last executing test programs: 2m28.769737126s ago: executing program 2 (id=1226): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000bc0)={[{@grpquota}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2bc}}, {@nodioread_nolock}, {@dioread_nolock}, {@sysvgroups}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0x100, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f00000000c0)={[{@hide}, {@overriderock, 0x0}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@check_relaxed}, {@cruft}, {@utf8, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@session={'session', 0x3d, 0x58}}, {@mode={'mode', 0x3d, 0xffffffffffffffff}}, {@map_off}, {@check_strict}], [{@uid_gt}, {@fowner_eq}]}, 0xfa, 0x6d0, &(0x7f0000001f80)="$eJzs3dtv2+YZx/Ef5ZPibkGxDUUQ5PAmWTEHyxRJbhwYGdZyFGVzk0SBlAcbGFBki10EkbMt6YDFN61vdgA6YNe7680udrd/YECvi2H/w+42oNjuNmwXHEiKsk6U7MY5tP1+hFYU+fB9n5dU9Ji2SAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMhyauVyxVLDa21tm3xOLfCbU5anrS3oejpxfWa/khX/p2JR59JZ5752tPi1+H9XdSF9dUHF+Kmog1dee/XOV+cL2fpTEvo0dNIGHz85eHC32919dIzYOZ24+RdJhWMEbbgtL/S9pr3hGi/0zfraWvnmZj00da/hhjthx20aJ3ALHT8wK851U1lfXzVuacffam3U7Iabzbz9rWq5vGa+t5TuaEml0Nn0Gg2vtZHExIvjmNvmgx+mAa7dNGbvfnd3dVaScVAlb2FhIKg6q6VquVqtVKrVytqt9Vu3y+X5sRnlmFXu01hE9qY9zubF59HpfXgDT6kQ1/+/WVJDRbW0pW2ZiQ9HNQXy1Uxf/zVeeXB5T1b/X7/pTu03rd+W4vqfVflz0pu9xeeV1P9L6atLefU/J1cjUxzNL3tYg/P3/9LrL7ednMdCkpHRYz3RgR7orrrqalePTtzSxMflU2nlOTw25KolT6F8eWrKTuaY3hyjda1pTWW9rU3VFcqoLk8NuQq1o1Aduck7ylEgV7Y68hXIaEWOrsuoonWta1VGrkraka8ttbShmmz9O4qiPd1PtvvqlByVBVVyApYGg6pTWsqr/z96L30X9ep/eVL9/7KG6z8+j9L3wVL69PG0GOAlEPWO/2dYHHl9+dllBAAAAAAATpuV/PbdSv52f1FSpLrXcMv5K4z+JgAAAAAAALz0LEVLuiArPv6XdFHWjON/AAAAAADwmWMl59hZkpaTL/VbR2dCHeeXAHPPIUUAAAAAAPCUkjP/Ly1KUXLRisuyTnT8DwAAAAAAPgN+PXCN/fnsGrtR9mf9gqSwvWT9+Z9LChasw/b21619O15i788VkpCjbwD8J4oiSZ36eSv8XXqh3uR6vYuSkleOe8G6oPeVXDk30b/u4Cd7s671bwUjCSzODTYwIE7gbG9tK+55bb73Sh/oyptDsfcOCkqWpL0s172GW3L8xne+Ids+W+i4252fP7z/Cynoj3Pvfne39OOfdO8luRzGsw734zzey9L502Jv0w3nkjz1c/lflJIuThzxGdWzLn/Tai5bSb/lbPxzsvcLR/sod/zDfeqXuprus6vLaezyQf+K+/H4i/H4K6Vklw2NPliwjrKojI580o7IyaKYZHEtjbm2ci19yvKL2ylYxW/OSdXSncroPhjKojqYxextYf1rbFtMy6K3LVbjLD6KG8rJYvVkWYztEQB4UfaSq/4kZ/4lFzEfq7tZecg+1D5V3Zld3d8aru7v/j75WSL58WK+97eJqb0UFX+ir1hJHVpU8sE6f37sEz0bjX22qJxP9PJTVLe4rz8e3QOpl/ZYFv+NouhOJen3tyNV9cN4hQ9z+w0b6Wa/+e7+T5ML4Mfe2X1n92G1urpWfqNcvlXVQjKM3tOcqD0AgDGz77EzM8J6Q1fSiCv3/vF6OjVU8b7S/0pBKWmiq3tayG4hcHlyq8sDX0O4kR61auCo1bz26p0z0mhsRTdyj+qSWjoQW+3HLihbZbhSH8WuPuO9AADA83V1Rh2eXP+LQ/X/hlbSiJX0mHL0uHu4lveOjvuH9HmxldnJv3XKGwMAgC8IN/jEWu78ygoCr/12ZX29Ync2XRP4zvdN4NU2XOO1Om7gbNqtDde0A7/jO37DtAMteTU3NOFWu+0HHVP3A6vth952cud307v1e+g27VbHc95vN1w7dI3jtzq20zE1L3RMe+u7DS/cdIN4ZRO2Xcere47d8fyWCf2twHFLxoSuOxDo1dxWx6t78WTLtAOvaQc75gd+Y6vpmpobOoHX7vhpg1lfXqvuB82k2ZKimTc6BADgi+Dxk4MHd7vd3UejE2fiQ/N0zqFyYsYnFic0yDWCAAB4yRyV6xOsVOxPfRQ9k6wAAAAAAAAAAAAAAAAAAAAAAMCg2af0nXBiYdLJglJ/zs/O9uakNwLIa8fSyJws4VNMNX+icNK1slMiDh58PCX4TH9OfzQDMYfPZDjZuRqDi/7+JemVdKumc+YnrV7Mb9ma3fuZKTv3mBNzJ9nd395Lx5kbM7oR+hNL/X0xf/r/HOKJh3/IWRRFUTR99aXhbbg4PkBrfvK/i3j2o8Wn2AXP5/MHwIvz/wAAAP//9j03Dw==") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xe9) getdents(r3, 0xfffffffffffffffd, 0xbb) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0xff0a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}}, 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x148}}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRES16=r3, @ANYBLOB="406b6788a9cf7dc95a33906504df274aacec77dc6158b804e77da5632c424cf6fdb390ac0123eba07e061cca144d84d3b641d6ff1be8706f9743f8af4ab7c8e964654a9033000000000100000000", @ANYRES64, @ANYRESOCT=r2], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x78, r8, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x34) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}}, 0x40810) rmdir(&(0x7f0000000000)='./file0\x00') r10 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r10}, 0x20) 2m28.449973817s ago: executing program 2 (id=1228): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, 0x0, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x14c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r7, 0x0) syz_io_uring_setup(0x837, &(0x7f00000003c0)={0x0, 0xa846, 0x10, 0x3, 0x179}, &(0x7f0000002380), 0x0, &(0x7f0000000000)) socket$l2tp(0x2, 0x2, 0x73) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9"], 0x208}, 0x40000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) 2m26.621931338s ago: executing program 2 (id=1242): socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="060000000400", @ANYRESHEX=r2, @ANYRES16], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x8, 0x0, 0x0}}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 2m25.199657976s ago: executing program 2 (id=1245): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa1e2fd22ecd4da32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$EVIOCGBITSW(r0, 0x80404525, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x400) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000001400)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0x104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x8, 0x80, 0x6, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @private=0xa010100}}}}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', r6, 0x2f, 0x1, 0x4, 0x80, 0x2e, @local, @private2, 0x40, 0x700, 0x5}}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000500)={@loopback, @broadcast, 0x0}, &(0x7f0000000540)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400900}, 0xc, &(0x7f0000000600)={&(0x7f0000001a40)={0x810, r7, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x4, 0xf3, 0x1000}, {0xfffe, 0x4, 0x14, 0x9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r5}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x124, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x0, 0x2, 0xfffffff8}, {0x739, 0xd, 0x1, 0xffffffff}, {0x9, 0x80, 0x6, 0x774a}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xfff8, 0x80, 0x5, 0x6}, {0x1, 0x2, 0x3, 0xff}, {0x100, 0xf7, 0x8, 0x451}, {0x80, 0x7f, 0x9, 0x1}, {0x2, 0xf, 0x7, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r6}, {0x150, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xca}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x810}, 0x1, 0x0, 0x0, 0x24000004}, 0x8040) 2m23.885990661s ago: executing program 2 (id=1253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x298}, 0xc004) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x74e, 0xd}, 0x106200, 0x10004, 0x20da, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r3, 0x0, 0xff40) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r4, 0x10000}], 0x1, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x0, &(0x7f0000000140)={0x6, 0x8a, 0x0, {r4}}, 0x20) bind$phonet(r4, &(0x7f00000000c0)={0x23, 0x5, 0x0, 0xaa}, 0x10) write$ppp(r3, &(0x7f0000000200)="bc72", 0x2) socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 2m22.521292577s ago: executing program 2 (id=1259): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000e4f4aa378f3d28a899bbac0cae97cf90de7c6f599fddfd6d4628f246934343d7a6170d160c20e094b9dce689f0790ab71c1d0b1d54dde2e52c7450a6fc9aef470bcbb92221554ab24e546b97e54002dd5e24a7bb3d5265fcf9d225e95fe0912dde40105fc5064f119feea"], 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x200008, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r6]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x14, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@grpjquota}]}, 0x1, 0x3f7, &(0x7f0000000ac0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x8000c61) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r8, r8, 0x0, 0xe3aa6ea) 2m7.476492785s ago: executing program 32 (id=1259): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000e4f4aa378f3d28a899bbac0cae97cf90de7c6f599fddfd6d4628f246934343d7a6170d160c20e094b9dce689f0790ab71c1d0b1d54dde2e52c7450a6fc9aef470bcbb92221554ab24e546b97e54002dd5e24a7bb3d5265fcf9d225e95fe0912dde40105fc5064f119feea"], 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x200008, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r6]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x14, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@grpjquota}]}, 0x1, 0x3f7, &(0x7f0000000ac0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x8000c61) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r8, r8, 0x0, 0xe3aa6ea) 7.441676788s ago: executing program 1 (id=2073): socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711242000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcff"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x8, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 6.862974988s ago: executing program 1 (id=2079): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) unshare(0x22020400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000000a060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) 4.930298573s ago: executing program 1 (id=2096): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept$unix(r0, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) syz_clone3(&(0x7f00000008c0)={0x80000000, &(0x7f0000000740), &(0x7f0000000780)=0x0, &(0x7f00000007c0), {0x3e}, &(0x7f0000000800)=""/76, 0x4c, &(0x7f0000000980)=""/237, &(0x7f0000000880)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, 0x0}, &(0x7f0000000ac0)=0xc) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000c00), 0x1, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) sendmmsg$unix(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="05c0d6e8fc27de39e689920c35e477be85761b7c0fcf23df00a5d16f53c80f5b7e1ac1c4d24094bdd46d180f53e0fe191993fee00919427a201a68594f180cf97463903d17a91f580d850a7442687442a01335a0967b161c80d3c06a6dd02dc3ff580b456a6062685f694a27ba1d78b0bee526169d12083a2b404f3e9426eacba57b1c3f109725591d41b61e756605545e7cdca83b855de946ba0e57fdc519e1ad6e82863ea8248f1e175043a69ea4a296957ece3163eef89e6c4f6f617ca3236b3aa2731e077678c17a45f20e5dc494810bbf566916073702f591", 0xdb}, {&(0x7f0000000500)='y', 0x1}, {&(0x7f0000000540)="a02b3f84dcb013162a104e90ad40d39596f06437736eba07bbf766b636ebd867374f606434dcb954384be8728cd682ed46b71fe6e8d26a87a52aa0e5af4ea14ba97c21f9824abc04a7531bc5e18e8b2ebdab805567d7657dbfcecf55adacf2291656003b6edf3ee9a239217db217ae94928e878f6b9b1e2c6ab8a3daa8dbefd5bf6b46f57a1f5f786a96264b7e3668ae671cbbda684d1f4bcd95a34fc2fd697363fb9fb78f3dc39711a069c1fe67dbaaf1a817", 0xb3}, {&(0x7f0000000600)="b49d2d1be6", 0x5}, {&(0x7f0000000640)="61333b68e66bcaa35c211f51f4d815b12601e90eea6e5afbfaedfa9c49ce8134b4b335479135c02672a206d301e5f7f3331f9dde647a1dbf97452b785bf40c8b29999210fd780358138c81669adcd8d438601c9191d463f5e887616a47d025248afa6c8b8ff7c367c95ca795b4849d29ee4c", 0x72}], 0x5, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01, r4}}}], 0x20, 0x8000}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b40)="b8d7857d8eb665c85124b0399f9c1b982d520a52cf3b6ad47ac531e7bd5f35a6fd5029733a5c50983cbb385b2176a269dc9068546d15e232af572bf161b976bb72ca6be7085136ce238bbe116f835bc51e8597d3d2e3fc87", 0x58}], 0x1, &(0x7f0000000c40)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r0, r1, r5, r1]}}, @rights={{0x18, 0x1, 0x1, [r0, r6]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xa8}}], 0x2, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[], 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000007100bd7000fddbdf2507000000", @ANYRES32=r7, @ANYBLOB="0c0001800500060001000000"], 0x24}}, 0x2404c010) socket(0x10, 0x3, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) alarm(0xff) socket(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0xf) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r9, 0x4236}], 0x1, 0x0, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000000d80)={0x2f5, 0x9}, &(0x7f0000000dc0)) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'erspan0\x00', 0x10}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0xfd2a, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.193800268s ago: executing program 0 (id=2100): r0 = socket$packet(0x11, 0x3, 0x300) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xfffd, 0x0) 3.749656683s ago: executing program 3 (id=2111): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, 0x0, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4, 0x0, 0x3, 0xa, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x50}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x14c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r8, 0x0) syz_io_uring_setup(0x837, &(0x7f00000003c0)={0x0, 0xa846, 0x10, 0x3, 0x179}, &(0x7f0000002380), 0x0, &(0x7f0000000000)) socket$l2tp(0x2, 0x2, 0x73) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9"], 0x208}, 0x40000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) 3.689001785s ago: executing program 4 (id=2115): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r3 = syz_open_pts(r2, 0x60300) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000200)={0x80000, {{0xa, 0x4e20, 0x1, @mcast1, 0x5}}, 0x1}, 0x90) r5 = dup3(r3, r2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1ff}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x891}, 0x4040805) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000111401002dbd7000ffdbdf2608004a000000000008004b001300000008"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x48884) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) r8 = open(&(0x7f0000000180)='./file1\x00', 0x64042, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42842, 0x8d) pwritev2(r11, &(0x7f00000001c0)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x7, 0x80001, 0x81) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0) 3.508720421s ago: executing program 4 (id=2118): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0xa, 0x5, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000003000000000300005839c900910000", 0x48}], 0x1) 3.299036178s ago: executing program 0 (id=2119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.235370841s ago: executing program 0 (id=2120): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000e4f4aa378f3d28a899bbac0cae97cf90de7c6f599fddfd6d4628f246934343d7a6170d160c20e094b9dce689f0790ab71c1d0b1d54dde2e52c7450a6fc9aef470bcbb92221554ab24e546b97e54002dd5e24a7bb3d5265fcf9d225e95fe0912dde40105fc5064f119feea"], 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x24, 0x0, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x20000040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x200008, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESOCT=r5]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x14, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@grpjquota}]}, 0x1, 0x3f7, &(0x7f0000000ac0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r7, r7, 0x0, 0xe3aa6ea) 2.747363287s ago: executing program 3 (id=2121): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000280)='sched\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019080)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26, 0x0, 0x0, 0x10}, 0x28) sched_setparam(r0, &(0x7f0000000140)=0xfffffff7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02050b070e00000026bd700000000000050007000000000002"], 0x70}}, 0x84) 2.581211193s ago: executing program 4 (id=2123): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r1, &(0x7f0000000200)="15aa901b5d38", 0x6) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.329208561s ago: executing program 4 (id=2126): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000b40)={{r0}, "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"}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40095) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe"], 0x3c}}, 0x8000) 2.328799971s ago: executing program 5 (id=2127): socket(0xa, 0x3, 0x87) r0 = socket$inet(0x2, 0x3, 0x40000000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfc, 0x0, 0x3e}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) 2.191977976s ago: executing program 5 (id=2128): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r3, @ANYBLOB="20000280", @ANYRES32=r2, @ANYRESHEX=r3], 0x58}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000140)=0x8) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) 1.839087777s ago: executing program 1 (id=2129): r0 = socket$packet(0x11, 0x3, 0x300) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xfffd, 0x0) 1.76310439s ago: executing program 4 (id=2130): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100000000000000fcffffff18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500000000000000b0b705dd3bf9dd046694e435691710c112aca51aec4d131c3b66ac74"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_gettime(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x21100a, &(0x7f0000000140), 0x0, 0x553, &(0x7f0000000d00)="$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") fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x82) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 1.488099229s ago: executing program 5 (id=2131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000090601020000000000000000010000030900020073797a310000000005000100070000001c0007801800018014000240ff010000e3ff00000000000000000001"], 0x44}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x40004) r1 = socket(0x1e, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r1, 0x0) accept$inet(r1, &(0x7f0000000980), &(0x7f00000009c0)=0x10) accept4$inet6(r1, 0x0, 0x0, 0x0) 976.219257ms ago: executing program 3 (id=2132): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x557c96d0fefea758) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bridge0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000095000040000000927271b3ff30989c19df749c53861d864909b900b8c50b3208e757597685681570fee4a78fb983866d3ef52e3d9fbbeebb9b4f55a3b656777bad09dd59f9d735bff1b4b4665b0942af75ab9f06ffef8e8b600e5ca86e937b55cbeff6058d41f54c61582318cfb8110f08812556b7611a80f1391ea522acf19fe2812e2e358eb8f830f172b930f866e8f0c55bf3bde27aeba4d85fdc1b9e9384e84a12fc11c952db916a318a207b9dff1989292d37d835d4f7c9f41a90373b3f631b5d58ac"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r4, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, &(0x7f0000000a00), &(0x7f0000000a40)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r9}, 0x0, &(0x7f00000008c0)=r8}, 0x20) r10 = fsopen(&(0x7f0000000340)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000180)=ANY=[@ANYBLOB="2d706964b3b155371607dd5fc26e7320"], 0x6) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0xf0ff, r4, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x20040000) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d03be7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x7c4}}, 0x1006) 943.764098ms ago: executing program 1 (id=2133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a0500"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8004, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xe}, 0x6037, 0x44005, 0x4, 0x8, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000240)={0x330480200, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'bond_slave_1\x00', {0x4}, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 807.349562ms ago: executing program 4 (id=2134): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @multicast, @private1, @multicast, @dev={0xfe, 0x80, '\x00', 0x17}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x5e}, 0x94) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x78e22799f4a46f40) read$watch_queue(r2, &(0x7f00000001c0)=""/178, 0xb2) 698.324856ms ago: executing program 3 (id=2135): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) (async) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x207e, 0x0) socket(0x2, 0x80805, 0x0) syz_io_uring_setup(0x1f1f, &(0x7f0000000280)={0x0, 0xb81, 0x3080, 0x8003, 0x25f}, 0x0, 0x0, &(0x7f0000000000)) (async) syz_io_uring_setup(0x1f1f, &(0x7f0000000280)={0x0, 0xb81, 0x3080, 0x8003, 0x25f}, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x5}, 0x108400, 0x2, 0x0, 0x0, 0xffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x5}, 0x108400, 0x2, 0x0, 0x0, 0xffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x24020400) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_setup(0x669, &(0x7f00000002c0)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') (async) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r3) r4 = eventfd(0xc2) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trarfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) fcntl$setstatus(r0, 0x4, 0x42400) close_range(r1, r1, 0x0) 663.615097ms ago: executing program 5 (id=2136): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r1, &(0x7f0000000200)="15aa901b5d38", 0x6) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 576.12954ms ago: executing program 3 (id=2137): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (fail_nth: 2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) 572.94751ms ago: executing program 5 (id=2138): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) fsmount(0xffffffffffffffff, 0x0, 0x6) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r3, 0x5452, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x70bd28, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r11, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delqdisc={0x34, 0x25, 0x300, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffe0, 0xfff3}, {0x5, 0x1a}, {0xc, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x26, 0x7}}, @qdisc_kind_options=@q_atm={0x8}]}, 0x34}}, 0x0) 354.537928ms ago: executing program 3 (id=2139): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]}) r3 = dup2(r1, r2) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op={0x0, 0x10}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x35}, {0x6}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 349.497598ms ago: executing program 1 (id=2140): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000080)=""/162, 0xa2}, {0x0}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000000340)=""/26, 0x1a}], 0x5, 0x3, 0x8) 172.927874ms ago: executing program 5 (id=2141): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001304000000d8a78b67b40200000088060000ff0f"], 0x0, 0x35, 0x0, 0x1}, 0x28) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x34328, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x5, 0x100008, 0x20001, 0x9, 0x0, 0x1000, 0x0, 0x20000006}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES8=r4], &(0x7f0000000100)='GPL\x00'}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read(r6, &(0x7f00000002c0)=""/149, 0x95) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ae1, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, r9, 0x0) readv(r9, &(0x7f00000008c0)=[{&(0x7f0000000e80)=""/222, 0xde}, {0x0}, {&(0x7f0000000800)=""/124, 0x7c}, {0x0}], 0x4) ioctl$int_in(r8, 0x5452, &(0x7f0000000940)=0x3) ioctl$XFS_IOC_SET_RESBLKS(r10, 0xc0105872, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) socket$caif_seqpacket(0x25, 0x5, 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r11}, &(0x7f0000000380), &(0x7f00000003c0)='%pI4 \x00', 0x2}, 0x20) poll(&(0x7f00000001c0)=[{r8, 0x2010}, {r7, 0x2300}], 0x2, 0x4fa4) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x5207, 0x0) sync() r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$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") sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xfc, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd6, 0xac, "ed533f67e4dc5b9029d81979509c1cb44cb76c560d98f818f72a0c9aeef3a13a509099be95881bf6df34b8b724847ad993c6973dac17da27bd6d28e2c898dd3d87fb7209293adaf5c3917ae3bd76e9b2fe8f6359449a6b41559534a3738e107b9c1bc7105b6587872fa7db74c6eadb3ad9d694a4865e457517821c16c20bfd7fd268273ef8ad5255af4fc45d9da4d9da6ae419b5f0f0eb6bce6c0cbfa89936baf7ed06df3001d3402dd8df2dea87dd5bc0374f6641e1ac3a1334ef171617a003245cf3a853738e9c6b4dfc3779a683979b21"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44000}, 0x4048004) 171.122764ms ago: executing program 0 (id=2142): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) bind$can_raw(0xffffffffffffffff, &(0x7f0000000540), 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x3, 0x5, 0x6, 0x2}]}) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'L+', 0x4}, 0x16, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) 44.783998ms ago: executing program 0 (id=2143): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000840, &(0x7f0000000200), 0x1, 0x5b6, &(0x7f0000000980)="$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") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x4b3d, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101041, 0x20) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x0) fallocate(r3, 0x20, 0x4000, 0x8000) 0s ago: executing program 0 (id=2144): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x320, 0xfffffffffffffffd}, 0x50c, 0x0, 0xe723, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001a40)={0x14, r2, 0x425, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x1000000) r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xc}) kernel console output (not intermixed with test programs): 8] kauditd_printk_skb: 6 callbacks suppressed [ 293.527668][ T28] audit: type=1326 audit(1774762816.378:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8d37c819 code=0x7ffc0000 [ 293.672893][ T28] audit: type=1326 audit(1774762816.378:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8d37c819 code=0x7ffc0000 [ 293.732905][ T28] audit: type=1326 audit(1774762816.388:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8d37c819 code=0x7ffc0000 [ 293.762978][ T28] audit: type=1326 audit(1774762816.388:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8d37c819 code=0x7ffc0000 [ 293.802879][ T28] audit: type=1326 audit(1774762816.418:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcf8d37c819 code=0x7ffc0000 [ 293.852881][ T28] audit: type=1326 audit(1774762816.418:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8d37c819 code=0x7ffc0000 [ 293.954402][ T28] audit: type=1326 audit(1774762816.418:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8d37c819 code=0x7ffc0000 [ 293.963199][ T50] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 7: comm kworker/u8:3: lblock 7 mapped to illegal pblock 7 (length 1) [ 294.052977][ T50] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 294.081685][ T50] EXT4-fs (loop4): This should not happen!! Data will be lost [ 294.081685][ T50] [ 294.104897][ T28] audit: type=1326 audit(1774762816.438:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8d37c819 code=0x7ffc0000 [ 294.163401][ T50] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 294.178026][ T28] audit: type=1326 audit(1774762816.438:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8d37c819 code=0x7ffc0000 [ 294.203067][ T50] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 44 with error 117 [ 294.232143][ T28] audit: type=1326 audit(1774762816.438:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcf8d37c819 code=0x7ffc0000 [ 294.386431][ T8885] syz.5.1592 (8885) used greatest stack depth: 5816 bytes left [ 294.494924][ T8905] loop3: detected capacity change from 0 to 1024 [ 294.508792][ T8905] EXT4-fs: Ignoring removed nomblk_io_submit option [ 294.522316][ T8905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.575129][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.617955][ T8909] loop3: detected capacity change from 0 to 4096 [ 294.626888][ T8909] EXT4-fs: Ignoring removed bh option [ 294.635801][ T8909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.669646][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.701482][ T8913] loop3: detected capacity change from 0 to 1024 [ 294.709288][ T8913] EXT4-fs: inline encryption not supported [ 294.748639][ T8913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.787330][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.013336][ T8923] loop3: detected capacity change from 0 to 512 [ 295.020621][ T8923] EXT4-fs: Ignoring removed i_version option [ 295.117346][ T8923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.536978][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.579298][ T8933] xfrm0 speed is unknown, defaulting to 1000 [ 296.758452][ T8942] libceph: secret too big 289 [ 296.817639][ T8941] xfrm0 speed is unknown, defaulting to 1000 [ 296.936440][ T8949] loop5: detected capacity change from 0 to 256 [ 296.955044][ T8949] vfat: Unknown parameter '0x0000000000000000Yý±Œ†À÷°Î ûÚËÅ4y¡{OžPB…â€8•ÃÁŒOF~-JN^U®rª-C‚.áˆÇœN°õ!ò¹`+.@27ú†Ç/Ie‰v[¸`í>Óÿ' [ 297.097319][ T8949] af_packet: tpacket_rcv: packet too big, clamped from 7192 to 3952. macoff=96 [ 297.186464][ T8958] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1615'. [ 297.230219][ T8960] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1616'. [ 297.239534][ T8960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1616'. [ 297.395329][ T8969] loop4: detected capacity change from 0 to 1024 [ 297.578947][ T8971] loop0: detected capacity change from 0 to 512 [ 297.586215][ T8971] EXT4-fs: Ignoring removed i_version option [ 297.694428][ T8971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.166610][ T8980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1620'. [ 298.473996][ T3419] IPVS: starting estimator thread 0... [ 298.484468][ T8975] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 299.120813][ T8988] IPVS: using max 2400 ests per chain, 120000 per kthread [ 299.212171][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.410626][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 299.410640][ T28] audit: type=1400 audit(1774762822.258:6002): avc: denied { connect } for pid=8995 comm="syz.1.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 299.472484][ T9000] loop3: detected capacity change from 0 to 512 [ 299.514864][ T9000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.541932][ T9000] ext4 filesystem being mounted at /348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 299.629196][ T9000] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 18: comm syz.3.1627: lblock 23 mapped to illegal pblock 18 (length 1) [ 299.765124][ T9012] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.1627: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 299.793908][ T9012] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 12: comm syz.3.1627: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 299.815249][ T9012] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz.3.1627: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 299.976993][ T9012] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 18: comm syz.3.1627: lblock 23 mapped to illegal pblock 18 (length 1) [ 300.029078][ T9015] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 18: comm syz.3.1627: lblock 23 mapped to illegal pblock 18 (length 1) [ 300.608976][ T9021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=9021 comm=syz.0.1632 [ 300.642317][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1632'. [ 300.903921][ T9027] loop5: detected capacity change from 0 to 1024 [ 300.913485][ T9027] EXT4-fs: Ignoring removed nomblk_io_submit option [ 300.928748][ T9027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.964656][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.986899][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.000942][ T9030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1636'. [ 301.092007][ T9034] dvmrp1: entered allmulticast mode [ 301.111643][ T9034] loop3: detected capacity change from 0 to 512 [ 301.124885][ T9034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.144469][ T9034] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.159641][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 301.168721][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 301.181445][ T28] audit: type=1400 audit(1774762824.028:6003): avc: denied { connect } for pid=9041 comm="syz.1.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 301.181939][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 301.219279][ T9042] loop1: detected capacity change from 0 to 1024 [ 301.225779][ T28] audit: type=1400 audit(1774762824.068:6004): avc: denied { setopt } for pid=9041 comm="syz.1.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 301.245398][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 301.254818][ T9042] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.270017][ T9035] vlan0: entered promiscuous mode [ 301.287578][ T9035] syz_tun: entered promiscuous mode [ 301.293082][ T9035] vlan0: entered allmulticast mode [ 301.298340][ T9035] syz_tun: entered allmulticast mode [ 301.314249][ T9042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.335982][ T9034] vlan0: entered promiscuous mode [ 301.341630][ T9034] vlan0: entered allmulticast mode [ 301.359460][ T9042] netlink: 'syz.1.1638': attribute type 8 has an invalid length. [ 301.372022][ T9042] sch_fq: defrate 0 ignored. [ 301.441348][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.525221][ T9048] loop1: detected capacity change from 0 to 512 [ 301.537781][ T9048] EXT4-fs: Ignoring removed bh option [ 301.543354][ T9048] EXT4-fs: inline encryption not supported [ 301.553289][ T9048] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 301.575741][ T9048] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 301.590435][ T9048] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1639: bg 0: block 248: padding at end of block bitmap is not set [ 301.605117][ T9048] loop1: lost filesystem error report for type 5 error -117 [ 301.605304][ T9048] Quota error (device loop1): write_blk: dquota write failed [ 301.620042][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 301.620076][ C0] EXT4-fs (loop1): last error at time 1774762824: ext4_validate_block_bitmap:441 [ 301.636031][ T9048] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 301.646202][ T9048] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1639: Failed to acquire dquot type 1 [ 301.657692][ T9048] loop1: lost filesystem error report for type 5 error -117 [ 301.658113][ T9048] EXT4-fs (loop1): 1 truncate cleaned up [ 301.675188][ T9048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 301.823446][ T9052] usb usb8: usbfs: process 9052 (syz.5.1640) did not claim interface 0 before use [ 301.856141][ T9052] 8021q: adding VLAN 0 to HW filter on device team1 [ 301.946188][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.974921][ T4392] Bluetooth: hci0: Frame reassembly failed (-84) [ 301.990158][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 301.999795][ T28] audit: type=1400 audit(1774762824.828:6005): avc: denied { bind } for pid=9054 comm="syz.4.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 302.056052][ T9066] loop3: detected capacity change from 0 to 512 [ 302.068223][ T9066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.099564][ T9065] loop1: detected capacity change from 0 to 512 [ 302.125806][ T9066] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.138629][ T9065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.263344][ T9065] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.355247][ T9070] EXT4-fs error (device loop3): ext4_get_first_dir_block:3538: inode #12: comm syz.3.1642: directory missing '.' [ 302.374216][ T9070] EXT4-fs (loop3): Remounting filesystem read-only [ 302.937609][ T9076] __nla_validate_parse: 1 callbacks suppressed [ 302.937624][ T9076] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1648'. [ 302.954624][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.977907][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.055160][ T28] audit: type=1326 audit(1774762825.908:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b6fcc819 code=0x7ffc0000 [ 303.112901][ T28] audit: type=1326 audit(1774762825.908:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b6fcc819 code=0x7ffc0000 [ 303.152049][ T28] audit: type=1326 audit(1774762825.908:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4b6f8d04e code=0x7ffc0000 [ 303.195712][ T9085] xfrm0 speed is unknown, defaulting to 1000 [ 303.205996][ T28] audit: type=1326 audit(1774762825.908:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb4b6fcdb17 code=0x7ffc0000 [ 303.305281][ T9087] xfrm0 speed is unknown, defaulting to 1000 [ 303.615697][ T9094] xfrm0 speed is unknown, defaulting to 1000 [ 303.662376][ T9095] xt_bpf: check failed: parse error [ 303.992924][ T4781] Bluetooth: hci0: command 0x1003 tx timeout [ 303.999036][ T3547] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 304.286117][ T9107] openvswitch: netlink: Missing key (keys=40, expected=80) [ 304.364359][ T9104] loop0: detected capacity change from 0 to 1024 [ 304.490483][ T9104] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 304.516923][ T9104] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 304.639580][ T9104] EXT4-fs (loop0): orphan cleanup on readonly fs [ 304.656961][ T9104] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.1656: Invalid inode table block 0 in block_group 0 [ 304.659022][ T9112] tipc: Started in network mode [ 304.674816][ T9112] tipc: Node identity ac14140f, cluster identity 4711 [ 304.681681][ T9112] tipc: New replicast peer: 255.255.255.255 [ 304.687774][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 304.687787][ T28] audit: type=1400 audit(1774762827.508:6065): avc: denied { read write } for pid=9110 comm="syz.4.1655" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 304.723387][ T9104] loop0: lost filesystem error report for type 5 error -117 [ 304.723641][ T9112] tipc: Enabled bearer , priority 10 [ 304.742868][ T28] audit: type=1400 audit(1774762827.508:6066): avc: denied { open } for pid=9110 comm="syz.4.1655" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 304.793563][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 304.802684][ T9104] EXT4-fs (loop0): Remounting filesystem read-only [ 304.809313][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 304.809336][ C1] EXT4-fs (loop0): initial error at time 1774762827: __ext4_get_inode_loc:4782 [ 304.809363][ C1] EXT4-fs (loop0): last error at time 1774762827: __ext4_get_inode_loc:4782 [ 304.872973][ T9104] Quota error (device loop0): write_blk: dquota write failed [ 304.880468][ T9104] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 304.951558][ T9104] EXT4-fs (loop0): 1 truncate cleaned up [ 304.974060][ T9104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 305.014558][ T9115] loop4: detected capacity change from 0 to 512 [ 305.086890][ T28] audit: type=1326 audit(1774762827.898:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.0.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf8d33d04e code=0x7ffc0000 [ 305.117805][ T28] audit: type=1326 audit(1774762827.898:6068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.0.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fcf8d37ac57 code=0x7ffc0000 [ 305.142002][ T9115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.173369][ T9115] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.323357][ T28] audit: type=1326 audit(1774762827.898:6069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.0.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf8d33d04e code=0x7ffc0000 [ 305.441526][ T28] audit: type=1326 audit(1774762827.898:6070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.0.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8d37c819 code=0x7ffc0000 [ 305.465179][ T28] audit: type=1326 audit(1774762827.898:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.0.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8d37c819 code=0x7ffc0000 [ 305.488694][ T28] audit: type=1326 audit(1774762827.968:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.0.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8d37c819 code=0x7ffc0000 [ 305.519714][ T9123] loop1: detected capacity change from 0 to 256 [ 305.708719][ T9123] FAT-fs (loop1): codepage cp852 not found [ 305.990341][ T3419] tipc: Node number set to 2886997007 [ 305.997438][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.016782][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.054975][ T9129] loop0: detected capacity change from 0 to 256 [ 306.073393][ T9129] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 306.109688][ T9126] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 306.117015][ T9126] xt_TPROXY: Can be used only with -p tcp or -p udp [ 306.144015][ T9133] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 306.264328][ T9141] loop4: detected capacity change from 0 to 512 [ 306.271247][ T9141] EXT4-fs: Ignoring removed i_version option [ 306.314855][ T9141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.177929][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1665'. [ 307.743427][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.812544][ T9163] loop3: detected capacity change from 0 to 2048 [ 307.845198][ T9165] team0: Port device xfrm0 removed [ 307.850580][ T9165] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 307.850645][ T9167] loop0: detected capacity change from 0 to 512 [ 307.878558][ T9167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.892950][ T9167] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.999154][ T9177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1674'. [ 308.185167][ T9186] loop3: detected capacity change from 0 to 512 [ 308.242570][ T9186] vfat: Unknown parameter 'ÿÿ' [ 308.664925][ T9199] loop3: detected capacity change from 0 to 512 [ 308.692659][ T9199] vfat: Unknown parameter 'ÿÿ' [ 308.758694][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.605322][ T9207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1680'. [ 309.638589][ T9207] netlink: 'syz.3.1680': attribute type 8 has an invalid length. [ 309.646450][ T9207] netlink: 'syz.3.1680': attribute type 7 has an invalid length. [ 309.654858][ T9207] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.1680'. [ 309.743810][ T9215] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 310.012619][ T9229] loop0: detected capacity change from 0 to 512 [ 310.022431][ T9229] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 310.062929][ T9229] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 310.077717][ T9229] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 310.145961][ T9229] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 310.183041][ T9229] System zones: 0-2, 18-18, 34-34 [ 310.210761][ T9229] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1688: bad orphan inode 15 [ 310.309435][ T9229] loop0: lost filesystem error report for type 5 error -117 [ 310.310954][ T9229] ext4_test_bit(bit=14, block=18) = 1 [ 310.318357][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 310.318394][ C0] EXT4-fs (loop0): initial error at time 1774762833: ext4_orphan_get:1417 [ 310.318418][ C0] EXT4-fs (loop0): last error at time 1774762833: ext4_orphan_get:1417 [ 310.388276][ T9229] is_bad_inode(inode)=0 [ 310.392579][ T9229] NEXT_ORPHAN(inode)=2264924160 [ 310.454283][ T9229] max_ino=32 [ 310.457531][ T9229] i_nlink=0 [ 310.464004][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1692'. [ 310.484164][ T9244] loop1: detected capacity change from 0 to 512 [ 310.491535][ T9244] EXT4-fs: Ignoring removed i_version option [ 310.527311][ T9229] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.1688: corrupted inode contents [ 310.552429][ T9244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.680377][ T9234] loop3: detected capacity change from 0 to 512 [ 310.703664][ T9229] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 310.703984][ T9229] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.1688: mark_inode_dirty error [ 310.796568][ T9234] vfat: Unknown parameter 'ÿÿ ' [ 310.944278][ T9229] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 310.944833][ T9229] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.1688: corrupted inode contents [ 311.097480][ T9229] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 311.097637][ T9229] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.1688: mark_inode_dirty error [ 311.142102][ T9229] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 311.142283][ T9229] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.1688: mark inode dirty (error -117) [ 311.187006][ T9229] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 311.187153][ T9229] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 311.227643][ T9229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.375563][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 311.375584][ T28] audit: type=1400 audit(1774762834.228:6100): avc: denied { ioctl } for pid=9246 comm="syz.3.1693" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 ioctlcmd=0x5871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 311.837031][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.869693][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1697'. [ 311.913383][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.922563][ T9258] loop4: detected capacity change from 0 to 1764 [ 311.940985][ T9258] iso9660: Unknown parameter 'overridWrockperm' [ 311.955062][ T9260] loop1: detected capacity change from 0 to 512 [ 311.986848][ T9260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.012041][ T9260] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.024337][ T9267] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1702'. [ 312.056128][ T28] audit: type=1400 audit(1774762834.908:6101): avc: denied { setattr } for pid=9266 comm="syz.5.1702" name="NETLINK" dev="sockfs" ino=24899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.154249][ T9273] FAULT_INJECTION: forcing a failure. [ 312.154249][ T9273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.168805][ T9273] CPU: 1 UID: 0 PID: 9273 Comm: syz.5.1704 Tainted: G W syzkaller #0 PREEMPT(full) [ 312.168926][ T9273] Tainted: [W]=WARN [ 312.168933][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.168945][ T9273] Call Trace: [ 312.168952][ T9273] [ 312.168959][ T9273] __dump_stack+0x1d/0x30 [ 312.168986][ T9273] dump_stack_lvl+0x95/0xd0 [ 312.169020][ T9273] dump_stack+0x15/0x1b [ 312.169041][ T9273] should_fail_ex+0x263/0x280 [ 312.169092][ T9273] should_fail+0xb/0x20 [ 312.169115][ T9273] should_fail_usercopy+0x1a/0x20 [ 312.169155][ T9273] strncpy_from_user+0x27/0x250 [ 312.169178][ T9273] path_setxattrat+0xeb/0x310 [ 312.169219][ T9273] __x64_sys_fsetxattr+0x6b/0x80 [ 312.169266][ T9273] x64_sys_call+0x2f0e/0x3020 [ 312.169289][ T9273] do_syscall_64+0x12c/0x370 [ 312.169312][ T9273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.169396][ T9273] RIP: 0033:0x7f80012ac819 [ 312.169411][ T9273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.169427][ T9273] RSP: 002b:00007f7fffd07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 312.169448][ T9273] RAX: ffffffffffffffda RBX: 00007f8001525fa0 RCX: 00007f80012ac819 [ 312.169460][ T9273] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000004 [ 312.169521][ T9273] RBP: 00007f7fffd07090 R08: 0000000000000000 R09: 0000000000000000 [ 312.169563][ T9273] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 312.169576][ T9273] R13: 00007f8001526038 R14: 00007f8001525fa0 R15: 00007ffcdb746398 [ 312.169593][ T9273] [ 312.380636][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.414665][ T9283] loop4: detected capacity change from 0 to 128 [ 312.446000][ T9283] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.488558][ T9283] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.523248][ T9283] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1710'. [ 312.537175][ T9283] IPVS: set_ctl: invalid protocol: 25974 49.95.116.111:24436 [ 312.544981][ T28] audit: type=1400 audit(1774762835.388:6102): avc: denied { execute } for pid=9282 comm="syz.4.1710" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 312.577177][ T28] audit: type=1400 audit(1774762835.428:6103): avc: denied { listen } for pid=9297 comm="syz.1.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 312.596815][ T28] audit: type=1400 audit(1774762835.428:6104): avc: denied { read } for pid=9297 comm="syz.1.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 312.664197][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.713667][ T9306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1717'. [ 312.765919][ T9309] loop5: detected capacity change from 0 to 512 [ 312.779282][ T9309] EXT4-fs: Ignoring removed oldalloc option [ 312.790825][ T9309] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 312.879375][ T28] audit: type=1400 audit(1774762835.728:6105): avc: denied { read } for pid=9317 comm="syz.4.1721" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 312.903377][ T28] audit: type=1400 audit(1774762835.728:6106): avc: denied { open } for pid=9317 comm="syz.4.1721" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 312.927136][ T9309] EXT4-fs (loop5): 1 truncate cleaned up [ 312.933388][ T9309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.960113][ T9309] xfrm0 speed is unknown, defaulting to 1000 [ 313.014381][ T9321] loop0: detected capacity change from 0 to 512 [ 313.021726][ T9321] EXT4-fs: Ignoring removed i_version option [ 313.235860][ T9321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.441316][ T28] audit: type=1400 audit(1774762836.288:6107): avc: denied { mount } for pid=9325 comm="syz.4.1723" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 313.773405][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1726'. [ 313.820632][ T9336] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 313.829840][ T9338] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 314.024654][ T28] audit: type=1400 audit(1774762836.878:6108): avc: denied { lock } for pid=9341 comm="syz.4.1729" path="socket:[25082]" dev="sockfs" ino=25082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 314.056212][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.224172][ T28] audit: type=1326 audit(1774762836.908:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.4.1729" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9fd59c819 code=0x0 [ 314.550128][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.713061][ T9351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1732'. [ 315.019683][ T9369] loop1: detected capacity change from 0 to 164 [ 315.051831][ T9369] Unable to read rock-ridge attributes [ 315.099740][ T9363] loop4: detected capacity change from 0 to 1024 [ 315.148319][ T9363] EXT4-fs: Ignoring removed mblk_io_submit option [ 315.174246][ T9369] Unable to read rock-ridge attributes [ 315.190163][ T9369] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 315.332576][ T9363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 315.371911][ T9369] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1739'. [ 315.414712][ T9363] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.520966][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 315.576384][ T9380] loop4: detected capacity change from 0 to 164 [ 315.601290][ T9380] ISOFS: Bad logical zone size 2816 [ 315.794679][ T9399] loop3: detected capacity change from 0 to 1024 [ 315.801436][ T9399] EXT4-fs: inline encryption not supported [ 315.854535][ T9399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 315.867039][ T9399] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.887999][ T9399] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.1749: lblock 0 mapped to illegal pblock 0 (length 6) [ 315.903146][ T9399] EXT4-fs error (device loop3): ext4_ext_remove_space:2954: inode #15: comm syz.3.1749: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 315.932325][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 316.008033][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1750'. [ 316.320701][ T9412] loop5: detected capacity change from 0 to 512 [ 316.327669][ T9412] EXT4-fs: Ignoring removed i_version option [ 316.853221][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1751'. [ 318.007806][ T9422] loop0: detected capacity change from 0 to 512 [ 318.014516][ T9422] EXT4-fs: Ignoring removed i_version option [ 318.774482][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 318.774496][ T28] audit: type=1400 audit(1774762841.618:6118): avc: denied { bind } for pid=9415 comm="syz.4.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.038152][ T9419] xfrm0 speed is unknown, defaulting to 1000 [ 319.047418][ T9412] EXT4-fs: error -4 creating inode table initialization thread [ 319.055238][ T9412] EXT4-fs (loop5): mount failed [ 319.063987][ T9422] EXT4-fs: error -4 creating inode table initialization thread [ 319.071642][ T9422] EXT4-fs (loop0): mount failed [ 319.098259][ T10] IPVS: starting estimator thread 0... [ 319.273416][ T9428] IPVS: using max 2448 ests per chain, 122400 per kthread [ 319.300629][ T28] audit: type=1400 audit(1774762842.148:6119): avc: denied { mounton } for pid=9440 comm="syz.1.1761" path="/367/file0" dev="tmpfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 319.329633][ T9434] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.341415][ T9446] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 319.342359][ T9443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.381409][ T9449] bridge_slave_0: left allmulticast mode [ 319.396114][ T9442] loop1: detected capacity change from 0 to 512 [ 319.402683][ T9443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.420749][ T9449] bridge_slave_0: left promiscuous mode [ 319.428140][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.441032][ T9442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.454439][ T9442] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.466789][ T9449] bridge_slave_1: left allmulticast mode [ 319.469827][ T9442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.472973][ T9449] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.493885][ T28] audit: type=1400 audit(1774762842.348:6120): avc: denied { read } for pid=9440 comm="syz.1.1761" name="file0" dev="tmpfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 319.521253][ T9462] loop1: detected capacity change from 0 to 512 [ 319.538617][ T9449] bond0: (slave bond_slave_0): Releasing backup interface [ 319.556620][ T9462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.572604][ T9465] loop4: detected capacity change from 0 to 512 [ 319.579238][ T9449] bond0: (slave bond_slave_1): Releasing backup interface [ 319.579317][ T9465] vfat: Unknown parameter 'ÿÿ' [ 319.606535][ T9449] team0: Port device team_slave_0 removed [ 319.613886][ T9462] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 319.633642][ T9449] team0: Port device team_slave_1 removed [ 319.644957][ T9449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.652493][ T9449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.670168][ T9449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.678568][ T9449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.688874][ T9449] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 319.739045][ T9434] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.776404][ T9434] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.808227][ T9468] loop3: detected capacity change from 0 to 1024 [ 319.815337][ T9468] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.859709][ T9468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.879493][ T9434] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.960750][ T28] audit: type=1400 audit(1774762842.808:6121): avc: denied { mounton } for pid=9467 comm="syz.3.1766" path="/377/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.984210][ T9468] 9p: Bad value for 'rfdno' [ 320.026871][ T50] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.072581][ T50] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.081694][ T50] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.143331][ T50] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.189186][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.205926][ T28] audit: type=1400 audit(1774762843.058:6122): avc: denied { getopt } for pid=9472 comm="syz.0.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 320.298012][ T28] audit: type=1400 audit(1774762843.148:6123): avc: denied { create } for pid=9480 comm="syz.3.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 320.322499][ T9481] macsec1: entered promiscuous mode [ 320.328015][ T9481] bridge0: entered promiscuous mode [ 320.456189][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1770'. [ 320.474335][ T9484] loop4: detected capacity change from 0 to 512 [ 320.481476][ T9484] EXT4-fs: Ignoring removed i_version option [ 320.620781][ T9488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.640310][ T28] audit: type=1400 audit(1774762843.488:6124): avc: denied { read } for pid=9485 comm="syz.0.1773" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 320.751348][ T28] audit: type=1400 audit(1774762843.488:6125): avc: denied { open } for pid=9485 comm="syz.0.1773" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 320.790168][ T9493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1775'. [ 320.815548][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.913550][ T9484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.997513][ T9495] loop3: detected capacity change from 0 to 512 [ 321.045730][ T9495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.109008][ T9495] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.276009][ T9495] EXT4-fs error (device loop3): ext4_get_first_dir_block:3538: inode #12: comm syz.3.1776: directory missing '.' [ 321.288297][ T9495] EXT4-fs (loop3): Remounting filesystem read-only [ 321.346769][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.398045][ T9512] loop0: detected capacity change from 0 to 256 [ 321.409480][ T9514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1782'. [ 321.423028][ T9512] SELinux: failed to load policy [ 321.428257][ T28] audit: type=1400 audit(1774762844.268:6126): avc: denied { load_policy } for pid=9511 comm="syz.0.1784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 321.558486][ T9520] bridge_slave_0: left allmulticast mode [ 321.593871][ T9520] bridge_slave_0: left promiscuous mode [ 321.605640][ T9520] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.628220][ T9520] bridge_slave_1: left allmulticast mode [ 321.644068][ T9520] bridge_slave_1: left promiscuous mode [ 321.650731][ T9520] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.667771][ T9520] bond0: (slave bond_slave_0): Releasing backup interface [ 321.689918][ T9520] bond0: (slave bond_slave_1): Releasing backup interface [ 321.717247][ T9520] team0: Port device team_slave_0 removed [ 321.739858][ T9520] team0: Port device team_slave_1 removed [ 321.762934][ T9520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.780847][ T9520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.798463][ T9520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.814045][ T9520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.835168][ T9520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 321.926580][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.956192][ T28] audit: type=1400 audit(1774762844.798:6127): avc: denied { cpu } for pid=9527 comm="syz.3.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 322.109278][ T9531] loop3: detected capacity change from 0 to 1024 [ 322.123079][ T9531] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 322.211245][ T9535] loop5: detected capacity change from 0 to 1024 [ 322.235497][ T9535] EXT4-fs: inline encryption not supported [ 322.278306][ T9535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 322.290548][ T9535] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.304103][ T9535] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.1789: lblock 0 mapped to illegal pblock 0 (length 6) [ 322.467264][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'. [ 322.467604][ T9535] EXT4-fs error (device loop5): ext4_ext_remove_space:2954: inode #15: comm syz.5.1789: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 322.553949][ T9542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1788'. [ 322.648155][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'. [ 322.706339][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 322.844494][ T9546] rock: directory entry would overflow storage [ 322.857380][ T9546] rock: sig=0x66, size=4, remaining=3 [ 323.437446][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1798'. [ 323.455332][ T9571] set_capacity_and_notify: 1 callbacks suppressed [ 323.455348][ T9571] loop4: detected capacity change from 0 to 512 [ 323.468634][ T9571] EXT4-fs: Ignoring removed i_version option [ 323.529154][ T9571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.125272][ T9574] loop3: detected capacity change from 0 to 256 [ 324.163183][ T9574] msdos: Unknown parameter '' [ 324.193141][ T28] audit: type=1400 audit(1774771039.044:6128): avc: denied { watch } for pid=9573 comm="syz.3.1799" path="/388/file0" dev="tmpfs" ino=2116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 324.838047][ T9579] loop1: detected capacity change from 0 to 512 [ 324.891352][ T9579] vfat: Unknown parameter 'ÿÿ ' [ 324.909863][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.185412][ T28] audit: type=1400 audit(1774771040.044:6129): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 325.218220][ T9604] loop0: detected capacity change from 0 to 256 [ 325.227072][ T9604] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 325.636544][ T9610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1811'. [ 325.914519][ T9615] ªªªªªª: renamed from vlan0 (while UP) [ 325.946550][ T9617] loop1: detected capacity change from 0 to 764 [ 326.107901][ T9615] loop5: detected capacity change from 0 to 512 [ 326.139366][ T9615] vfat: Unknown parameter 'ÿÿ ' [ 326.261970][ T9627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1817'. [ 326.321155][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 326.344164][ T9629] loop1: detected capacity change from 0 to 512 [ 326.351201][ T9629] EXT4-fs: Ignoring removed i_version option [ 326.485834][ T9629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.403510][ T28] audit: type=1400 audit(1774771042.264:6130): avc: denied { relabelfrom } for pid=9642 comm="syz.0.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 327.427625][ T28] audit: type=1400 audit(1774771042.264:6131): avc: denied { relabelto } for pid=9642 comm="syz.0.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 327.731789][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.825022][ T28] audit: type=1400 audit(1774771042.684:6132): avc: denied { setopt } for pid=9659 comm="syz.1.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 327.856301][ T9661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.870123][ T9664] netlink: 'syz.3.1826': attribute type 3 has an invalid length. [ 327.878039][ T9664] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1826'. [ 327.908524][ T9661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.002592][ T9661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.055432][ T9661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.127354][ T4377] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.140095][ T4377] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.152518][ T4377] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.165054][ T4386] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.330572][ T28] audit: type=1400 audit(1774771043.174:6133): avc: denied { mounton } for pid=9672 comm="syz.1.1831" path="/file1" dev="ramfs" ino=28631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 328.439882][ T9679] loop1: detected capacity change from 0 to 512 [ 328.500172][ T9679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.515455][ T9679] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.570348][ T9684] loop5: detected capacity change from 0 to 1024 [ 328.581307][ T9684] EXT4-fs: inline encryption not supported [ 328.598097][ T9684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 328.610887][ T9684] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.630091][ T9684] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.1835: lblock 3 mapped to illegal pblock 3 (length 3) [ 328.648035][ T9684] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 328.672035][ T9684] EXT4-fs (loop5): This should not happen!! Data will be lost [ 328.672035][ T9684] [ 328.683085][ T9688] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm syz.5.1835: lblock 8 mapped to illegal pblock 8 (length 4) [ 328.706271][ T28] audit: type=1400 audit(1774771043.564:6134): avc: denied { setopt } for pid=9689 comm="syz.4.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 328.728686][ T9688] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 328.741340][ T9688] EXT4-fs (loop5): This should not happen!! Data will be lost [ 328.741340][ T9688] [ 328.751831][ T9688] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.1835: lblock 0 mapped to illegal pblock 0 (length 3) [ 328.765551][ T9688] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 328.830826][ T9693] loop4: detected capacity change from 0 to 256 [ 328.862409][ T9693] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 328.885537][ T9688] EXT4-fs (loop5): This should not happen!! Data will be lost [ 328.885537][ T9688] [ 328.910003][ T9693] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 328.965232][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1837'. [ 329.003120][ T28] audit: type=1400 audit(1774771043.824:6135): avc: denied { read } for pid=9691 comm="syz.4.1837" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 329.055851][ T4394] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 7: comm kworker/u8:21: lblock 7 mapped to illegal pblock 7 (length 1) [ 329.095519][ T28] audit: type=1400 audit(1774771043.824:6136): avc: denied { open } for pid=9691 comm="syz.4.1837" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 329.135904][ T4394] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 329.148348][ T4394] EXT4-fs (loop5): This should not happen!! Data will be lost [ 329.148348][ T4394] [ 329.159299][ T4394] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:21: bg 0: block 112: padding at end of block bitmap is not set [ 329.174160][ T4394] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 329.318479][ T28] audit: type=1400 audit(1774771044.174:6137): avc: denied { ioctl } for pid=9705 comm="syz.4.1843" path="socket:[29538]" dev="sockfs" ino=29538 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 329.352885][ T9706] 8021q: VLANs not supported on wg2 [ 329.361548][ T9706] loop4: detected capacity change from 0 to 512 [ 329.368569][ T9706] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 329.409076][ T9706] EXT4-fs (loop4): 1 truncate cleaned up [ 329.423615][ T9706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.483414][ T28] audit: type=1400 audit(1774771044.324:6138): avc: denied { append } for pid=9705 comm="syz.4.1843" path="/356/file1/memory.events.local" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 329.612570][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.752879][ T28] audit: type=1400 audit(1774771044.604:6139): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 329.925291][ T28] audit: type=1400 audit(1774771044.684:6140): avc: denied { connect } for pid=9719 comm="syz.5.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 330.137365][ T9731] loop3: detected capacity change from 0 to 512 [ 330.161339][ T9731] EXT4-fs: Ignoring removed i_version option [ 330.214089][ T9731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.371687][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.431479][ T9741] loop3: detected capacity change from 0 to 1024 [ 330.438492][ T9741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 330.473956][ T28] audit: type=1400 audit(1774771045.334:6141): avc: denied { getopt } for pid=9705 comm="syz.4.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 330.511313][ T9741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.592545][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.649522][ T28] audit: type=1400 audit(1774771045.504:6142): avc: denied { create } for pid=9745 comm="syz.1.1854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rxrpc_socket permissive=1 [ 330.679939][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.690925][ T28] audit: type=1400 audit(1774771045.504:6143): avc: denied { create } for pid=9745 comm="syz.1.1854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 330.745114][ T9748] loop4: detected capacity change from 0 to 512 [ 330.785325][ T9748] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 330.810802][ T28] audit: type=1400 audit(1774771045.504:6144): avc: denied { getopt } for pid=9745 comm="syz.1.1854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 330.845960][ T9753] loop1: detected capacity change from 0 to 2048 [ 330.852656][ T9748] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 330.895912][ T9755] IPv6: NLM_F_CREATE should be specified when creating new route [ 330.918685][ T28] audit: type=1400 audit(1774771045.534:6145): avc: denied { setopt } for pid=9745 comm="syz.1.1854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 330.940253][ T9755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1857'. [ 330.980330][ T28] audit: type=1400 audit(1774771045.534:6146): avc: denied { create } for pid=9745 comm="syz.1.1854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 331.029033][ T9748] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 331.061551][ T9748] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 331.106544][ T9768] loop0: detected capacity change from 0 to 512 [ 331.113077][ T9748] System zones: 0-2, 18-18, 34-34 [ 331.133480][ T9748] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1853: bad orphan inode 15 [ 331.151339][ T9768] EXT4-fs: Ignoring removed i_version option [ 331.184363][ T9768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.199828][ T9748] loop4: lost filesystem error report for type 5 error -117 [ 331.200023][ T9748] ext4_test_bit(bit=14, block=18) = 1 [ 331.207339][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 331.207354][ C0] EXT4-fs (loop4): initial error at time 1774771046: ext4_orphan_get:1417 [ 331.207380][ C0] EXT4-fs (loop4): last error at time 1774771046: ext4_orphan_get:1417 [ 331.282411][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.330973][ T9748] is_bad_inode(inode)=0 [ 331.342900][ T9748] NEXT_ORPHAN(inode)=2264924160 [ 331.355437][ T9748] max_ino=32 [ 331.361834][ T9748] i_nlink=0 [ 331.379157][ T9748] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.1853: corrupted inode contents [ 331.513143][ T9748] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 331.514356][ T9748] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.1853: mark_inode_dirty error [ 331.535153][ T9748] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 331.535430][ T9748] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.1853: corrupted inode contents [ 331.875914][ T9748] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 331.876363][ T9748] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.1853: mark_inode_dirty error [ 331.920684][ T9781] loop0: detected capacity change from 0 to 1024 [ 332.137176][ T9748] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 332.137316][ T9748] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.1853: mark inode dirty (error -117) [ 332.159351][ T9748] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 332.159541][ T9748] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 332.178604][ T9748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.208378][ T9774] loop3: detected capacity change from 0 to 512 [ 332.221755][ T9774] vfat: Unknown parameter 'ÿÿ [ 332.221755][ T9774] ' [ 332.276642][ T9785] netem: incorrect gi model size [ 332.281631][ T9785] netem: change failed [ 332.330141][ T9796] netlink: 564 bytes leftover after parsing attributes in process `syz.0.1870'. [ 332.335201][ T9799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.340532][ T9796] netlink: 564 bytes leftover after parsing attributes in process `syz.0.1870'. [ 332.361639][ T9799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.381260][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.393473][ T9796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.409471][ T9796] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.455475][ T9796] netlink: 'syz.0.1870': attribute type 1 has an invalid length. [ 332.479595][ T9796] bond2: entered promiscuous mode [ 332.485519][ T9796] bond2: entered allmulticast mode [ 332.490846][ T9796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 332.503658][ T9810] EXT4-fs: Ignoring removed i_version option [ 332.511819][ T9796] erspan1: entered allmulticast mode [ 332.520389][ T9796] bond2: (slave erspan1): making interface the new active one [ 332.527996][ T9796] erspan1: entered promiscuous mode [ 332.535296][ T9796] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 332.547583][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'. [ 332.565372][ T9810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.579932][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.600125][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.610915][ T9815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.619543][ T9815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.633901][ T9817] EXT4-fs: inline encryption not supported [ 332.655837][ T9817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 332.668226][ T9817] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.682348][ T9817] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 3: comm syz.0.1877: lblock 3 mapped to illegal pblock 3 (length 3) [ 332.696679][ T9817] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 332.709020][ T9817] EXT4-fs (loop0): This should not happen!! Data will be lost [ 332.709020][ T9817] [ 332.726601][ T4377] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 332.741310][ T4377] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 332.753694][ T4377] EXT4-fs (loop0): This should not happen!! Data will be lost [ 332.753694][ T4377] [ 332.764324][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 333.223490][ T9832] ext4: Unknown parameter 'smackfshat' [ 333.420404][ T9853] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 333.430030][ T9853] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 333.448488][ T9853] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 333.471427][ T9853] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 333.501303][ T9853] System zones: 0-2, 18-18, 34-34 [ 333.509771][ T9853] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1885: bad orphan inode 15 [ 333.520224][ T9853] loop3: lost filesystem error report for type 5 error -117 [ 333.520437][ T9853] ext4_test_bit(bit=14, block=18) = 1 [ 333.527779][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 333.527796][ C0] EXT4-fs (loop3): initial error at time 1774771048: ext4_orphan_get:1417 [ 333.527817][ C0] EXT4-fs (loop3): last error at time 1774771048: ext4_orphan_get:1417 [ 333.556927][ T9853] is_bad_inode(inode)=0 [ 333.561297][ T9853] NEXT_ORPHAN(inode)=2264924160 [ 333.566439][ T9853] max_ino=32 [ 333.570094][ T9853] i_nlink=0 [ 333.573893][ T9853] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.1885: corrupted inode contents [ 333.586347][ T9853] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 333.586520][ T9853] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.1885: mark_inode_dirty error [ 333.607942][ T9853] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 333.608676][ T9853] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.1885: corrupted inode contents [ 333.630236][ T9853] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 333.631472][ T9853] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.1885: mark_inode_dirty error [ 333.657116][ T9853] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 333.657410][ T9853] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.1885: mark inode dirty (error -117) [ 333.683159][ T9853] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 333.688060][ T9853] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 333.711045][ T9853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.770680][ T9884] set_capacity_and_notify: 5 callbacks suppressed [ 333.770700][ T9884] loop0: detected capacity change from 0 to 1024 [ 333.788353][ T9884] EXT4-fs: inline encryption not supported [ 333.805158][ T9884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 333.823386][ T9884] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.837615][ T9884] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 3: comm syz.0.1889: lblock 3 mapped to illegal pblock 3 (length 3) [ 333.852417][ T9884] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 333.864847][ T9884] EXT4-fs (loop0): This should not happen!! Data will be lost [ 333.864847][ T9884] [ 333.885537][ T4377] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 333.900149][ T4377] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 333.916148][ T4377] EXT4-fs (loop0): This should not happen!! Data will be lost [ 333.916148][ T4377] [ 333.927080][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 333.958672][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.990488][ T9913] loop3: detected capacity change from 0 to 1024 [ 333.997515][ T9913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.009173][ T9913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.051688][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.146041][ T9944] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 334.283183][ T9955] loop4: detected capacity change from 0 to 256 [ 334.333280][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 334.333294][ T28] audit: type=1400 audit(1774771049.184:6160): avc: denied { execute } for pid=9954 comm="syz.4.1896" path="/file1" dev="ramfs" ino=30669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 334.577693][ T9958] loop4: detected capacity change from 0 to 8192 [ 334.636331][ T7475] loop4: p1 < > p2 p4 < p5 > [ 334.643468][ T7475] loop4: partition table partially beyond EOD, truncated [ 334.650927][ T7475] loop4: p1 start 134217728 is beyond EOD, truncated [ 334.659276][ T7475] loop4: p2 size 591360 extends beyond EOD, truncated [ 334.668395][ T7475] loop4: p5 size 591360 extends beyond EOD, truncated [ 334.683835][ T9958] loop4: p1 < > p2 p4 < p5 > [ 334.689808][ T9958] loop4: partition table partially beyond EOD, truncated [ 334.697789][ T9958] loop4: p1 start 134217728 is beyond EOD, truncated [ 334.705369][ T9958] loop4: p2 size 591360 extends beyond EOD, truncated [ 334.716379][ T9958] loop4: p5 size 591360 extends beyond EOD, truncated [ 334.851456][ T7475] udevd[7475]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 334.861878][ T7477] udevd[7477]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 334.872333][ T7597] udevd[7597]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 334.891133][ T7597] udevd[7597]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 334.901077][ T7477] udevd[7477]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 334.911355][ T7475] udevd[7475]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 334.930694][ T9966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1900'. [ 335.207247][ T9970] netem: unknown loss type 0 [ 335.218504][ T9970] netem: change failed [ 335.385309][ T9970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1901'. [ 335.462748][ T9970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1901'. [ 335.488280][ T9973] loop5: detected capacity change from 0 to 1024 [ 335.513147][ T9970] netlink: 1392 bytes leftover after parsing attributes in process `syz.3.1901'. [ 335.528046][ T9973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.637195][ T9973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.715696][ T9976] loop3: detected capacity change from 0 to 1024 [ 335.769521][ T9976] EXT4-fs (loop3): unsupported inode size: 143 [ 335.801382][ T9976] EXT4-fs (loop3): blocksize: 1024 [ 335.822070][ T9978] loop1: detected capacity change from 0 to 512 [ 335.833758][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.853494][ T9978] EXT4-fs: inline encryption not supported [ 335.894401][ T9978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.917381][ T9978] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.994106][ T28] audit: type=1400 audit(1774771050.854:6161): avc: denied { setattr } for pid=9977 comm="syz.1.1904" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.998511][ T9978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1904'. [ 336.034444][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 336.113446][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.153202][ T9984] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1906'. [ 336.179692][ T9984] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1906'. [ 336.193771][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.717671][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1909'. [ 336.878042][T10001] loop0: detected capacity change from 0 to 1024 [ 336.946586][ T9998] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.987152][ T9999] macsec1: entered promiscuous mode [ 336.992384][ T9999] bond3: entered promiscuous mode [ 337.002959][ T9999] bond3: left promiscuous mode [ 337.191492][T10009] dns_resolver: Unsupported server list version (0) [ 337.405885][T10012] loop0: detected capacity change from 0 to 512 [ 337.491212][T10012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.608788][T10012] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.745030][T10012] EXT4-fs error (device loop0): ext4_get_first_dir_block:3538: inode #12: comm syz.0.1913: directory missing '.' [ 337.758212][T10012] EXT4-fs (loop0): Remounting filesystem read-only [ 337.765126][T10018] loop5: detected capacity change from 0 to 1024 [ 337.772100][T10018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 337.822777][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.834914][T10018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.916155][T10024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1916'. [ 337.934656][T10027] binfmt_misc: register: failed to install interpreter file ./file0 [ 337.947504][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.983077][T10029] 9p: Bad value for 'rfdno' [ 338.203893][ T28] audit: type=1400 audit(1774771053.054:6162): avc: denied { read } for pid=10026 comm="syz.1.1918" lport=48637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 338.427614][T10033] vfat: Unknown parameter 'ÿÿ ' [ 338.561104][ T28] audit: type=1400 audit(1774771053.394:6163): avc: denied { create } for pid=10026 comm="syz.1.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 338.735213][T10051] xfrm0 speed is unknown, defaulting to 1000 [ 338.744456][T10044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 338.832922][T10044] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.958247][T10044] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 3: comm syz.0.1923: lblock 3 mapped to illegal pblock 3 (length 3) [ 339.002290][T10054] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1923: bg 0: block 112: padding at end of block bitmap is not set [ 339.061522][T10054] EXT4-fs (loop0): Remounting filesystem read-only [ 339.075642][T10044] EXT4-fs (loop0): Remounting filesystem read-only [ 339.121604][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 339.205049][ T28] audit: type=1400 audit(1774771054.064:6164): avc: denied { nlmsg_read } for pid=10060 comm="syz.1.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 339.205049][T10061] netlink: 'syz.1.1929': attribute type 40 has an invalid length. [ 339.273582][T10070] set_capacity_and_notify: 2 callbacks suppressed [ 339.273601][T10070] loop5: detected capacity change from 0 to 1024 [ 339.329453][T10070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 339.358207][T10078] loop4: detected capacity change from 0 to 1024 [ 339.385022][T10070] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.409695][T10078] EXT4-fs: inline encryption not supported [ 339.429628][T10078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 339.444927][T10078] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.445271][T10083] loop1: detected capacity change from 0 to 512 [ 339.480608][T10078] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1934: lblock 0 mapped to illegal pblock 0 (length 6) [ 339.494377][T10078] EXT4-fs error (device loop4): ext4_ext_remove_space:2954: inode #15: comm syz.4.1934: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 339.523744][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.570019][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 339.622229][T10091] loop4: detected capacity change from 0 to 1024 [ 339.630546][T10091] EXT4-fs: test_dummy_encryption option not supported [ 339.839585][T10096] IPVS: length: 1152 != 8 [ 339.846911][T10096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1939'. [ 339.878430][T10096] gre1: entered promiscuous mode [ 340.368546][T10099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1940'. [ 340.419220][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1940'. [ 340.544481][T10101] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1941'. [ 340.594240][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1941'. [ 340.674362][T10106] hsr0: entered allmulticast mode [ 340.691585][T10106] hsr_slave_0: entered allmulticast mode [ 340.711802][T10106] hsr_slave_1: entered allmulticast mode [ 341.274485][T10122] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 341.304302][T10100] hsr0: left allmulticast mode [ 341.312500][T10100] hsr_slave_0: left allmulticast mode [ 341.318134][T10124] loop4: detected capacity change from 0 to 1024 [ 341.318973][T10100] hsr_slave_1: left allmulticast mode [ 341.328154][T10124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 341.340351][T10124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.378082][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.980494][T10139] loop0: detected capacity change from 0 to 128 [ 342.277668][T10148] sctp: [Deprecated]: syz.1.1957 (pid 10148) Use of int in max_burst socket option. [ 342.277668][T10148] Use struct sctp_assoc_value instead [ 342.664154][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1959'. [ 342.920555][T10156] bond1: option lacp_active: invalid value (5) [ 342.944332][T10156] bond1 (unregistering): Released all slaves [ 342.970977][T10157] veth1_to_bridge: entered promiscuous mode [ 342.978166][T10157] veth1_to_bridge: left promiscuous mode [ 343.104739][T10167] loop0: detected capacity change from 0 to 512 [ 343.153894][T10167] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 343.201751][T10179] 9p: Bad value for 'rfdno' [ 343.275830][T10192] loop3: detected capacity change from 0 to 512 [ 343.278601][T10190] xfrm0 speed is unknown, defaulting to 1000 [ 343.295355][T10192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.308113][T10192] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.477389][T10201] random: crng reseeded on system resumption [ 343.548849][T10201] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 343.562322][T10201] bond4 (unregistering): Released all slaves [ 343.602886][ T28] audit: type=1400 audit(1774771058.334:6165): avc: denied { write } for pid=10199 comm="syz.0.1970" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 343.657442][ T28] audit: type=1400 audit(1774771058.334:6166): avc: denied { open } for pid=10199 comm="syz.0.1970" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 343.696548][ T28] audit: type=1400 audit(1774771058.374:6167): avc: denied { ioctl } for pid=10199 comm="syz.0.1970" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 343.722645][ T28] audit: type=1400 audit(1774771058.484:6168): avc: denied { create } for pid=10199 comm="syz.0.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 343.951449][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1973'. [ 343.968953][T10212] loop4: detected capacity change from 0 to 512 [ 343.981685][ T28] audit: type=1400 audit(1774771058.834:6169): avc: denied { mounton } for pid=10211 comm="syz.4.1973" path="/file2" dev="bpf" ino=32831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 344.017120][T10212] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 344.027342][T10212] EXT4-fs (loop4): orphan cleanup on readonly fs [ 344.034586][T10212] Quota error (device loop4): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 344.046212][T10212] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 344.073006][T10212] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 344.073079][T10216] loop1: detected capacity change from 0 to 256 [ 344.086474][T10216] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 344.087263][T10212] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1973: bg 0: block 15: invalid block bitmap [ 344.112982][T10212] loop4: lost filesystem error report for type 5 error -117 [ 344.113332][T10212] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 344.129666][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 344.129686][ C1] EXT4-fs (loop4): initial error at time 1774771058: ext4_validate_block_bitmap:432 [ 344.129710][ C1] EXT4-fs (loop4): last error at time 1774771058: ext4_validate_block_bitmap:432 [ 344.173734][T10212] loop4: lost filesystem error report for type 5 error -117 [ 344.174450][T10212] EXT4-fs (loop4): 1 truncate cleaned up [ 344.193688][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.208320][T10212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.222426][T10212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.280472][T10227] EXT4-fs: Ignoring removed mblk_io_submit option [ 344.311846][T10227] EXT4-fs: Ignoring removed mblk_io_submit option [ 344.328459][ T28] audit: type=1400 audit(1774771059.184:6170): avc: denied { read } for pid=10229 comm="syz.4.1979" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 344.370685][T10227] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 4: comm syz.1.1978: lblock 0 mapped to illegal pblock 4 (length 1) [ 344.383093][ T28] audit: type=1400 audit(1774771059.184:6171): avc: denied { open } for pid=10229 comm="syz.4.1979" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 344.409386][ T28] audit: type=1400 audit(1774771059.184:6172): avc: denied { ioctl } for pid=10229 comm="syz.4.1979" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 344.430979][T10227] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 344.443231][T10227] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.1978: error -117 reading directory block [ 344.464826][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 344.464843][ C1] EXT4-fs (loop1): initial error at time 1774771059: ext4_map_blocks:776: inode 2: block 4 [ 344.464896][ C1] EXT4-fs (loop1): last error at time 1774771059: ext4_map_blocks:776: inode 2: block 4 [ 344.493576][T10227] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 344.507487][T10227] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 4: comm syz.1.1978: lblock 0 mapped to illegal pblock 4 (length 1) [ 344.522251][T10227] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.1978: error -117 reading directory block [ 344.578925][T10245] set_capacity_and_notify: 1 callbacks suppressed [ 344.578939][T10245] loop1: detected capacity change from 0 to 4096 [ 344.596003][ T28] audit: type=1400 audit(1774771059.454:6173): avc: denied { mount } for pid=10246 comm="syz.0.1985" name="/" dev="autofs" ino=32147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 344.633705][T10244] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.1984: corrupted inode contents [ 344.645892][T10244] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.1984: mark_inode_dirty error [ 344.657992][T10244] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.1984: corrupted inode contents [ 344.672461][T10244] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.1984: mark_inode_dirty error [ 344.684146][T10244] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.1984: corrupted inode contents [ 344.705200][T10244] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.1984: mark_inode_dirty error [ 344.716864][T10244] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.1984: corrupted inode contents [ 344.728989][T10244] EXT4-fs error (device loop1): ext4_truncate:4587: inode #15: comm syz.1.1984: mark_inode_dirty error [ 344.740310][T10244] EXT4-fs error (device loop1) in ext4_setattr:5983: Corrupt filesystem [ 344.797583][T10258] loop1: detected capacity change from 0 to 512 [ 344.821765][T10258] ext4 filesystem being mounted at /410/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.930918][T10260] loop0: detected capacity change from 0 to 256 [ 344.944258][T10260] FAT-fs (loop0): Directory bread(block 64) failed [ 344.950867][T10260] FAT-fs (loop0): Directory bread(block 65) failed [ 344.957508][T10260] FAT-fs (loop0): Directory bread(block 66) failed [ 344.964043][T10260] FAT-fs (loop0): Directory bread(block 67) failed [ 344.970552][T10260] FAT-fs (loop0): Directory bread(block 68) failed [ 344.977168][T10260] FAT-fs (loop0): Directory bread(block 69) failed [ 344.983794][T10260] FAT-fs (loop0): Directory bread(block 70) failed [ 344.990288][T10260] FAT-fs (loop0): Directory bread(block 71) failed [ 344.996853][T10260] FAT-fs (loop0): Directory bread(block 72) failed [ 345.003657][T10260] FAT-fs (loop0): Directory bread(block 73) failed [ 346.248576][T10266] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1989'. [ 346.254872][T10268] loop5: detected capacity change from 0 to 2048 [ 346.273233][T10268] EXT4-fs: quotafile must be on filesystem root [ 346.313755][ T3310] EXT4-fs unmount: 5 callbacks suppressed [ 346.313768][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.383773][T10271] loop5: detected capacity change from 0 to 1024 [ 346.409035][T10271] EXT4-fs: Ignoring removed nomblk_io_submit option [ 346.463061][T10271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.589069][T10284] veth1_to_bridge: entered promiscuous mode [ 346.596202][T10284] veth1_to_bridge: left promiscuous mode [ 346.896218][T10295] loop1: detected capacity change from 0 to 1024 [ 346.925257][T10295] EXT4-fs: inline encryption not supported [ 347.874067][T10302] loop3: detected capacity change from 0 to 256 [ 347.974521][T10295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 347.987428][T10295] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.002398][T10295] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.1997: lblock 0 mapped to illegal pblock 0 (length 6) [ 348.024069][T10295] EXT4-fs error (device loop1): ext4_ext_remove_space:2954: inode #15: comm syz.1.1997: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 348.390428][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.407798][T10306] loop4: detected capacity change from 0 to 512 [ 348.431740][T10302] FAT-fs (loop3): Directory bread(block 64) failed [ 348.438351][T10302] FAT-fs (loop3): Directory bread(block 65) failed [ 348.445063][T10302] FAT-fs (loop3): Directory bread(block 66) failed [ 348.451580][T10302] FAT-fs (loop3): Directory bread(block 67) failed [ 348.458281][T10302] FAT-fs (loop3): Directory bread(block 68) failed [ 348.464864][T10302] FAT-fs (loop3): Directory bread(block 69) failed [ 348.471408][T10302] FAT-fs (loop3): Directory bread(block 70) failed [ 348.478008][T10302] FAT-fs (loop3): Directory bread(block 71) failed [ 348.484718][T10302] FAT-fs (loop3): Directory bread(block 72) failed [ 348.491220][T10302] FAT-fs (loop3): Directory bread(block 73) failed [ 348.534346][ T3420] Process accounting resumed [ 348.539069][ T3420] bio_check_eod: 21 callbacks suppressed [ 348.539078][ T3420] kworker/1:3: attempt to access beyond end of device [ 348.539078][ T3420] loop3: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 348.728100][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 349.005223][T10306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.017974][T10306] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.254323][T10312] loop0: detected capacity change from 0 to 256 [ 350.227019][T10319] sctp: [Deprecated]: syz.5.2000 (pid 10319) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.227019][T10319] Use struct sctp_sack_info instead [ 352.258065][T10323] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.304712][T10323] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.449563][T10312] FAT-fs (loop0): Directory bread(block 64) failed [ 352.456212][T10312] FAT-fs (loop0): Directory bread(block 65) failed [ 352.463102][T10312] FAT-fs (loop0): Directory bread(block 66) failed [ 352.469650][T10312] FAT-fs (loop0): Directory bread(block 67) failed [ 352.476295][T10312] FAT-fs (loop0): Directory bread(block 68) failed [ 352.482913][T10312] FAT-fs (loop0): Directory bread(block 69) failed [ 352.489530][T10312] FAT-fs (loop0): Directory bread(block 70) failed [ 352.496059][T10312] FAT-fs (loop0): Directory bread(block 71) failed [ 352.502564][T10312] FAT-fs (loop0): Directory bread(block 72) failed [ 352.509095][T10312] FAT-fs (loop0): Directory bread(block 73) failed [ 352.551875][T10326] dns_resolver: Unsupported server list version (0) [ 352.583973][T10327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=10327 comm=syz.5.2005 [ 352.598037][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.607381][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.616497][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.626885][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.654513][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.685765][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2007'. [ 352.696940][T10330] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2007'. [ 352.897074][T10323] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.719870][T10323] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.488606][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 354.488629][ T28] audit: type=1326 audit(1774771069.344:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.1.2010" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2292f8c819 code=0x0 [ 354.529474][ T4396] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.552745][ T4396] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.569224][ T4396] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.588418][ T4396] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.596109][T10330] loop3: detected capacity change from 0 to 512 [ 354.616577][T10330] vfat: Unknown parameter 'ÿÿ ' [ 354.661519][T10348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2012'. [ 354.915274][T10358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2016'. [ 355.153445][T10361] loop5: detected capacity change from 0 to 512 [ 355.168763][T10361] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 355.178031][T10361] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 355.187905][T10361] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 355.196949][T10361] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 355.205072][T10361] System zones: 0-2, 18-18, 34-34 [ 355.210590][T10361] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2017: bad orphan inode 15 [ 355.220661][T10361] loop5: lost filesystem error report for type 5 error -117 [ 355.220842][T10361] ext4_test_bit(bit=14, block=18) = 1 [ 355.228146][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 355.228164][ C1] EXT4-fs (loop5): initial error at time 1774771070: ext4_orphan_get:1417 [ 355.228189][ C1] EXT4-fs (loop5): last error at time 1774771070: ext4_orphan_get:1417 [ 355.256953][T10361] is_bad_inode(inode)=0 [ 355.261158][T10361] NEXT_ORPHAN(inode)=2264924160 [ 355.266241][T10361] max_ino=32 [ 355.269508][T10361] i_nlink=0 [ 355.272991][T10361] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.2017: corrupted inode contents [ 355.284914][T10361] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 355.285376][T10361] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.2017: mark_inode_dirty error [ 355.327136][T10361] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 355.327375][T10361] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.2017: corrupted inode contents [ 355.349589][T10361] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 355.349740][T10361] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.2017: mark_inode_dirty error [ 355.373973][T10366] loop1: detected capacity change from 0 to 512 [ 355.405494][T10366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.422999][T10361] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 355.428293][T10361] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.2017: mark inode dirty (error -117) [ 355.467466][T10366] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.487337][T10361] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 355.487564][T10361] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 355.523188][T10361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.552920][ T28] audit: type=1400 audit(1774771070.404:6176): avc: denied { map } for pid=10370 comm="syz.0.2020" path="socket:[33105]" dev="sockfs" ino=33105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 355.618512][T10374] loop0: detected capacity change from 0 to 1024 [ 355.633576][T10374] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.658752][T10374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.047308][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.312914][T10384] loop4: detected capacity change from 0 to 512 [ 356.364204][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2024'. [ 356.390826][T10384] vfat: Unknown parameter 'ÿÿ ' [ 356.432147][T10386] netlink: 324 bytes leftover after parsing attributes in process `syz.5.2024'. [ 356.514289][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.685729][T10386] loop5: detected capacity change from 0 to 512 [ 356.707736][T10386] vfat: Unknown parameter 'ÿÿ ' [ 356.725209][T10396] loop0: detected capacity change from 0 to 512 [ 356.753470][T10396] EXT4-fs: Ignoring removed mblk_io_submit option [ 356.760052][T10396] EXT4-fs: Ignoring removed mblk_io_submit option [ 356.785026][T10396] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 4: comm syz.0.2027: lblock 0 mapped to illegal pblock 4 (length 1) [ 356.812088][T10396] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 356.812279][T10396] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.2027: error -117 reading directory block [ 356.821412][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 356.821447][ C0] EXT4-fs (loop0): initial error at time 1774771071: ext4_map_blocks:776: inode 2: block 4 [ 356.821485][ C0] EXT4-fs (loop0): last error at time 1774771071: ext4_map_blocks:776: inode 2: block 4 [ 356.889436][T10396] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 356.898434][T10396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.901644][T10405] netlink: 'syz.4.2030': attribute type 1 has an invalid length. [ 356.921581][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.950384][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.967460][ T28] audit: type=1400 audit(1774771071.824:6177): avc: denied { getopt } for pid=10406 comm="syz.1.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 356.989592][T10409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2032'. [ 357.001885][T10405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2030'. [ 357.045906][ T28] audit: type=1400 audit(1774771071.904:6178): avc: denied { ioctl } for pid=10406 comm="syz.1.2031" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 357.220016][T10418] loop1: detected capacity change from 0 to 2048 [ 357.356102][T10418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.471667][ T28] audit: type=1400 audit(1774771072.324:6179): avc: denied { read } for pid=10417 comm="syz.1.2034" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 357.543396][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.600624][ T28] audit: type=1400 audit(1774771072.354:6180): avc: denied { mounton } for pid=10417 comm="syz.1.2034" path=2F3432312F66696C65302F02 dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 358.018070][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2040'. [ 358.031552][T10436] loop5: detected capacity change from 0 to 512 [ 358.038601][T10436] EXT4-fs: Ignoring removed i_version option [ 358.040466][ T28] audit: type=1400 audit(1774771072.884:6181): avc: denied { mount } for pid=10430 comm="syz.1.2036" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 358.068449][T10437] loop3: detected capacity change from 0 to 256 [ 358.094047][T10436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.149976][ T28] audit: type=1400 audit(1774771072.994:6182): avc: denied { write } for pid=10441 comm="syz.4.2041" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 358.223936][T10437] FAT-fs (loop3): Directory bread(block 64) failed [ 358.223962][T10437] FAT-fs (loop3): Directory bread(block 65) failed [ 358.223982][T10437] FAT-fs (loop3): Directory bread(block 66) failed [ 358.223999][T10437] FAT-fs (loop3): Directory bread(block 67) failed [ 358.224025][T10437] FAT-fs (loop3): Directory bread(block 68) failed [ 358.224053][T10437] FAT-fs (loop3): Directory bread(block 69) failed [ 358.224076][T10437] FAT-fs (loop3): Directory bread(block 70) failed [ 358.224091][T10437] FAT-fs (loop3): Directory bread(block 71) failed [ 358.224115][T10437] FAT-fs (loop3): Directory bread(block 72) failed [ 358.224131][T10437] FAT-fs (loop3): Directory bread(block 73) failed [ 358.229824][T10443] FAT-fs (loop0): Directory bread(block 64) failed [ 358.229846][T10443] FAT-fs (loop0): Directory bread(block 65) failed [ 358.229899][T10443] FAT-fs (loop0): Directory bread(block 66) failed [ 358.229918][T10443] FAT-fs (loop0): Directory bread(block 67) failed [ 358.229941][T10443] FAT-fs (loop0): Directory bread(block 68) failed [ 358.229959][T10443] FAT-fs (loop0): Directory bread(block 69) failed [ 358.229980][T10443] FAT-fs (loop0): Directory bread(block 70) failed [ 358.229995][T10443] FAT-fs (loop0): Directory bread(block 71) failed [ 358.230097][T10443] FAT-fs (loop0): Directory bread(block 72) failed [ 358.230116][T10443] FAT-fs (loop0): Directory bread(block 73) failed [ 358.252101][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.419994][T10449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.420055][T10449] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.846668][ T28] audit: type=1400 audit(1774771073.704:6183): avc: denied { map } for pid=10455 comm="syz.1.2044" path="socket:[33244]" dev="sockfs" ino=33244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 358.872573][T10458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2045'. [ 359.711676][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.758629][T10467] sctp: [Deprecated]: syz.4.2049 (pid 10467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.758629][T10467] Use struct sctp_sack_info instead [ 360.342580][T10477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2052'. [ 360.675727][T10486] set_capacity_and_notify: 2 callbacks suppressed [ 360.675793][T10486] loop1: detected capacity change from 0 to 128 [ 360.737894][T10486] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 360.742266][ T28] audit: type=1400 audit(1774771075.584:6184): avc: denied { ioctl } for pid=10484 comm="syz.5.2056" path="/dev/uhid" dev="devtmpfs" ino=252 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 360.764120][T10486] FAULT_INJECTION: forcing a failure. [ 360.764120][T10486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.795201][T10486] CPU: 1 UID: 0 PID: 10486 Comm: syz.1.2055 Tainted: G W syzkaller #0 PREEMPT(full) [ 360.795235][T10486] Tainted: [W]=WARN [ 360.795242][T10486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.795256][T10486] Call Trace: [ 360.795262][T10486] [ 360.795271][T10486] __dump_stack+0x1d/0x30 [ 360.795348][T10486] dump_stack_lvl+0x95/0xd0 [ 360.795379][T10486] dump_stack+0x15/0x1b [ 360.795400][T10486] should_fail_ex+0x263/0x280 [ 360.795482][T10486] should_fail+0xb/0x20 [ 360.795505][T10486] should_fail_usercopy+0x1a/0x20 [ 360.795530][T10486] _copy_to_user+0x20/0xa0 [ 360.795555][T10486] simple_read_from_buffer+0xb5/0x130 [ 360.795585][T10486] proc_fail_nth_read+0x10e/0x150 [ 360.795615][T10486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.795641][T10486] vfs_read+0x1ab/0x7f0 [ 360.795750][T10486] ? _raw_spin_lock+0x52/0xa0 [ 360.795778][T10486] ? _raw_spin_unlock+0x9/0x30 [ 360.795880][T10486] ? generic_fadvise+0x2fc/0x460 [ 360.795905][T10486] ksys_read+0xdc/0x1a0 [ 360.795920][T10486] __x64_sys_read+0x40/0x50 [ 360.795936][T10486] x64_sys_call+0x2886/0x3020 [ 360.795988][T10486] do_syscall_64+0x12c/0x370 [ 360.796014][T10486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.796033][T10486] RIP: 0033:0x7f2292f4d04e [ 360.796049][T10486] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 360.796080][T10486] RSP: 002b:00007f22919e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.796098][T10486] RAX: ffffffffffffffda RBX: 00007f22919e76c0 RCX: 00007f2292f4d04e [ 360.796110][T10486] RDX: 000000000000000f RSI: 00007f22919e70a0 RDI: 0000000000000005 [ 360.796121][T10486] RBP: 00007f22919e7090 R08: 0000000000000000 R09: 0000000000000000 [ 360.796131][T10486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.796142][T10486] R13: 00007f2293206038 R14: 00007f2293205fa0 R15: 00007fffc280ac38 [ 360.796204][T10486] [ 361.073797][T10496] loop5: detected capacity change from 0 to 512 [ 361.095098][T10493] FAULT_INJECTION: forcing a failure. [ 361.095098][T10493] name failslab, interval 1, probability 0, space 0, times 0 [ 361.141125][T10493] CPU: 0 UID: 0 PID: 10493 Comm: syz.3.2057 Tainted: G W syzkaller #0 PREEMPT(full) [ 361.141160][T10493] Tainted: [W]=WARN [ 361.141167][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 361.141206][T10493] Call Trace: [ 361.141213][T10493] [ 361.141222][T10493] __dump_stack+0x1d/0x30 [ 361.141248][T10493] dump_stack_lvl+0x95/0xd0 [ 361.141273][T10493] dump_stack+0x15/0x1b [ 361.141295][T10493] should_fail_ex+0x263/0x280 [ 361.141367][T10493] should_failslab+0x8c/0xb0 [ 361.141418][T10493] __kvmalloc_node_noprof+0x155/0x650 [ 361.141446][T10493] ? bpf_test_run_xdp_live+0x137/0x1360 [ 361.141482][T10493] bpf_test_run_xdp_live+0x137/0x1360 [ 361.141547][T10493] ? __pfx_autoremove_wake_function+0x10/0x10 [ 361.141653][T10493] ? mutex_unlock+0x4e/0x90 [ 361.141681][T10493] ? bpf_dispatcher_xdp+0x800/0x1000 [ 361.141698][T10493] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 361.141730][T10493] ? bpf_dispatcher_xdp+0x800/0x1000 [ 361.141759][T10493] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 361.141910][T10493] bpf_prog_test_run_xdp+0x57b/0xa10 [ 361.141942][T10493] ? __rcu_read_unlock+0x4e/0x70 [ 361.141967][T10493] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 361.142077][T10493] bpf_prog_test_run+0x204/0x340 [ 361.142102][T10493] __sys_bpf+0x52e/0x7e0 [ 361.142130][T10493] __x64_sys_bpf+0x41/0x50 [ 361.142219][T10493] x64_sys_call+0x10cb/0x3020 [ 361.142245][T10493] do_syscall_64+0x12c/0x370 [ 361.142273][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.142323][T10493] RIP: 0033:0x7fb4b6fcc819 [ 361.142346][T10493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.142364][T10493] RSP: 002b:00007fb4b5a1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 361.142386][T10493] RAX: ffffffffffffffda RBX: 00007fb4b7245fa0 RCX: 00007fb4b6fcc819 [ 361.142400][T10493] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 361.142414][T10493] RBP: 00007fb4b5a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 361.142436][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.142449][T10493] R13: 00007fb4b7246038 R14: 00007fb4b7245fa0 R15: 00007ffce8f12578 [ 361.142483][T10493] [ 361.388298][T10496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.401319][T10500] loop1: detected capacity change from 0 to 4096 [ 361.407847][T10501] loop0: detected capacity change from 0 to 512 [ 361.414939][T10496] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.425483][T10501] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 361.441063][T10501] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2059: bad orphan inode 131083 [ 361.453512][T10500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.522899][T10501] loop0: lost filesystem error report for type 5 error -117 [ 361.523487][T10501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.559662][T10508] loop4: detected capacity change from 0 to 128 [ 361.572292][T10508] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 361.591977][T10508] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 361.639514][ T4396] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 361.649630][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.694608][T10518] FAULT_INJECTION: forcing a failure. [ 361.694608][T10518] name failslab, interval 1, probability 0, space 0, times 0 [ 361.731927][T10518] CPU: 0 UID: 0 PID: 10518 Comm: syz.1.2065 Tainted: G W syzkaller #0 PREEMPT(full) [ 361.731955][T10518] Tainted: [W]=WARN [ 361.731962][T10518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 361.731974][T10518] Call Trace: [ 361.731981][T10518] [ 361.731988][T10518] __dump_stack+0x1d/0x30 [ 361.732056][T10518] dump_stack_lvl+0x95/0xd0 [ 361.732076][T10518] dump_stack+0x15/0x1b [ 361.732121][T10518] should_fail_ex+0x263/0x280 [ 361.732144][T10518] ? futex_lock_pi+0x757/0x7e0 [ 361.732251][T10518] should_failslab+0x8c/0xb0 [ 361.732282][T10518] __kmalloc_cache_noprof+0x5f/0x410 [ 361.732329][T10518] futex_lock_pi+0x757/0x7e0 [ 361.732358][T10518] ? _parse_integer_limit+0x170/0x190 [ 361.732383][T10518] ? __pfx_futex_wake_mark+0x10/0x10 [ 361.732409][T10518] do_futex+0x21f/0x380 [ 361.732433][T10518] __se_sys_futex+0x2f6/0x370 [ 361.732459][T10518] ? mutex_unlock+0x4e/0x90 [ 361.732514][T10518] __x64_sys_futex+0x78/0x90 [ 361.732539][T10518] x64_sys_call+0x24ab/0x3020 [ 361.732562][T10518] do_syscall_64+0x12c/0x370 [ 361.732584][T10518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.732648][T10518] RIP: 0033:0x7f2292f8c819 [ 361.732663][T10518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.732679][T10518] RSP: 002b:00007f22919e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 361.732725][T10518] RAX: ffffffffffffffda RBX: 00007f2293205fa0 RCX: 00007f2292f8c819 [ 361.732814][T10518] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000000000000000 [ 361.732826][T10518] RBP: 00007f22919e7090 R08: 0000000000000000 R09: 0000000000000000 [ 361.732837][T10518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.732848][T10518] R13: 00007f2293206038 R14: 00007f2293205fa0 R15: 00007fffc280ac38 [ 361.732866][T10518] [ 361.926512][ T28] audit: type=1400 audit(1774771076.644:6185): avc: denied { map } for pid=10497 comm="syz.0.2059" path="/397/bus/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 361.980659][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.197335][T10539] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 362.304627][T10528] xfrm0 speed is unknown, defaulting to 1000 [ 362.324716][T10533] loop0: detected capacity change from 0 to 256 [ 362.458386][T10533] FAT-fs (loop0): Directory bread(block 64) failed [ 362.516894][T10533] FAT-fs (loop0): Directory bread(block 65) failed [ 362.587215][T10533] FAT-fs (loop0): Directory bread(block 66) failed [ 362.646637][T10533] FAT-fs (loop0): Directory bread(block 67) failed [ 362.720717][T10533] FAT-fs (loop0): Directory bread(block 68) failed [ 362.743869][T10533] FAT-fs (loop0): Directory bread(block 69) failed [ 362.768454][T10533] FAT-fs (loop0): Directory bread(block 70) failed [ 362.795466][T10533] FAT-fs (loop0): Directory bread(block 71) failed [ 362.820653][T10533] FAT-fs (loop0): Directory bread(block 72) failed [ 362.878334][T10533] FAT-fs (loop0): Directory bread(block 73) failed [ 362.913424][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.061989][T10545] loop1: detected capacity change from 0 to 512 [ 363.102458][T10545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.116317][T10545] ext4 filesystem being mounted at /434/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.176872][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2072'. [ 363.194097][ T28] audit: type=1400 audit(1774771078.054:6186): avc: denied { map } for pid=10553 comm="syz.4.2076" path="socket:[33425]" dev="sockfs" ino=33425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 363.213394][T10552] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2072'. [ 363.228654][ T28] audit: type=1400 audit(1774771078.054:6187): avc: denied { watch watch_reads } for pid=10553 comm="syz.4.2076" path="/proc/1162" dev="proc" ino=33423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 363.335838][ T28] audit: type=1400 audit(1774771078.054:6188): avc: denied { name_bind } for pid=10553 comm="syz.4.2076" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 363.361133][T10558] EXT4-fs error (device loop1): ext4_get_first_dir_block:3538: inode #12: comm syz.1.2073: directory missing '.' [ 363.391407][T10558] EXT4-fs (loop1): Remounting filesystem read-only [ 363.519316][T10563] loop3: detected capacity change from 0 to 1024 [ 363.538059][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.551808][T10563] EXT4-fs: Ignoring removed mblk_io_submit option [ 363.593917][T10563] EXT4-fs: test_dummy_encryption option not supported [ 363.671537][ T28] audit: type=1400 audit(1774771078.504:6189): avc: denied { watch_reads } for pid=10562 comm="syz.3.2078" path="/445" dev="tmpfs" ino=2417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 363.734293][T10554] loop4: detected capacity change from 0 to 512 [ 363.745045][T10552] loop5: detected capacity change from 0 to 512 [ 363.752328][T10554] EXT4-fs: Ignoring removed i_version option [ 363.763267][T10554] EXT4-fs: test_dummy_encryption option not supported [ 363.779710][T10552] vfat: Unknown parameter 'ÿÿ ' [ 364.039271][T10577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.137566][T10577] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 364.193660][T10580] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 364.217588][T10582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 364.400027][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.566787][T10582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.638725][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.712005][T10595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2088'. [ 365.177428][T10606] FAULT_INJECTION: forcing a failure. [ 365.177428][T10606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.177457][T10606] CPU: 0 UID: 0 PID: 10606 Comm: syz.5.2092 Tainted: G W syzkaller #0 PREEMPT(full) [ 365.177566][T10606] Tainted: [W]=WARN [ 365.177572][T10606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 365.177583][T10606] Call Trace: [ 365.177656][T10606] [ 365.177664][T10606] __dump_stack+0x1d/0x30 [ 365.177690][T10606] dump_stack_lvl+0x95/0xd0 [ 365.177793][T10606] dump_stack+0x15/0x1b [ 365.177815][T10606] should_fail_ex+0x263/0x280 [ 365.177919][T10606] should_fail+0xb/0x20 [ 365.177937][T10606] should_fail_usercopy+0x1a/0x20 [ 365.177960][T10606] _copy_from_user+0x1c/0xb0 [ 365.178054][T10606] do_sock_getsockopt+0xf1/0x210 [ 365.178207][T10606] __x64_sys_getsockopt+0x11d/0x1a0 [ 365.178264][T10606] x64_sys_call+0x2dcf/0x3020 [ 365.178291][T10606] do_syscall_64+0x12c/0x370 [ 365.178376][T10606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.178394][T10606] RIP: 0033:0x7f80012ac819 [ 365.178409][T10606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.178428][T10606] RSP: 002b:00007f7fffd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 365.178449][T10606] RAX: ffffffffffffffda RBX: 00007f8001525fa0 RCX: 00007f80012ac819 [ 365.178465][T10606] RDX: 0000000000000001 RSI: 000000000000011c RDI: 0000000000000003 [ 365.178475][T10606] RBP: 00007f7fffd07090 R08: 0000000000000000 R09: 0000000000000000 [ 365.178512][T10606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.178522][T10606] R13: 00007f8001526038 R14: 00007f8001525fa0 R15: 00007ffcdb746398 [ 365.178604][T10606] [ 365.473722][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2095'. [ 365.524107][T10614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.524178][T10614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.905994][T10622] netlink: 'syz.4.2098': attribute type 16 has an invalid length. [ 365.930924][T10622] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2098'. [ 366.295956][T10631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2101'. [ 366.317781][T10635] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2102'. [ 366.459175][T10640] set_capacity_and_notify: 2 callbacks suppressed [ 366.459191][T10640] loop3: detected capacity change from 0 to 1024 [ 366.473656][T10640] EXT4-fs: inline encryption not supported [ 366.497475][T10640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 366.523029][ T9] IPVS: starting estimator thread 0... [ 366.524738][T10640] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.567380][T10640] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 3: comm syz.3.2104: lblock 3 mapped to illegal pblock 3 (length 3) [ 366.581778][T10640] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 366.594336][T10640] EXT4-fs (loop3): This should not happen!! Data will be lost [ 366.594336][T10640] [ 366.618131][ T4386] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:17: lblock 8 mapped to illegal pblock 8 (length 8) [ 366.632926][T10646] IPVS: using max 2400 ests per chain, 120000 per kthread [ 366.654645][ T4386] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 366.679376][ T4386] EXT4-fs (loop3): This should not happen!! Data will be lost [ 366.679376][ T4386] [ 366.690414][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 366.728592][T10668] loop4: detected capacity change from 0 to 512 [ 366.735956][T10668] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 366.783810][T10668] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2115: bad orphan inode 131083 [ 366.794391][T10668] loop4: lost filesystem error report for type 5 error -117 [ 366.795111][T10668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.884553][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.017812][T10680] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 367.124460][T10684] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2119'. [ 367.439808][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 367.461939][T10688] loop0: detected capacity change from 0 to 512 [ 367.473552][T10688] EXT4-fs: Ignoring removed i_version option [ 367.498998][T10688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.786055][T10694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10694 comm=syz.5.2122 [ 368.116122][T10703] netlink: 'syz.4.2126': attribute type 1 has an invalid length. [ 368.214821][T10703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.287286][T10708] bond1: (slave veth5): Enslaving as an active interface with a down link [ 368.343704][T10707] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2128'. [ 368.436852][T10710] bond1: (slave dummy0): making interface the new active one [ 368.496345][T10710] dummy0: entered promiscuous mode [ 368.565410][T10710] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 369.465325][T10726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2133'. [ 369.788699][T10740] FAULT_INJECTION: forcing a failure. [ 369.788699][T10740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.812850][T10740] CPU: 0 UID: 0 PID: 10740 Comm: syz.3.2137 Tainted: G W syzkaller #0 PREEMPT(full) [ 369.812885][T10740] Tainted: [W]=WARN [ 369.812892][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 369.812985][T10740] Call Trace: [ 369.813007][T10740] [ 369.813015][T10740] __dump_stack+0x1d/0x30 [ 369.813038][T10740] dump_stack_lvl+0x95/0xd0 [ 369.813058][T10740] dump_stack+0x15/0x1b [ 369.813092][T10740] should_fail_ex+0x263/0x280 [ 369.813120][T10740] should_fail+0xb/0x20 [ 369.813155][T10740] should_fail_usercopy+0x1a/0x20 [ 369.813222][T10740] copy_folio_from_iter_atomic+0x269/0x1170 [ 369.813258][T10740] ? shmem_write_begin+0xfc/0x1f0 [ 369.813281][T10740] ? shmem_write_begin+0x135/0x1f0 [ 369.813348][T10740] generic_perform_write+0x2c1/0x490 [ 369.813386][T10740] shmem_file_write_iter+0xc5/0xf0 [ 369.813411][T10740] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 369.813472][T10740] vfs_write+0x5a6/0x9f0 [ 369.813497][T10740] ksys_write+0xdc/0x1a0 [ 369.813581][T10740] __x64_sys_write+0x40/0x50 [ 369.813601][T10740] x64_sys_call+0x27e1/0x3020 [ 369.813622][T10740] do_syscall_64+0x12c/0x370 [ 369.813723][T10740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.813788][T10740] RIP: 0033:0x7fb4b6fcc819 [ 369.813806][T10740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.813822][T10740] RSP: 002b:00007fb4b5a1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 369.813839][T10740] RAX: ffffffffffffffda RBX: 00007fb4b7245fa0 RCX: 00007fb4b6fcc819 [ 369.813851][T10740] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000003 [ 369.813906][T10740] RBP: 00007fb4b5a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 369.813920][T10740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.813933][T10740] R13: 00007fb4b7246038 R14: 00007fb4b7245fa0 R15: 00007ffce8f12578 [ 369.813953][T10740] [ 370.072826][ T28] audit: type=1326 audit(1774771084.914:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.3.2139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4b6fcc819 code=0x0 [ 370.220457][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.304907][T10756] loop0: detected capacity change from 0 to 1024 [ 370.324387][T10756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 370.336613][T10756] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.349877][T10754] loop5: detected capacity change from 0 to 512 [ 370.356668][T10754] EXT4-fs: Ignoring removed nobh option [ 370.368604][T10754] EXT4-fs (loop5): 1 orphan inode deleted [ 370.374814][T10754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.390059][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 370.390099][T10754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.390199][ T3318] ================================================================== [ 370.390216][ T3318] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 370.390233][ T3318] [ 370.390238][ T3318] write to 0xffffffff8939a050 of 3 bytes by task 10754 on cpu 0: [ 370.390248][ T3318] vsnprintf+0x2ce/0x860 [ 370.390263][ T3318] vscnprintf+0x41/0x90 [ 370.390278][ T3318] printk_sprint+0x30/0x2e0 [ 370.390289][ T3318] vprintk_store+0x57b/0x910 [ 370.390299][ T3318] vprintk_emit+0x1a4/0x600 [ 370.390309][ T3318] vprintk_default+0x26/0x30 [ 370.390321][ T3318] vprintk+0x1d/0x30 [ 370.390334][ T3318] _printk+0x79/0xa0 [ 370.390344][ T3318] __ext4_msg+0x1aa/0x1c0 [ 370.390356][ T3318] ext4_put_super+0x90/0x7d0 [ 370.390369][ T3318] generic_shutdown_super+0xee/0x220 [ 370.390388][ T3318] kill_block_super+0x2a/0x70 [ 370.390403][ T3318] ext4_kill_sb+0x42/0x80 [ 370.390413][ T3318] deactivate_locked_super+0x75/0x1c0 [ 370.390429][ T3318] deactivate_super+0x97/0xa0 [ 370.390443][ T3318] cleanup_mnt+0x2bb/0x330 [ 370.390458][ T3318] __cleanup_mnt+0x19/0x20 [ 370.390471][ T3318] task_work_run+0x130/0x1a0 [ 370.390483][ T3318] exit_to_user_mode_loop+0x1f4/0x6f0 [ 370.390495][ T3318] do_syscall_64+0x249/0x370 [ 370.390508][ T3318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.390522][ T3318] [ 370.390529][ T3318] read to 0xffffffff8939a050 of 8 bytes by task 3318 on cpu 1: [ 370.390547][ T3318] data_push_tail+0x100/0x470 [ 370.390565][ T3318] data_alloc+0x11b/0x390 [ 370.390593][ T3318] prb_reserve+0x8d7/0xae0 [ 370.390622][ T3318] vprintk_store+0x54a/0x910 [ 370.390641][ T3318] vprintk_emit+0x1a4/0x600 [ 370.390661][ T3318] vprintk_default+0x26/0x30 [ 370.390678][ T3318] vprintk+0x1d/0x30 [ 370.390698][ T3318] _printk+0x79/0xa0 [ 370.390713][ T3318] __ext4_msg+0x1aa/0x1c0 [ 370.390729][ T3318] ext4_put_super+0x90/0x7d0 [ 370.390750][ T3318] generic_shutdown_super+0xee/0x220 [ 370.390779][ T3318] kill_block_super+0x2a/0x70 [ 370.390799][ T3318] ext4_kill_sb+0x42/0x80 [ 370.390819][ T3318] deactivate_locked_super+0x75/0x1c0 [ 370.390847][ T3318] deactivate_super+0x97/0xa0 [ 370.390871][ T3318] cleanup_mnt+0x2bb/0x330 [ 370.390893][ T3318] __cleanup_mnt+0x19/0x20 [ 370.390916][ T3318] task_work_run+0x130/0x1a0 [ 370.390939][ T3318] exit_to_user_mode_loop+0x1f4/0x6f0 [ 370.390959][ T3318] do_syscall_64+0x249/0x370 [ 370.390978][ T3318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.390996][ T3318] [ 370.391001][ T3318] value changed: 0x00000000ffffef89 -> 0x746e756f6d6e7520 [ 370.391015][ T3318] [ 370.391021][ T3318] Reported by Kernel Concurrency Sanitizer on: [ 370.391036][ T3318] CPU: 1 UID: 0 PID: 3318 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 370.391063][ T3318] Tainted: [W]=WARN [ 370.391072][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.391086][ T3318] ================================================================== [ 370.576582][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 370.711275][ T1033] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 379.942877][ T4388] dummy0: left promiscuous mode