last executing test programs: 1m24.840343743s ago: executing program 1 (id=1059): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xb}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) write(r4, &(0x7f00000000c0)="182eb9", 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) r5 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x3}, 0x204, 0x0, 0x101, 0x0, 0x7, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@grpjquota}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@norecovery}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") open(&(0x7f0000000300)='./file1\x00', 0x8f97e, 0x136) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010006081000418e00000704fcff", 0x58}], 0x1) shutdown(r4, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix@De', 0xfffffffffffffffe) syz_usb_connect(0x0, 0x32, 0x0, 0x0) 1m21.786948739s ago: executing program 1 (id=1078): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x1, 0x5, 0x48, 0xb, 0x1, 0x9}) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002000)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64, @ANYRES8, @ANYRES8, @ANYRES32], 0x1, 0x2f1, &(0x7f0000000b00)="$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") io_cancel(0x0, 0xfffffffffffffffe, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m20.828848139s ago: executing program 1 (id=1084): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002000)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64, @ANYRES8, @ANYRES8, @ANYRES32], 0x1, 0x2f1, &(0x7f0000000b00)="$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") io_cancel(0x0, 0xfffffffffffffffe, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m20.313099725s ago: executing program 1 (id=1087): socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x496d9d793d7b54ea) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2, 0x0, 0x3}}, 0x20) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x0, 0xfff0}, {0x10, 0xffff}}}, 0x24}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) close(0x3) mmap$binder(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000740), 0x9e, 0x0, &(0x7f0000000800)="a3eac690f1739b292bc2d89f6d3ed32d78f492479a6ef54e84268b7255a79664924295c144682abe02d94bfe94aba60973ccf02d1cd75392f90ed1186d6dac084beffb4c1e08ba6e95fa605a945a78ee417560e758ef99768cea176fc14d7c62cc388c850cbc1ac7a47c633120dbbf6bf5b3d2ff11673b35ec96c739568114ba1aa2364a9c10a8fa9b315e9bd90bb7639c59d463d64dfe33a07b87ab7ba3"}) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x2, 0x3, 0x8, 0x8, 0x81}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0x2}, [@NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x28}}, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}, 0x1c, 0x0}, 0x1400c0c0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) 1m19.971531236s ago: executing program 1 (id=1088): writev(0xffffffffffffffff, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0xb5, 0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@nogrpid}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@jqfmt_vfsold}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 1m18.752172194s ago: executing program 1 (id=1095): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@noquota}, {@quota}]}, 0x1, 0x509, &(0x7f0000000200)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x4eda0a90bb2acc2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 1m18.641638677s ago: executing program 32 (id=1095): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@noquota}, {@quota}]}, 0x1, 0x509, &(0x7f0000000200)="$eJzs3c9vI1cdAPCvnThxsmmTlkr8ELRLW1jQsk7ibaNqD1BOCKFKiB5B2gbHG0Wx4yh2ShNySM9ckajECY78AZx74g4HBDcu5YDEjwi0QeJgNONx6k3iTbRJ7Cj+fKTRzJs36+97iee99dexXwAj63ZE7EfERES8FxGz2flctsXbnS257vHBXuXwYK+Si3b73X/m0vrkXPT8m8St7DGLEfGD70T8OHcybnNnd325VqtuZeX5Vn1zvrmze2+tvrxaXa1ulMtLi0sLb91/s3xpfX2lPpEdfemT3+9//adJs2ayM739uEydrheO4iTGI+J7VxFsCMay/kwMuyE8k3xEvBgRr6b3/2yMpb9NAOAma7dnoz3bWwYAbrp8mgPL5UtZLmAm8vlSqZPDeymm87VGs3X3UWN7Y6WTK5uLQv7RWq26kOUK56KQS8qL6fGn5fKx8v2IeCEifj45lZZLlUZtZZj/8QGAEXbr2Pz/n8nO/A8A3HDFYTcAABg48z8AjB7zPwCMHvM/AIyezvw/NexmAAAD5PU/AIwe8z8AjJTvv/NOsrUPs++/Xnl/Z3u98f69lWpzvVTfrpQqja3N0mqjsZp+Z0/9rMerNRqbi2/E9gdz39xstuabO7sP643tjdbD9Hu9H1YL6VX7A+gZANDPC698/OdcMiM/mEq36FnLoTDUlgFXLT/sBgBDMzbsBgBDY7UvGF0XeI0vPQA3xClL9D6heNoHhNrtdvvqmgRcsTufl/+HUdWT//dXwDBi5P9hdMn/w+hqt3PnXfM/znshAHC9yfEDfd7/fzHb/yZ7c+BHK8ev+OgqWwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXW3f931K2FvhM5POlUsRzETEXhdyjtVp1ISKej4g/TRYmk/LikNsMAFxU/m+5bP2vO7OvzzxR9fKto8OJiPjJL9/9xQfLrdbWHyMmcv+a7J5vfZSdLw++9QDA2brzdLrveSH/+GCv8vjgG3948Nm9yiDb8/dvR0SxE//wYCIOD7rxx2M83RejEBHT/85l5Y5cT+7iIvY/jIjPdfvf2boRZtIcSGfl0+Pxk9jPDTR+/on4+bSus09+Fp+5hLbAqPk4GX/ePu3+y8ftdH/6/V9MR6iLy8a/5KEqh+kY+Gn87vg31mf8u33eGG/87rudo6mTdR9GfGE87c6x+Lmj+Lk+8V8/Z/y/fPHlV/vVtX8VcSciurF74/fGmm/VN+ebO7v31urLq9XV6ka5vLS4tPDW/TfL82mOer7/bPCPB3ef71eX9H+6T/ziGf3/yjn7/+v/vffDLz8l/tdeOy1+Pl56SvxkTvzqOeMvT/+22K8uib/Sp/9n/f7vnjP+J3/dPbFsOAAwPM2d3fXlWq265cDB9T9InrLHq9rt6/E0/tagYk3E6VU/e61zT5/4+TxTrH4jxmVk3YDr4Oimj4j/DrsxAAAAAAAAAAAAAADAqQbxiaVh9xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICb6/8BAAD//5FHy58=") socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x4eda0a90bb2acc2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 9.346874317s ago: executing program 5 (id=1488): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x84742, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0x211d9572}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)={r3}, &(0x7f00000003c0)=0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r4, &(0x7f0000000440)="0f50", 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0xfd, 0x5, 0x21, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7, 0xfffffff9, 0x3}}) sendmsg$nl_route(r4, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@dellink={0x48, 0x11, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x1180e, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_PHYS_PORT_ID={0x13, 0x22, "6ddb3cd51efe49726b24853f26efbd"}]}, 0x48}, 0x1, 0x0, 0x0, 0x2080}, 0x4) sendto$inet(r6, &(0x7f0000000740)="7bfe9fb5", 0x4, 0x810, &(0x7f0000000840)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58010000100013070000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0ffffffffffffff00000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="00005a56ffa2b200"], 0x158}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000380)={0x20080522}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000140001032dbd7000fedbdf250c000000c5bc2ef002641a0e31b7d636f67219e1d721430f8dea6267f3e80404a4f875aaf1786e3d09d7d98a4e3727ac91f33abba840491d700abbe34067fc1a60f7cf4f457cb100fb7ed75711202972a3abe175e5b7f4e6f9"], 0x14}}, 0x20008080) 8.414026906s ago: executing program 5 (id=1495): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x1, 0x5, 0x48, 0xb, 0x1, 0x9}) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002000)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64, @ANYRES8, @ANYRES8, @ANYRES32], 0x1, 0x2f1, &(0x7f0000000b00)="$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") io_cancel(0x0, 0xfffffffffffffffe, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.865355597s ago: executing program 5 (id=1503): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x300000d, 0x191) write$cgroup_int(r1, &(0x7f0000000300)=0x7f, 0xfdef) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000180)) ioctl$TUNSETNOCSUM(r0, 0x894c, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8984662b0254d78d, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e000000760000000000000027000000000000009500000000000108"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r5, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r7], 0x34}}, 0x4008000) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4.544266078s ago: executing program 4 (id=1510): r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xfffffffffffffe38) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc811"], 0xffe) (async) fcntl$lock(r2, 0x7, &(0x7f0000000100)={0x0, 0x1, 0x2, 0xc1b0}) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x1, 0x8}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = epoll_create1(0x0) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x2, 0x1, 0x1, 0x7ff}) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r7, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) (async) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r7, 0x3309) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010426bd7000fdffffff00000000b791402e3dbb2115b418f09f6e028000000000000001090000008b474bcdc95beb8b8f2e409509a3dfe0", @ANYRES32=0x0, @ANYBLOB="42d40100280001001c00128009000100626f6e64000000000c00028008000200", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x810) 4.108417521s ago: executing program 5 (id=1513): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) clock_nanosleep(0x7, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1, 0x2, 0x7) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r4, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 4.027768924s ago: executing program 4 (id=1515): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newqdisc={0xec, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xbc, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x68, 0xd, "85fb02f352b681d3566c011dace0362db368f9787dbe92c45230fcca9c00d90865f30d9c53ccef8564098369a85821baf7ee612d34112ccfe4ba45631522022229378d473291bbe423ca32a6777ad0072096e78bb4e782d9d5e0c1bbdf06781e6be86cc9"}, @TCA_NETEM_DELAY_DIST={0x37, 0x2, "ce2b7239806574fd656bfbbed2884a38ee21b8c53d71dec277aff253639741496d3c117833ed96518cd0fddf754c6b14c383c8"}]}}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20048084}, 0x8080) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800000020000100ffffffff000000000200200000000000000000000800100005000000080002000a0101010c000c400000000000000007ecb99b1a64de90fe628c6815cb6594c3f3b2d0dafdb13e3c46d115a52c488998c8a84cb68660fb259155ae539f70725b38b682342aa56c97b53903509c347f78f92bfe7046a3459d02a0c29e8af01fe21fceb90331c954056676003fe74f9a2bec4c4e5d0149ce59bd7bb18a1be17543bceb8129fd81e965f2931e1b85ae1d58135cd6e927eb3bfc947a9f3e7632407784602e627bb86d6ab3d0bbfa654831a734bab213ca00ce4dd129190ceaa830aa192b3be8c3146515770ec3165a22a2da62f45e5db3422c"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregset(0x4205, r8, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r8, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)='V6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00', 0x10}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000240)={[{@data_journal}, {@orlov}, {@jqfmt_vfsold}, {@data_err_ignore}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x3, 0x451, &(0x7f0000000b40)="$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") 3.968963666s ago: executing program 0 (id=1518): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x508, 0x3d8, 0x340, 0x340, 0x0, 0x3d8, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, &(0x7f0000000240), {[{{@ip={@rand_addr=0x64010100, @broadcast, 0x0, 0xff, 'tunl0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x4, 0x0, 0x65}, 0x0, 0x168, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xffffffff, 0x8001, 0x1, 0x1, 'syz0\x00', 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0x4, 0xd, [0x0, 0x16, 0x2b, 0x35, 0x7, 0x3e, 0x30, 0x1f, 0x23, 0xe, 0x6, 0x18, 0x17, 0x1b, 0xc, 0xd], 0x0, 0x7, 0x8000000000000000}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x6, @broadcast, 0x4e23}}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x89, 0x0, 0x60}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x91b, 0x1, @ipv6=@private1, 0x4e22}}}, {{@ip={@broadcast, @loopback, 0xff, 0xffffff00, 'veth1\x00', 'geneve1\x00', {}, {0xff}, 0x37, 0x1, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0xad}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) write$cgroup_devices(r2, &(0x7f0000000140)={'c', ' *:* ', 'rm\x00'}, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x44, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000600), &(0x7f0000000340)=@udp6, 0x1}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) getpeername$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', r7, 0x2f, 0x10, 0x5, 0x5, 0x20, @remote, @private0, 0x8, 0x10, 0xf, 0xde4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x79}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r8}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 3.964212836s ago: executing program 5 (id=1519): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x1, 0x5, 0x48, 0xb, 0x1, 0x9}) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002000)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64, @ANYRES8, @ANYRES8, @ANYRES32], 0x1, 0x2f1, &(0x7f0000000b00)="$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") io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.358727335s ago: executing program 0 (id=1520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0x1, 0x1, [0x5, 0xb85, 0xf89, 0xbc3]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x400}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x1000, 0x0, 0x37c694da, 0x200, 0x3, "9e9b5203c82cf1138dc9e354ec1a0ff03ae5dd", 0xb1, 0x81}) mprotect(&(0x7f00005fb000/0x2000)=nil, 0x2000, 0x1000007) acct(&(0x7f00000001c0)='./file0\x00') r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x80, 0x89, 0x80000}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000080)={r8, @in6={{0xa, 0x4, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, &(0x7f0000000000)=0x84) sendmmsg$inet_sctp(r2, &(0x7f0000001c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="300000000000000084000000010000000b00c2000500000405000000830000000000000086727b460002000028ef29359a80f87ded64bc982b5646f79b6558c062e09fa8e361d02aebf67f92e361495353adb5b997c502147f0016ca4382069f5fab79c6b9359acbe3c5d5ac8cc73eca6bb11b7170af25f9a99b682052c81f126714145f8b5998fa85f5529953b1c320", @ANYRES32=r9], 0x30, 0x4001}], 0x1, 0x11) 3.261335348s ago: executing program 0 (id=1522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="b0", 0x1}], 0x1}}], 0x1, 0x10000041) sendmmsg$sock(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)='B', 0x1}], 0x1}}], 0x1, 0x4048080) 3.173817221s ago: executing program 4 (id=1523): socket$nl_route(0x10, 0x3, 0x0) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x85, 0xffffffff, 0x1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0, 0xffffffffffffffee}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e27, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x3, 0x8080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 3.130994982s ago: executing program 0 (id=1524): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xb}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) write(r4, &(0x7f00000000c0)="182eb9", 0x3) 2.841584611s ago: executing program 5 (id=1528): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xb}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) r5 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x3}, 0x204, 0x0, 0x101, 0x0, 0x7, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@grpjquota}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@norecovery}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r6 = open(&(0x7f0000000300)='./file1\x00', 0x8f97e, 0x136) sendfile(r6, r6, 0x0, 0x10000006) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010006081000418e00000704fcff", 0x58}], 0x1) shutdown(r4, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) syz_usb_connect(0x0, 0x32, 0x0, 0x0) 1.859554102s ago: executing program 0 (id=1531): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read(r1, &(0x7f0000000800)=""/145, 0x91) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000940), &(0x7f0000000980)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000008c0), 0x80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./bus\x00', 0x88040, 0x54) close_range(r3, r0, 0x2) r5 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x4010, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x400, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2808600, &(0x7f0000000ac0)={[{@noauto_da_alloc}, {@grpjquota}, {@data_writeback}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x81, 0x645, &(0x7f0000000180)="$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") 1.749713255s ago: executing program 2 (id=1532): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000340)=0x14, 0x4) connect$bt_l2cap(r0, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty, 0x76}, 0x1c) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x57, @any, 0xfffa, 0x2}, 0xe) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0x806, 0x400, 0x1, 0x6}) 1.642907438s ago: executing program 0 (id=1533): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xb}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) write(r4, &(0x7f00000000c0)="182eb9", 0x3) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = open(&(0x7f0000000300)='./file1\x00', 0x8f97e, 0x136) sendfile(r6, r6, 0x0, 0x10000006) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010006081000418e00000704fcff", 0x58}], 0x1) shutdown(r4, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix@De', 0xfffffffffffffffe) syz_usb_connect(0x0, 0x32, 0x0, 0x0) 1.627441569s ago: executing program 2 (id=1534): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x508, 0x3d8, 0x340, 0x340, 0x0, 0x3d8, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010100, @broadcast, 0x0, 0xff, 'tunl0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x4, 0x0, 0x65}, 0x0, 0x168, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xffffffff, 0x8001, 0x1, 0x1, 'syz0\x00', 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0x4, 0xd, [0x0, 0x16, 0x2b, 0x35, 0x7, 0x3e, 0x30, 0x1f, 0x23, 0xe, 0x6, 0x18, 0x17, 0x1b, 0xc, 0xd], 0x0, 0x7, 0x8000000000000000}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x6, @broadcast, 0x4e23}}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x89, 0x0, 0x60}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x91b, 0x1, @ipv6=@private1, 0x4e22}}}, {{@ip={@broadcast, @loopback, 0xff, 0xffffff00, 'veth1\x00', 'geneve1\x00', {}, {0xff}, 0x37, 0x1, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0xad}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) write$cgroup_devices(r2, &(0x7f0000000140)={'c', ' *:* ', 'rm\x00'}, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x44, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000600), &(0x7f0000000340)=@udp6, 0x1}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) getpeername$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', r7, 0x2f, 0x10, 0x5, 0x5, 0x20, @remote, @private0, 0x8, 0x10, 0xf, 0xde4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x79}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r8}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 1.60572206s ago: executing program 3 (id=1535): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)={'c', ' *:* ', 'rm\x00'}, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x44, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000600), &(0x7f0000000340)=@udp6, 0x1}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) getpeername$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', r7, 0x2f, 0x10, 0x5, 0x5, 0x20, @remote, @private0, 0x8, 0x10, 0xf, 0xde4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x79}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r8}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 1.418615896s ago: executing program 4 (id=1536): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 1.385153467s ago: executing program 4 (id=1537): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x1, 0x5, 0x48, 0xb, 0x1, 0x9}) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002000)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594befa6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e83900bd33ec200000000000006a1c00000000000000000000000000000000000000000000000000000b81d06cb292a7f04f996bde0264e42869c3288311b7414705e975eb3f1b77a12077007ef043f051e0a92d69efe00cf7048b2caef111a47b8d96825c9b4515a1e2b6b73cf015d991fae9385c4daa00ebbe0f5b6cb1220d3570455fba84d1ed7e296b66d87d31f5aa5d24c32dca478d4e9bb1c79c14f7b3100177f6c6aecfa15edf974a0516bff732937ce0198a4623dcb8f4d034a6f9df264e0d866776c80c4dc6dc8aadb94aba6682b33b342e90", @ANYRES64, @ANYRES8, @ANYRES8, @ANYRES32], 0x1, 0x2f1, &(0x7f0000000b00)="$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") io_cancel(0x0, 0xfffffffffffffffe, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.298842169s ago: executing program 2 (id=1538): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x3, 0x1, 0xfffc, {0xa, 0x4e23, 0x0, @remote, 0x4}}}, 0x32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2, 0x3, 0x0, 0x8}}, 0x2e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfff}}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_FLOW={0x8, 0xb, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt(r3, 0x111, 0x5, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x74, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x5}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000080)={0x5, 0x7ac}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c000680"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYBLOB='\x00\x00g\x00\b\x00', @ANYRES16=r8], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 1.297246969s ago: executing program 3 (id=1539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x100000000000006]}, 0x8) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") move_mount(r2, 0x0, r2, 0x0, 0x76) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000a00)={[{@bh}, {@debug}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@noauto_da_alloc}, {}, {@stripe={'stripe', 0x3d, 0xffffffff}}, {@grpid}]}, 0x2, 0x476, &(0x7f0000000540)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) 1.196151182s ago: executing program 2 (id=1540): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) file_setattr(r0, 0x0, 0x0, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x11, &(0x7f0000000640)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000380)=0xe) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8024, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc091, 0x2, @perf_bp={0x0, 0x8}, 0x9006, 0xe9f0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) lseek(0xffffffffffffffff, 0xc8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='\b', 0x1}, {&(0x7f0000000180)="96bc14", 0x3}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}, 0x24048894) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0xfffe, 0x0, 0x53, 0x7fffffff}, 0x10) socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r6) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) 937.69462ms ago: executing program 3 (id=1541): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xb}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) write(r4, &(0x7f00000000c0)="182eb9", 0x3) 522.638444ms ago: executing program 4 (id=1542): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x0, 0x9}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x80001, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x80800) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000280)={'HL\x00'}, &(0x7f0000000240)=0x1e) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000e00)=ANY=[@ANYBLOB="01000000000000000a000000005900"], 0x90) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xcff5, 0xffffffffffffffff, 0x0, 0xf00000000000000}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6'], 0x48) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESDEC=r3, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(r1, 0x0, 0x40010020) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) unshare(0x20000400) file_getattr(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x18, 0x1000) 325.44477ms ago: executing program 2 (id=1543): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) socket$inet(0x2, 0x2, 0x73) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b0000000013a708d10a7af7eb13ccc319bad18c7981f127e7571386ea8b494d173e9fafd01d0a78d3e38fb72ce6d2b8c1789090dc960088f329bbf0c418144a21ab874979167bb98314911ab5ed2f4d8c1e289719716aa2b267b3b0794e6a0fc1fa215479ea9ceb1bcf1626f3db938e987965748b"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6f9c68004103e97d0e5e5626151c00000039be0abc0702778e000000000a00000405"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000001240)='+}\\)>&^}\x00', 0xa0882, &(0x7f00000001c0)={@align=0x2, {0xa, 0x4, 0x7, 0xf80000000000}}, 0xf6, 0x0, 0x0}) getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, 0x0, &(0x7f00000003c0)) socket$kcm(0x10, 0x2, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000040)={@remote, r9}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000e7ffff07000340"], 0x88}}, 0x0) 262.249472ms ago: executing program 2 (id=1544): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xb}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) r5 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x3}, 0x204, 0x0, 0x101, 0x0, 0x7, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@grpjquota}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@norecovery}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$eJzs3T1sG2UfAPD/neOmH3nf9JXeV3pBHSpAKlJVJ+kHFKZ2RVSq1AGJBSLXjao4dRU70ESRSPcK0QEB6lI2GBhBDAyIhZGVhY8ZqaIRSE0HMHJ8TtPUDk6oY4h/P+ns57k7+/9/fH4e353u5AAG1uHGQxrxREScTyJG1y0bimzh4eZ6K8uLxfvLi8Uk6vULPyeRRMS95cVia/0kez4QEUsR8f+I+CofcTRde8s9rUJ1fmF6slwuzWb1sdrM1bHq/MKxyzOTU6Wp0pUTz79w6vTJUxPHJ9ane7++vpbfWltvfH/z7RvfvHT75sefHFoqvjuZxJkYyZatb8fj1PxM8nFmw/yTvQjWR0m/E2Bbclk/b3Sl/8Vo5LJe3059/eAwvCPpAT1UH46or1lXBAZAotPDgGrtBzSOf1vTTu5/3DnbPABpxF1ZXiy+Fa34Q81zE7F39dhk/y/JQ0cmjePNgzuZKLvS0vWIGB8aevT7n2Tfv+0bfxwJ0lNfnm1uqEe3f7o2/kSb8Wekde70L2qNfyvZ+LfSJn6uw/h3vssYv7364wcd418fjifbxk/W4idt4qcR8XqX8W+98vnpTsvqH0YcifbxW5LNzw+PXbpcLo03H9vG+OLIoRc7tz9if4f4zXO2e1cTWd/+PVlOaZft/+zrT59a2iT+s09vvv3bff77IuKdLuP/595HL3dadud6crexF7DV7Z9EPm53Gf+5M4e/y4rOGgIAAAAAAAAAwGOUrl7LlqSFtXKaFgrNe3j/G/vTcqVaO3qpMpfLrnk7GPm0daXVaLOeNOoT2fW4rfrxDfUTuSxgbt9qvVCslC/2ue0AAAAAAAAAAAAAAAAAAADwd3Fgw/3/v+ZW7//f+HfVwG7V+S+/gd1O/4fB9XD/T/qWB7Dz/P7DwKpv3v/tD8Bu5vcfBpf+D4NL/4fB1bb/79v5PICd5/cfBpf+DwAAAAAAAAAAAAAAAAAAAAAAAAAAPXH+3LnGVL+/vFhs1C8Ozc9NV944drFUnS7MzBULxcrs1cJUpTJVLhWKlZk/e7+kUrk6Hlfmro3VStXaWHV+4bWZytyV1n+IlfI9bxEAAAAAAAAAAAAAAAAAAAD884ysTklaiMg362laKET8KyIOJpFculwujUfEvyPi21x+uFGf6HfSAAAAAAAAAAAAAAAAAAAAsMtU5xemJ8vl0mzvCkNZqO5e9UOtp/kMbWXliFjadJ181rSu02i845ZzbkXp7WYakEKuy+/hwBf6NCABAAAAAAAAAAAAAAAAAMAAe3DTb7ev+L23CQEAAAAAAAAAAAAAAAAAAMBASn9KIqIxHRl9ZmTj0j3JSm71OSLevHXhvWuTtdrsRGP+3bX5tfez+cf7kT/QrVY/TSOi0Y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB6rzC9OT5XJpdpuF4S7W6XcbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALbjjwAAAP//QKjKig==") r6 = open(&(0x7f0000000300)='./file1\x00', 0x8f97e, 0x136) sendfile(r6, r6, 0x0, 0x10000006) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010006081000418e00000704fcff", 0x58}], 0x1) shutdown(r4, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix@De', 0xfffffffffffffffe) syz_usb_connect(0x0, 0x32, 0x0, 0x0) 32.664839ms ago: executing program 3 (id=1545): setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbfbdf252700"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 13.328579ms ago: executing program 3 (id=1546): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x7, 0x3c, 0x64, 0x0, 0x1, 0x6, 0x0, @remote, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0xf, 0x1, 0xc, [{@private=0xa010101, 0x5}, {@local, 0xa}]}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe83}}}}}}, 0x0) 0s ago: executing program 3 (id=1547): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xb}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = open(&(0x7f0000000300)='./file1\x00', 0x8f97e, 0x136) sendfile(r6, r6, 0x0, 0x10000006) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010006081000418e00000704fcff", 0x58}], 0x1) shutdown(r4, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix@De', 0xfffffffffffffffe) syz_usb_connect(0x0, 0x32, 0x0, 0x0) kernel console output (not intermixed with test programs): syz.1.994': attribute type 3 has an invalid length. [ 179.261484][ T6789] xt_time: unknown flags 0xc [ 179.276244][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.996'. [ 179.414249][ T28] audit: type=1400 audit(1781663737.614:449): avc: denied { bind } for pid=6832 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 179.479035][ T28] audit: type=1400 audit(1781663737.654:450): avc: denied { read } for pid=6832 comm="syz.0.998" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.602472][ T28] audit: type=1400 audit(1781663737.654:451): avc: denied { open } for pid=6832 comm="syz.0.998" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.710815][ T6831] loop1: detected capacity change from 0 to 2048 [ 179.737784][ T6846] x_tables: duplicate underflow at hook 1 [ 179.795003][ T6831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.803703][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1002'. [ 179.841250][ T6831] FAULT_INJECTION: forcing a failure. [ 179.841250][ T6831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.873186][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 179.889544][ T6831] CPU: 1 UID: 0 PID: 6831 Comm: syz.1.997 Not tainted syzkaller #0 PREEMPT(lazy) [ 179.889596][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.889611][ T6831] Call Trace: [ 179.889618][ T6831] [ 179.889626][ T6831] __dump_stack+0x1d/0x30 [ 179.889660][ T6831] dump_stack_lvl+0x95/0xd0 [ 179.889719][ T6831] dump_stack+0x15/0x1b [ 179.889740][ T6831] should_fail_ex+0x25e/0x270 [ 179.889771][ T6831] should_fail+0xb/0x20 [ 179.889795][ T6831] should_fail_usercopy+0x1a/0x20 [ 179.889824][ T6831] _copy_from_user+0x1c/0xb0 [ 179.889886][ T6831] ext4_ioctl+0x8ba/0x31b0 [ 179.889922][ T6831] ? do_vfs_ioctl+0x848/0xe50 [ 179.890005][ T6831] ? selinux_file_ioctl+0x33c/0x3c0 [ 179.890035][ T6831] ? __fget_files+0x184/0x1c0 [ 179.890090][ T6831] ? __pfx_ext4_ioctl+0x10/0x10 [ 179.890173][ T6831] __se_sys_ioctl+0xce/0x140 [ 179.890229][ T6831] __x64_sys_ioctl+0x43/0x50 [ 179.890263][ T6831] x64_sys_call+0x1563/0x3020 [ 179.890290][ T6831] do_syscall_64+0x136/0x3c0 [ 179.890314][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.890340][ T6831] RIP: 0033:0x7fd71e91ce59 [ 179.890363][ T6831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.890380][ T6831] RSP: 002b:00007fd71d36f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.890403][ T6831] RAX: ffffffffffffffda RBX: 00007fd71eb95fa0 RCX: 00007fd71e91ce59 [ 179.890420][ T6831] RDX: 0000200000000140 RSI: 00000000c020662a RDI: 0000000000000005 [ 179.890435][ T6831] RBP: 00007fd71d36f090 R08: 0000000000000000 R09: 0000000000000000 [ 179.890468][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.890561][ T6831] R13: 00007fd71eb96038 R14: 00007fd71eb95fa0 R15: 00007fff086c9df8 [ 179.890581][ T6831] [ 180.082860][ T6844] netlink: 'syz.3.1002': attribute type 3 has an invalid length. [ 180.102080][ T6848] netlink: 'syz.4.1004': attribute type 3 has an invalid length. [ 180.153993][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.213050][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 180.240685][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 180.256910][ T6862] netlink: 'syz.4.1008': attribute type 3 has an invalid length. [ 180.367394][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 180.384285][ T6860] netlink: 'syz.1.1005': attribute type 3 has an invalid length. [ 180.536740][ T28] audit: type=1326 audit(1781663738.734:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.3.1010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09264dce59 code=0x7ffc0000 [ 180.583829][ T28] audit: type=1326 audit(1781663738.734:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.3.1010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09264dce59 code=0x7ffc0000 [ 180.638047][ T28] audit: type=1326 audit(1781663738.734:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6863 comm="syz.3.1010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f09264dce59 code=0x7ffc0000 [ 180.717158][ T6882] loop1: detected capacity change from 0 to 128 [ 180.806922][ T6882] bio_check_eod: 36 callbacks suppressed [ 180.806937][ T6882] syz.1.1016: attempt to access beyond end of device [ 180.806937][ T6882] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 180.844897][ T6882] syz.1.1016: attempt to access beyond end of device [ 180.844897][ T6882] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 180.877355][ T6882] syz.1.1016: attempt to access beyond end of device [ 180.877355][ T6882] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 180.901419][ T6882] syz.1.1016: attempt to access beyond end of device [ 180.901419][ T6882] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 180.938840][ T6882] syz.1.1016: attempt to access beyond end of device [ 180.938840][ T6882] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 180.952417][ T6882] syz.1.1016: attempt to access beyond end of device [ 180.952417][ T6882] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 180.978621][ T6882] syz.1.1016: attempt to access beyond end of device [ 180.978621][ T6882] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 181.009794][ T6882] syz.1.1016: attempt to access beyond end of device [ 181.009794][ T6882] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 181.038424][ T6882] syz.1.1016: attempt to access beyond end of device [ 181.038424][ T6882] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 181.068348][ T6882] syz.1.1016: attempt to access beyond end of device [ 181.068348][ T6882] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 181.172506][ T6890] loop1: detected capacity change from 0 to 128 [ 181.186953][ T6891] loop3: detected capacity change from 0 to 1024 [ 181.194066][ T6891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.224104][ T6891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 181.269811][ T6891] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.324249][ T6896] loop1: detected capacity change from 0 to 128 [ 181.763980][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.851740][ T28] kauditd_printk_skb: 361 callbacks suppressed [ 181.851752][ T28] audit: type=1400 audit(1781663740.054:816): avc: denied { create } for pid=6901 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.888080][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 181.920624][ T6902] netlink: 'syz.2.1021': attribute type 3 has an invalid length. [ 181.995691][ T28] audit: type=1400 audit(1781663740.194:817): avc: denied { allowed } for pid=6905 comm="syz.2.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 182.021968][ T6906] syzkaller0: entered promiscuous mode [ 182.030676][ T6906] syzkaller0: entered allmulticast mode [ 182.178305][ T28] audit: type=1400 audit(1781663740.374:818): avc: denied { write } for pid=6866 comm="syz.4.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.289976][ T6918] x_tables: duplicate underflow at hook 1 [ 182.290185][ T6919] loop4: detected capacity change from 0 to 128 [ 182.295875][ T28] audit: type=1400 audit(1781663740.494:819): avc: denied { setopt } for pid=6917 comm="syz.1.1027" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.364820][ T6923] loop4: detected capacity change from 0 to 128 [ 182.401701][ T6924] loop2: detected capacity change from 0 to 1024 [ 182.422490][ T6924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.451730][ T6924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 182.476935][ T6924] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.503468][ T28] audit: type=1400 audit(1781663740.704:820): avc: denied { write } for pid=6920 comm="syz.2.1029" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.681161][ T28] audit: type=1400 audit(1781663740.884:821): avc: denied { bind } for pid=6931 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.709804][ T6941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.717680][ T6941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.726724][ T6941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.736553][ T6941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.744545][ T6941] tipc: Resetting bearer [ 182.760055][ T6941] tipc: Disabling bearer [ 182.812720][ T6942] loop4: detected capacity change from 0 to 512 [ 182.855129][ T6942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.867929][ T6942] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.374183][ T6805] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 184.811054][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.189324][ T6956] loop1: detected capacity change from 0 to 512 [ 185.201846][ T6956] EXT4-fs: Ignoring removed orlov option [ 185.208234][ T6956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.215323][ T6956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.227582][ T6956] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.273726][ T6956] EXT4-fs (loop1): 1 truncate cleaned up [ 185.284094][ T6956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.591431][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.613153][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.637956][ T6964] sctp: [Deprecated]: syz.4.1039 (pid 6964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.637956][ T6964] Use struct sctp_sack_info instead [ 185.697063][ T6966] loop3: detected capacity change from 0 to 128 [ 185.725140][ T6970] x_tables: duplicate underflow at hook 1 [ 185.976452][ T5247] bio_check_eod: 14988 callbacks suppressed [ 185.976465][ T5247] kworker/u8:19: attempt to access beyond end of device [ 185.976465][ T5247] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 186.018352][ T5247] kworker/u8:19: attempt to access beyond end of device [ 186.018352][ T5247] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 186.031983][ T5247] kworker/u8:19: attempt to access beyond end of device [ 186.031983][ T5247] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 186.045655][ T5247] kworker/u8:19: attempt to access beyond end of device [ 186.045655][ T5247] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 186.827564][ T6982] loop4: detected capacity change from 0 to 512 [ 186.839644][ T6982] EXT4-fs: Ignoring removed orlov option [ 186.846062][ T6982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.853123][ T6982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.873761][ T6982] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 186.893949][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.904675][ T6982] EXT4-fs (loop4): 1 truncate cleaned up [ 186.916115][ T6982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.011919][ T5247] kworker/u8:19: attempt to access beyond end of device [ 187.011919][ T5247] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 187.025515][ T5247] kworker/u8:19: attempt to access beyond end of device [ 187.025515][ T5247] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 187.039069][ T5247] kworker/u8:19: attempt to access beyond end of device [ 187.039069][ T5247] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 187.052676][ T5247] kworker/u8:19: attempt to access beyond end of device [ 187.052676][ T5247] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 187.169115][ T5247] kworker/u8:19: attempt to access beyond end of device [ 187.169115][ T5247] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 187.189059][ T5247] kworker/u8:19: attempt to access beyond end of device [ 187.189059][ T5247] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 187.255975][ T6993] FAULT_INJECTION: forcing a failure. [ 187.255975][ T6993] name failslab, interval 1, probability 0, space 0, times 0 [ 187.268702][ T6993] CPU: 1 UID: 0 PID: 6993 Comm: syz.3.1047 Not tainted syzkaller #0 PREEMPT(lazy) [ 187.268768][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.268780][ T6993] Call Trace: [ 187.268786][ T6993] [ 187.268793][ T6993] __dump_stack+0x1d/0x30 [ 187.268880][ T6993] dump_stack_lvl+0x95/0xd0 [ 187.268939][ T6993] dump_stack+0x15/0x1b [ 187.268957][ T6993] should_fail_ex+0x25e/0x270 [ 187.268981][ T6993] should_failslab+0x8c/0xb0 [ 187.269000][ T6993] kmem_cache_alloc_noprof+0x66/0x3f0 [ 187.269030][ T6993] ? __inet_hash_connect+0xce8/0x1490 [ 187.269058][ T6993] __inet_hash_connect+0xce8/0x1490 [ 187.269083][ T6993] inet_hash_connect+0x154/0x1c0 [ 187.269109][ T6993] tcp_v4_connect+0x7a4/0xad0 [ 187.269211][ T6993] __inet_stream_connect+0x166/0x7d0 [ 187.269260][ T6993] ? lock_sock_nested+0x84/0x110 [ 187.269288][ T6993] inet_stream_connect+0x44/0x70 [ 187.269310][ T6993] ? __pfx_inet_stream_connect+0x10/0x10 [ 187.269331][ T6993] __sys_connect+0x1f1/0x2a0 [ 187.269360][ T6993] __x64_sys_connect+0x3f/0x50 [ 187.269424][ T6993] x64_sys_call+0x2df0/0x3020 [ 187.269452][ T6993] do_syscall_64+0x136/0x3c0 [ 187.269477][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.269502][ T6993] RIP: 0033:0x7f09264dce59 [ 187.269560][ T6993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.269577][ T6993] RSP: 002b:00007f0924f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 187.269596][ T6993] RAX: ffffffffffffffda RBX: 00007f0926755fa0 RCX: 00007f09264dce59 [ 187.269614][ T6993] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 187.269691][ T6993] RBP: 00007f0924f37090 R08: 0000000000000000 R09: 0000000000000000 [ 187.269705][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.269720][ T6993] R13: 00007f0926756038 R14: 00007f0926755fa0 R15: 00007ffdc1da9f98 [ 187.269742][ T6993] [ 187.274718][ T6991] loop2: detected capacity change from 0 to 128 [ 187.493987][ T6989] loop1: detected capacity change from 0 to 512 [ 187.511527][ T6989] EXT4-fs: Ignoring removed bh option [ 187.517166][ T6989] EXT4-fs: quotafile must be on filesystem root [ 187.960820][ T7007] loop3: detected capacity change from 0 to 256 [ 188.096119][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.108173][ T7009] loop1: detected capacity change from 0 to 128 [ 188.158806][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 188.201408][ T7011] netlink: 'syz.4.1054': attribute type 3 has an invalid length. [ 188.279507][ T7016] x_tables: duplicate underflow at hook 1 [ 188.340571][ T7020] loop2: detected capacity change from 0 to 128 [ 188.626168][ T7027] loop1: detected capacity change from 0 to 1024 [ 188.633118][ T7027] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.659698][ T7027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 188.672488][ T7027] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.691225][ T28] audit: type=1400 audit(1781663746.894:822): avc: denied { write } for pid=7022 comm="syz.1.1059" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.801473][ T7035] loop2: detected capacity change from 0 to 512 [ 188.824322][ T7038] 9p: Bad value for 'rfdno' [ 188.870874][ T7035] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 188.966643][ T7035] EXT4-fs (loop2): 1 truncate cleaned up [ 188.976656][ T7035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.997063][ T7035] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1060: invalid indirect mapped block 4294901760 (level 0) [ 189.023151][ T7035] EXT4-fs (loop2): Remounting filesystem read-only [ 189.042541][ T28] audit: type=1400 audit(1781663747.194:823): avc: denied { write } for pid=7025 comm="syz.2.1060" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.222976][ T28] audit: type=1400 audit(1781663747.234:824): avc: denied { write } for pid=7025 comm="syz.2.1060" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.563263][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 189.596679][ T7052] netlink: 'syz.3.1066': attribute type 3 has an invalid length. [ 189.746083][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1065'. [ 190.031209][ T7066] x_tables: duplicate underflow at hook 1 [ 190.243472][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.293981][ T7071] x_tables: duplicate underflow at hook 1 [ 190.409393][ T7075] set_capacity_and_notify: 1 callbacks suppressed [ 190.409410][ T7075] loop4: detected capacity change from 0 to 1024 [ 190.427309][ T7075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.462545][ T7075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 190.478810][ T7075] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.225784][ T7089] loop3: detected capacity change from 0 to 512 [ 191.236857][ T7089] EXT4-fs: Ignoring removed orlov option [ 191.243808][ T7089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.250935][ T7089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.278195][ T7089] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 191.317061][ T7089] EXT4-fs (loop3): 1 truncate cleaned up [ 191.328546][ T7089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.454818][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 191.646602][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'. [ 191.721129][ T7101] loop2: detected capacity change from 0 to 128 [ 191.752560][ T7101] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 191.762859][ T7103] loop1: detected capacity change from 0 to 128 [ 191.849959][ T7103] bio_check_eod: 11246 callbacks suppressed [ 191.850053][ T7103] syz.1.1078: attempt to access beyond end of device [ 191.850053][ T7103] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 191.912068][ T7103] syz.1.1078: attempt to access beyond end of device [ 191.912068][ T7103] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 191.962383][ T7103] syz.1.1078: attempt to access beyond end of device [ 191.962383][ T7103] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 192.005963][ T7103] syz.1.1078: attempt to access beyond end of device [ 192.005963][ T7103] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 192.048309][ T7103] syz.1.1078: attempt to access beyond end of device [ 192.048309][ T7103] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 192.092435][ T7103] syz.1.1078: attempt to access beyond end of device [ 192.092435][ T7103] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 192.132450][ T7103] syz.1.1078: attempt to access beyond end of device [ 192.132450][ T7103] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 192.176101][ T7103] syz.1.1078: attempt to access beyond end of device [ 192.176101][ T7103] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 192.217921][ T7103] syz.1.1078: attempt to access beyond end of device [ 192.217921][ T7103] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 192.261339][ T7103] syz.1.1078: attempt to access beyond end of device [ 192.261339][ T7103] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 192.274823][ T7033] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 192.291293][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.439384][ T7113] loop1: detected capacity change from 0 to 128 [ 192.595395][ T7115] loop3: detected capacity change from 0 to 512 [ 192.751483][ T5235] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 192.761765][ T7115] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 192.788527][ T7115] EXT4-fs (loop3): 1 truncate cleaned up [ 192.798848][ T7115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.821241][ T7115] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1083: invalid indirect mapped block 4294901760 (level 0) [ 192.836692][ T7115] EXT4-fs (loop3): Remounting filesystem read-only [ 192.851508][ T28] audit: type=1400 audit(1781663751.014:825): avc: denied { write } for pid=7107 comm="syz.3.1083" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.956212][ T7121] loop2: detected capacity change from 0 to 128 [ 192.985007][ T7123] loop1: detected capacity change from 0 to 256 [ 192.998990][ T28] audit: type=1400 audit(1781663751.044:826): avc: denied { write } for pid=7107 comm="syz.3.1083" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.184674][ T28] audit: type=1400 audit(1781663751.254:827): avc: denied { read write } for pid=7122 comm="syz.1.1087" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 193.217877][ T3303] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 193.243150][ T3303] FAT-fs (loop1): Filesystem has been set read-only [ 193.261247][ T3303] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 193.284906][ T28] audit: type=1400 audit(1781663751.254:828): avc: denied { open } for pid=7122 comm="syz.1.1087" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 194.049388][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.073982][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 194.126536][ T7134] tipc: Enabling of bearer rejected, failed to enable media [ 194.256293][ T7141] loop2: detected capacity change from 0 to 128 [ 194.759561][ T5237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.839207][ T5237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.916709][ T5237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.929728][ T7159] loop3: detected capacity change from 0 to 256 [ 195.047436][ T5237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.166762][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.173956][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.181231][ T7149] bridge_slave_0: entered allmulticast mode [ 195.187681][ T7149] bridge_slave_0: entered promiscuous mode [ 195.194652][ T7149] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.201795][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.209023][ T7149] bridge_slave_1: entered allmulticast mode [ 195.215420][ T7149] bridge_slave_1: entered promiscuous mode [ 195.233936][ T7149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.244752][ T7149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.264409][ T7149] team0: Port device team_slave_0 added [ 195.270870][ T7149] team0: Port device team_slave_1 added [ 195.288971][ T7149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.296145][ T7149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.357420][ T7149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.381468][ T7178] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1100: bad orphan inode 15 [ 195.391707][ T7178] loop2: lost filesystem error report for type 5 error -117 [ 195.396262][ T7178] ext4_test_bit(bit=14, block=18) = 1 [ 195.403587][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 195.403606][ C1] EXT4-fs (loop2): initial error at time 1781663753: ext4_orphan_get:1425 [ 195.403631][ C1] EXT4-fs (loop2): last error at time 1781663753: ext4_orphan_get:1425 [ 195.424287][ T7149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.432215][ T7178] is_bad_inode(inode)=0 [ 195.432224][ T7178] NEXT_ORPHAN(inode)=1023 [ 195.432231][ T7178] max_ino=32 [ 195.450840][ T7178] i_nlink=0 [ 195.454056][ T7178] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #15: comm syz.2.1100: corrupted xattr block 19: invalid header [ 195.467542][ T7178] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 195.467656][ T7149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.502708][ T7178] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 195.512098][ T7178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 195.524310][ T7149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.534880][ T7178] ext4 filesystem being mounted at /196/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 195.565990][ T28] audit: type=1400 audit(1781663753.764:829): avc: denied { read } for pid=3019 comm="dhcpcd" name="n29" dev="tmpfs" ino=8710 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.631899][ T7149] hsr_slave_0: entered promiscuous mode [ 195.646240][ T28] audit: type=1400 audit(1781663753.764:830): avc: denied { open } for pid=3019 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=8710 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.671228][ T7181] set_capacity_and_notify: 3 callbacks suppressed [ 195.671319][ T7181] loop4: detected capacity change from 0 to 512 [ 195.703066][ T7181] EXT4-fs: Ignoring removed bh option [ 195.711131][ T7149] hsr_slave_1: entered promiscuous mode [ 195.717704][ T7149] debugfs: 'hsr0' already exists in 'hsr' [ 195.721056][ T7181] EXT4-fs: quotafile must be on filesystem root [ 195.733180][ T7149] Cannot create hsr debugfs directory [ 195.829482][ T5237] bridge_slave_1: left allmulticast mode [ 195.835214][ T5237] bridge_slave_1: left promiscuous mode [ 195.841966][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.861224][ T7190] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1100: bg 0: block 449: padding at end of block bitmap is not set [ 195.886176][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'. [ 195.915437][ T5237] bridge_slave_0: left allmulticast mode [ 195.921392][ T5237] bridge_slave_0: left promiscuous mode [ 195.937254][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.143006][ T5237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.154443][ T5237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.173825][ T5237] bond0 (unregistering): Released all slaves [ 196.480540][ T5237] tipc: Left network mode [ 196.495056][ T5237] hsr_slave_0: left promiscuous mode [ 196.512982][ T5237] hsr_slave_1: left promiscuous mode [ 196.549780][ T5237] veth1_macvtap: left promiscuous mode [ 196.570782][ T5237] veth0_macvtap: left promiscuous mode [ 196.591820][ T5237] veth1_vlan: left promiscuous mode [ 196.611739][ T5237] veth0_vlan: left promiscuous mode [ 196.619819][ T7198] loop3: detected capacity change from 0 to 128 [ 196.708308][ T28] audit: type=1400 audit(1781663753.764:831): avc: denied { getattr } for pid=3019 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=8710 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.737061][ T28] audit: type=1400 audit(1781663754.014:832): avc: denied { write } for pid=7177 comm="syz.2.1100" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.874139][ T7207] x_tables: duplicate underflow at hook 1 [ 196.951856][ T5237] team0 (unregistering): Port device team_slave_1 removed [ 196.961420][ T7201] loop4: detected capacity change from 0 to 256 [ 196.974323][ T5237] team0 (unregistering): Port device team_slave_0 removed [ 197.220868][ T7149] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.251081][ T7149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.276326][ T7149] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 197.305537][ T7149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.316331][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 197.332401][ T28] audit: type=1400 audit(1781663755.534:833): avc: denied { write } for pid=7183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.387229][ T7149] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 197.393345][ T28] audit: type=1400 audit(1781663755.534:834): avc: denied { create } for pid=7183 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.419056][ T7149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 197.427921][ T28] audit: type=1400 audit(1781663755.534:835): avc: denied { write } for pid=7183 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=8846 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.443017][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.461305][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.468961][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.470056][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'. [ 197.476379][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.494399][ T28] audit: type=1400 audit(1781663755.534:836): avc: denied { append } for pid=7183 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=8846 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.519164][ T7213] tipc: Resetting bearer [ 197.521756][ T7218] netlink: 'syz.2.1107': attribute type 3 has an invalid length. [ 197.542361][ T28] audit: type=1400 audit(1781663755.634:837): avc: denied { write } for pid=7214 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.564394][ T28] audit: type=1400 audit(1781663755.634:838): avc: denied { unlink } for pid=7214 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=8846 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.588732][ T7213] tipc: Disabling bearer [ 197.602421][ T7149] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.618420][ T7149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.637251][ T7220] loop2: detected capacity change from 0 to 128 [ 197.637614][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 197.774986][ T7149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.813286][ T7237] bio_check_eod: 14445 callbacks suppressed [ 197.813302][ T7237] syz.2.1108: attempt to access beyond end of device [ 197.813302][ T7237] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 197.856592][ T7149] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.887142][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.894216][ T5243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.046127][ T7237] syz.2.1108: attempt to access beyond end of device [ 198.046127][ T7237] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 198.200413][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.207507][ T5243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.265200][ T7237] syz.2.1108: attempt to access beyond end of device [ 198.265200][ T7237] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 198.416239][ T7237] syz.2.1108: attempt to access beyond end of device [ 198.416239][ T7237] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 198.565647][ T7237] syz.2.1108: attempt to access beyond end of device [ 198.565647][ T7237] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 198.624574][ T7237] syz.2.1108: attempt to access beyond end of device [ 198.624574][ T7237] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 198.679106][ T7237] syz.2.1108: attempt to access beyond end of device [ 198.679106][ T7237] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 198.732207][ T7237] syz.2.1108: attempt to access beyond end of device [ 198.732207][ T7237] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 198.788479][ T7237] syz.2.1108: attempt to access beyond end of device [ 198.788479][ T7237] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 198.814095][ T7149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.855435][ T7237] syz.2.1108: attempt to access beyond end of device [ 198.855435][ T7237] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 199.069845][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 199.163334][ T7271] netlink: 'syz.2.1112': attribute type 3 has an invalid length. [ 199.210564][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 199.249862][ T7149] veth0_vlan: entered promiscuous mode [ 199.289061][ T7149] veth1_vlan: entered promiscuous mode [ 199.319814][ T7285] loop2: detected capacity change from 0 to 128 [ 199.356413][ T7149] veth0_macvtap: entered promiscuous mode [ 199.372091][ T7285] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 199.400392][ T7149] veth1_macvtap: entered promiscuous mode [ 199.446099][ T7149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.480183][ T7149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.512302][ T5231] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.523856][ T5231] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.563739][ T5231] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.588381][ T5231] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.621966][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 199.787506][ T7305] loop4: detected capacity change from 0 to 256 [ 199.827135][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1116'. [ 199.857576][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 199.876966][ T7327] netlink: 'syz.5.1116': attribute type 3 has an invalid length. [ 199.972281][ T7331] loop5: detected capacity change from 0 to 128 [ 200.255630][ T5237] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 200.348160][ T7341] loop5: detected capacity change from 0 to 512 [ 200.490494][ T7341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.503105][ T7341] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.208073][ T7351] loop2: detected capacity change from 0 to 128 [ 201.915772][ T7149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.015039][ T7377] loop3: detected capacity change from 0 to 128 [ 202.068205][ T7377] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 202.446931][ T7380] loop5: detected capacity change from 0 to 512 [ 202.458994][ T7380] EXT4-fs: Ignoring removed orlov option [ 202.465504][ T7380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.472435][ T7380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.541641][ T7380] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 202.597359][ T7380] EXT4-fs (loop5): 1 truncate cleaned up [ 202.607011][ T7380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.910934][ T7351] bio_check_eod: 8262 callbacks suppressed [ 202.911017][ T7351] syz.2.1121: attempt to access beyond end of device [ 202.911017][ T7351] loop2: rw=0, sector=153, nr_sectors = 8 limit=128 [ 203.077034][ T7393] loop2: detected capacity change from 0 to 128 [ 203.134874][ T5243] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 203.204105][ T7396] loop3: detected capacity change from 0 to 128 [ 203.278567][ T39] kworker/u8:2: attempt to access beyond end of device [ 203.278567][ T39] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 203.323538][ T39] kworker/u8:2: attempt to access beyond end of device [ 203.323538][ T39] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 203.353675][ T39] kworker/u8:2: attempt to access beyond end of device [ 203.353675][ T39] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 203.394201][ T39] kworker/u8:2: attempt to access beyond end of device [ 203.394201][ T39] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 203.432190][ T39] kworker/u8:2: attempt to access beyond end of device [ 203.432190][ T39] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 203.482066][ T39] kworker/u8:2: attempt to access beyond end of device [ 203.482066][ T39] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 203.536879][ T39] kworker/u8:2: attempt to access beyond end of device [ 203.536879][ T39] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 203.576117][ T5243] kworker/u8:17: attempt to access beyond end of device [ 203.576117][ T5243] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 203.599923][ T39] kworker/u8:2: attempt to access beyond end of device [ 203.599923][ T39] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 203.673186][ T7149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.965241][ T7424] loop2: detected capacity change from 0 to 128 [ 203.983951][ T7407] netlink: 'syz.0.1137': attribute type 3 has an invalid length. [ 203.994908][ T7421] loop5: detected capacity change from 0 to 164 [ 204.131022][ T7425] ip6gre1: entered promiscuous mode [ 204.137349][ T7425] ip6gre1: entered allmulticast mode [ 204.922613][ T7421] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 205.280723][ T7427] loop3: detected capacity change from 0 to 512 [ 205.302300][ T7427] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 205.340996][ T7427] EXT4-fs (loop3): 1 truncate cleaned up [ 205.350374][ T7427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.378661][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 205.378681][ T28] audit: type=1400 audit(1781663763.574:845): avc: denied { write } for pid=7422 comm="syz.3.1144" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.410373][ T7427] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1144: invalid indirect mapped block 4294901760 (level 0) [ 205.435560][ T7427] EXT4-fs (loop3): Remounting filesystem read-only [ 205.697051][ T7438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58838 sclass=netlink_route_socket pid=7438 comm=syz.0.1145 [ 205.736563][ T7436] loop4: detected capacity change from 0 to 2048 [ 205.795192][ T28] audit: type=1400 audit(1781663763.624:846): avc: denied { write } for pid=7422 comm="syz.3.1144" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.914650][ T7450] x_tables: duplicate underflow at hook 1 [ 206.073674][ T7436] loop4: p1 p4 [ 206.078125][ T7436] loop4: p4 size 589824 extends beyond EOD, truncated [ 206.121423][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 206.145484][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 206.298753][ T28] audit: type=1326 audit(1781663764.504:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.4.1146" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafaf8ece59 code=0x0 [ 206.583991][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.738965][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 206.786026][ T7476] netlink: 'syz.2.1155': attribute type 3 has an invalid length. [ 209.020251][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1156'. [ 209.089145][ T7488] tipc: Enabling of bearer rejected, failed to enable media [ 210.191417][ T7484] loop2: detected capacity change from 0 to 512 [ 210.225304][ T28] audit: type=1400 audit(1781663768.424:848): avc: denied { watch } for pid=7483 comm="syz.2.1156" path="/208/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 210.249514][ T7484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1156'. [ 210.267722][ T7508] loop4: detected capacity change from 0 to 164 [ 210.314276][ T28] audit: type=1400 audit(1781663768.514:849): avc: denied { ioctl } for pid=7511 comm="syz.5.1165" path="socket:[19555]" dev="sockfs" ino=19555 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.341731][ T7508] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 210.418756][ T7516] loop3: detected capacity change from 0 to 128 [ 210.562285][ T7522] loop4: detected capacity change from 0 to 128 [ 210.824638][ T7524] loop5: detected capacity change from 0 to 512 [ 210.837144][ T7524] EXT4-fs: Ignoring removed orlov option [ 210.843601][ T7524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.850740][ T7524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.873845][ T7524] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 210.907217][ T7524] EXT4-fs (loop5): 1 truncate cleaned up [ 210.917788][ T7524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.960200][ T39] bio_check_eod: 256 callbacks suppressed [ 210.960212][ T39] kworker/u8:2: attempt to access beyond end of device [ 210.960212][ T39] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 211.049354][ T39] kworker/u8:2: attempt to access beyond end of device [ 211.049354][ T39] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 211.127338][ T39] kworker/u8:2: attempt to access beyond end of device [ 211.127338][ T39] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 211.186159][ T5235] kworker/u8:13: attempt to access beyond end of device [ 211.186159][ T5235] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 211.223212][ T39] kworker/u8:2: attempt to access beyond end of device [ 211.223212][ T39] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 211.294505][ T5235] kworker/u8:13: attempt to access beyond end of device [ 211.294505][ T5235] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 211.331020][ T39] kworker/u8:2: attempt to access beyond end of device [ 211.331020][ T39] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 211.450225][ T5235] kworker/u8:13: attempt to access beyond end of device [ 211.450225][ T5235] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 211.482947][ T39] kworker/u8:2: attempt to access beyond end of device [ 211.482947][ T39] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 211.508405][ T5235] kworker/u8:13: attempt to access beyond end of device [ 211.508405][ T5235] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 211.569432][ T28] audit: type=1400 audit(1781663769.764:850): avc: denied { write } for pid=7531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.160466][ T7552] x_tables: duplicate underflow at hook 1 [ 212.169828][ T7149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.485478][ T28] audit: type=1400 audit(1781663770.684:851): avc: denied { write } for pid=7558 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.694070][ T7578] loop4: detected capacity change from 0 to 128 [ 212.709790][ T7578] FAULT_INJECTION: forcing a failure. [ 212.709790][ T7578] name failslab, interval 1, probability 0, space 0, times 0 [ 212.727812][ T7578] CPU: 0 UID: 0 PID: 7578 Comm: syz.4.1177 Not tainted syzkaller #0 PREEMPT(lazy) [ 212.727841][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.727854][ T7578] Call Trace: [ 212.727861][ T7578] [ 212.727869][ T7578] __dump_stack+0x1d/0x30 [ 212.727911][ T7578] dump_stack_lvl+0x95/0xd0 [ 212.727934][ T7578] dump_stack+0x15/0x1b [ 212.727955][ T7578] should_fail_ex+0x25e/0x270 [ 212.727981][ T7578] should_failslab+0x8c/0xb0 [ 212.728003][ T7578] kmem_cache_alloc_noprof+0x66/0x3f0 [ 212.728045][ T7578] ? do_getname+0x2e/0x1c0 [ 212.728065][ T7578] ? mutex_lock+0x57/0x90 [ 212.728098][ T7578] do_getname+0x2e/0x1c0 [ 212.728122][ T7578] __se_sys_mknodat+0x24/0xf0 [ 212.728241][ T7578] __x64_sys_mknodat+0x55/0x70 [ 212.728328][ T7578] x64_sys_call+0x312/0x3020 [ 212.728354][ T7578] do_syscall_64+0x136/0x3c0 [ 212.728401][ T7578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.728426][ T7578] RIP: 0033:0x7fafaf8ece59 [ 212.728444][ T7578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.728465][ T7578] RSP: 002b:00007fafae347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 212.728483][ T7578] RAX: ffffffffffffffda RBX: 00007fafafb65fa0 RCX: 00007fafaf8ece59 [ 212.728512][ T7578] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 212.728528][ T7578] RBP: 00007fafae347090 R08: 0000000000000000 R09: 0000000000000000 [ 212.728544][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.728559][ T7578] R13: 00007fafafb66038 R14: 00007fafafb65fa0 R15: 00007ffc685bb808 [ 212.728643][ T7578] [ 212.848552][ T28] audit: type=1400 audit(1781663770.934:852): avc: denied { write } for pid=7565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.973411][ T28] audit: type=1400 audit(1781663770.984:853): avc: denied { write } for pid=7584 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.026314][ T7593] loop3: detected capacity change from 0 to 164 [ 213.156068][ T7593] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 213.166542][ T28] audit: type=1400 audit(1781663771.374:854): avc: denied { write } for pid=7587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.466621][ T28] audit: type=1400 audit(1781663771.424:855): avc: denied { write } for pid=7604 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.669874][ T7610] loop3: detected capacity change from 0 to 128 [ 213.761622][ T28] audit: type=1400 audit(1781663771.964:856): avc: denied { write } for pid=7608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.800253][ T28] audit: type=1400 audit(1781663772.004:857): avc: denied { write } for pid=7622 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.033635][ T7633] loop3: detected capacity change from 0 to 128 [ 214.327964][ T7634] loop2: detected capacity change from 0 to 512 [ 214.338754][ T7634] EXT4-fs: Ignoring removed orlov option [ 214.344809][ T7634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.352066][ T7634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.372865][ T7634] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 214.410588][ T7634] EXT4-fs (loop2): 1 truncate cleaned up [ 214.421539][ T7634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.118984][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 215.165590][ T7643] netlink: 'syz.3.1186': attribute type 3 has an invalid length. [ 215.260664][ T7645] loop3: detected capacity change from 0 to 128 [ 215.537311][ T7649] loop3: detected capacity change from 0 to 1024 [ 215.544531][ T7649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.682479][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.705594][ T7649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 215.791377][ T7657] loop5: detected capacity change from 0 to 512 [ 215.852232][ T7649] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.869227][ T7657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.881740][ T7657] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.143231][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1192'. [ 217.192332][ T7671] netlink: 'syz.4.1192': attribute type 3 has an invalid length. [ 217.328863][ T7675] loop4: detected capacity change from 0 to 128 [ 217.360514][ T7149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.423858][ T7677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58838 sclass=netlink_route_socket pid=7677 comm=syz.5.1195 [ 217.457407][ T39] bio_check_eod: 156 callbacks suppressed [ 217.457483][ T39] kworker/u8:2: attempt to access beyond end of device [ 217.457483][ T39] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 217.496877][ T39] kworker/u8:2: attempt to access beyond end of device [ 217.496877][ T39] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 217.524999][ T39] kworker/u8:2: attempt to access beyond end of device [ 217.524999][ T39] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 217.560880][ T39] kworker/u8:2: attempt to access beyond end of device [ 217.560880][ T39] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 217.583351][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1197'. [ 217.590481][ T39] kworker/u8:2: attempt to access beyond end of device [ 217.590481][ T39] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 217.613008][ T7683] netlink: 'syz.5.1197': attribute type 3 has an invalid length. [ 217.620878][ T39] kworker/u8:2: attempt to access beyond end of device [ 217.620878][ T39] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 217.620975][ T39] kworker/u8:2: attempt to access beyond end of device [ 217.620975][ T39] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 217.678519][ T39] kworker/u8:2: attempt to access beyond end of device [ 217.678519][ T39] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 217.710472][ T39] kworker/u8:2: attempt to access beyond end of device [ 217.710472][ T39] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 217.730775][ T39] kworker/u8:2: attempt to access beyond end of device [ 217.730775][ T39] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 217.967746][ T7692] loop5: detected capacity change from 0 to 512 [ 218.675381][ T7694] loop4: detected capacity change from 0 to 512 [ 218.910108][ T7639] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 218.954911][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 219.790646][ T7700] loop2: detected capacity change from 0 to 128 [ 221.201482][ T7692] EXT4-fs warning (device loop5): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop5. [ 221.807085][ T7710] loop3: detected capacity change from 0 to 128 [ 221.850637][ T7694] EXT4-fs warning (device loop4): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop4. [ 222.096821][ T7713] loop4: detected capacity change from 0 to 128 [ 222.471757][ T7722] loop4: detected capacity change from 0 to 128 [ 222.765819][ T5235] bio_check_eod: 49 callbacks suppressed [ 222.765833][ T5235] kworker/u8:13: attempt to access beyond end of device [ 222.765833][ T5235] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 222.795139][ T5235] kworker/u8:13: attempt to access beyond end of device [ 222.795139][ T5235] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 222.809091][ T5231] kworker/u8:11: attempt to access beyond end of device [ 222.809091][ T5231] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 223.803597][ T5235] kworker/u8:13: attempt to access beyond end of device [ 223.803597][ T5235] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 223.811928][ T5231] kworker/u8:11: attempt to access beyond end of device [ 223.811928][ T5231] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 223.852310][ T7736] loop2: detected capacity change from 0 to 128 [ 223.859828][ T5235] kworker/u8:13: attempt to access beyond end of device [ 223.859828][ T5235] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 223.873365][ T5235] kworker/u8:13: attempt to access beyond end of device [ 223.873365][ T5235] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 223.886779][ T5235] kworker/u8:13: attempt to access beyond end of device [ 223.886779][ T5235] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 223.900212][ T5235] kworker/u8:13: attempt to access beyond end of device [ 223.900212][ T5235] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 223.944406][ T7736] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 223.953529][ T5231] kworker/u8:11: attempt to access beyond end of device [ 223.953529][ T5231] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 224.055528][ T7741] loop3: detected capacity change from 0 to 128 [ 224.176336][ T7750] loop5: detected capacity change from 0 to 128 [ 224.741854][ T28] audit: type=1400 audit(1781663782.944:858): avc: denied { read } for pid=7745 comm="syz.4.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.778664][ T39] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 224.846758][ T7764] loop2: detected capacity change from 0 to 128 [ 224.863068][ T7755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1216'. [ 224.878165][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1221'. [ 224.945913][ T7766] netlink: 'syz.5.1221': attribute type 3 has an invalid length. [ 225.014944][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1225'. [ 225.045079][ T7776] netlink: 'syz.5.1225': attribute type 3 has an invalid length. [ 225.139616][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'. [ 225.153816][ T7782] netlink: 'syz.4.1227': attribute type 3 has an invalid length. [ 226.019774][ T7780] loop5: detected capacity change from 0 to 128 [ 226.147413][ T7787] x_tables: duplicate underflow at hook 1 [ 226.217563][ T28] audit: type=1400 audit(1781663784.414:859): avc: denied { create } for pid=7788 comm="syz.0.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 226.224206][ T7789] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.237522][ T28] audit: type=1400 audit(1781663784.424:860): avc: denied { write } for pid=7788 comm="syz.0.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 226.682815][ T7798] loop2: detected capacity change from 0 to 4096 [ 226.697837][ T7798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.714665][ T28] audit: type=1400 audit(1781663784.914:861): avc: denied { write } for pid=7791 comm="syz.2.1230" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.926407][ T28] audit: type=1400 audit(1781663785.124:862): avc: denied { write } for pid=7791 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 226.975743][ T7802] x_tables: duplicate underflow at hook 1 [ 227.194788][ T7810] loop4: detected capacity change from 0 to 128 [ 227.402705][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.437408][ T7810] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 227.616812][ T7815] FAULT_INJECTION: forcing a failure. [ 227.616812][ T7815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.701839][ T7815] CPU: 0 UID: 0 PID: 7815 Comm: syz.3.1237 Not tainted syzkaller #0 PREEMPT(lazy) [ 227.701866][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 227.701878][ T7815] Call Trace: [ 227.701884][ T7815] [ 227.701891][ T7815] __dump_stack+0x1d/0x30 [ 227.701988][ T7815] dump_stack_lvl+0x95/0xd0 [ 227.702077][ T7815] dump_stack+0x15/0x1b [ 227.702113][ T7815] should_fail_ex+0x25e/0x270 [ 227.702140][ T7815] should_fail+0xb/0x20 [ 227.702165][ T7815] should_fail_usercopy+0x1a/0x20 [ 227.702212][ T7815] _copy_to_user+0x20/0xa0 [ 227.702245][ T7815] simple_read_from_buffer+0xb5/0x130 [ 227.702268][ T7815] proc_fail_nth_read+0x10e/0x150 [ 227.702317][ T7815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 227.702430][ T7815] vfs_read+0x18e/0x7c0 [ 227.702550][ T7815] ? __rcu_read_unlock+0x4e/0x70 [ 227.702575][ T7815] ? __fget_files+0x184/0x1c0 [ 227.702602][ T7815] ? mutex_lock+0x57/0x90 [ 227.702698][ T7815] ksys_read+0xdc/0x1a0 [ 227.702728][ T7815] __x64_sys_read+0x40/0x50 [ 227.702762][ T7815] x64_sys_call+0x2886/0x3020 [ 227.702843][ T7815] do_syscall_64+0x136/0x3c0 [ 227.702890][ T7815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.702916][ T7815] RIP: 0033:0x7f092649d68e [ 227.702934][ T7815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 227.702951][ T7815] RSP: 002b:00007f0924f36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 227.702986][ T7815] RAX: ffffffffffffffda RBX: 00007f0924f376c0 RCX: 00007f092649d68e [ 227.702999][ T7815] RDX: 000000000000000f RSI: 00007f0924f370a0 RDI: 0000000000000003 [ 227.703013][ T7815] RBP: 00007f0924f37090 R08: 0000000000000000 R09: 0000000000000000 [ 227.703099][ T7815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.703110][ T7815] R13: 00007f0926756038 R14: 00007f0926755fa0 R15: 00007ffdc1da9f98 [ 227.703128][ T7815] [ 227.993725][ T7821] loop5: detected capacity change from 0 to 164 [ 228.027198][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 228.054426][ T7821] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 228.064022][ T7823] netlink: 'syz.3.1240': attribute type 3 has an invalid length. [ 228.122393][ T7825] tipc: Enabling of bearer rejected, already enabled [ 228.631631][ T7828] loop2: detected capacity change from 0 to 128 [ 228.645619][ T7828] ext4: Unknown parameter 'fsuuid' [ 228.664429][ T28] audit: type=1400 audit(1781663786.864:863): avc: denied { ioctl } for pid=7827 comm="syz.2.1236" path="socket:[19245]" dev="sockfs" ino=19245 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 228.704840][ T39] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 228.744298][ T7832] FAULT_INJECTION: forcing a failure. [ 228.744298][ T7832] name failslab, interval 1, probability 0, space 0, times 0 [ 228.783131][ T7835] loop5: detected capacity change from 0 to 128 [ 228.789681][ T7832] CPU: 0 UID: 0 PID: 7832 Comm: syz.4.1242 Not tainted syzkaller #0 PREEMPT(lazy) [ 228.789707][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 228.789719][ T7832] Call Trace: [ 228.789774][ T7832] [ 228.789782][ T7832] __dump_stack+0x1d/0x30 [ 228.789808][ T7832] dump_stack_lvl+0x95/0xd0 [ 228.789832][ T7832] dump_stack+0x15/0x1b [ 228.789881][ T7832] should_fail_ex+0x25e/0x270 [ 228.789909][ T7832] should_failslab+0x8c/0xb0 [ 228.789932][ T7832] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 228.789957][ T7832] ? __alloc_skb+0x2db/0x6f0 [ 228.790046][ T7832] __alloc_skb+0x2db/0x6f0 [ 228.790100][ T7832] ? fib6_table_lookup+0x1d5/0x5b0 [ 228.790151][ T7832] ? __alloc_skb+0x205/0x6f0 [ 228.790179][ T7832] alloc_skb_with_frags+0x7e/0x3d0 [ 228.790232][ T7832] ? __rcu_read_unlock+0x33/0x70 [ 228.790262][ T7832] sock_alloc_send_pskb+0x44d/0x500 [ 228.790307][ T7832] __ip6_append_data+0x19b4/0x2450 [ 228.790359][ T7832] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 228.790391][ T7832] ? ip6_mtu+0xf5/0x120 [ 228.790419][ T7832] ip6_append_data+0xd3/0x1d0 [ 228.790462][ T7832] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 228.790538][ T7832] l2tp_ip6_sendmsg+0xd77/0xf20 [ 228.790571][ T7832] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 228.790657][ T7832] inet_sendmsg+0xc5/0xd0 [ 228.790679][ T7832] ? __pfx_inet_sendmsg+0x10/0x10 [ 228.790701][ T7832] ____sys_sendmsg+0x4e8/0x580 [ 228.790792][ T7832] ___sys_sendmsg+0x195/0x1e0 [ 228.790834][ T7832] __x64_sys_sendmsg+0xd4/0x160 [ 228.790908][ T7832] x64_sys_call+0x194c/0x3020 [ 228.790931][ T7832] do_syscall_64+0x136/0x3c0 [ 228.790956][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.790981][ T7832] RIP: 0033:0x7fafaf8ece59 [ 228.791069][ T7832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.791089][ T7832] RSP: 002b:00007fafae347028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.791111][ T7832] RAX: ffffffffffffffda RBX: 00007fafafb65fa0 RCX: 00007fafaf8ece59 [ 228.791125][ T7832] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 228.791137][ T7832] RBP: 00007fafae347090 R08: 0000000000000000 R09: 0000000000000000 [ 228.791204][ T7832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.791218][ T7832] R13: 00007fafafb66038 R14: 00007fafafb65fa0 R15: 00007ffc685bb808 [ 228.791286][ T7832] [ 230.100512][ T5237] bio_check_eod: 9028 callbacks suppressed [ 230.100527][ T5237] kworker/u8:14: attempt to access beyond end of device [ 230.100527][ T5237] loop5: rw=1, sector=153, nr_sectors = 8 limit=128 [ 230.178801][ T7843] loop4: detected capacity change from 0 to 512 [ 230.185305][ T7843] EXT4-fs: Ignoring removed orlov option [ 230.191014][ T7843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.197619][ T7843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.251533][ T7843] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 230.261747][ T5237] kworker/u8:14: attempt to access beyond end of device [ 230.261747][ T5237] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 230.275821][ T5237] kworker/u8:14: attempt to access beyond end of device [ 230.275821][ T5237] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 230.313432][ T5237] kworker/u8:14: attempt to access beyond end of device [ 230.313432][ T5237] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 230.327546][ T5237] kworker/u8:14: attempt to access beyond end of device [ 230.327546][ T5237] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 230.342080][ T5237] kworker/u8:14: attempt to access beyond end of device [ 230.342080][ T5237] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 230.358535][ T5237] kworker/u8:14: attempt to access beyond end of device [ 230.358535][ T5237] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 230.372484][ T5237] kworker/u8:14: attempt to access beyond end of device [ 230.372484][ T5237] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 230.386403][ T5237] kworker/u8:14: attempt to access beyond end of device [ 230.386403][ T5237] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 230.664046][ T7857] loop2: detected capacity change from 0 to 512 [ 230.681491][ T7857] EXT4-fs: Ignoring removed orlov option [ 230.688051][ T7857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.695257][ T7857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.704675][ T5237] kworker/u8:14: attempt to access beyond end of device [ 230.704675][ T5237] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 230.706306][ T7853] x_tables: duplicate underflow at hook 1 [ 230.727308][ T7857] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.738631][ T7843] EXT4-fs (loop4): 1 truncate cleaned up [ 230.744660][ T7843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.770756][ T7857] EXT4-fs (loop2): 1 truncate cleaned up [ 230.779990][ T7865] loop5: detected capacity change from 0 to 128 [ 230.781967][ T7857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.903160][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.982099][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.152317][ T7873] loop2: detected capacity change from 0 to 128 [ 231.160039][ T7873] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 231.263515][ T7880] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1254'. [ 231.320887][ T7880] loop5: detected capacity change from 0 to 512 [ 232.378413][ T7880] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 232.496776][ T7879] loop3: detected capacity change from 0 to 512 [ 232.503634][ T7879] EXT4-fs: Ignoring removed orlov option [ 232.509384][ T7879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.516216][ T7879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.540976][ T7879] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 232.703660][ T7880] EXT4-fs (loop5): 1 truncate cleaned up [ 232.713529][ T7880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.733218][ T7880] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1254: invalid indirect mapped block 4294901760 (level 0) [ 233.509411][ T28] audit: type=1400 audit(1781663790.934:864): avc: denied { write } for pid=7870 comm="syz.5.1254" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.534888][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1256'. [ 233.551943][ T5247] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 233.561258][ T7880] EXT4-fs (loop5): Remounting filesystem read-only [ 233.571009][ T7879] EXT4-fs (loop3): 1 truncate cleaned up [ 233.577753][ T7879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.709457][ T28] audit: type=1400 audit(1781663791.234:865): avc: denied { write } for pid=7870 comm="syz.5.1254" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.166194][ T7886] netlink: 'syz.0.1256': attribute type 3 has an invalid length. [ 234.220400][ T7149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.235183][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.653433][ T7911] loop5: detected capacity change from 0 to 1024 [ 234.694692][ T7911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.791789][ T7911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 235.007153][ T7911] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.022367][ T28] audit: type=1400 audit(1781663793.224:866): avc: denied { write } for pid=7904 comm="syz.5.1259" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.882874][ T7911] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.1259: lblock 0 mapped to illegal pblock 0 (length 1) [ 235.924739][ T7860] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 236.189412][ T7933] x_tables: duplicate underflow at hook 1 [ 236.241023][ T7932] x_tables: duplicate underflow at hook 1 [ 236.893365][ T7947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58838 sclass=netlink_route_socket pid=7947 comm=syz.4.1269 [ 237.054136][ T7957] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1270'. [ 237.103268][ T7957] loop3: detected capacity change from 0 to 512 [ 237.121600][ T7957] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 237.157613][ T7957] EXT4-fs (loop3): 1 truncate cleaned up [ 237.166651][ T7957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.185249][ T7957] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1270: invalid indirect mapped block 4294901760 (level 0) [ 237.213475][ T7957] EXT4-fs (loop3): Remounting filesystem read-only [ 237.242382][ T28] audit: type=1400 audit(1781663795.384:867): avc: denied { write } for pid=7950 comm="syz.3.1270" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.311367][ T28] audit: type=1400 audit(1781663795.424:868): avc: denied { write } for pid=7950 comm="syz.3.1270" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.622035][ T7149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 237.726951][ T28] audit: type=1400 audit(1781663795.924:869): avc: denied { setopt } for pid=7964 comm="syz.0.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.778224][ T28] audit: type=1400 audit(1781663795.974:870): avc: denied { read } for pid=7964 comm="syz.0.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.809428][ T28] audit: type=1400 audit(1781663796.004:871): avc: denied { ioctl } for pid=7964 comm="syz.0.1274" path="socket:[20208]" dev="sockfs" ino=20208 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 237.853743][ T7967] netlink: 'syz.0.1275': attribute type 3 has an invalid length. [ 237.901315][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1273'. [ 237.966970][ T7975] x_tables: duplicate underflow at hook 1 [ 237.982436][ T7969] netlink: 'syz.5.1273': attribute type 3 has an invalid length. [ 238.343136][ T7981] loop2: detected capacity change from 0 to 128 [ 238.511359][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.669373][ T5235] bio_check_eod: 160 callbacks suppressed [ 238.669388][ T5235] kworker/u8:13: attempt to access beyond end of device [ 238.669388][ T5235] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 238.736155][ T5235] kworker/u8:13: attempt to access beyond end of device [ 238.736155][ T5235] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 238.768059][ T7987] loop3: detected capacity change from 0 to 1024 [ 238.811259][ T7987] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.833686][ T5235] kworker/u8:13: attempt to access beyond end of device [ 238.833686][ T5235] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 238.890651][ T7987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 238.924337][ T5235] kworker/u8:13: attempt to access beyond end of device [ 238.924337][ T5235] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 238.939532][ T7995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58838 sclass=netlink_route_socket pid=7995 comm=syz.4.1283 [ 238.970584][ T7987] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.996831][ T5235] kworker/u8:13: attempt to access beyond end of device [ 238.996831][ T5235] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 239.036053][ T7987] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.1281: lblock 0 mapped to illegal pblock 0 (length 1) [ 239.049375][ T28] audit: type=1400 audit(1781663797.234:872): avc: denied { write } for pid=7985 comm="syz.3.1281" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.091832][ T5235] kworker/u8:13: attempt to access beyond end of device [ 239.091832][ T5235] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 239.144150][ T5235] kworker/u8:13: attempt to access beyond end of device [ 239.144150][ T5235] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 239.180217][ T5235] kworker/u8:13: attempt to access beyond end of device [ 239.180217][ T5235] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 239.193909][ T5235] kworker/u8:13: attempt to access beyond end of device [ 239.193909][ T5235] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 239.207325][ T5235] kworker/u8:13: attempt to access beyond end of device [ 239.207325][ T5235] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 240.250492][ T8008] loop2: detected capacity change from 0 to 256 [ 240.350386][ T7960] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 241.360430][ T8024] loop4: detected capacity change from 0 to 128 [ 241.621956][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 241.646582][ T8034] loop3: detected capacity change from 0 to 128 [ 241.824411][ T8039] x_tables: duplicate underflow at hook 1 [ 242.134735][ T8047] loop3: detected capacity change from 0 to 128 [ 242.622404][ T8054] loop2: detected capacity change from 0 to 164 [ 242.706434][ T8054] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 243.044647][ T8058] x_tables: duplicate underflow at hook 1 [ 243.051821][ T8056] netlink: 'syz.5.1302': attribute type 3 has an invalid length. [ 243.069589][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 243.141754][ T8060] netlink: 'syz.4.1304': attribute type 3 has an invalid length. [ 243.191015][ T8063] loop5: detected capacity change from 0 to 128 [ 243.263830][ T8066] loop4: detected capacity change from 0 to 128 [ 243.780305][ T8063] bio_check_eod: 16782 callbacks suppressed [ 243.780808][ T5237] kworker/u8:14: attempt to access beyond end of device [ 243.780808][ T5237] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 243.801855][ T8063] syz.5.1305: attempt to access beyond end of device [ 243.801855][ T8063] loop5: rw=0, sector=153, nr_sectors = 8 limit=128 [ 243.840054][ T8074] x_tables: duplicate underflow at hook 1 [ 243.858105][ T8063] syz.5.1305: attempt to access beyond end of device [ 243.858105][ T8063] loop5: rw=0, sector=153, nr_sectors = 8 limit=128 [ 243.878006][ T5237] kworker/u8:14: attempt to access beyond end of device [ 243.878006][ T5237] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 243.944777][ T8063] syz.5.1305: attempt to access beyond end of device [ 243.944777][ T8063] loop5: rw=0, sector=153, nr_sectors = 8 limit=128 [ 243.964042][ T5237] kworker/u8:14: attempt to access beyond end of device [ 243.964042][ T5237] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 244.051774][ T5237] kworker/u8:14: attempt to access beyond end of device [ 244.051774][ T5237] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 244.071035][ T8063] syz.5.1305: attempt to access beyond end of device [ 244.071035][ T8063] loop5: rw=0, sector=153, nr_sectors = 8 limit=128 [ 244.084367][ T8063] syz.5.1305: attempt to access beyond end of device [ 244.084367][ T8063] loop5: rw=0, sector=153, nr_sectors = 8 limit=128 [ 244.093255][ T5237] kworker/u8:14: attempt to access beyond end of device [ 244.093255][ T5237] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 244.404032][ T8088] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1310'. [ 244.461156][ T8088] loop2: detected capacity change from 0 to 512 [ 244.478934][ T8088] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 244.522529][ T8090] loop4: detected capacity change from 0 to 1024 [ 244.536090][ T8088] EXT4-fs (loop2): 1 truncate cleaned up [ 244.546341][ T8088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.572069][ T28] audit: type=1400 audit(1781663802.774:873): avc: denied { write } for pid=8076 comm="syz.2.1310" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.594690][ T8088] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1310: invalid indirect mapped block 4294901760 (level 0) [ 244.612657][ T8088] EXT4-fs (loop2): Remounting filesystem read-only [ 244.728331][ T8090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.861514][ T8090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 244.897615][ T28] audit: type=1400 audit(1781663802.824:874): avc: denied { write } for pid=8076 comm="syz.2.1310" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.078897][ T8102] loop3: detected capacity change from 0 to 1024 [ 245.092748][ T8090] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.104018][ T8098] netlink: 'syz.0.1315': attribute type 3 has an invalid length. [ 245.115629][ T8102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.152475][ T8090] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.1309: lblock 0 mapped to illegal pblock 0 (length 1) [ 245.165824][ T28] audit: type=1400 audit(1781663803.344:875): avc: denied { write } for pid=8084 comm="syz.4.1309" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.211987][ T8102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 245.246591][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'. [ 245.258764][ T8102] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.292162][ T8106] netlink: 'syz.0.1316': attribute type 3 has an invalid length. [ 245.304406][ T8102] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.1314: lblock 0 mapped to illegal pblock 0 (length 1) [ 245.317960][ T28] audit: type=1400 audit(1781663803.504:876): avc: denied { write } for pid=8095 comm="syz.3.1314" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.343740][ T8109] loop5: detected capacity change from 0 to 128 [ 245.401491][ T8114] tipc: Enabling of bearer rejected, failed to enable media [ 245.909140][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.934296][ T8120] x_tables: duplicate underflow at hook 1 [ 246.177859][ T8125] x_tables: duplicate underflow at hook 1 [ 246.448287][ T8134] ip6gre1: entered promiscuous mode [ 246.453975][ T8134] ip6gre1: entered allmulticast mode [ 246.688331][ T8094] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 246.741134][ T8094] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 246.859208][ T28] audit: type=1400 audit(1781663805.064:877): avc: denied { create } for pid=8136 comm="syz.0.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.878820][ T28] audit: type=1400 audit(1781663805.064:878): avc: denied { ioctl } for pid=8136 comm="syz.0.1325" path="socket:[21663]" dev="sockfs" ino=21663 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.931470][ T8141] netlink: 'syz.2.1327': attribute type 3 has an invalid length. [ 246.956902][ T8143] loop2: detected capacity change from 0 to 128 [ 247.267783][ T28] audit: type=1400 audit(1781663805.464:879): avc: denied { mounton } for pid=8153 comm="syz.2.1331" path="/243/file0" dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 247.477413][ T8159] loop2: detected capacity change from 0 to 128 [ 247.818956][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 248.237019][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 248.246401][ T8162] x_tables: duplicate underflow at hook 1 [ 248.368310][ T8164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58838 sclass=netlink_route_socket pid=8164 comm=syz.4.1334 [ 249.212521][ T8173] loop3: detected capacity change from 0 to 512 [ 249.223341][ T8173] EXT4-fs: Ignoring removed orlov option [ 249.232277][ T8173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.239850][ T8173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.249700][ T8173] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 249.283201][ T8173] EXT4-fs (loop3): 1 truncate cleaned up [ 249.295063][ T8173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.549973][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.061731][ T8209] loop3: detected capacity change from 0 to 128 [ 250.071440][ T8209] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 250.103123][ T28] audit: type=1400 audit(1781663808.304:880): avc: denied { getopt } for pid=8212 comm="syz.0.1349" lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.540858][ T8222] loop2: detected capacity change from 0 to 512 [ 250.598645][ T8227] loop5: detected capacity change from 0 to 256 [ 250.611991][ T8222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.639869][ T8222] ext4 filesystem being mounted at /248/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 250.703629][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1354'. [ 250.727289][ T8229] netlink: 'syz.4.1354': attribute type 3 has an invalid length. [ 250.744570][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.001381][ T5247] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 251.034481][ T8245] FAULT_INJECTION: forcing a failure. [ 251.034481][ T8245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.070261][ T8245] CPU: 0 UID: 0 PID: 8245 Comm: syz.2.1358 Not tainted syzkaller #0 PREEMPT(lazy) [ 251.070291][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 251.070304][ T8245] Call Trace: [ 251.070310][ T8245] [ 251.070317][ T8245] __dump_stack+0x1d/0x30 [ 251.070339][ T8245] dump_stack_lvl+0x95/0xd0 [ 251.070365][ T8245] dump_stack+0x15/0x1b [ 251.070445][ T8245] should_fail_ex+0x25e/0x270 [ 251.070549][ T8245] should_fail+0xb/0x20 [ 251.070573][ T8245] should_fail_usercopy+0x1a/0x20 [ 251.070610][ T8245] _copy_to_user+0x20/0xa0 [ 251.070659][ T8245] simple_read_from_buffer+0xb5/0x130 [ 251.070721][ T8245] proc_fail_nth_read+0x10e/0x150 [ 251.070788][ T8245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.070891][ T8245] vfs_read+0x18e/0x7c0 [ 251.070979][ T8245] ? __rcu_read_unlock+0x4e/0x70 [ 251.071006][ T8245] ? __fget_files+0x184/0x1c0 [ 251.071042][ T8245] ? mutex_lock+0x57/0x90 [ 251.071071][ T8245] ksys_read+0xdc/0x1a0 [ 251.071106][ T8245] __x64_sys_read+0x40/0x50 [ 251.071140][ T8245] x64_sys_call+0x2886/0x3020 [ 251.071216][ T8245] do_syscall_64+0x136/0x3c0 [ 251.071236][ T8245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.071282][ T8245] RIP: 0033:0x7fcdbbd7d68e [ 251.071299][ T8245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.071321][ T8245] RSP: 002b:00007fcdba7ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.071342][ T8245] RAX: ffffffffffffffda RBX: 00007fcdba7cd6c0 RCX: 00007fcdbbd7d68e [ 251.071411][ T8245] RDX: 000000000000000f RSI: 00007fcdba7cd0a0 RDI: 0000000000000007 [ 251.071426][ T8245] RBP: 00007fcdba7cd090 R08: 0000000000000000 R09: 0000000000000000 [ 251.071441][ T8245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.071456][ T8245] R13: 00007fcdbc036218 R14: 00007fcdbc036180 R15: 00007ffe2cac0968 [ 251.071476][ T8245] [ 251.279648][ T28] audit: type=1400 audit(1781663809.474:881): avc: denied { getopt } for pid=8246 comm="syz.0.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 251.433408][ T28] audit: type=1400 audit(1781663809.634:882): avc: denied { cpu } for pid=8254 comm="syz.4.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 251.572027][ T8262] loop4: detected capacity change from 0 to 128 [ 251.597592][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1366'. [ 251.610953][ T8264] netlink: 'syz.5.1366': attribute type 3 has an invalid length. [ 251.649360][ T5241] bio_check_eod: 17192 callbacks suppressed [ 251.649375][ T5241] kworker/u8:16: attempt to access beyond end of device [ 251.649375][ T5241] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 251.669063][ T5241] kworker/u8:16: attempt to access beyond end of device [ 251.669063][ T5241] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 251.687108][ T5241] kworker/u8:16: attempt to access beyond end of device [ 251.687108][ T5241] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 251.691366][ T8269] loop5: detected capacity change from 0 to 128 [ 251.700782][ T5241] kworker/u8:16: attempt to access beyond end of device [ 251.700782][ T5241] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 251.720231][ T5241] kworker/u8:16: attempt to access beyond end of device [ 251.720231][ T5241] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 251.733932][ T5241] kworker/u8:16: attempt to access beyond end of device [ 251.733932][ T5241] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 251.747700][ T5241] kworker/u8:16: attempt to access beyond end of device [ 251.747700][ T5241] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 251.761582][ T5241] kworker/u8:16: attempt to access beyond end of device [ 251.761582][ T5241] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 251.775228][ T5241] kworker/u8:16: attempt to access beyond end of device [ 251.775228][ T5241] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 251.789212][ T5241] kworker/u8:16: attempt to access beyond end of device [ 251.789212][ T5241] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 251.936833][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 251.944043][ T8282] x_tables: duplicate underflow at hook 1 [ 252.142472][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 252.156975][ T8289] netlink: 'syz.0.1375': attribute type 3 has an invalid length. [ 252.405399][ T8303] loop2: detected capacity change from 0 to 128 [ 252.573491][ T8307] x_tables: duplicate underflow at hook 1 [ 252.780959][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 252.822879][ T8313] netlink: 'syz.2.1379': attribute type 3 has an invalid length. [ 252.892880][ T8317] loop2: detected capacity change from 0 to 128 [ 253.086356][ T8326] FAULT_INJECTION: forcing a failure. [ 253.086356][ T8326] name failslab, interval 1, probability 0, space 0, times 0 [ 253.108809][ T8326] CPU: 1 UID: 0 PID: 8326 Comm: syz.5.1384 Not tainted syzkaller #0 PREEMPT(lazy) [ 253.108834][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.108845][ T8326] Call Trace: [ 253.108851][ T8326] [ 253.108915][ T8326] __dump_stack+0x1d/0x30 [ 253.108964][ T8326] dump_stack_lvl+0x95/0xd0 [ 253.109039][ T8326] dump_stack+0x15/0x1b [ 253.109057][ T8326] should_fail_ex+0x25e/0x270 [ 253.109149][ T8326] ? alloc_pipe_info+0xad/0x340 [ 253.109179][ T8326] should_failslab+0x8c/0xb0 [ 253.109198][ T8326] __kmalloc_cache_noprof+0x5f/0x400 [ 253.109240][ T8326] ? irqentry_exit+0x58f/0x610 [ 253.109274][ T8326] alloc_pipe_info+0xad/0x340 [ 253.109322][ T8326] splice_direct_to_actor+0x593/0x680 [ 253.109344][ T8326] ? __pfx_direct_splice_actor+0x10/0x10 [ 253.109394][ T8326] ? do_splice_direct+0xda/0x1a0 [ 253.109417][ T8326] ? do_splice_direct+0xca/0x1a0 [ 253.109444][ T8326] do_splice_direct+0x119/0x1a0 [ 253.109494][ T8326] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 253.109544][ T8326] do_sendfile+0x37d/0x640 [ 253.109568][ T8326] __x64_sys_sendfile64+0x105/0x150 [ 253.109595][ T8326] x64_sys_call+0x2dc4/0x3020 [ 253.109659][ T8326] do_syscall_64+0x136/0x3c0 [ 253.109679][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.109699][ T8326] RIP: 0033:0x7eff9c2cce59 [ 253.109722][ T8326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.109742][ T8326] RSP: 002b:00007eff9ad27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 253.109760][ T8326] RAX: ffffffffffffffda RBX: 00007eff9c545fa0 RCX: 00007eff9c2cce59 [ 253.109773][ T8326] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 253.109785][ T8326] RBP: 00007eff9ad27090 R08: 0000000000000000 R09: 0000000000000000 [ 253.109798][ T8326] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 253.109809][ T8326] R13: 00007eff9c546038 R14: 00007eff9c545fa0 R15: 00007ffe52fe08c8 [ 253.109843][ T8326] [ 253.350943][ T8328] loop5: detected capacity change from 0 to 128 [ 253.863471][ T8345] netlink: 'syz.3.1391': attribute type 3 has an invalid length. [ 253.890805][ T8349] FAULT_INJECTION: forcing a failure. [ 253.890805][ T8349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.904067][ T8349] CPU: 1 UID: 0 PID: 8349 Comm: syz.3.1393 Not tainted syzkaller #0 PREEMPT(lazy) [ 253.904097][ T8349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.904112][ T8349] Call Trace: [ 253.904119][ T8349] [ 253.904127][ T8349] __dump_stack+0x1d/0x30 [ 253.904255][ T8349] dump_stack_lvl+0x95/0xd0 [ 253.904277][ T8349] dump_stack+0x15/0x1b [ 253.904297][ T8349] should_fail_ex+0x25e/0x270 [ 253.904358][ T8349] should_fail+0xb/0x20 [ 253.904382][ T8349] should_fail_usercopy+0x1a/0x20 [ 253.904412][ T8349] _copy_from_user+0x1c/0xb0 [ 253.904476][ T8349] ucma_write+0xd8/0x260 [ 253.904499][ T8349] ? __pfx_ucma_write+0x10/0x10 [ 253.904522][ T8349] vfs_write+0x252/0x990 [ 253.904585][ T8349] ? __fget_files+0x184/0x1c0 [ 253.904615][ T8349] ksys_write+0xdc/0x1a0 [ 253.904650][ T8349] __x64_sys_write+0x40/0x50 [ 253.904686][ T8349] x64_sys_call+0x27e1/0x3020 [ 253.904746][ T8349] do_syscall_64+0x136/0x3c0 [ 253.904771][ T8349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.904797][ T8349] RIP: 0033:0x7f09264dce59 [ 253.904814][ T8349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.904942][ T8349] RSP: 002b:00007f0924f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.904965][ T8349] RAX: ffffffffffffffda RBX: 00007f0926755fa0 RCX: 00007f09264dce59 [ 253.904982][ T8349] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 253.904997][ T8349] RBP: 00007f0924f37090 R08: 0000000000000000 R09: 0000000000000000 [ 253.905046][ T8349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.905061][ T8349] R13: 00007f0926756038 R14: 00007f0926755fa0 R15: 00007ffdc1da9f98 [ 253.905080][ T8349] [ 254.120230][ T28] audit: type=1400 audit(1781663812.324:883): avc: denied { create } for pid=8350 comm="syz.2.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 254.146498][ T8351] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 254.155172][ T8351] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 254.164297][ T28] audit: type=1400 audit(1781663812.344:884): avc: denied { write } for pid=8350 comm="syz.2.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 254.190039][ T28] audit: type=1400 audit(1781663812.354:885): avc: denied { write } for pid=8352 comm="syz.3.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.213329][ T8357] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1394'. [ 254.223913][ T28] audit: type=1400 audit(1781663812.354:886): avc: denied { read } for pid=8352 comm="syz.3.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.243749][ T28] audit: type=1400 audit(1781663812.404:887): avc: denied { ioctl } for pid=8352 comm="syz.3.1395" path="socket:[21050]" dev="sockfs" ino=21050 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.308384][ T8357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.376693][ T8357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.407360][ T8357] bond0 (unregistering): Released all slaves [ 254.571423][ T8368] loop3: detected capacity change from 0 to 128 [ 254.642019][ T8351] loop2: detected capacity change from 0 to 8192 [ 254.852585][ T8373] x_tables: duplicate underflow at hook 1 [ 255.031639][ T8384] tipc: Enabling of bearer rejected, already enabled [ 255.040886][ T8386] sctp: [Deprecated]: syz.0.1405 (pid 8386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.040886][ T8386] Use struct sctp_sack_info instead [ 255.355895][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'. [ 255.656454][ T8406] loop5: detected capacity change from 0 to 128 [ 255.853466][ T8409] loop2: detected capacity change from 0 to 512 [ 255.860784][ T8409] EXT4-fs: Ignoring removed orlov option [ 255.866527][ T8409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.873295][ T8409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.972960][ T8409] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 256.018918][ T8409] EXT4-fs (loop2): 1 truncate cleaned up [ 256.025828][ T8409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.311328][ T28] audit: type=1400 audit(1781663814.514:888): avc: denied { bind } for pid=8428 comm="syz.3.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 256.381226][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.386171][ T8431] sctp: [Deprecated]: syz.4.1419 (pid 8431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.386171][ T8431] Use struct sctp_sack_info instead [ 256.516392][ T8439] loop2: detected capacity change from 0 to 1024 [ 256.531557][ T8439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.601641][ T8439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 256.621885][ T8439] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.647837][ T28] audit: type=1400 audit(1781663814.844:889): avc: denied { write } for pid=8434 comm="syz.2.1420" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.669920][ T8439] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1420: lblock 0 mapped to illegal pblock 0 (length 1) [ 256.689008][ T8443] loop5: detected capacity change from 0 to 128 [ 256.744264][ T28] audit: type=1400 audit(1781663814.944:890): avc: denied { setopt } for pid=8444 comm="syz.3.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.784262][ T8445] ipip0: entered promiscuous mode [ 256.832237][ T5247] bio_check_eod: 23657 callbacks suppressed [ 256.832251][ T5247] kworker/u8:19: attempt to access beyond end of device [ 256.832251][ T5247] loop5: rw=1, sector=153, nr_sectors = 8 limit=128 [ 256.851937][ T5247] kworker/u8:19: attempt to access beyond end of device [ 256.851937][ T5247] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 256.870640][ T5247] kworker/u8:19: attempt to access beyond end of device [ 256.870640][ T5247] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 256.884462][ T5247] kworker/u8:19: attempt to access beyond end of device [ 256.884462][ T5247] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 256.898227][ T5247] kworker/u8:19: attempt to access beyond end of device [ 256.898227][ T5247] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 256.912177][ T5247] kworker/u8:19: attempt to access beyond end of device [ 256.912177][ T5247] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 256.928323][ T5247] kworker/u8:19: attempt to access beyond end of device [ 256.928323][ T5247] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 256.942126][ T5247] kworker/u8:19: attempt to access beyond end of device [ 256.942126][ T5247] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 256.956118][ T5247] kworker/u8:19: attempt to access beyond end of device [ 256.956118][ T5247] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 256.969924][ T5247] kworker/u8:19: attempt to access beyond end of device [ 256.969924][ T5247] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 257.103682][ T8459] loop3: detected capacity change from 0 to 128 [ 257.238182][ T8468] xt_CT: No such helper "snmp_trap" [ 257.252673][ T28] audit: type=1400 audit(1781663815.454:891): avc: denied { create } for pid=8467 comm="syz.0.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 257.479938][ T8477] sctp: [Deprecated]: syz.4.1432 (pid 8477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.479938][ T8477] Use struct sctp_sack_info instead [ 257.658556][ T8488] netlink: 'syz.4.1435': attribute type 1 has an invalid length. [ 257.691285][ T28] audit: type=1400 audit(1781663815.894:892): avc: denied { accept } for pid=8490 comm="syz.4.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 257.934795][ T28] audit: type=1400 audit(1781663816.134:893): avc: denied { ioctl } for pid=8501 comm="syz.5.1441" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 257.990301][ T8500] loop4: detected capacity change from 0 to 164 [ 258.014598][ T8507] sctp: [Deprecated]: syz.0.1444 (pid 8507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.014598][ T8507] Use struct sctp_sack_info instead [ 258.045766][ T8500] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 258.090846][ T8514] tipc: Enabling of bearer rejected, already enabled [ 259.133143][ T8537] loop4: detected capacity change from 0 to 128 [ 259.139675][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 259.151386][ T28] audit: type=1400 audit(1781663817.354:894): avc: denied { ioctl } for pid=8534 comm="syz.5.1453" path="socket:[22437]" dev="sockfs" ino=22437 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 259.195863][ T8540] netlink: 'syz.0.1450': attribute type 3 has an invalid length. [ 259.223326][ T8542] sctp: [Deprecated]: syz.5.1456 (pid 8542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.223326][ T8542] Use struct sctp_sack_info instead [ 259.418133][ T8550] loop3: detected capacity change from 0 to 512 [ 259.425665][ T8550] EXT4-fs: Ignoring removed orlov option [ 259.431618][ T8550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.438221][ T8550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.449907][ T8550] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 259.541928][ T8550] EXT4-fs (loop3): 1 truncate cleaned up [ 259.548848][ T8550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.746108][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 259.756845][ T8555] loop5: detected capacity change from 0 to 128 [ 259.784379][ T8557] loop2: detected capacity change from 0 to 128 [ 260.905563][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.821793][ T8588] sctp: [Deprecated]: syz.5.1470 (pid 8588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.821793][ T8588] Use struct sctp_sack_info instead [ 261.903652][ T8595] loop3: detected capacity change from 0 to 128 [ 262.042765][ T8606] x_tables: duplicate underflow at hook 1 [ 262.063391][ T5235] bio_check_eod: 16760 callbacks suppressed [ 262.063405][ T5235] kworker/u8:13: attempt to access beyond end of device [ 262.063405][ T5235] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 262.084632][ T8608] loop2: detected capacity change from 0 to 1024 [ 262.092097][ T8608] EXT4-fs: Ignoring removed bh option [ 262.102597][ T5235] kworker/u8:13: attempt to access beyond end of device [ 262.102597][ T5235] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 262.116549][ T5235] kworker/u8:13: attempt to access beyond end of device [ 262.116549][ T5235] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 262.130642][ T5235] kworker/u8:13: attempt to access beyond end of device [ 262.130642][ T5235] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 262.150506][ T5235] kworker/u8:13: attempt to access beyond end of device [ 262.150506][ T5235] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 262.167824][ T5235] kworker/u8:13: attempt to access beyond end of device [ 262.167824][ T5235] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 262.206128][ T8608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.252404][ T5235] kworker/u8:13: attempt to access beyond end of device [ 262.252404][ T5235] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 262.292331][ T5235] kworker/u8:13: attempt to access beyond end of device [ 262.292331][ T5235] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 262.317521][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.332859][ T5235] kworker/u8:13: attempt to access beyond end of device [ 262.332859][ T5235] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 262.346718][ T5235] kworker/u8:13: attempt to access beyond end of device [ 262.346718][ T5235] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 263.023548][ T8642] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1484'. [ 263.081040][ T8642] loop4: detected capacity change from 0 to 512 [ 263.204415][ T28] audit: type=1400 audit(1781663821.404:895): avc: denied { ioctl } for pid=8626 comm="syz.5.1483" path="socket:[23616]" dev="sockfs" ino=23616 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.889602][ T8642] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 263.908749][ T8642] EXT4-fs (loop4): 1 truncate cleaned up [ 263.918997][ T8642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.940848][ T28] audit: type=1400 audit(1781663822.144:896): avc: denied { write } for pid=8634 comm="syz.4.1484" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.967979][ T8642] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1484: invalid indirect mapped block 4294901760 (level 0) [ 263.983383][ T8642] EXT4-fs (loop4): Remounting filesystem read-only [ 264.137868][ T28] audit: type=1400 audit(1781663822.194:897): avc: denied { write } for pid=8634 comm="syz.4.1484" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.215346][ T8655] loop3: detected capacity change from 0 to 256 [ 264.256872][ T8657] FAULT_INJECTION: forcing a failure. [ 264.256872][ T8657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.273620][ T8657] CPU: 0 UID: 0 PID: 8657 Comm: syz.2.1491 Not tainted syzkaller #0 PREEMPT(lazy) [ 264.273677][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 264.273692][ T8657] Call Trace: [ 264.273699][ T8657] [ 264.273707][ T8657] __dump_stack+0x1d/0x30 [ 264.273731][ T8657] dump_stack_lvl+0x95/0xd0 [ 264.273753][ T8657] dump_stack+0x15/0x1b [ 264.273809][ T8657] should_fail_ex+0x25e/0x270 [ 264.273832][ T8657] should_fail+0xb/0x20 [ 264.273976][ T8657] should_fail_usercopy+0x1a/0x20 [ 264.274006][ T8657] strncpy_from_user+0x27/0x250 [ 264.274025][ T8657] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 264.274050][ T8657] do_getname+0x59/0x1c0 [ 264.274135][ T8657] __se_sys_unlink+0x1b/0xe0 [ 264.274154][ T8657] __x64_sys_unlink+0x1f/0x30 [ 264.274176][ T8657] x64_sys_call+0x2eb6/0x3020 [ 264.274237][ T8657] do_syscall_64+0x136/0x3c0 [ 264.274257][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.274279][ T8657] RIP: 0033:0x7fcdbbdbce59 [ 264.274297][ T8657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.274325][ T8657] RSP: 002b:00007fcdba80f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 264.274346][ T8657] RAX: ffffffffffffffda RBX: 00007fcdbc035fa0 RCX: 00007fcdbbdbce59 [ 264.274360][ T8657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 264.274450][ T8657] RBP: 00007fcdba80f090 R08: 0000000000000000 R09: 0000000000000000 [ 264.274464][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.274478][ T8657] R13: 00007fcdbc036038 R14: 00007fcdbc035fa0 R15: 00007ffe2cac0968 [ 264.274573][ T8657] [ 264.542933][ T8661] sctp: [Deprecated]: syz.5.1488 (pid 8661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.542933][ T8661] Use struct sctp_sack_info instead [ 264.607155][ T8663] netlink: 'syz.2.1492': attribute type 5 has an invalid length. [ 264.657509][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.735378][ T8668] x_tables: duplicate underflow at hook 1 [ 264.777308][ T28] audit: type=1400 audit(1781663822.974:898): avc: denied { create } for pid=8651 comm="syz.0.1487" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 264.886829][ T8674] loop3: detected capacity change from 0 to 128 [ 264.902692][ T28] audit: type=1400 audit(1781663822.984:899): avc: denied { link } for pid=8651 comm="syz.0.1487" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 264.974597][ T8671] loop5: detected capacity change from 0 to 128 [ 264.992905][ T28] audit: type=1400 audit(1781663823.154:900): avc: denied { unlink } for pid=3296 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 266.197800][ T8691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58838 sclass=netlink_route_socket pid=8691 comm=syz.0.1499 [ 267.357232][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 267.375363][ T28] audit: type=1400 audit(1781663825.574:901): avc: denied { read write } for pid=8695 comm="syz.0.1502" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 267.399725][ T8665] loop4: detected capacity change from 0 to 1764 [ 267.408073][ T8700] netlink: 'syz.3.1501': attribute type 3 has an invalid length. [ 267.428036][ T5247] bio_check_eod: 69 callbacks suppressed [ 267.428128][ T5247] kworker/u8:19: attempt to access beyond end of device [ 267.428128][ T5247] loop5: rw=1, sector=153, nr_sectors = 8 limit=128 [ 267.449988][ T8665] iso9660: Bad value for 'gid' [ 267.479695][ T8665] iso9660: Bad value for 'gid' [ 267.539698][ T28] audit: type=1400 audit(1781663825.574:902): avc: denied { open } for pid=8695 comm="syz.0.1502" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 267.563116][ T5247] kworker/u8:19: attempt to access beyond end of device [ 267.563116][ T5247] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 267.624161][ T5247] kworker/u8:19: attempt to access beyond end of device [ 267.624161][ T5247] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 267.679982][ T5247] kworker/u8:19: attempt to access beyond end of device [ 267.679982][ T5247] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 267.741290][ T8711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1504'. [ 267.868815][ T8712] loop3: detected capacity change from 0 to 256 [ 267.921498][ T8711] loop2: detected capacity change from 0 to 512 [ 267.938945][ T8711] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 268.014189][ T8711] EXT4-fs (loop2): 1 truncate cleaned up [ 268.023550][ T8711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.043414][ T28] audit: type=1400 audit(1781663826.244:903): avc: denied { write } for pid=8701 comm="syz.2.1504" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.067902][ T8711] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1504: invalid indirect mapped block 4294901760 (level 0) [ 268.085576][ T8711] EXT4-fs (loop2): Remounting filesystem read-only [ 268.155507][ T5247] kworker/u8:19: attempt to access beyond end of device [ 268.155507][ T5247] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 268.201003][ T8719] FAULT_INJECTION: forcing a failure. [ 268.201003][ T8719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.220659][ T28] audit: type=1400 audit(1781663826.294:904): avc: denied { write } for pid=8701 comm="syz.2.1504" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.243434][ T5247] kworker/u8:19: attempt to access beyond end of device [ 268.243434][ T5247] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 268.284869][ T8719] CPU: 1 UID: 0 PID: 8719 Comm: syz.0.1508 Not tainted syzkaller #0 PREEMPT(lazy) [ 268.284963][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 268.284977][ T8719] Call Trace: [ 268.284983][ T8719] [ 268.284991][ T8719] __dump_stack+0x1d/0x30 [ 268.285017][ T8719] dump_stack_lvl+0x95/0xd0 [ 268.285087][ T8719] dump_stack+0x15/0x1b [ 268.285104][ T8719] should_fail_ex+0x25e/0x270 [ 268.285127][ T8719] should_fail+0xb/0x20 [ 268.285152][ T8719] should_fail_usercopy+0x1a/0x20 [ 268.285239][ T8719] _copy_from_user+0x1c/0xb0 [ 268.285274][ T8719] kstrtouint_from_user+0x69/0xf0 [ 268.285305][ T8719] ? 0xffffffff81000000 [ 268.285383][ T8719] ? avc_policy_seqno+0x15/0x30 [ 268.285477][ T8719] proc_fail_nth_write+0x50/0x160 [ 268.285501][ T8719] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 268.285534][ T8719] vfs_write+0x252/0x990 [ 268.285636][ T8719] ? __fget_files+0x184/0x1c0 [ 268.285657][ T8719] ? fdget+0x104/0x110 [ 268.285677][ T8719] ? mutex_lock+0x57/0x90 [ 268.285707][ T8719] ksys_write+0xdc/0x1a0 [ 268.285752][ T8719] __x64_sys_write+0x40/0x50 [ 268.285787][ T8719] x64_sys_call+0x27e1/0x3020 [ 268.285850][ T8719] do_syscall_64+0x136/0x3c0 [ 268.285870][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.285891][ T8719] RIP: 0033:0x7f08ae98d68e [ 268.285917][ T8719] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 268.285938][ T8719] RSP: 002b:00007f08ad426fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.285957][ T8719] RAX: ffffffffffffffda RBX: 00007f08ad4276c0 RCX: 00007f08ae98d68e [ 268.285971][ T8719] RDX: 0000000000000001 RSI: 00007f08ad4270a0 RDI: 0000000000000006 [ 268.285989][ T8719] RBP: 00007f08ad427090 R08: 0000000000000000 R09: 0000000000000000 [ 268.286037][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.286052][ T8719] R13: 00007f08aec46038 R14: 00007f08aec45fa0 R15: 00007fff3431c4e8 [ 268.286070][ T8719] [ 268.486294][ T5247] kworker/u8:19: attempt to access beyond end of device [ 268.486294][ T5247] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 268.503786][ T5247] kworker/u8:19: attempt to access beyond end of device [ 268.503786][ T5247] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 268.517287][ T5247] kworker/u8:19: attempt to access beyond end of device [ 268.517287][ T5247] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 268.531350][ T5247] kworker/u8:19: attempt to access beyond end of device [ 268.531350][ T5247] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 268.630427][ T8723] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 268.648624][ T8721] dummy0: entered promiscuous mode [ 268.789822][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1503'. [ 269.090554][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 269.136715][ T8735] netlink: 'syz.3.1512': attribute type 3 has an invalid length. [ 269.170376][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.308079][ T8747] x_tables: duplicate underflow at hook 1 [ 269.322431][ T8745] loop3: detected capacity change from 0 to 128 [ 269.335823][ T8750] loop5: detected capacity change from 0 to 128 [ 269.603534][ T8752] loop4: detected capacity change from 0 to 512 [ 269.614457][ T8752] EXT4-fs: Ignoring removed orlov option [ 269.621007][ T8752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.628031][ T8752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.667467][ T8752] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 269.704418][ T8752] EXT4-fs (loop4): 1 truncate cleaned up [ 269.727353][ T8752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.941979][ T8762] loop3: detected capacity change from 0 to 128 [ 270.060683][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.173155][ T8772] loop2: detected capacity change from 0 to 128 [ 270.360593][ T8778] loop3: detected capacity change from 0 to 164 [ 270.416527][ T8778] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 270.635318][ T8784] loop5: detected capacity change from 0 to 1024 [ 270.661776][ T8784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.738830][ T8784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 270.880240][ T8784] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.898113][ T28] audit: type=1400 audit(1781663829.094:905): avc: denied { write } for pid=8783 comm="syz.5.1528" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 271.176385][ T8794] EXT4-fs: Ignoring removed orlov option [ 271.182680][ T8794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.189908][ T8794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.201148][ T8794] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 271.257827][ T8794] EXT4-fs (loop3): 1 truncate cleaned up [ 271.268218][ T8794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.303869][ T8784] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.1528: lblock 0 mapped to illegal pblock 0 (length 1) [ 271.398741][ T8800] sctp: [Deprecated]: syz.0.1531 (pid 8800) Use of int in max_burst socket option. [ 271.398741][ T8800] Use struct sctp_assoc_value instead [ 271.450456][ T28] audit: type=1400 audit(1781663829.644:906): avc: denied { execute } for pid=8799 comm="syz.0.1531" path="/309/bus" dev="tmpfs" ino=1691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 271.523165][ T28] audit: type=1400 audit(1781663829.714:907): avc: denied { connect } for pid=8801 comm="syz.2.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.557711][ T8802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.579569][ T8802] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.605445][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.627071][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.698774][ T8810] x_tables: duplicate underflow at hook 1 [ 272.060342][ T8822] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 272.428864][ T8819] bio_check_eod: 17804 callbacks suppressed [ 272.428951][ T8819] syz.4.1537: attempt to access beyond end of device [ 272.428951][ T8819] loop4: rw=0, sector=153, nr_sectors = 8 limit=128 [ 272.500031][ T8819] syz.4.1537: attempt to access beyond end of device [ 272.500031][ T8819] loop4: rw=0, sector=153, nr_sectors = 8 limit=128 [ 272.544962][ T8819] syz.4.1537: attempt to access beyond end of device [ 272.544962][ T8819] loop4: rw=0, sector=153, nr_sectors = 8 limit=128 [ 272.591672][ T8819] syz.4.1537: attempt to access beyond end of device [ 272.591672][ T8819] loop4: rw=0, sector=153, nr_sectors = 8 limit=128 [ 272.607933][ T8755] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 272.638308][ T8819] syz.4.1537: attempt to access beyond end of device [ 272.638308][ T8819] loop4: rw=0, sector=153, nr_sectors = 8 limit=128 [ 272.651691][ T8819] syz.4.1537: attempt to access beyond end of device [ 272.651691][ T8819] loop4: rw=0, sector=153, nr_sectors = 8 limit=128 [ 272.665107][ T8819] syz.4.1537: attempt to access beyond end of device [ 272.665107][ T8819] loop4: rw=0, sector=153, nr_sectors = 8 limit=128 [ 272.680989][ T8819] syz.4.1537: attempt to access beyond end of device [ 272.680989][ T8819] loop4: rw=0, sector=153, nr_sectors = 8 limit=128 [ 272.733386][ T8832] set_capacity_and_notify: 4 callbacks suppressed [ 272.733402][ T8832] loop4: detected capacity change from 0 to 512 [ 272.749054][ T8832] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 272.760429][ T8832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 272.771560][ T8832] System zones: 1-12 [ 272.776796][ T8832] EXT4-fs (loop4): 1 truncate cleaned up [ 272.783159][ T8832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.797917][ T28] audit: type=1400 audit(1781663830.994:908): avc: denied { write } for pid=8831 comm="syz.4.1542" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.930459][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 272.951806][ T8838] netlink: 'syz.2.1543': attribute type 3 has an invalid length. [ 273.078472][ T8840] loop2: detected capacity change from 0 to 1024 [ 273.089153][ T8840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.115350][ T8840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 273.128503][ T8840] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.145863][ T28] audit: type=1400 audit(1781663831.344:909): avc: denied { write } for pid=8839 comm="syz.2.1544" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.155736][ T8840] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1544: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.331062][ T8835] ================================================================== [ 273.339143][ T8835] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 273.346253][ T8835] [ 273.348558][ T8835] write to 0xffff88811b4d7c14 of 4 bytes by task 8832 on cpu 0: [ 273.356162][ T8835] xas_set_mark+0x12b/0x140 [ 273.360646][ T8835] __folio_start_writeback+0x16a/0x350 [ 273.366092][ T8835] ext4_bio_write_folio+0x5a2/0xa10 [ 273.371269][ T8835] mpage_process_page_bufs+0x487/0x600 [ 273.376709][ T8835] mpage_prepare_extent_to_map+0x79e/0xc00 [ 273.382499][ T8835] ext4_do_writepages+0x9e5/0x2720 [ 273.387592][ T8835] ext4_writepages+0x18f/0x300 [ 273.392359][ T8835] do_writepages+0x1b9/0x300 [ 273.396934][ T8835] file_write_and_wait_range+0x178/0x2f0 [ 273.402554][ T8835] mmb_fsync_noflush+0x48/0x140 [ 273.407387][ T8835] ext4_sync_file+0x1f2/0x6d0 [ 273.412048][ T8835] vfs_fsync_range+0xc5/0xe0 [ 273.416643][ T8835] ext4_buffered_write_iter+0x426/0x480 [ 273.422172][ T8835] ext4_file_write_iter+0x38e/0xef0 [ 273.427368][ T8835] iter_file_splice_write+0x6a0/0xa60 [ 273.432718][ T8835] direct_splice_actor+0x156/0x280 [ 273.437818][ T8835] splice_direct_to_actor+0x2f9/0x680 [ 273.443170][ T8835] do_splice_direct+0x119/0x1a0 [ 273.448000][ T8835] do_sendfile+0x37d/0x640 [ 273.452403][ T8835] __x64_sys_sendfile64+0x105/0x150 [ 273.457604][ T8835] x64_sys_call+0x2dc4/0x3020 [ 273.462262][ T8835] do_syscall_64+0x136/0x3c0 [ 273.466832][ T8835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.472704][ T8835] [ 273.475010][ T8835] read to 0xffff88811b4d7c14 of 4 bytes by task 8835 on cpu 1: [ 273.482550][ T8835] xas_find_marked+0x602/0x650 [ 273.487312][ T8835] filemap_get_folios_tag+0xf7/0x400 [ 273.492577][ T8835] filemap_fdatawait_range+0x88/0x1e0 [ 273.497943][ T8835] __writeback_single_inode+0xd6/0x660 [ 273.503388][ T8835] writeback_single_inode+0x16d/0x400 [ 273.508749][ T8835] sync_inode_metadata+0x6e/0xa0 [ 273.513681][ T8835] mmb_fsync_noflush+0xfa/0x140 [ 273.518513][ T8835] ext4_sync_file+0x1f2/0x6d0 [ 273.523177][ T8835] vfs_fsync_range+0xc5/0xe0 [ 273.527751][ T8835] ext4_buffered_write_iter+0x426/0x480 [ 273.533279][ T8835] ext4_file_write_iter+0x38e/0xef0 [ 273.538457][ T8835] iter_file_splice_write+0x6a0/0xa60 [ 273.543831][ T8835] direct_splice_actor+0x156/0x280 [ 273.548924][ T8835] splice_direct_to_actor+0x2f9/0x680 [ 273.554277][ T8835] do_splice_direct+0x119/0x1a0 [ 273.559108][ T8835] do_sendfile+0x37d/0x640 [ 273.563504][ T8835] __x64_sys_sendfile64+0x105/0x150 [ 273.568689][ T8835] x64_sys_call+0x2dc4/0x3020 [ 273.573350][ T8835] do_syscall_64+0x136/0x3c0 [ 273.577916][ T8835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.583788][ T8835] [ 273.586089][ T8835] value changed: 0x0a000021 -> 0x04000021 [ 273.591781][ T8835] [ 273.594082][ T8835] Reported by Kernel Concurrency Sanitizer on: [ 273.600209][ T8835] CPU: 1 UID: 0 PID: 8835 Comm: syz.4.1542 Not tainted syzkaller #0 PREEMPT(lazy) [ 273.609473][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.619507][ T8835] ================================================================== [ 273.648860][ T7149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 273.739904][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.000010][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.