for pid=5237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.025654][ T29] audit: type=1400 audit(1793577958.738:546): avc: denied { write } for pid=5197 comm="syz.1.385" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.053057][ T29] audit: type=1400 audit(1793577958.768:547): avc: denied { write } for pid=5254 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.349413][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 85.405760][ T29] audit: type=1400 audit(1793577959.118:548): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.458555][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:0) [ 85.509422][ T5275] netlink: 5576 bytes leftover after parsing attributes in process `syz.3.399'. [ 85.509660][ T5275] netlink: 5576 bytes leftover after parsing attributes in process `syz.3.399'. [ 85.510224][ T5275] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.150233][ T5299] set_capacity_and_notify: 2 callbacks suppressed [ 86.150259][ T5299] loop1: detected capacity change from 0 to 136 [ 86.177983][ T5299] iso9660: Bad value for 'uid' [ 86.178044][ T5299] iso9660: Bad value for 'uid' [ 86.328956][ T5313] bond1: Unable to set up delay as MII monitoring is disabled [ 86.332792][ T5313] bond1 (unregistering): Released all slaves [ 86.401982][ T5332] loop4: detected capacity change from 0 to 128 [ 86.427718][ T5332] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 86.454572][ T5332] ext2 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.628677][ T5336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 86.716884][ T5343] loop2: detected capacity change from 0 to 512 [ 86.718839][ T5343] EXT4-fs: Ignoring removed oldalloc option [ 86.719283][ T5343] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 86.807939][ T5343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.414'. [ 86.976563][ T5352] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 87.348569][ T5292] loop3: detected capacity change from 0 to 4096 [ 87.614406][ T5360] FAULT_INJECTION: forcing a failure. [ 87.614406][ T5360] name failslab, interval 1, probability 0, space 0, times 0 [ 87.614436][ T5360] CPU: 0 UID: 0 PID: 5360 Comm: syz.3.419 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.614460][ T5360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.614472][ T5360] Call Trace: [ 87.614549][ T5360] [ 87.614557][ T5360] __dump_stack+0x1d/0x30 [ 87.614587][ T5360] dump_stack_lvl+0x95/0xd0 [ 87.614610][ T5360] dump_stack+0x15/0x1b [ 87.614632][ T5360] should_fail_ex+0x259/0x270 [ 87.614732][ T5360] ? security_load_policy+0x70/0x890 [ 87.614758][ T5360] should_failslab+0x8c/0xb0 [ 87.614792][ T5360] __kmalloc_cache_noprof+0x5d/0x3e0 [ 87.614834][ T5360] ? security_load_policy+0x70/0x890 [ 87.614905][ T5360] security_load_policy+0x70/0x890 [ 87.614929][ T5360] ? should_fail_ex+0xdb/0x270 [ 87.614959][ T5360] sel_write_load+0x196/0x370 [ 87.614984][ T5360] ? __pfx_sel_write_load+0x10/0x10 [ 87.615085][ T5360] vfs_write+0x24f/0x990 [ 87.615119][ T5360] ? __fget_files+0x184/0x1c0 [ 87.615145][ T5360] ? mutex_lock+0x52/0x90 [ 87.615173][ T5360] ksys_write+0xdc/0x1a0 [ 87.615237][ T5360] __x64_sys_write+0x40/0x50 [ 87.615271][ T5360] x64_sys_call+0x154e/0x2550 [ 87.615361][ T5360] do_syscall_64+0x112/0x360 [ 87.615393][ T5360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.615417][ T5360] RIP: 0033:0x7fd3a4e1f559 [ 87.615436][ T5360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.615453][ T5360] RSP: 002b:00007fd3a386f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.615491][ T5360] RAX: ffffffffffffffda RBX: 00007fd3a50a5fa0 RCX: 00007fd3a4e1f559 [ 87.615504][ T5360] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 87.615516][ T5360] RBP: 00007fd3a386f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.615531][ T5360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.615545][ T5360] R13: 00007fd3a50a6038 R14: 00007fd3a50a5fa0 R15: 00007ffeb196e168 [ 87.615566][ T5360] [ 87.617436][ T5360] SELinux: failed to load policy [ 87.669212][ T5349] loop1: detected capacity change from 0 to 4096 [ 87.936526][ T5369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 87.956105][ T5376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5376 comm=syz.2.426 [ 88.005983][ T5355] loop0: detected capacity change from 0 to 4096 [ 88.137291][ T5392] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.274767][ T5390] loop3: detected capacity change from 0 to 164 [ 88.275537][ T5390] iso9660: Bad value for 'check' [ 88.408686][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 88.408703][ T29] audit: type=1400 audit(1793577962.108:567): avc: denied { write } for pid=5354 comm="syz.0.418" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.457670][ T5394] netlink: 108 bytes leftover after parsing attributes in process `syz.4.429'. [ 88.870681][ T29] audit: type=1400 audit(1793577962.588:568): avc: denied { create } for pid=5412 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.872164][ T29] audit: type=1400 audit(1793577962.588:569): avc: denied { read } for pid=5412 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.285790][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 89.316410][ T5425] loop3: detected capacity change from 0 to 512 [ 89.331492][ T5425] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.465922][ T5409] loop2: detected capacity change from 0 to 4096 [ 89.530385][ T29] audit: type=1400 audit(1793577963.238:570): avc: denied { write } for pid=5408 comm="syz.2.433" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.725769][ T5415] loop1: detected capacity change from 0 to 4096 [ 89.850077][ T29] audit: type=1400 audit(1793577963.568:571): avc: denied { write } for pid=5414 comm="syz.1.436" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.922561][ T5448] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 89.941321][ T5448] ext2 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.082761][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 90.106264][ T5464] netlink: 108 bytes leftover after parsing attributes in process `syz.1.450'. [ 90.226852][ T29] audit: type=1400 audit(1793577963.938:572): avc: denied { write } for pid=5447 comm="syz.4.447" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.472599][ T5481] iso9660: Bad value for 'check' [ 90.704607][ T29] audit: type=1400 audit(1793577964.418:573): avc: denied { write } for pid=5479 comm="syz.0.455" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.858147][ T29] audit: type=1400 audit(1793577964.578:574): avc: denied { mount } for pid=5493 comm="syz.0.459" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 90.860566][ T29] audit: type=1400 audit(1793577964.578:575): avc: denied { map } for pid=5493 comm="syz.0.459" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.860595][ T29] audit: type=1400 audit(1793577964.578:576): avc: denied { read write } for pid=5493 comm="syz.0.459" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.979613][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 91.035745][ T5507] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 91.048713][ T5507] ext2 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.253174][ T5522] netlink: 'syz.0.468': attribute type 27 has an invalid length. [ 91.253194][ T5522] netlink: 'syz.0.468': attribute type 4 has an invalid length. [ 91.253204][ T5522] netlink: 152 bytes leftover after parsing attributes in process `syz.0.468'. [ 91.483819][ T5532] FAULT_INJECTION: forcing a failure. [ 91.483819][ T5532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.483893][ T5532] CPU: 0 UID: 0 PID: 5532 Comm: syz.3.467 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.483920][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.483935][ T5532] Call Trace: [ 91.483940][ T5532] [ 91.483946][ T5532] __dump_stack+0x1d/0x30 [ 91.484051][ T5532] dump_stack_lvl+0x95/0xd0 [ 91.484075][ T5532] dump_stack+0x15/0x1b [ 91.484098][ T5532] should_fail_ex+0x259/0x270 [ 91.484129][ T5532] should_fail+0xb/0x20 [ 91.484210][ T5532] should_fail_usercopy+0x1a/0x20 [ 91.484252][ T5532] _copy_from_iter+0xcc/0xe80 [ 91.484296][ T5532] ? __alloc_skb+0x516/0x6f0 [ 91.484424][ T5532] ? __alloc_skb+0x209/0x6f0 [ 91.484452][ T5532] netlink_sendmsg+0x4d6/0x740 [ 91.484482][ T5532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.484505][ T5532] ____sys_sendmsg+0x54a/0x590 [ 91.484543][ T5532] ___sys_sendmsg+0x195/0x1e0 [ 91.484570][ T5532] __x64_sys_sendmsg+0xd4/0x160 [ 91.484630][ T5532] x64_sys_call+0x22ab/0x2550 [ 91.484659][ T5532] do_syscall_64+0x112/0x360 [ 91.484693][ T5532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.484712][ T5532] RIP: 0033:0x7fd3a4e1f559 [ 91.484729][ T5532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.484746][ T5532] RSP: 002b:00007fd3a382d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.484764][ T5532] RAX: ffffffffffffffda RBX: 00007fd3a50a6180 RCX: 00007fd3a4e1f559 [ 91.484779][ T5532] RDX: 00000000000400d4 RSI: 0000200000000280 RDI: 000000000000000a [ 91.484792][ T5532] RBP: 00007fd3a382d090 R08: 0000000000000000 R09: 0000000000000000 [ 91.484814][ T5532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.484828][ T5532] R13: 00007fd3a50a6218 R14: 00007fd3a50a6180 R15: 00007ffeb196e168 [ 91.484849][ T5532] [ 91.881213][ T5509] set_capacity_and_notify: 5 callbacks suppressed [ 91.881303][ T5509] loop1: detected capacity change from 0 to 4096 [ 91.938264][ T5537] netlink: 'syz.2.470': attribute type 1 has an invalid length. [ 91.954843][ T5537] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 91.961677][ T5537] macvlan2: entered promiscuous mode [ 91.961698][ T5537] macvlan2: entered allmulticast mode [ 91.962158][ T5537] bond1: entered promiscuous mode [ 91.962192][ T5537] bridge1: entered promiscuous mode [ 91.962579][ T5537] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.971209][ T5537] bond1: left promiscuous mode [ 91.971277][ T5537] bridge1: left promiscuous mode [ 92.034134][ T5540] netlink: 108 bytes leftover after parsing attributes in process `syz.1.471'. [ 92.127873][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 92.161917][ T5556] loop4: detected capacity change from 0 to 128 [ 92.193417][ T5556] 9pnet_fd: p9_fd_create_tcp (5556): problem connecting socket to 127.0.0.1 [ 92.265431][ T5562] loop3: detected capacity change from 0 to 128 [ 92.292743][ T5562] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 92.321659][ T5562] ext2 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.375350][ T5573] loop2: detected capacity change from 0 to 164 [ 92.392279][ T5573] iso9660: Bad value for 'check' [ 92.758110][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 92.902165][ T5603] loop0: detected capacity change from 0 to 128 [ 93.002044][ T5605] loop1: detected capacity change from 0 to 4096 [ 93.288725][ T5619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 93.305915][ T5625] loop1: detected capacity change from 0 to 512 [ 93.312753][ T5625] ext2: Unknown parameter 'obj_user' [ 93.338446][ T5625] loop1: detected capacity change from 0 to 512 [ 93.369869][ T5625] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.433097][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 93.433112][ T29] audit: type=1326 audit(1793577967.148:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.1.498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509206f559 code=0x7ffc0000 [ 93.433137][ T29] audit: type=1326 audit(1793577967.148:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.1.498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509206f559 code=0x7ffc0000 [ 93.451900][ T29] audit: type=1326 audit(1793577967.158:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.1.498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f509206f559 code=0x7ffc0000 [ 93.451933][ T29] audit: type=1400 audit(1793577967.158:625): avc: denied { write } for pid=5624 comm="syz.1.498" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.451957][ T29] audit: type=1400 audit(1793577967.158:626): avc: denied { read } for pid=5624 comm="syz.1.498" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 93.452135][ T29] audit: type=1326 audit(1793577967.158:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.1.498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509206f559 code=0x7ffc0000 [ 93.452162][ T29] audit: type=1326 audit(1793577967.158:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.1.498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509206f559 code=0x7ffc0000 [ 93.455602][ T29] audit: type=1326 audit(1793577967.158:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.1.498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f509206f559 code=0x7ffc0000 [ 93.455632][ T29] audit: type=1400 audit(1793577967.158:630): avc: denied { setattr } for pid=5624 comm="syz.1.498" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.455655][ T29] audit: type=1326 audit(1793577967.158:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.1.498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509206f559 code=0x7ffc0000 [ 93.459017][ T5625] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.498: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 93.686575][ T5639] netlink: 108 bytes leftover after parsing attributes in process `syz.1.502'. [ 93.714100][ T5637] loop3: detected capacity change from 0 to 128 [ 93.890297][ T5613] loop0: detected capacity change from 0 to 4096 [ 94.639628][ T5650] iso9660: Bad value for 'check' [ 94.799438][ T5655] syz.4.506 (5655) used greatest stack depth: 8648 bytes left [ 94.993124][ T5666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 95.468182][ T5682] 9pnet_fd: p9_fd_create_tcp (5682): problem connecting socket to 127.0.0.1 [ 95.532901][ T5687] netlink: 108 bytes leftover after parsing attributes in process `syz.4.518'. [ 95.684125][ T5698] sctp: [Deprecated]: syz.1.519 (pid 5698) Use of int in max_burst socket option. [ 95.684125][ T5698] Use struct sctp_assoc_value instead [ 95.802205][ T5698] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.802273][ T5698] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 95.813007][ T5698] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 95.813495][ T5698] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 95.813636][ T5698] System zones: 0-2, 18-18, 34-34 [ 95.828279][ T5698] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.519: bad orphan inode 15 [ 95.828417][ T5698] loop1: lost filesystem error report for type 5 error -117 [ 95.830655][ T5698] ext4_test_bit(bit=14, block=18) = 1 [ 95.830751][ T5698] is_bad_inode(inode)=0 [ 95.830795][ T5698] NEXT_ORPHAN(inode)=2264924160 [ 95.830814][ T5698] max_ino=32 [ 95.830834][ T5698] i_nlink=0 [ 95.832015][ T5698] EXT4-fs error (device loop1): ext4_do_update_inode:6707: inode #15: comm syz.1.519: corrupted inode contents [ 95.833538][ T5698] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.833812][ T5698] EXT4-fs error (device loop1): ext4_dirty_inode:7679: inode #15: comm syz.1.519: mark_inode_dirty error [ 95.833891][ T5698] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.834376][ T5698] EXT4-fs error (device loop1): ext4_do_update_inode:6707: inode #15: comm syz.1.519: corrupted inode contents [ 95.834455][ T5698] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.834892][ T5698] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.519: mark_inode_dirty error [ 95.834982][ T5698] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.836652][ C0] EXT4-fs (loop1): error count since last fsck: 5 [ 95.836683][ C0] EXT4-fs (loop1): initial error at time 1793577969: ext4_orphan_get:1430 [ 95.836742][ C0] EXT4-fs (loop1): last error at time 1793577969: ext4_xattr_delete_inode:2962: inode 15 [ 95.838018][ T5698] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2965: inode #15: comm syz.1.519: mark inode dirty (error -117) [ 95.838090][ T5698] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.838346][ T5698] EXT4-fs warning (device loop1): ext4_evict_inode:355: xattr delete (err -117) [ 96.533294][ T5713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 96.786006][ T5725] 9pnet_fd: p9_fd_create_tcp (5725): problem connecting socket to 127.0.0.1 [ 96.898238][ T5685] EXT4-fs mount: 50 callbacks suppressed [ 96.898265][ T5685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.939087][ T5710] set_capacity_and_notify: 7 callbacks suppressed [ 96.939104][ T5710] loop1: detected capacity change from 0 to 4096 [ 96.960925][ T5710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.962478][ T5728] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 97.124387][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.145624][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.990640][ T5768] netlink: 108 bytes leftover after parsing attributes in process `syz.2.536'. [ 98.395440][ T5787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.538'. [ 98.495523][ T5787] loop1: detected capacity change from 0 to 512 [ 98.552683][ T5789] loop0: detected capacity change from 0 to 128 [ 98.891864][ T5806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'. [ 98.891943][ T5806] openvswitch: netlink: Message has 8 unknown bytes. [ 98.951604][ T5800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 99.086877][ T5736] loop3: detected capacity change from 0 to 4096 [ 99.259751][ T5736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.276703][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 99.276744][ T29] audit: type=1400 audit(1793577972.988:657): avc: denied { write } for pid=5735 comm="syz.3.531" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.552974][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.957322][ T5837] loop1: detected capacity change from 0 to 128 [ 100.127260][ T5843] sctp: [Deprecated]: syz.4.555 (pid 5843) Use of int in max_burst socket option. [ 100.127260][ T5843] Use struct sctp_assoc_value instead [ 100.277046][ T5843] loop4: detected capacity change from 0 to 512 [ 100.356739][ T29] audit: type=1400 audit(1793577974.038:658): avc: denied { connect } for pid=5822 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.507079][ T5843] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.507101][ T5843] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 100.546044][ T5843] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 100.556834][ T5843] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 100.561237][ T5843] System zones: 0-2, 18-18, 34-34 [ 100.588494][ T5815] loop2: detected capacity change from 0 to 4096 [ 100.598785][ T5849] netlink: 108 bytes leftover after parsing attributes in process `syz.1.557'. [ 100.623864][ T5843] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.555: bad orphan inode 15 [ 100.623954][ T5843] loop4: lost filesystem error report for type 5 error -117 [ 100.624830][ T5843] ext4_test_bit(bit=14, block=18) = 1 [ 100.624903][ T5843] is_bad_inode(inode)=0 [ 100.624920][ T5843] NEXT_ORPHAN(inode)=2264924160 [ 100.624938][ T5843] max_ino=32 [ 100.624971][ T5843] i_nlink=0 [ 100.626683][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 100.626702][ C1] EXT4-fs (loop4): initial error at time 1793577974: ext4_orphan_get:1430 [ 100.626726][ C1] EXT4-fs (loop4): last error at time 1793577974: ext4_orphan_get:1430 [ 100.677358][ T5815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.701860][ T29] audit: type=1400 audit(1793577974.408:659): avc: denied { write } for pid=5814 comm="syz.2.547" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.727289][ T5843] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #15: comm syz.4.555: corrupted inode contents [ 100.727360][ T5843] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.730056][ T5843] EXT4-fs error (device loop4): ext4_dirty_inode:7679: inode #15: comm syz.4.555: mark_inode_dirty error [ 100.730145][ T5843] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.731584][ T5843] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #15: comm syz.4.555: corrupted inode contents [ 100.731676][ T5843] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.732133][ T5843] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.555: mark_inode_dirty error [ 100.732174][ T5843] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.733675][ T5843] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2965: inode #15: comm syz.4.555: mark inode dirty (error -117) [ 100.733793][ T5843] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.734186][ T5843] EXT4-fs warning (device loop4): ext4_evict_inode:355: xattr delete (err -117) [ 100.800545][ T5843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.836556][ T5847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 100.912607][ T5863] FAULT_INJECTION: forcing a failure. [ 100.912607][ T5863] name failslab, interval 1, probability 0, space 0, times 0 [ 100.912634][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: syz.0.559 Not tainted syzkaller #0 PREEMPT(lazy) [ 100.912660][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.912674][ T5863] Call Trace: [ 100.912681][ T5863] [ 100.912694][ T5863] __dump_stack+0x1d/0x30 [ 100.912729][ T5863] dump_stack_lvl+0x95/0xd0 [ 100.912749][ T5863] dump_stack+0x15/0x1b [ 100.912766][ T5863] should_fail_ex+0x259/0x270 [ 100.912795][ T5863] ? sctp_add_bind_addr+0x71/0x1e0 [ 100.912849][ T5863] should_failslab+0x8c/0xb0 [ 100.912890][ T5863] __kmalloc_cache_noprof+0x5d/0x3e0 [ 100.912959][ T5863] ? sctp_add_bind_addr+0x71/0x1e0 [ 100.912999][ T5863] sctp_add_bind_addr+0x71/0x1e0 [ 100.913041][ T5863] sctp_copy_local_addr_list+0x1b4/0x250 [ 100.913139][ T5863] sctp_copy_one_addr+0x7f/0x280 [ 100.913228][ T5863] sctp_bind_addr_copy+0x79/0x290 [ 100.913288][ T5863] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 100.913383][ T5863] sctp_connect_new_asoc+0x1c3/0x3a0 [ 100.913406][ T5863] __sctp_connect+0x428/0x7a0 [ 100.913429][ T5863] sctp_getsockopt_connectx3+0x269/0x340 [ 100.913497][ T5863] sctp_getsockopt+0x910/0xaa0 [ 100.913517][ T5863] sock_common_getsockopt+0x60/0x70 [ 100.913545][ T5863] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 100.913583][ T5863] do_sock_getsockopt+0x2ce/0x350 [ 100.913624][ T5863] __x64_sys_getsockopt+0x11d/0x1a0 [ 100.913657][ T5863] x64_sys_call+0x1032/0x2550 [ 100.913779][ T5863] do_syscall_64+0x112/0x360 [ 100.913813][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.913837][ T5863] RIP: 0033:0x7f28b3a3f559 [ 100.913932][ T5863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.913950][ T5863] RSP: 002b:00007f28b2497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 100.913969][ T5863] RAX: ffffffffffffffda RBX: 00007f28b3cc5fa0 RCX: 00007f28b3a3f559 [ 100.914008][ T5863] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 100.914028][ T5863] RBP: 00007f28b2497090 R08: 0000200000000440 R09: 0000000000000000 [ 100.914079][ T5863] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000002 [ 100.914093][ T5863] R13: 00007f28b3cc6038 R14: 00007f28b3cc5fa0 R15: 00007ffc59e62648 [ 100.914114][ T5863] [ 100.949734][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.963636][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.192340][ T5875] loop0: detected capacity change from 0 to 128 [ 101.192983][ T5875] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 101.194174][ T5875] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.194345][ T5875] ext2 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.396947][ T29] audit: type=1400 audit(1793577975.098:660): avc: denied { write } for pid=5869 comm="syz.0.563" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.575340][ T3292] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.812839][ T5885] loop0: detected capacity change from 0 to 128 [ 101.985930][ T29] audit: type=1400 audit(1793577975.698:661): avc: denied { sqpoll } for pid=5890 comm="syz.1.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 102.231903][ T12] ------------[ cut here ]------------ [ 102.231923][ T12] WARNING: io_uring/sqpoll.c:88 at io_sq_thread_stop+0x8f/0xa0, CPU#0: kworker/u8:0/12 [ 102.247213][ T12] Modules linked in: [ 102.251190][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.260515][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.270817][ T12] Workqueue: iou_exit io_ring_exit_work [ 102.276410][ T12] RIP: 0010:io_sq_thread_stop+0x8f/0xa0 [ 102.282064][ T12] Code: f7 f5 59 ff 48 89 df e8 0f 84 40 ff eb 05 e8 e8 f5 59 ff 4c 89 f7 e8 a0 17 ae 03 5b 41 5e c3 cc cc cc cc cc e8 d2 f5 59 ff 90 <0f> 0b 90 eb a0 e8 c7 f5 59 ff 90 0f 0b 90 eb ca 90 90 90 90 90 90 [ 102.301787][ T12] RSP: 0018:ffffc9000006fc20 EFLAGS: 00010293 [ 102.307933][ T12] RAX: ffffffff8200aa6e RBX: ffff88811bc73880 RCX: ffff888100291140 [ 102.316019][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 102.323012][ T5897] sctp: [Deprecated]: syz.1.572 (pid 5897) Use of int in max_burst socket option. [ 102.323012][ T5897] Use struct sctp_assoc_value instead [ 102.338664][ T12] RBP: 0000000000000000 R08: 0001c9000006fbcf R09: 0000000000000000 [ 102.345766][ T5870] loop2: detected capacity change from 0 to 4096 [ 102.353015][ T12] R10: 0001c9000006fbcc R11: 0001c9000006fbcf R12: ffff88811bc738a8 [ 102.361038][ T12] R13: ffff88811bc738a8 R14: 0000000000000001 R15: ffff88811bc73890 [ 102.369137][ T12] FS: 0000000000000000(0000) GS:ffff8882ae652000(0000) knlGS:0000000000000000 [ 102.378254][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.384858][ T12] CR2: 00007ffffffff000 CR3: 000000011c962000 CR4: 00000000003506f0 [ 102.392917][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.401095][ T12] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 102.409354][ T12] Call Trace: [ 102.412645][ T12] [ 102.415593][ T12] io_put_sq_data+0x4e/0xe0 [ 102.420125][ T12] io_sq_thread_finish+0x1e9/0x230 [ 102.425314][ T12] io_ring_ctx_free+0x1a/0x460 [ 102.430102][ T12] io_ring_exit_work+0x3b0/0x3e0 [ 102.435160][ T12] ? _raw_spin_unlock+0x9/0x30 [ 102.439950][ T12] ? __hrtimer_rearm_deferred+0x571/0x650 [ 102.445708][ T12] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 102.451053][ T12] process_scheduled_works+0x53f/0xa20 [ 102.456694][ T12] ? __list_add_valid_or_report+0x38/0xe0 [ 102.462597][ T12] worker_thread+0x56c/0x770 [ 102.467235][ T12] ? __pfx_worker_thread+0x10/0x10 [ 102.472379][ T12] kthread+0x223/0x270 [ 102.476480][ T12] ? __pfx_kthread+0x10/0x10 [ 102.481166][ T12] ret_from_fork+0x146/0x330 [ 102.485795][ T12] ? __pfx_kthread+0x10/0x10 [ 102.490485][ T12] ret_from_fork_asm+0x1a/0x30 [ 102.495306][ T12] [ 102.498350][ T12] ---[ end trace 0000000000000000 ]--- [ 102.545468][ T5870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.614824][ T29] audit: type=1400 audit(1793577976.328:662): avc: denied { write } for pid=5868 comm="syz.2.560" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.743723][ T5897] loop1: detected capacity change from 0 to 512 [ 102.755956][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.796758][ T5897] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.796799][ T5897] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 102.811322][ T5897] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 102.812123][ T5897] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 102.812378][ T5897] System zones: 0-2, 18-18, 34-34 [ 102.832133][ T5897] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.572: bad orphan inode 15 [ 102.832196][ T5897] loop1: lost filesystem error report for type 5 error -117 [ 102.836777][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 102.836877][ C0] EXT4-fs (loop1): initial error at time 1793577976: ext4_orphan_get:1430 [ 102.837067][ C0] EXT4-fs (loop1): last error at time 1793577976: ext4_orphan_get:1430 [ 102.839765][ T5897] ext4_test_bit(bit=14, block=18) = 1 [ 102.839824][ T5897] is_bad_inode(inode)=0 [ 102.839846][ T5897] NEXT_ORPHAN(inode)=2264924160 [ 102.839865][ T5897] max_ino=32 [ 102.839915][ T5897] i_nlink=0 [ 102.841681][ T5897] EXT4-fs error (device loop1): ext4_do_update_inode:6707: inode #15: comm syz.1.572: corrupted inode contents [ 102.841770][ T5897] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.843098][ T5897] EXT4-fs error (device loop1): ext4_dirty_inode:7679: inode #15: comm syz.1.572: mark_inode_dirty error [ 102.843146][ T5897] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.846553][ T5897] EXT4-fs error (device loop1): ext4_do_update_inode:6707: inode #15: comm syz.1.572: corrupted inode contents [ 102.847949][ T5897] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.850026][ T5897] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.572: mark_inode_dirty error [ 102.851444][ T5897] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.851852][ T5897] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2965: inode #15: comm syz.1.572: mark inode dirty (error -117) [ 102.851923][ T5897] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.852408][ T5897] EXT4-fs warning (device loop1): ext4_evict_inode:355: xattr delete (err -117) [ 102.868595][ T5897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.010405][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.247482][ T5865] loop3: detected capacity change from 0 to 4096 [ 103.296797][ T5910] netlink: 108 bytes leftover after parsing attributes in process `syz.1.576'. [ 103.321078][ T5865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.355669][ T29] audit: type=1400 audit(1793577977.068:663): avc: denied { write } for pid=5864 comm="syz.3.561" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.455741][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.676033][ T5895] loop4: detected capacity change from 0 to 4096 [ 103.827396][ T5888] loop0: detected capacity change from 0 to 4096 [ 104.021426][ T5895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.026438][ T5888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.179934][ T29] audit: type=1400 audit(1793577977.898:665): avc: denied { write } for pid=5887 comm="syz.0.568" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.182507][ T29] audit: type=1400 audit(1793577977.898:664): avc: denied { write } for pid=5894 comm="syz.4.571" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.336911][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.389382][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.479830][ T5935] loop4: detected capacity change from 0 to 512 [ 104.563595][ T29] audit: type=1400 audit(1793577978.268:666): avc: denied { write } for pid=5931 comm="syz.1.583" name="mcfilter" dev="proc" ino=4026532404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 104.576833][ T5940] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 104.576933][ T5940] FAT-fs (loop4): Filesystem has been set read-only [ 104.577463][ T29] audit: type=1400 audit(1793577978.298:667): avc: denied { remount } for pid=5934 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 104.584828][ T5940] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.599123][ T29] audit: type=1400 audit(1793577978.318:668): avc: denied { mount } for pid=5934 comm="syz.4.582" name="/" dev="autofs" ino=12926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 104.607093][ T5935] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 104.607148][ T5935] FAT-fs (loop4): Filesystem has been set read-only [ 104.611792][ T5935] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 104.613541][ T5935] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 104.615729][ T5935] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 104.672373][ T3293] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 104.672481][ T3293] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 104.982894][ T5947] loop1: detected capacity change from 0 to 128 [ 105.045025][ T5947] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 105.120461][ T5947] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.121075][ T5947] ext2 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.185297][ T5949] loop0: detected capacity change from 0 to 4096 [ 105.201418][ T5949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.238284][ T5951] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.260893][ T29] audit: type=1400 audit(1793577978.948:669): avc: denied { write } for pid=5938 comm="syz.0.584" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.470002][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.470040][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.470201][ T5951] bridge_slave_0: entered allmulticast mode [ 105.470636][ T5951] bridge_slave_0: entered promiscuous mode [ 105.474223][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.474264][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.474326][ T5951] bridge_slave_1: entered allmulticast mode [ 105.476251][ T5951] bridge_slave_1: entered promiscuous mode [ 105.497425][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.500205][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.522702][ T5951] team0: Port device team_slave_0 added [ 105.525118][ T5951] team0: Port device team_slave_1 added [ 105.543816][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.543832][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.543860][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.546005][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.546019][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.546223][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.595482][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.615630][ T5951] hsr_slave_0: entered promiscuous mode [ 105.622736][ T5951] hsr_slave_1: entered promiscuous mode [ 105.622946][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 105.622959][ T5951] Cannot create hsr debugfs directory [ 105.676674][ T29] audit: type=1400 audit(1793577979.398:670): avc: denied { write } for pid=5946 comm="syz.1.588" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.728022][ T5920] loop3: detected capacity change from 0 to 4096 [ 105.796978][ T5920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.834620][ T29] audit: type=1400 audit(1793577979.548:671): avc: denied { write } for pid=5919 comm="syz.3.578" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.903214][ T5951] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.910369][ T5951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.912339][ T5951] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.932895][ T5951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.933275][ T5951] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.949231][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.952782][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.961899][ T5951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.962371][ T5951] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.976153][ T5951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.008437][ T5979] netlink: 108 bytes leftover after parsing attributes in process `syz.1.593'. [ 106.186521][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.199772][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.203738][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.203782][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.212236][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.212278][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.806494][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.922850][ T5930] loop2: detected capacity change from 0 to 4096 [ 107.011487][ T5930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.053718][ T29] audit: type=1400 audit(1793577980.768:672): avc: denied { write } for pid=5929 comm="syz.2.581" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.177773][ T5951] veth0_vlan: entered promiscuous mode [ 107.180575][ T5951] veth1_vlan: entered promiscuous mode [ 107.198741][ T5951] veth0_macvtap: entered promiscuous mode [ 107.200328][ T5951] veth1_macvtap: entered promiscuous mode [ 107.204623][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.228376][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.246216][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.269235][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.269396][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.269530][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.288125][ T3629] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.313813][ T29] audit: type=1400 audit(1793577981.028:673): avc: denied { mounton } for pid=5951 comm="syz-executor" path="/root/syzkaller.e4rLwl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 107.424900][ T5969] loop0: detected capacity change from 0 to 4096 [ 107.441426][ T29] audit: type=1326 audit(1793577981.158:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.5.590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b64ef559 code=0x7ffc0000 [ 107.441488][ T29] audit: type=1326 audit(1793577981.158:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.5.590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b64ef559 code=0x7ffc0000 [ 107.445105][ T5969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.546588][ T6034] FAULT_INJECTION: forcing a failure. [ 107.546588][ T6034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.546623][ T6034] CPU: 0 UID: 0 PID: 6034 Comm: syz.3.601 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 107.546653][ T6034] Tainted: [W]=WARN [ 107.546761][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.546810][ T6034] Call Trace: [ 107.546816][ T6034] [ 107.546824][ T6034] __dump_stack+0x1d/0x30 [ 107.546853][ T6034] dump_stack_lvl+0x95/0xd0 [ 107.546876][ T6034] dump_stack+0x15/0x1b [ 107.546897][ T6034] should_fail_ex+0x259/0x270 [ 107.546997][ T6034] should_fail+0xb/0x20 [ 107.547019][ T6034] should_fail_usercopy+0x1a/0x20 [ 107.547048][ T6034] _copy_to_iter+0xd2/0xea0 [ 107.547108][ T6034] ? chacha_block_generic+0x2dc/0x310 [ 107.547142][ T6034] get_random_bytes_user+0x13b/0x2e0 [ 107.547178][ T6034] ? import_ubuf+0xe8/0x120 [ 107.547218][ T6034] __x64_sys_getrandom+0xcf/0x1a0 [ 107.547246][ T6034] x64_sys_call+0x218d/0x2550 [ 107.547371][ T6034] do_syscall_64+0x112/0x360 [ 107.547401][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.547429][ T6034] RIP: 0033:0x7fd3a4e1f559 [ 107.547446][ T6034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.547534][ T6034] RSP: 002b:00007fd3a386f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 107.547561][ T6034] RAX: ffffffffffffffda RBX: 00007fd3a50a5fa0 RCX: 00007fd3a4e1f559 [ 107.547574][ T6034] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 107.547665][ T6034] RBP: 00007fd3a386f090 R08: 0000000000000000 R09: 0000000000000000 [ 107.547679][ T6034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.547692][ T6034] R13: 00007fd3a50a6038 R14: 00007fd3a50a5fa0 R15: 00007ffeb196e168 [ 107.547712][ T6034] [ 107.768084][ T6047] loop2: detected capacity change from 0 to 128 [ 107.775469][ T6047] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 107.839192][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.011078][ T6052] netlink: 108 bytes leftover after parsing attributes in process `syz.5.605'. [ 108.030977][ T6047] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.055485][ T6047] ext2 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.358648][ T6061] FAULT_INJECTION: forcing a failure. [ 108.358648][ T6061] name failslab, interval 1, probability 0, space 0, times 0 [ 108.358683][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.0.607 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 108.358718][ T6061] Tainted: [W]=WARN [ 108.358725][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.358777][ T6061] Call Trace: [ 108.358791][ T6061] [ 108.358799][ T6061] __dump_stack+0x1d/0x30 [ 108.358829][ T6061] dump_stack_lvl+0x95/0xd0 [ 108.358873][ T6061] dump_stack+0x15/0x1b [ 108.358896][ T6061] should_fail_ex+0x259/0x270 [ 108.358933][ T6061] ? skb_clone+0x151/0x1f0 [ 108.358953][ T6061] should_failslab+0x8c/0xb0 [ 108.358988][ T6061] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 108.359054][ T6061] ? inode_doinit_with_dentry+0x98/0x7b0 [ 108.359085][ T6061] ? skb_clone+0x151/0x1f0 [ 108.359108][ T6061] skb_clone+0x151/0x1f0 [ 108.359142][ T6061] __netlink_deliver_tap+0x258/0x3e0 [ 108.359170][ T6061] netlink_unicast+0x712/0x740 [ 108.359268][ T6061] netlink_sendmsg+0x5ef/0x740 [ 108.359293][ T6061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.359342][ T6061] ____sys_sendmsg+0x54a/0x590 [ 108.359367][ T6061] ___sys_sendmsg+0x195/0x1e0 [ 108.359396][ T6061] __x64_sys_sendmsg+0xd4/0x160 [ 108.359416][ T6061] x64_sys_call+0x22ab/0x2550 [ 108.359491][ T6061] do_syscall_64+0x112/0x360 [ 108.359523][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.359546][ T6061] RIP: 0033:0x7f28b3a3f559 [ 108.359607][ T6061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.359634][ T6061] RSP: 002b:00007f28b2497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.359657][ T6061] RAX: ffffffffffffffda RBX: 00007f28b3cc5fa0 RCX: 00007f28b3a3f559 [ 108.359673][ T6061] RDX: 0000000004044094 RSI: 00002000000000c0 RDI: 0000000000000003 [ 108.359688][ T6061] RBP: 00007f28b2497090 R08: 0000000000000000 R09: 0000000000000000 [ 108.359737][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.359827][ T6061] R13: 00007f28b3cc6038 R14: 00007f28b3cc5fa0 R15: 00007ffc59e62648 [ 108.359850][ T6061] [ 108.465226][ T6068] FAULT_INJECTION: forcing a failure. [ 108.465226][ T6068] name failslab, interval 1, probability 0, space 0, times 0 [ 108.465260][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.0.610 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 108.465287][ T6068] Tainted: [W]=WARN [ 108.465293][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.465371][ T6068] Call Trace: [ 108.465377][ T6068] [ 108.465385][ T6068] __dump_stack+0x1d/0x30 [ 108.465414][ T6068] dump_stack_lvl+0x95/0xd0 [ 108.465536][ T6068] dump_stack+0x15/0x1b [ 108.465554][ T6068] should_fail_ex+0x259/0x270 [ 108.465648][ T6068] ? argv_split+0x2e/0x250 [ 108.465668][ T6068] should_failslab+0x8c/0xb0 [ 108.465701][ T6068] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 108.465746][ T6068] ? argv_split+0x2e/0x250 [ 108.465830][ T6068] ? __rcu_read_unlock+0x4e/0x70 [ 108.465859][ T6068] kstrndup+0x7e/0x120 [ 108.465880][ T6068] argv_split+0x2e/0x250 [ 108.465915][ T6068] ? __pfx___trace_uprobe_create+0x10/0x10 [ 108.465968][ T6068] trace_probe_create+0x4b/0xd0 [ 108.465995][ T6068] trace_uprobe_create+0x1c/0x30 [ 108.466019][ T6068] dyn_event_create+0x3e/0x70 [ 108.466038][ T6068] create_or_delete_trace_uprobe+0x54/0x80 [ 108.466108][ T6068] trace_parse_run_command+0x198/0x2d0 [ 108.466159][ T6068] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 108.466194][ T6068] probes_write+0x34/0x50 [ 108.466260][ T6068] ? __pfx_probes_write+0x10/0x10 [ 108.466289][ T6068] vfs_write+0x24f/0x990 [ 108.466319][ T6068] ? __fget_files+0x184/0x1c0 [ 108.466420][ T6068] ? mutex_lock+0x52/0x90 [ 108.466446][ T6068] ksys_write+0xdc/0x1a0 [ 108.466517][ T6068] __x64_sys_write+0x40/0x50 [ 108.466543][ T6068] x64_sys_call+0x154e/0x2550 [ 108.466620][ T6068] do_syscall_64+0x112/0x360 [ 108.466670][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.466722][ T6068] RIP: 0033:0x7f28b3a3f559 [ 108.466738][ T6068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.466755][ T6068] RSP: 002b:00007f28b2497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.466783][ T6068] RAX: ffffffffffffffda RBX: 00007f28b3cc5fa0 RCX: 00007f28b3a3f559 [ 108.466798][ T6068] RDX: 000000000000001a RSI: 0000200000000580 RDI: 0000000000000004 [ 108.466811][ T6068] RBP: 00007f28b2497090 R08: 0000000000000000 R09: 0000000000000000 [ 108.466823][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.466914][ T6068] R13: 00007f28b3cc6038 R14: 00007f28b3cc5fa0 R15: 00007ffc59e62648 [ 108.466935][ T6068] [ 108.495599][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.929992][ T6077] loop3: detected capacity change from 0 to 128 [ 108.986324][ T6077] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 109.028100][ T6077] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.029501][ T6077] ext2 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.066090][ T6084] loop1: detected capacity change from 0 to 128 [ 109.080564][ T6084] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 109.095582][ T6084] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.102330][ T6084] ext2 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.294699][ T6071] loop0: detected capacity change from 0 to 4096 [ 109.349468][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.397654][ T6071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.398747][ T6092] loop1: detected capacity change from 0 to 512 [ 109.400832][ T6092] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 109.400848][ T6092] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.401966][ T6092] EXT4-fs (loop1): 1 truncate cleaned up [ 109.402449][ T6092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.474341][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.543066][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.651271][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.803039][ T6102] loop0: detected capacity change from 0 to 128 [ 109.908766][ T6102] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 110.049351][ T6073] loop2: detected capacity change from 0 to 4096 [ 110.057334][ T6102] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.060610][ T6102] ext2 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.410951][ T6073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.441201][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 110.441217][ T29] audit: type=1400 audit(1793577984.158:719): avc: denied { write } for pid=6072 comm="syz.2.611" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.900913][ T29] audit: type=1400 audit(1793577984.618:720): avc: denied { write } for pid=6101 comm="syz.0.621" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.968000][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.054175][ T6126] loop3: detected capacity change from 0 to 512 [ 111.072456][ T6126] FAT-fs (loop3): Invalid FSINFO signature: 0x00000852, 0x61417272 (sector = 1) [ 111.292969][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'. [ 111.293248][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.629'. [ 111.373486][ T6080] loop5: detected capacity change from 0 to 4096 [ 111.390318][ T3292] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.421953][ T6080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.445495][ T29] audit: type=1400 audit(1793577985.158:721): avc: denied { write } for pid=6079 comm="syz.5.615" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.507299][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.631'. [ 111.532698][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.533068][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.597740][ T6141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.600007][ T29] audit: type=1400 audit(1793577985.318:722): avc: denied { write } for pid=6135 comm="syz.2.628" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.610976][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.617881][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.677143][ T5951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.778219][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.797593][ T6165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.818583][ T6144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.819298][ T6144] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.823374][ T6144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.871633][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.874323][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.880108][ T6144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.880135][ T6144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.887626][ T6144] veth1_vlan: left promiscuous mode [ 111.888422][ T6144] veth0_vlan: left promiscuous mode [ 111.890872][ T6144] veth0_vlan: entered promiscuous mode [ 111.893517][ T6144] veth1_vlan: entered promiscuous mode [ 111.905025][ T6144] veth1_macvtap: left promiscuous mode [ 111.907217][ T6144] veth0_macvtap: left promiscuous mode [ 111.907752][ T6144] veth0_macvtap: entered promiscuous mode [ 111.908296][ T6144] veth1_macvtap: entered promiscuous mode [ 111.918943][ T6144] 8021q: adding VLAN 0 to HW filter on device eth0 [ 111.923217][ T6144] 8021q: adding VLAN 0 to HW filter on device eth1 [ 111.927757][ T6144] 8021q: adding VLAN 0 to HW filter on device eth2 [ 111.931976][ T6144] 8021q: adding VLAN 0 to HW filter on device eth3 [ 111.941315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.941352][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.961105][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.961140][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.048546][ T6162] syz2: Port: 1 Link ACTIVE [ 112.099489][ T6172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.121181][ T29] audit: type=1400 audit(1793577985.838:723): avc: denied { write } for pid=6169 comm="syz.2.633" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.296355][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.769710][ T29] audit: type=1400 audit(1793577986.488:724): avc: denied { bind } for pid=6200 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.770114][ T29] audit: type=1400 audit(1793577986.488:725): avc: denied { listen } for pid=6200 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.811951][ T29] audit: type=1400 audit(1793577986.528:726): avc: denied { read } for pid=6200 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.860027][ T6190] set_capacity_and_notify: 2 callbacks suppressed [ 112.860052][ T6190] loop1: detected capacity change from 0 to 4096 [ 112.865389][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'. [ 112.890396][ T6190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.894519][ T29] audit: type=1400 audit(1793577986.608:727): avc: denied { write } for pid=6189 comm="syz.1.641" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.956800][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.037939][ T6207] loop1: detected capacity change from 0 to 128 [ 113.057884][ T6207] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 113.063016][ T6207] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.063445][ T6207] ext2 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.116195][ T29] audit: type=1400 audit(1793577986.828:728): avc: denied { write } for pid=6206 comm="syz.1.645" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.169860][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.778646][ T6209] loop3: detected capacity change from 0 to 4096 [ 113.839131][ T6209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.009923][ T6233] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 114.010019][ T6232] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 114.015932][ T6232] loop2: detected capacity change from 0 to 512 [ 114.051197][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.075393][ T6232] EXT4-fs (loop2): 1 truncate cleaned up [ 114.075794][ T6232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.108941][ T6232] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 13: comm syz.2.653: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 114.110401][ T6232] EXT4-fs (loop2): Remounting filesystem read-only [ 114.311060][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.760963][ T6254] loop0: detected capacity change from 0 to 128 [ 114.799683][ T6247] loop2: detected capacity change from 0 to 4096 [ 114.831832][ T6254] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 114.833185][ T6247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.881396][ T6254] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.884118][ T6254] ext2 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.886325][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.057599][ T3292] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.093427][ T6264] FAULT_INJECTION: forcing a failure. [ 115.093427][ T6264] name failslab, interval 1, probability 0, space 0, times 0 [ 115.093460][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.1.661 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 115.093491][ T6264] Tainted: [W]=WARN [ 115.093497][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 115.093508][ T6264] Call Trace: [ 115.093542][ T6264] [ 115.093548][ T6264] __dump_stack+0x1d/0x30 [ 115.093574][ T6264] dump_stack_lvl+0x95/0xd0 [ 115.093598][ T6264] dump_stack+0x15/0x1b [ 115.093624][ T6264] should_fail_ex+0x259/0x270 [ 115.093674][ T6264] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 115.093739][ T6264] should_failslab+0x8c/0xb0 [ 115.093769][ T6264] __kmalloc_noprof+0xb6/0x4b0 [ 115.093797][ T6264] ? avc_has_perm_noaudit+0xac/0x160 [ 115.093823][ T6264] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 115.093900][ T6264] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 115.093934][ T6264] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 115.094016][ T6264] ? selinux_capable+0x31/0x40 [ 115.094046][ T6264] ? security_capable+0x7b/0x90 [ 115.094070][ T6264] ? ns_capable+0x80/0xb0 [ 115.094163][ T6264] genl_rcv_msg+0x42f/0x470 [ 115.094185][ T6264] ? __pfx_wg_set_device_doit+0x10/0x10 [ 115.094213][ T6264] netlink_rcv_skb+0x11e/0x220 [ 115.094229][ T6264] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.094283][ T6264] genl_rcv+0x28/0x40 [ 115.094307][ T6264] netlink_unicast+0x665/0x740 [ 115.094339][ T6264] netlink_sendmsg+0x5ef/0x740 [ 115.094359][ T6264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.094506][ T6264] ____sys_sendmsg+0x54a/0x590 [ 115.094530][ T6264] ___sys_sendmsg+0x195/0x1e0 [ 115.094571][ T6264] __x64_sys_sendmsg+0xd4/0x160 [ 115.094594][ T6264] x64_sys_call+0x22ab/0x2550 [ 115.094617][ T6264] do_syscall_64+0x112/0x360 [ 115.094679][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.094704][ T6264] RIP: 0033:0x7f509206f559 [ 115.094723][ T6264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.094788][ T6264] RSP: 002b:00007f5090abf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.094807][ T6264] RAX: ffffffffffffffda RBX: 00007f50922f5fa0 RCX: 00007f509206f559 [ 115.094823][ T6264] RDX: 0000000000040000 RSI: 0000200000000cc0 RDI: 0000000000000006 [ 115.094848][ T6264] RBP: 00007f5090abf090 R08: 0000000000000000 R09: 0000000000000000 [ 115.094862][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.094873][ T6264] R13: 00007f50922f6038 R14: 00007f50922f5fa0 R15: 00007fffb906b2e8 [ 115.094959][ T6264] [ 115.553998][ T6238] loop3: detected capacity change from 0 to 4096 [ 115.648561][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 115.648577][ T29] audit: type=1400 audit(1793577989.348:736): avc: denied { write } for pid=6237 comm="syz.3.654" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.936009][ T6276] loop5: detected capacity change from 0 to 164 [ 115.953833][ T6276] iso9660: Bad value for 'check' [ 115.980679][ T6280] sctp: [Deprecated]: syz.3.666 (pid 6280) Use of int in max_burst socket option. [ 115.980679][ T6280] Use struct sctp_assoc_value instead [ 116.013838][ T6281] loop1: detected capacity change from 0 to 164 [ 116.027674][ T6281] iso9660: Bad value for 'check' [ 116.182496][ T6289] loop3: detected capacity change from 0 to 128 [ 116.206227][ T6289] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 116.225871][ T6289] ext2 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.427271][ T6293] iso9660: Bad value for 'check' [ 116.450371][ T29] audit: type=1400 audit(1793577990.168:737): avc: denied { write } for pid=6288 comm="syz.3.670" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.489146][ T29] audit: type=1400 audit(1793577990.198:738): avc: denied { write } for pid=6262 comm="syz.0.660" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.995193][ T6307] 9p: Bad value for 'rfdno' [ 117.119403][ T6307] netlink: 5576 bytes leftover after parsing attributes in process `syz.5.675'. [ 117.119481][ T6307] netlink: 5576 bytes leftover after parsing attributes in process `syz.5.675'. [ 117.209514][ T6314] netlink: 108 bytes leftover after parsing attributes in process `syz.2.676'. [ 117.349550][ T29] audit: type=1400 audit(1793577991.068:739): avc: denied { write } for pid=6313 comm="syz.1.686" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.409014][ T6321] sctp: [Deprecated]: syz.5.678 (pid 6321) Use of int in max_burst socket option. [ 117.409014][ T6321] Use struct sctp_assoc_value instead [ 117.912664][ T29] audit: type=1400 audit(1793577991.628:740): avc: denied { create } for pid=6331 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.936964][ T29] audit: type=1400 audit(1793577991.638:741): avc: denied { write } for pid=6331 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 118.338080][ T6296] set_capacity_and_notify: 3 callbacks suppressed [ 118.338258][ T6296] loop3: detected capacity change from 0 to 4096 [ 118.417231][ T6339] loop2: detected capacity change from 0 to 128 [ 118.449906][ T6339] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 118.532148][ T29] audit: type=1400 audit(1793577992.228:742): avc: denied { write } for pid=6295 comm="syz.3.671" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.568785][ T6339] ext2 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.866590][ T29] audit: type=1400 audit(1793577992.578:743): avc: denied { write } for pid=6338 comm="syz.2.684" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.899635][ T6347] loop0: detected capacity change from 0 to 128 [ 119.039826][ T6345] loop3: detected capacity change from 0 to 164 [ 119.092425][ T6345] iso9660: Bad value for 'check' [ 119.108202][ T6328] loop5: detected capacity change from 0 to 4096 [ 119.149413][ T6330] loop1: detected capacity change from 0 to 4096 [ 119.212392][ T29] audit: type=1400 audit(1793577992.928:745): avc: denied { write } for pid=6329 comm="syz.1.681" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.214016][ T29] audit: type=1400 audit(1793577992.918:744): avc: denied { write } for pid=6326 comm="syz.5.680" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.315692][ T6360] loop2: detected capacity change from 0 to 4096 [ 119.331652][ T6359] sctp: [Deprecated]: syz.0.691 (pid 6359) Use of int in max_burst socket option. [ 119.331652][ T6359] Use struct sctp_assoc_value instead [ 119.334655][ T6362] loop1: detected capacity change from 0 to 512 [ 119.381079][ T6362] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.474907][ T6374] netlink: 108 bytes leftover after parsing attributes in process `syz.0.697'. [ 119.601760][ T6371] loop2: detected capacity change from 0 to 4096 [ 119.708687][ T6383] loop3: detected capacity change from 0 to 128 [ 119.831206][ T6392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.701'. [ 119.967080][ T6403] iso9660: Bad value for 'check' [ 120.231988][ T6410] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 120.501954][ T6418] iso9660: Bad value for 'check' [ 120.938565][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 120.938583][ T29] audit: type=1400 audit(1793577994.658:759): avc: denied { write } for pid=6425 comm="syz.3.713" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.998841][ T29] audit: type=1400 audit(1793577994.718:760): avc: denied { name_connect } for pid=6429 comm="syz.3.714" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 121.040036][ T6430] msdos: Unknown parameter '017777777777777777777770x000000000000ee001844674407370955161500000000000000000006N!jQUVF/a돕Xs#x};"&!%1񩒩 [ 121.040036][ T6430] Ϳlo0;EI7SIȧ!wWC{d)"' [ 121.121642][ T29] audit: type=1400 audit(1793577994.838:761): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 121.173654][ T6437] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.347429][ T6442] netlink: 108 bytes leftover after parsing attributes in process `syz.0.718'. [ 121.877317][ T29] audit: type=1400 audit(1793577995.588:762): avc: denied { write } for pid=6434 comm="syz.1.716" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.880624][ T29] audit: type=1400 audit(1793577995.598:763): avc: denied { read write } for pid=6434 comm="syz.1.716" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.911469][ T29] audit: type=1400 audit(1793577995.598:764): avc: denied { open } for pid=6434 comm="syz.1.716" path="/147/file0/file0/file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.017614][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 122.033383][ T29] audit: type=1400 audit(1793577995.748:765): avc: denied { getopt } for pid=6450 comm="syz.1.720" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.037597][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 122.371076][ T6471] FAULT_INJECTION: forcing a failure. [ 122.371076][ T6471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.371140][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.0.726 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 122.371173][ T6471] Tainted: [W]=WARN [ 122.371184][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 122.371203][ T6471] Call Trace: [ 122.371215][ T6471] [ 122.371228][ T6471] __dump_stack+0x1d/0x30 [ 122.371261][ T6471] dump_stack_lvl+0x95/0xd0 [ 122.371316][ T6471] dump_stack+0x15/0x1b [ 122.371339][ T6471] should_fail_ex+0x259/0x270 [ 122.371382][ T6471] should_fail+0xb/0x20 [ 122.371424][ T6471] should_fail_usercopy+0x1a/0x20 [ 122.371514][ T6471] core_sys_select+0x4a9/0x7a0 [ 122.371545][ T6471] ? set_user_sigmask+0x86/0x1a0 [ 122.371626][ T6471] __se_sys_pselect6+0x23f/0x2a0 [ 122.371653][ T6471] __x64_sys_pselect6+0x78/0x90 [ 122.371784][ T6471] x64_sys_call+0x1dfc/0x2550 [ 122.371814][ T6471] do_syscall_64+0x112/0x360 [ 122.371851][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.371877][ T6471] RIP: 0033:0x7f28b3a3f559 [ 122.371984][ T6471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.372073][ T6471] RSP: 002b:00007f28b2497028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 122.372145][ T6471] RAX: ffffffffffffffda RBX: 00007f28b3cc5fa0 RCX: 00007f28b3a3f559 [ 122.372157][ T6471] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000002000 [ 122.372170][ T6471] RBP: 00007f28b2497090 R08: 0000000000000000 R09: 0000000000000000 [ 122.372264][ T6471] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 122.372277][ T6471] R13: 00007f28b3cc6038 R14: 00007f28b3cc5fa0 R15: 00007ffc59e62648 [ 122.372298][ T6471] [ 122.546156][ T6465] EXT4-fs: Ignoring removed bh option [ 122.563773][ T6465] EXT4-fs (loop1): orphan cleanup on readonly fs [ 122.564218][ T6465] EXT4-fs (loop1): 1 truncate cleaned up [ 122.592861][ T6477] 9p: Bad value for 'rfdno' [ 122.658981][ T6477] netlink: 5576 bytes leftover after parsing attributes in process `syz.5.728'. [ 122.659111][ T6477] netlink: 5576 bytes leftover after parsing attributes in process `syz.5.728'. [ 122.662952][ T6477] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.699937][ T29] audit: type=1400 audit(1793577996.418:766): avc: denied { write } for pid=6447 comm="syz.3.719" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.738338][ T6485] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.143735][ T6498] netlink: 108 bytes leftover after parsing attributes in process `syz.2.736'. [ 123.264556][ T6500] ================================================================== [ 123.264592][ T6500] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 123.264629][ T6500] [ 123.264634][ T6500] write to 0xffffc900113d7cb0 of 8 bytes by task 6498 on cpu 1: [ 123.264649][ T6500] shmem_fallocate+0x750/0x8f0 [ 123.264678][ T6500] vfs_fallocate+0x3ac/0x400 [ 123.264708][ T6500] file_ioctl+0x4e1/0x5b0 [ 123.264735][ T6500] do_vfs_ioctl+0x7c4/0xe50 [ 123.264765][ T6500] __se_sys_ioctl+0x82/0x140 [ 123.264793][ T6500] __x64_sys_ioctl+0x43/0x50 [ 123.264818][ T6500] x64_sys_call+0x239d/0x2550 [ 123.264842][ T6500] do_syscall_64+0x112/0x360 [ 123.264868][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.264888][ T6500] [ 123.264892][ T6500] read to 0xffffc900113d7cb0 of 8 bytes by task 6500 on cpu 0: [ 123.264907][ T6500] shmem_writeout+0x2ab/0x8f0 [ 123.264928][ T6500] shrink_folio_list+0x1a81/0x2720 [ 123.264951][ T6500] evict_folios+0x1dac/0x2980 [ 123.264968][ T6500] try_to_shrink_lruvec+0x833/0x9a0 [ 123.264987][ T6500] shrink_node+0x943/0x3a90 [ 123.265004][ T6500] do_try_to_free_pages+0x310/0xb70 [ 123.265030][ T6500] try_to_free_mem_cgroup_pages+0x201/0x420 [ 123.265056][ T6500] mem_cgroup_resize_max+0x13d/0x2d0 [ 123.265081][ T6500] mem_cgroup_write+0x132/0x1c0 [ 123.265103][ T6500] cgroup_file_write+0x197/0x350 [ 123.265124][ T6500] kernfs_fop_write_iter+0x1d2/0x2e0 [ 123.265149][ T6500] vfs_write+0x57a/0x990 [ 123.265173][ T6500] ksys_write+0xdc/0x1a0 [ 123.265199][ T6500] __x64_sys_write+0x40/0x50 [ 123.265225][ T6500] x64_sys_call+0x154e/0x2550 [ 123.265247][ T6500] do_syscall_64+0x112/0x360 [ 123.265273][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.265291][ T6500] [ 123.265294][ T6500] value changed: 0x000000000000061f -> 0x0000000000000620 [ 123.265305][ T6500] [ 123.265308][ T6500] Reported by Kernel Concurrency Sanitizer on: [ 123.265323][ T6500] CPU: 0 UID: 0 PID: 6500 Comm: syz.2.736 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 123.265349][ T6500] Tainted: [W]=WARN [ 123.265356][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 123.265367][ T6500] ================================================================== [ 123.657703][ T6487] set_capacity_and_notify: 14 callbacks suppressed [ 123.657885][ T6487] loop0: detected capacity change from 0 to 4096 [ 123.787820][ T29] audit: type=1400 audit(1793577997.508:767): avc: denied { write } for pid=6486 comm="syz.0.732" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.866982][ T6481] loop1: detected capacity change from 0 to 4096 [ 123.946764][ T29] audit: type=1400 audit(1793577997.658:768): avc: denied { write } for pid=6480 comm="syz.1.729" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.086973][ T6496] loop3: detected capacity change from 0 to 4096