last executing test programs: 2m0.882011789s ago: executing program 1 (id=386): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11001, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m56.74477703s ago: executing program 1 (id=396): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000040)={0x7, 0x67}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @empty, 0x8}, 0x1c) r4 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r4, &(0x7f0000000180)='q', 0x1, 0x100004) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x9}}, 0x10) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x78d9c8c660a6aed2, 0x2}}}, 0x17) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x43}, 0x1}}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)) 1m55.799930796s ago: executing program 1 (id=403): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f0000000100)={[{@auto_da_alloc}]}, 0x3, 0x46b, &(0x7f00000007c0)="$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") 1m55.747828669s ago: executing program 1 (id=404): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0xfc, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x20000040) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) close_range(0xffffffffffffffff, r1, 0x2) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x4, r2, 0x0, 0x0, 0x156e, 0x0, 0x3, r2}]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080c0) r5 = socket$kcm(0x2, 0x3, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="92588ff86cfe9eeb92b3a7b4afc82a137de86db0ec00005b017636000000e200000000066c805298", 0x28}], 0x1}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000002f4"], 0x44}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 1m55.374367063s ago: executing program 1 (id=410): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0x3ff}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x1beea, 0x9000, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x6f, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x7}, 0x104000, 0x2, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, &(0x7f00000001c0), 0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) close_range(r1, r1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020900000000000000baa014ec97142aaa00311054c23a60454fa6445b8b6dfe32f42387b6efbb58be6507ccabc5687ec3a7708a08c4d9ae49e1f0a2d033c25462d074f3a72335ecb34648d85b9c764ac5ef9cbc1844f55f10e4f6c04b9c2b4065c5a252752012b3977c28dd545a3b9185026cab4bd94e9fe49cd4614be94405e98f1d18cf8599fc787d62e678fee7ffbcbf6aa7ecad6ddced66601257a40a698c490b1e0d28e96888effdf50892eeee74c8c388b4b68080a686b43570ad5d8b13bebfd017ced788bdbc566479607da24d3c49a45821f049f3983c15ccd55a99c58dfea5d3d59f37578e158963771f9e62d1c682cb3defd7544fc18485a5154a463372568dd7ab67d627688e61eab6eeba5327c2d9098db98691d60a28b93fa37b1564b536b1f3aaecc2f723e05c449dfc272a6ebe8c4b0b9fc412ff35810b"], 0x10}}, 0x0) 1m55.1943576s ago: executing program 1 (id=411): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@private=0xa012101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x3, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r9, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r8, 0x407, 0x100004) write$eventfd(r8, &(0x7f0000000240), 0xffffff14) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f00000002c0)) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) 1m54.829156224s ago: executing program 32 (id=411): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@private=0xa012101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x3, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r9, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r8, 0x407, 0x100004) write$eventfd(r8, &(0x7f0000000240), 0xffffff14) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f00000002c0)) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) 19.551840858s ago: executing program 3 (id=981): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) 19.466621351s ago: executing program 3 (id=982): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {}, {@nojournal_checksum}, {@norecovery}, {@noload}, {@grpjquota}, {@noauto_da_alloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$eJzs3U1rG0cfAPD/ylLenOexAyG0PZRADk0JkWO7LykUkh5LGxpo76mwFRMsR8GSQ+wGmhyaSy8lFEppoPQD9N5j6Bfopwi0gVCCaQ+l4LLyylFsyW+RIyX6/WDtGe1KM6PZ/2pmV2IDGFjH0z+5iFcj4pskYqRlXT6ylcdXt1t+fHMqXZJYWfn0zyTOrXutJPs/nGVeiYhfv4o4ldtYbm1xabZUqZTns/xYfe7aWG1x6fSVudJMeaZ8dWJy8uzbkxPvvftO19r65sW/v//k/odnvz6x/N3PD4/cTeJ8HM7Wpe3qQhG3WjPHS/9mqUKcX7fheBcK6ydJryvArgxlcV6I9BgwEkNZ1AMvvy8jYgUYUIn4hwHVHAc05/Zdmge/MB59sDoB2tj+/Oq5kTjQmBsdWk6emhml893RLpSflvHLH/fupktsfh7i4BZ5gB25dTsizuTzG49/SXb8270zjZPHm1tfxqB9/kAv3U/HP8mtiA3xn1sb/0Sb8c9wm9jdja3jP/ewC8V0lI7/3m87/l07dI0OZbn/NcZ8heTylUr5TET8PyJORmF/mt/ses7Z5Qcrnda1jv/SJS2/ORbM6vEwv//p50yX6qVnaXOrR7cjXms7/k3W+j9p0//p+3Fxm2UcK997vdO6rdu/t1Z+inijbf8/uaKVbH59cqyxP4w194qN/rpz7LdO5fe6/Wn/H9q8/aNJ6/Xa2s7L+PHAP+VO63a7/+9LPmuk92WP3SjV6/PjEfuSj/PD6x+fePLcZr65fdr+kyfax/9m+386+fp8m+2/c/ROx037of+nd9T/O088+OiLHzqVv73+f6uROpk9sp3j33Yr+CzvHQAAAAAAAPSbXEQcjiRXXEvncsXi6vc7jsahXKVaq5+6XF24Oh2N38qORiHXvNI90vJ9iPHs+7DN/MS6/GREHImIb4cONvLFqWpluteNBwAAAAAAAAAAAAAAAAAAgD4x3OH3/6nfh3pdO2DPNW5ssL/XtQB6Yctb/nfjTk9AX9oy/oGX1s7j35kBeFn4/IfBJf5hcIl/GFzbjf/CyB5XBHjufP7D4BL/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FUXL1xIl5Xlxzen0vz09cWF2er109Pl2mxxbmGqOFWdv1acqVZnKuXiVHVuq9erVKvXxidi4cZYvVyrj9UWly7NVReu1i9dmSvNlC+VC8+lVQAAAAAAAAAAAAAAAAAAAPBiqS0uzZYqlfK8RMfEueiLauxlA1ft6un5fmmFRFcTPT4wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECL/wIAAP//AzIzTA==") r0 = open(&(0x7f0000000300)='./file1\x00', 0x8937e, 0xc1) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = open(0x0, 0x14f840, 0xa4) preadv2(r1, &(0x7f0000007f40)=[{&(0x7f0000001240)=""/4126, 0x100e}, {0x0, 0x36}], 0x2, 0x0, 0x3, 0xc) 19.220796851s ago: executing program 3 (id=985): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newchain={0x34, 0x64, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfffd}, {0x2, 0xffe0}, {0xf, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffbff}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x34}}, 0x44014) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 18.955303521s ago: executing program 3 (id=987): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x3110d1, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/521], 0x6, 0x2ca, &(0x7f0000001080)="$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") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x80101c, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0/../file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0x2, &(0x7f0000000680)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x8305, 0xeb, &(0x7f0000000380)=""/235, 0x40f00, 0x72, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0xfffffffd, 0xa, 0x9, 0xeb0}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x3, 0x1, 0x4, 0xa}, {0x3, 0x1, 0xd, 0xa}], 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) 18.881410924s ago: executing program 3 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newqdisc={0xec, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xbc, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x68, 0xd, "85fb02f352b681d3566c011dace0362db368f9787dbe92c45230fcca9c00d90865f30d9c53ccef8564098369a85821baf7ee612d34112ccfe4ba45631522022229378d473291bbe423ca32a6777ad0072096e78bb4e782d9d5e0c1bbdf06781e6be86cc9"}, @TCA_NETEM_DELAY_DIST={0x37, 0x2, "ce2b7239806574fd656bfbbed2884a38ee21b8c53d71dec277aff253639741496d3c117833ed96518cd0fddf754c6b14c383c8"}]}}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20048084}, 0x8080) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregset(0x4205, r8, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r8, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)='V6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00', 0x10}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000240)={[{@data_journal}, {@orlov}, {@jqfmt_vfsold}, {@data_err_ignore}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x3, 0x451, &(0x7f0000000b40)="$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") 16.40822872s ago: executing program 3 (id=991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00ff00000000850000002b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500bc7d202e0990"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x40000002, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "eead00000000000000f46d7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1add0a80939a8ebf07cb417308a3d40aa1c788df600"}, 0xd8) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000c, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x4}, 0x12, 0x1, 0x9, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r5, &(0x7f00000006c0)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) 16.276557825s ago: executing program 33 (id=991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x40000002, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "eead00000000000000f46d7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1add0a80939a8ebf07cb417308a3d40aa1c788df600"}, 0xd8) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000c, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x4}, 0x12, 0x1, 0x9, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r5, &(0x7f00000006c0)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) 7.845408584s ago: executing program 5 (id=1025): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00180011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 7.712598909s ago: executing program 5 (id=1026): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f00000019c0)={0xa, 0x4e20, 0x6, @mcast1, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000003e00)=ANY=[@ANYBLOB="140000000000000029"], 0x18}, 0x7ffffffb}], 0x1, 0x404c050) 7.614072373s ago: executing program 5 (id=1027): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11001, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.245407505s ago: executing program 4 (id=1030): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x8}}, 0x20) ptrace(0x10, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0x90, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xffff}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x264d3c53}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x40804) ptrace$setregset(0x4205, 0x0, 0x1, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000780)='./file1\x00', 0x0, 0x1140841, &(0x7f0000000180)={[{@nr_blocks={'nr_blocks', 0x3d, [0x25]}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, '-,'}}]}) stat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x9, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) fsmount(0xffffffffffffffff, 0x0, 0x7c) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x5, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000001}, 0x4000000) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x4, &(0x7f00000002c0)=[{0x0, 0x9, 0x4c, 0x7c7a78ba}, {0x2, 0x2, 0x93, 0x7}, {0x6d, 0x1, 0x7f, 0x9}, {0x0, 0x7, 0x10, 0x3}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./file1\x00', 0x8100, 0xa0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@base={0x3, 0x3efe6533, 0x0, 0x3, 0x1040a, 0xffffffffffffffff, 0xfffffc5e, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x9, 0x28, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x48322201}}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x78}, @alu={0x7, 0x1, 0x5, 0xb, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x98d983b16acd8364}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000880)=""/4096, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000018c0)={0x2, 0xb, 0x8001, 0xb2c6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000001a40)=[r6, r2, 0xffffffffffffffff, r2, r7, r8], &(0x7f0000001a80)=[{0x2, 0x1, 0x9, 0x7}, {0x5, 0x3, 0xc, 0x8}, {0x4, 0x3, 0x7d, 0x3}]}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) 5.12609939s ago: executing program 4 (id=1031): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x3, &(0x7f0000000500)=0x0) ppoll(&(0x7f0000000180)=[{r0, 0x104}], 0x1, 0x0, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3be2b02884f95c63, 0x0, 0x10000000000000}]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 4.942101697s ago: executing program 2 (id=1033): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x5, 0x5, 0x8003, 0xfffc, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x20000400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000360000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x8, r2}, 0x38) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x3, 0x5, 0x0, 0x6}, 0x2, 0x8000000000000000, 0x7f2d}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd2101000000000007010000f8ffffffb502020008000000b70300000000000085000000b500000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) 4.8600193s ago: executing program 2 (id=1035): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x88000cc, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) 4.666033818s ago: executing program 6 (id=1037): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11001, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.626260409s ago: executing program 5 (id=1038): socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x5) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, 0x0, 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gretap0\x00', 0x0}) pipe(&(0x7f0000000440)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0xd, 0x7f}}]}, 0x34}, 0x1, 0xf0ffffffffffff}, 0xc084) socket$can_raw(0x1d, 0x3, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/time_for_children\x00') 4.489835845s ago: executing program 5 (id=1039): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, 0x27, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x200480, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088018000c8014000b80080009000000000008000a"], 0x44}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$key(0xf, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="b6132c08d5cfc4e85f41c858fb1081573e24781a4a45ff586a", @ANYRES64=0x0], 0x20) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) fdatasync(r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002e000000180100002020753100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000009b00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 4.050058052s ago: executing program 4 (id=1040): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x40, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0xaae, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000000c0)={0x4, 0xfff, 0x4, 0x8fff, 0x0, 0xfeffffff}) 3.893017998s ago: executing program 0 (id=1041): pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) socket(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280062b90ccb315c29de0000290001002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xd4c, 0x8, 0x7f, 0xc6ce, 0xfd, "0020080700000900000000000000000100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0xa) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40047438, 0x110e22fff6) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08880a0000b00068000000889078ac1414bbac1414aafffe4e24004d90780100000004000000497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7da851525b16af17fe87acbae2ab0b233d01422d01cd53c3abe94331d0b7918724"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x0, 0x106, &(0x7f0000000dc0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000040)={[{@min_batch_time}]}, 0x30, 0x527, &(0x7f0000000200)="$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") chdir(0x0) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, 0x0, &(0x7f0000000040)) 3.0558125s ago: executing program 2 (id=1042): r0 = getpgrp(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x60, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x7, 0x300}}}]}}]}, 0x60}}, 0x110) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x0, r0, 0x6000) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x8, 0x0, 0x65c, 0x51ab0000, 0xffff0000, 0x9}) 2.930250166s ago: executing program 4 (id=1043): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x1, 0x8001, 0x6}) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/94) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x18}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf4, 0x80, 0x8, 0x2, 0x0, 0x0, 0xc0000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000300), 0x2}, 0x10040, 0x4, 0x80, 0x8, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x1) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f00000003c0)=0x1) r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x800) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000480)={0x12}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000004c0)={{0x0, 0x6, 0x401, 0x3, 0x4, 0x6, 0x6, 0x9, 0x0, 0x6, 0x7, 0x4bea, 0x9b8, 0x6, 0x8}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000014c0)={{r4, 0x400, 0xe, 0x0, 0x7fff, 0x8, 0x7fffffff, 0x80000001, 0x8, 0x10000, 0x3, 0x5, 0x8000000000000001, 0x1, 0x5}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001580)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000015c0)={0x53, 0xe3c2, 0xff00, {0x5de, 0x5}, {0x2, 0x3}, @ramp={0x6, 0x400, {0x1, 0x401, 0x3, 0x1}}}) r7 = syz_open_dev$usbmon(&(0x7f0000001600), 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000001680)={&(0x7f0000001640)=[0x0], 0x1, 0x1}) newfstatat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700), 0x800) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000001780)) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000017c0), &(0x7f0000001800)=0x8) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000001840)=0xa0, 0x2) syz_open_dev$usbfs(&(0x7f0000001880), 0x6, 0x80500) getpeername$qrtr(r6, &(0x7f00000018c0), &(0x7f0000001900)=0xc) socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet(r5, &(0x7f0000001940)="d3b8fd230547ffd81b08886b4c7683be", 0x10, 0x0, &(0x7f0000001980)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000019c0)) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x40001) 2.929852166s ago: executing program 2 (id=1044): r0 = socket(0xa, 0x3, 0xff) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c1c0003fdff000007000000000000645361d9e55c4ce19e5081dc00"], 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x8844) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80540, 0x1d4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0xf) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x84) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x9) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_rdma(0x10, 0x3, 0x14) r8 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f38, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xfff7fffffffffffd, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) socket$inet6(0xa, 0x3, 0x7) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r7, @ANYRES16=r5, @ANYRES16=r1, @ANYRES16=r8, @ANYRESHEX, @ANYRESHEX=r4, @ANYRES8=r2, @ANYRES8=r5, @ANYRES32=r5, @ANYRESHEX=r3], 0x5c}}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x84080, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000100)}, 0x103464, 0x9c6e, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000000fff}, 0x0, 0x2, 0xffffffffffffffff, 0x2) io_uring_setup(0x3a36, 0x0) capset(0x0, 0x0) msgget$private(0x0, 0x790) 2.652361977s ago: executing program 6 (id=1045): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000800000000000007cb40ba0db7b6c3919e34c07000000000000001bcd05a067eca769657359e01dad82855d60a550281e1e0aa93981de09967c1e09987bf0f4dce264e666f1bbb421bac8fc362b7f24cfb1d85f13b9884542070043c3f03dc9514b366e0152de49fec7786e0bd8ea9850adb44483fee937db1f8e852b34735b7abf1e546d109a2b1c631dc7793e47045ba840f69b2f4ff5562bb7e2d86240154523870890d32e3dfdbfea0d3032673be4e9a99bc383609cacebb2640b878a1106a9667740bec18cbe2fb5d75261c638f152d892297c9ce7782f75e2b569726d62921fdcdb11dc024a14ad6709df846c1d3ed810448e78d0f1ff116c7079d21cebc4a8adb97b6d803f3e5497a8dc0452e4417d88191680ff7b0884aa985db2ea7a2fe4ddb2c1375e702b18b84bf406801667ba40e30139bf68c7d39e6bdbcc309e6dcbd1eb454a21b1555bbfd011e0d6f15b3dc4fcc6acd098d723889ede186b11"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f00000003c0)={&(0x7f00000002c0)=""/116, 0x74}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400000000000000ad9108fd44a3bff99875eebb"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 2.618385278s ago: executing program 6 (id=1046): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@quota}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000c00)="$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") 2.517964872s ago: executing program 6 (id=1047): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {}, {@nojournal_checksum}, {@norecovery}, {@noload}, {@grpjquota}, {@noauto_da_alloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$eJzs3U1rG0cfAPD/ylLenOexAyG0PZRADk0JkWO7LykUkh5LGxpo76mwFRMsR8GSQ+wGmhyaSy8lFEppoPQD9N5j6Bfopwi0gVCCaQ+l4LLyylFsyW+RIyX6/WDtGe1KM6PZ/2pmV2IDGFjH0z+5iFcj4pskYqRlXT6ylcdXt1t+fHMqXZJYWfn0zyTOrXutJPs/nGVeiYhfv4o4ldtYbm1xabZUqZTns/xYfe7aWG1x6fSVudJMeaZ8dWJy8uzbkxPvvftO19r65sW/v//k/odnvz6x/N3PD4/cTeJ8HM7Wpe3qQhG3WjPHS/9mqUKcX7fheBcK6ydJryvArgxlcV6I9BgwEkNZ1AMvvy8jYgUYUIn4hwHVHAc05/Zdmge/MB59sDoB2tj+/Oq5kTjQmBsdWk6emhml893RLpSflvHLH/fupktsfh7i4BZ5gB25dTsizuTzG49/SXb8270zjZPHm1tfxqB9/kAv3U/HP8mtiA3xn1sb/0Sb8c9wm9jdja3jP/ewC8V0lI7/3m87/l07dI0OZbn/NcZ8heTylUr5TET8PyJORmF/mt/ses7Z5Qcrnda1jv/SJS2/ORbM6vEwv//p50yX6qVnaXOrR7cjXms7/k3W+j9p0//p+3Fxm2UcK997vdO6rdu/t1Z+inijbf8/uaKVbH59cqyxP4w194qN/rpz7LdO5fe6/Wn/H9q8/aNJ6/Xa2s7L+PHAP+VO63a7/+9LPmuk92WP3SjV6/PjEfuSj/PD6x+fePLcZr65fdr+kyfax/9m+386+fp8m+2/c/ROx037of+nd9T/O088+OiLHzqVv73+f6uROpk9sp3j33Yr+CzvHQAAAAAAAPSbXEQcjiRXXEvncsXi6vc7jsahXKVaq5+6XF24Oh2N38qORiHXvNI90vJ9iPHs+7DN/MS6/GREHImIb4cONvLFqWpluteNBwAAAAAAAAAAAAAAAAAAgD4x3OH3/6nfh3pdO2DPNW5ssL/XtQB6Yctb/nfjTk9AX9oy/oGX1s7j35kBeFn4/IfBJf5hcIl/GFzbjf/CyB5XBHjufP7D4BL/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FUXL1xIl5Xlxzen0vz09cWF2er109Pl2mxxbmGqOFWdv1acqVZnKuXiVHVuq9erVKvXxidi4cZYvVyrj9UWly7NVReu1i9dmSvNlC+VC8+lVQAAAAAAAAAAAAAAAAAAAPBiqS0uzZYqlfK8RMfEueiLauxlA1ft6un5fmmFRFcTPT4wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECL/wIAAP//AzIzTA==") r0 = open(&(0x7f0000000300)='./file1\x00', 0x8937e, 0xc1) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r1, &(0x7f0000007f40)=[{&(0x7f0000001240)=""/4126, 0x101e}], 0x1, 0x0, 0x3, 0xc) 2.479869223s ago: executing program 6 (id=1048): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11001, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.433001604s ago: executing program 2 (id=1049): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f00000000c0), 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000e0000000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000047010000f8ffffffb702000008000000b703e8ff00000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0xe5a4004e3b8d1f63, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000001000000000000000000007110bf000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.432485474s ago: executing program 0 (id=1050): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = io_uring_setup(0xfd2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000020000000000e804260108000000000000000012030000000061612e00"], 0x0, 0x35, 0x0, 0x1}, 0x28) unshare(0x22020400) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000003680), 0x20200, 0x0) keyctl$clear(0x7, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x6e20, @empty}, @ib={0x1b, 0x8, 0x0, {"044000"}, 0x0, 0x0, 0x3ff}}}, 0x118) 1.386034216s ago: executing program 5 (id=1051): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@private=0xa012101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x3, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x88000cc, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f00000002c0)) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) 937.845153ms ago: executing program 0 (id=1052): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x400}, 0x8) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x1, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x47, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000007c0)={0x1, 0x0, 0x1c, 0x17, 0x15d, &(0x7f00000003c0)}) fstat(r1, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x101, 0x2, 0x4}}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x85) sync() setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYBLOB="07007000eec16efc66d3ce54704bcd6a3eb59de54e178f7d0897b4d1dca997386f3a39bbd9d3e19ec431804589bf9aab8a4963fe4503ad7bc934b35cd0dcb4d689438cfef6f1de242e2a0b72b385a5a610defe9eaeab74ee1b0ef3e6e1a5701e958d6639e88fc6c516f7373afa08180240725075499b0f3fc400"/132], 0x78) pread64(r3, &(0x7f0000000340)=""/245, 0xf5, 0x4) write$rfkill(r4, &(0x7f0000000240)={0x1, 0x3, 0x2, 0x1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) 568.647587ms ago: executing program 4 (id=1053): perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x80000, 0x0, 0x7, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x30000004}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = msgget$private(0x0, 0x208) msgsnd(r5, &(0x7f0000002880)=ANY=[@ANYBLOB="01"], 0x8, 0x800) msgrcv(r5, &(0x7f0000000440)={0x0, ""/263}, 0xffffff09, 0xced6b2bc496a26e6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e20, 0x8, 0x4e22, 0x4206, 0xa, 0x40, 0x80, 0x2f, r6, r7}, {0x3, 0xfff, 0x6, 0x2115b9e1, 0x500, 0xf25, 0xfff, 0x6}, {0x9, 0x6, 0x3ff, 0x816b}, 0x13600000, 0x6e6bbf, 0x0, 0x1, 0x0, 0x3}, {{@in=@broadcast, 0x4d2, 0x33}, 0xa, @in6=@loopback, 0x34ff, 0x3, 0x0, 0x9, 0x62, 0x400, 0x9}}, 0xe8) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffee0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x4000000) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xfffd, @empty}}, 0x24) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000003c0)={0x18, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040001}, 0x2400c000) close_range(r0, 0xffffffffffffffff, 0x0) 468.627332ms ago: executing program 0 (id=1054): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d9", 0x0, 0x0, 0x8000}, 0x50) socket$kcm(0x2, 0x1, 0x84) (async) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x160, 0x4c, 0x1a, 0x0, 0x73, 0x250, 0x258, 0x258, 0x250, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x5, 0x576, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x380) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x160, 0x4c, 0x1a, 0x0, 0x73, 0x250, 0x258, 0x258, 0x250, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x5, 0x576, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x380) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x28, 0x3, 0x5c}, 0x2c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) rseq(0x0, 0x0, 0x0, 0x0) (async) rseq(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) (async) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(0x0, r7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14, r8, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x8000) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000019c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000001ac0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x50, r9, 0x9d292b3bf99534c1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000004c0)={0x4a0, r6, 0x5a697397f1c7a8af, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x154, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4ebc8eb31be12cf5592cdc14b23a4b4a33083733dc7b0f0c46738e6e29271489"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "427dc138d97e55784535441071fcbe625fbd589d4844d1d7ee2107619d9cc0bd"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4c2077a0f300fb130548cb5f5f2e71ce8fcf51a2af22a1706ff523e6d88fa314"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "35185b9e8b7d0b15d97713cd39c3d830"}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3c6b}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2ac173377e267ecc21f578126f53698cbf175909a919f55ba7d8e4b22eace93b"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x114, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xbb}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b8e9d7f97ecfa7a144bf299cdd3b097b33e467d3a5b4aa231cda087ffd6cb3fc"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6f196d5b3d4f02af8946e61dd7bbf94ac5320988d5a29cbe02c420656154b22c"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4fe75500e78af273542758593168d87105a4aa14b88a32bc391d1a58ae7effe4"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9785d0a730b8f88339f221ed6bbfad6f31dd8d17e23a0792bcd5691089b70096"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9f01dc054b40a0eacf6b5006ba0c32954201f547af04d25669b8e15239d3b78e"}]}, @NL802154_ATTR_SEC_KEY={0x124, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9a48110735ea7a8078b12554efd0be208ee0ff7e38f24197fed39af16b4330b5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9cddb6d38d50449094ce7370ad373950143aa2198edd5328b611acf34ddca75e"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8591e3b3641138d22cb3878c89e85dbba1c98f7fb873db1def279bbf55edd6d4"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5ef1b7060161b5bea6e5fb86384b5561"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "602c1bb96e68622fee572be2f0bee09f"}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8e2b868aec7c5b8d9240efd7dff6992ee07e845ce009f7f2e1ae2db72941e616"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_SEC_KEY={0xec, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8a1867edb153b32cadb599b9f24a3cc9"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "870478f99b35936a85c40b4173c8727a68b288d689570f2620664b373cbbe557"}, @NL802154_KEY_ATTR_ID={0x98, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4936}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x5555555555550081}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8010) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x5555555555550081}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8010) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r4, @ANYBLOB="4d7e00000000ffdbdf252e00000008002f000000000005003700010000000c0005005702aaaaaaaaaaaa050036007e0000000a0001007770616e30"], 0x44}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x4044) 421.979784ms ago: executing program 2 (id=1055): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11001, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 224.443241ms ago: executing program 4 (id=1056): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}, 0x1, 0x300}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x19, &(0x7f0000000000), 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2600018, &(0x7f0000000300), 0x3, 0x5a8, &(0x7f0000000a40)="$eJzs3U1rG0cfAPD/ynLenycOhND2UAw5NCWNHNt9SaGQ9Fja0EB7T4WtmGA5CpYcYjeQ5NBceimhUEoDpR+g9x5Dv0C/Qi+BNhBKMO0hF5WVV7EiW7Yli9i1fj9YeWZ35dn/7sxoVrtiAxhYo+lLLuLViPgmiTjasiwf2cLRlfWWn96aSqck6vXP/koiyeY110+yv4ezzCsR8etXEadza8utLi7NFsvl0nyWH6vNXR+rLi6duTpXnCnNlK5NTE6ee2dy4v333u1brG9e+uf7Tx9+dO7rk8vf/fz42P0kLsSRbFkzjoPbK+JOa2Y0RrN9MhwX2lYc3145u06y0xtAT4aydj4caR9wNIayVg/sfbcjog4MqET7hwHVHAc0z+1bz+cHwZMPV06A1safX/luJA7sT18PLScvnBml57sjfSg/LeOXPx/cT6do+z6l3e0Xs0N9KB4YYHfuRsTZfH5t/5dk/V/vzja+PN5YexmD9vkDO+lhOv55a73xT645/mm8to9/Dq/TdnuxefvPPW5bJenntYZ0/PfBuuPf513XyFCW+19jzDecXLlaLp2NiP9HxKkY3p/mN7qec275Ub3TstbxXzql5TfHgtl2PM7vf/E908VacTsxt3pyN+K11fFvEmv6/wONsW778U/3x6UtlnGi9OD1Tss2j7/V7a0HtkX1nyLeWPf4r9ayZOPrk2ON+jDWrBVr/X3vxG+dyu8u/v57cnelom8Q/0jSer222n0ZPx54Vuq0rNf6vy/5vJHetzLrWb1Yq82PR+xLPmmdHzfT+ROr723mb2brp/X/1MmN+7/16v/BiPhii/HfO36v46rdHv9tXp9eI41/uqvj333i0cdf/tB7/Onxf7uROpXN2Ur/t9UN3M6+AwAAAAAAgN0mFxFHIskVnqdzuUJh5f6O43EoV65Ua6evVBauTUfjt7IjMZxrXuk+2nI/xHh2P2wzP9GWn4yIYxHx7dDBRr4wVSlP73TwAAAAAAAAAAAAAAAAAAAAsEsc7vD7/9QfnjAFe59HfsPg2rT99+NJT8Cu1KH99/9pW8CuY/wPg0v7h8HVaP8dH9EJ7GU+/2Fw9dD+3RoAe4TPfxhc+biz05sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe8mlixfTqb789NZUmp++sbgwW7lxZrpUnS3MLUwVpirz1wszlcpMuVSYqsxt9v/Klcr18YlYuDlWK1VrY9XFpctzlYVrtctX54ozpcul4ZcSFQAAAAAAAAAAAAAAAAAAAPy3VBeXZovlcmm+q8Tv0cu7VhO5bZX+shPnY1dsRs+JZLP9fD47HD0Vkd/5ACW6Swxlx3vDlXeoQwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdfwbAAD//39JMAE=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x7a680000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660abe8d6be30000000000000000c8ecdd4f576602"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x200, 0x3, 0x100}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) faccessat(r3, &(0x7f0000000040)='./file1\x00', 0x15) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@newlink={0xfc, 0x10, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x10800, 0x12001}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_PROP_LIST={0xcc, 0x34, 0x0, 0x1, [{0x14, 0x35, 'gre0\x00'}, {0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'bridge_slave_1\x00'}, {0x14, 0x35, 'geneve0\x00'}, {0x14, 0x35, 'macsec0\x00'}, {0x14, 0x35, 'wg1\x00'}, {0x14, 0x35, 'team0\x00'}, {0x14, 0x35, 'batadv_slave_1\x00'}, {0x14}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x15) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {0x0, 0x9}, {0xe, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x9, 0xff, 0x30, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 184.294463ms ago: executing program 0 (id=1057): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 20.454629ms ago: executing program 0 (id=1058): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {}, {@nojournal_checksum}, {@norecovery}, {@noload}, {@grpjquota}, {@noauto_da_alloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000300)='./file1\x00', 0x8937e, 0xc1) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r1, &(0x7f0000007f40)=[{&(0x7f0000001240)=""/4126, 0x101e}], 0x1, 0x0, 0x3, 0xc) 0s ago: executing program 6 (id=1059): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x400}, 0x8) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x1, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x47, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000007c0)={0x1, 0x0, 0x1c, 0x17, 0x15d, &(0x7f00000003c0)}) fstat(r1, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x101, 0x2, 0x4}}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x85) sync() setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYBLOB="07007000eec16efc66d3ce54704bcd6a3eb59de54e178f7d0897b4d1dca997386f3a39bbd9d3e19ec431804589bf9aab8a4963fe4503ad7bc934b35cd0dcb4d689438cfef6f1de242e2a0b72b385a5a610defe9eaeab74ee1b0ef3e6e1a5701e958d6639e88fc6c516f7373afa08180240725075499b0f3fc400"/132], 0x78) pread64(r3, &(0x7f0000000340)=""/245, 0xf5, 0x4) write$rfkill(r4, &(0x7f0000000240)={0x1, 0x3, 0x2, 0x1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.322879][ T28] audit: type=1400 audit(1780883446.967:1049): avc: denied { write } for pid=3303 comm="syz-executor" name="126" dev="tmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 168.323032][ T28] audit: type=1400 audit(1780883446.967:1050): avc: denied { remove_name } for pid=3303 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 168.324982][ T6148] loop0: detected capacity change from 0 to 128 [ 168.369051][ T6148] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.473438][ T6148] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.505921][ T6151] loop5: detected capacity change from 0 to 2048 [ 168.522976][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.537531][ T6151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.608039][ T6151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.621126][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.639399][ T6153] loop3: detected capacity change from 0 to 8192 [ 168.649576][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.670125][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.759830][ T6166] loop0: detected capacity change from 0 to 512 [ 169.766850][ T6166] EXT4-fs: Ignoring removed orlov option [ 169.772673][ T6166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.779386][ T6166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.794348][ T6166] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 169.815763][ T6166] EXT4-fs (loop0): 1 truncate cleaned up [ 169.822934][ T6166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.035201][ T6157] veth0_vlan: left promiscuous mode [ 170.045496][ T6157] veth0_vlan: entered promiscuous mode [ 170.259143][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.535601][ T6202] loop3: detected capacity change from 0 to 512 [ 170.988436][ T6216] FAULT_INJECTION: forcing a failure. [ 170.988436][ T6216] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 171.032037][ T6216] CPU: 1 UID: 0 PID: 6216 Comm: syz.0.600 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 171.032114][ T6216] Tainted: [W]=WARN [ 171.032123][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.032140][ T6216] Call Trace: [ 171.032149][ T6216] [ 171.032239][ T6216] __dump_stack+0x1d/0x30 [ 171.032269][ T6216] dump_stack_lvl+0x95/0xd0 [ 171.032295][ T6216] dump_stack+0x15/0x1b [ 171.032315][ T6216] should_fail_ex+0x263/0x280 [ 171.032335][ T6216] should_fail_alloc_page+0xf2/0x100 [ 171.032382][ T6216] __alloc_frozen_pages_noprof+0x108/0x350 [ 171.032416][ T6216] alloc_pages_mpol+0xb3/0x260 [ 171.032447][ T6216] folio_alloc_noprof+0x96/0x150 [ 171.032523][ T6216] filemap_alloc_folio_noprof+0x92/0x220 [ 171.032565][ T6216] __filemap_get_folio_mpol+0x295/0x680 [ 171.032623][ T6216] aio_setup_ring+0x25d/0x740 [ 171.032691][ T6216] ioctx_alloc+0x2a9/0x4c0 [ 171.032719][ T6216] ? fput+0x8f/0xc0 [ 171.032737][ T6216] __se_sys_io_setup+0x6b/0x1b0 [ 171.032764][ T6216] __x64_sys_io_setup+0x31/0x40 [ 171.032789][ T6216] x64_sys_call+0x24f1/0x3020 [ 171.032831][ T6216] do_syscall_64+0x12c/0x3b0 [ 171.032969][ T6216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.033056][ T6216] RIP: 0033:0x7f1b9b58ce59 [ 171.033074][ T6216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.033097][ T6216] RSP: 002b:00007f1b99fdf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 171.033120][ T6216] RAX: ffffffffffffffda RBX: 00007f1b9b805fa0 RCX: 00007f1b9b58ce59 [ 171.033138][ T6216] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000002 [ 171.033151][ T6216] RBP: 00007f1b99fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 171.033194][ T6216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.033209][ T6216] R13: 00007f1b9b806038 R14: 00007f1b9b805fa0 R15: 00007ffe2104d388 [ 171.033229][ T6216] [ 171.161423][ T6194] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 171.775730][ T6231] FAULT_INJECTION: forcing a failure. [ 171.775730][ T6231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.776118][ T6231] CPU: 0 UID: 0 PID: 6231 Comm: syz.2.608 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 171.776153][ T6231] Tainted: [W]=WARN [ 171.776160][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.776176][ T6231] Call Trace: [ 171.776183][ T6231] [ 171.776210][ T6231] __dump_stack+0x1d/0x30 [ 171.776234][ T6231] dump_stack_lvl+0x95/0xd0 [ 171.776258][ T6231] dump_stack+0x15/0x1b [ 171.776324][ T6231] should_fail_ex+0x263/0x280 [ 171.776442][ T6231] should_fail+0xb/0x20 [ 171.776460][ T6231] should_fail_usercopy+0x1a/0x20 [ 171.776489][ T6231] _copy_to_user+0x20/0xa0 [ 171.776515][ T6231] simple_read_from_buffer+0xb5/0x130 [ 171.776610][ T6231] proc_fail_nth_read+0x10e/0x150 [ 171.776716][ T6231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.776786][ T6231] vfs_read+0x1ab/0x7f0 [ 171.776859][ T6231] ? __rcu_read_unlock+0x4e/0x70 [ 171.776879][ T6231] ? __fget_files+0x184/0x1c0 [ 171.776960][ T6231] ? mutex_lock+0x57/0x90 [ 171.776985][ T6231] ksys_read+0xdc/0x1a0 [ 171.777018][ T6231] __x64_sys_read+0x40/0x50 [ 171.777054][ T6231] x64_sys_call+0x2886/0x3020 [ 171.777118][ T6231] do_syscall_64+0x12c/0x3b0 [ 171.777153][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.777176][ T6231] RIP: 0033:0x7f89358dd68e [ 171.777195][ T6231] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.777260][ T6231] RSP: 002b:00007f893436efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.777283][ T6231] RAX: ffffffffffffffda RBX: 00007f893436f6c0 RCX: 00007f89358dd68e [ 171.777301][ T6231] RDX: 000000000000000f RSI: 00007f893436f0a0 RDI: 0000000000000004 [ 171.777317][ T6231] RBP: 00007f893436f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.777349][ T6231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.777366][ T6231] R13: 00007f8935b96038 R14: 00007f8935b95fa0 R15: 00007ffc6fd5f9e8 [ 171.777391][ T6231] [ 173.251166][ T6242] loop5: detected capacity change from 0 to 1024 [ 173.260692][ T6242] EXT4-fs: Ignoring removed bh option [ 173.278229][ T6242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.309075][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 173.309102][ T28] audit: type=1400 audit(1780883452.047:1065): avc: denied { write } for pid=6240 comm="syz.5.611" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.362701][ T28] audit: type=1400 audit(1780883452.107:1066): avc: denied { map } for pid=6240 comm="syz.5.611" path="/34/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.363654][ T28] audit: type=1400 audit(1780883452.107:1067): avc: denied { execute } for pid=6240 comm="syz.5.611" path="/34/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.466243][ T6247] loop2: detected capacity change from 0 to 128 [ 173.728639][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.816444][ T6261] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7 sclass=netlink_xfrm_socket pid=6261 comm=syz.5.614 [ 174.039561][ T6263] loop3: detected capacity change from 0 to 512 [ 174.059133][ T6263] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.073717][ T6271] loop4: detected capacity change from 0 to 512 [ 174.080449][ T6271] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.254817][ T6271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.364512][ T6271] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.409429][ T28] audit: type=1400 audit(1780883453.147:1068): avc: denied { append } for pid=6279 comm="syz.5.623" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 174.437978][ T6281] vhci_hcd vhci_hcd.0: invalid port number 0 [ 174.682163][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.705844][ T6284] loop3: detected capacity change from 0 to 1024 [ 174.745867][ T6284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.815073][ T28] audit: type=1400 audit(1780883453.547:1069): avc: denied { write } for pid=6283 comm="syz.3.625" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.871937][ T28] audit: type=1400 audit(1780883453.607:1070): avc: denied { ioctl } for pid=6283 comm="syz.3.625" path="/102/file1/file1" dev="loop3" ino=15 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.927468][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.997897][ T6295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.627'. [ 175.018517][ T6297] loop3: detected capacity change from 0 to 512 [ 175.024871][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.627'. [ 175.033770][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.627'. [ 175.047843][ T6297] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.063699][ T6297] EXT4-fs (loop3): 1 truncate cleaned up [ 175.069961][ T6297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.092685][ T28] audit: type=1400 audit(1780883453.837:1071): avc: denied { write } for pid=6296 comm="syz.3.626" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.132409][ T28] audit: type=1400 audit(1780883453.857:1072): avc: denied { write } for pid=6296 comm="syz.3.626" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.145198][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.155677][ T28] audit: type=1400 audit(1780883453.857:1073): avc: denied { write } for pid=6296 comm="syz.3.626" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.186390][ T28] audit: type=1400 audit(1780883453.857:1074): avc: denied { write } for pid=6296 comm="syz.3.626" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.314760][ T6308] netlink: 'syz.4.630': attribute type 3 has an invalid length. [ 175.322703][ T6308] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.630'. [ 175.573869][ T6325] loop5: detected capacity change from 0 to 1024 [ 175.589863][ T6325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.743582][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.854055][ T6343] loop5: detected capacity change from 0 to 256 [ 175.854338][ T6339] 9p: Could not find request transport: f [ 175.867236][ T6343] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.879158][ T6343] netlink: 'syz.5.641': attribute type 21 has an invalid length. [ 175.887013][ T6343] netlink: 'syz.5.641': attribute type 6 has an invalid length. [ 175.894999][ T6343] netlink: 132 bytes leftover after parsing attributes in process `syz.5.641'. [ 176.060913][ T6351] tipc: Enabled bearer , priority 0 [ 176.074801][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 176.265886][ T6359] loop2: detected capacity change from 0 to 512 [ 176.318756][ T6366] loop0: detected capacity change from 0 to 1024 [ 176.344384][ T6366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.359153][ T6359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.406814][ T6373] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.420434][ T6359] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.471365][ T6373] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.498597][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.548320][ T6373] FAULT_INJECTION: forcing a failure. [ 176.548320][ T6373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.552480][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.565115][ T6373] CPU: 1 UID: 0 PID: 6373 Comm: syz.3.649 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 176.565217][ T6373] Tainted: [W]=WARN [ 176.565239][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 176.565280][ T6373] Call Trace: [ 176.565309][ T6373] [ 176.565331][ T6373] __dump_stack+0x1d/0x30 [ 176.565425][ T6373] dump_stack_lvl+0x95/0xd0 [ 176.565495][ T6373] dump_stack+0x15/0x1b [ 176.565561][ T6373] should_fail_ex+0x263/0x280 [ 176.565634][ T6373] should_fail+0xb/0x20 [ 176.565699][ T6373] should_fail_usercopy+0x1a/0x20 [ 176.565834][ T6373] strncpy_from_user+0x27/0x250 [ 176.565932][ T6373] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 176.566060][ T6373] do_getname+0x59/0x1c0 [ 176.566121][ T6373] getname_flags+0x1d/0x30 [ 176.566174][ T6373] do_sys_openat2+0x60/0x130 [ 176.566255][ T6373] __x64_sys_openat+0xf2/0x120 [ 176.566326][ T6373] x64_sys_call+0x1e39/0x3020 [ 176.566559][ T6373] do_syscall_64+0x12c/0x3b0 [ 176.566660][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.566767][ T6373] RIP: 0033:0x7f1ea192ce59 [ 176.566842][ T6373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.566895][ T6373] RSP: 002b:00007f1ea037f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.566955][ T6373] RAX: ffffffffffffffda RBX: 00007f1ea1ba5fa0 RCX: 00007f1ea192ce59 [ 176.567004][ T6373] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 176.567063][ T6373] RBP: 00007f1ea037f090 R08: 0000000000000000 R09: 0000000000000000 [ 176.567126][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.567178][ T6373] R13: 00007f1ea1ba6038 R14: 00007f1ea1ba5fa0 R15: 00007fff60bef548 [ 176.567239][ T6373] [ 179.529941][ T6409] netlink: 76 bytes leftover after parsing attributes in process `syz.2.659'. [ 179.648039][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 179.648068][ T28] audit: type=1400 audit(1780883458.387:1082): avc: denied { ioctl } for pid=6407 comm="syz.2.659" path="socket:[12849]" dev="sockfs" ino=12849 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 180.063321][ T28] audit: type=1400 audit(1780883458.797:1083): avc: denied { shutdown } for pid=6408 comm="syz.5.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.795337][ T28] audit: type=1400 audit(1780883458.797:1084): avc: denied { connect } for pid=6408 comm="syz.5.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.794980][ T6432] set_capacity_and_notify: 1 callbacks suppressed [ 181.795032][ T6432] loop3: detected capacity change from 0 to 256 [ 181.931662][ T28] audit: type=1400 audit(1780883460.667:1085): avc: denied { read } for pid=6429 comm="syz.3.666" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 182.186637][ T6442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.669'. [ 182.198450][ T6442] loop0: detected capacity change from 0 to 512 [ 182.627354][ T6442] EXT4-fs (loop0): 1 orphan inode deleted [ 182.645343][ T6442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.727651][ T6442] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 182.741385][ T6442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.993975][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.029153][ T6458] netlink: 'syz.0.673': attribute type 16 has an invalid length. [ 183.048701][ T6458] netlink: 'syz.0.673': attribute type 3 has an invalid length. [ 183.071775][ T6458] netlink: 'syz.0.673': attribute type 1 has an invalid length. [ 183.081909][ T6458] netlink: 112 bytes leftover after parsing attributes in process `syz.0.673'. [ 183.091209][ T6462] loop5: detected capacity change from 0 to 256 [ 183.122990][ T6463] loop0: detected capacity change from 0 to 1024 [ 183.149261][ T6463] EXT4-fs: Ignoring removed orlov option [ 183.166516][ T6463] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 183.182936][ T6463] System zones: 0-1, 3-12 [ 183.193224][ T6463] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.205225][ T28] audit: type=1400 audit(1780883461.937:1086): avc: denied { ioctl } for pid=6468 comm="syz.3.676" path="socket:[13489]" dev="sockfs" ino=13489 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 183.233958][ T28] audit: type=1400 audit(1780883461.977:1087): avc: denied { write } for pid=6457 comm="syz.0.673" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.308965][ T28] audit: type=1400 audit(1780883461.997:1088): avc: denied { write } for pid=6457 comm="syz.0.673" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.341210][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 183.350513][ T28] audit: type=1400 audit(1780883462.007:1089): avc: denied { write } for pid=6457 comm="syz.0.673" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.373318][ T28] audit: type=1400 audit(1780883462.007:1090): avc: denied { rmdir } for pid=6457 comm="syz.0.673" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 183.633804][ T6481] loop2: detected capacity change from 0 to 1024 [ 183.654385][ T6481] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 183.715114][ T6484] netlink: 452 bytes leftover after parsing attributes in process `syz.2.681'. [ 183.724317][ T6484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.681'. [ 183.756524][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 183.776970][ T6484] bridge_slave_1: left allmulticast mode [ 183.788831][ T6484] bridge_slave_1: left promiscuous mode [ 183.797413][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.807732][ T6484] bridge_slave_0: left allmulticast mode [ 183.813989][ T6484] bridge_slave_0: left promiscuous mode [ 183.826955][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.839490][ T6486] loop0: detected capacity change from 0 to 256 [ 183.898077][ T6486] FAT-fs (loop0): codepage cp936 not found [ 183.921856][ T28] audit: type=1400 audit(1780883462.657:1091): avc: denied { mounton } for pid=6485 comm="syz.0.682" path="/proc/496/task" dev="proc" ino=13508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 187.403449][ T6504] loop3: detected capacity change from 0 to 512 [ 187.411823][ T6504] EXT4-fs: Ignoring removed orlov option [ 187.417590][ T6504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.424573][ T6504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.490548][ T6504] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.509834][ T6511] loop0: detected capacity change from 0 to 512 [ 187.524679][ T6511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.531937][ T6504] EXT4-fs (loop3): 1 truncate cleaned up [ 187.539212][ T6504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.636463][ T6511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.887327][ T6511] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.947465][ T28] audit: type=1400 audit(1780883466.677:1092): avc: denied { write } for pid=6506 comm="syz.0.687" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.994786][ T6508] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 188.159926][ T6508] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 188.199609][ T6508] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.687: Failed to acquire dquot type 1 [ 188.234295][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.549399][ T6540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.675921][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.860384][ T6544] loop0: detected capacity change from 0 to 512 [ 188.868009][ T6544] EXT4-fs: Ignoring removed orlov option [ 188.874137][ T6544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.880906][ T6544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.022114][ T6544] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 189.038246][ T6544] EXT4-fs (loop0): 1 truncate cleaned up [ 189.045468][ T6544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.329379][ T6542] loop3: detected capacity change from 0 to 128 [ 189.390730][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.442390][ T6560] netlink: 132 bytes leftover after parsing attributes in process `syz.0.701'. [ 189.538570][ T6562] loop0: detected capacity change from 0 to 1024 [ 189.549013][ T6562] EXT4-fs: Ignoring removed orlov option [ 189.556368][ T6562] EXT4-fs: Ignoring removed orlov option [ 189.562344][ T6562] EXT4-fs: inline encryption not supported [ 189.586850][ T6562] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 189.746888][ T6542] bio_check_eod: 88 callbacks suppressed [ 189.747093][ T6542] syz.3.697: attempt to access beyond end of device [ 189.747093][ T6542] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 189.769638][ T6542] syz.3.697: attempt to access beyond end of device [ 189.769638][ T6542] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 189.786363][ T6542] syz.3.697: attempt to access beyond end of device [ 189.786363][ T6542] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 189.806031][ T6542] syz.3.697: attempt to access beyond end of device [ 189.806031][ T6542] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 189.855135][ T6542] syz.3.697: attempt to access beyond end of device [ 189.855135][ T6542] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 189.907672][ T6542] syz.3.697: attempt to access beyond end of device [ 189.907672][ T6542] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 190.117208][ T6542] syz.3.697: attempt to access beyond end of device [ 190.117208][ T6542] loop3: rw=2049, sector=249, nr_sectors = 16 limit=128 [ 190.142811][ T6568] tipc: Started in network mode [ 190.148463][ T6568] tipc: Node identity ac14140f, cluster identity 4711 [ 190.163682][ T6568] tipc: New replicast peer: 255.255.255.255 [ 190.184346][ T6568] tipc: Enabled bearer , priority 10 [ 190.299740][ T6542] syz.3.697: attempt to access beyond end of device [ 190.299740][ T6542] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 190.351376][ T6542] syz.3.697: attempt to access beyond end of device [ 190.351376][ T6542] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 190.383386][ T6542] syz.3.697: attempt to access beyond end of device [ 190.383386][ T6542] loop3: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 190.602010][ T6562] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 190.612678][ T28] audit: type=1400 audit(1780883469.357:1093): avc: denied { relabelto } for pid=6561 comm="syz.0.703" name="153" dev="tmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 190.647915][ T28] audit: type=1400 audit(1780883469.357:1094): avc: denied { associate } for pid=6561 comm="syz.0.703" name="153" dev="tmpfs" ino=844 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 190.690039][ T28] audit: type=1400 audit(1780883469.387:1095): avc: denied { write } for pid=6561 comm="syz.0.703" name="153" dev="tmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 190.721237][ T6571] netlink: 14 bytes leftover after parsing attributes in process `syz.0.703'. [ 190.769809][ T28] audit: type=1400 audit(1780883469.387:1096): avc: denied { add_name } for pid=6561 comm="syz.0.703" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 190.814492][ T28] audit: type=1400 audit(1780883469.387:1097): avc: denied { create } for pid=6561 comm="syz.0.703" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 190.857333][ T6577] loop0: detected capacity change from 0 to 8192 [ 190.863964][ T28] audit: type=1400 audit(1780883469.387:1098): avc: denied { write } for pid=6561 comm="syz.0.703" name="153" dev="tmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 191.502868][ T6595] netlink: 32 bytes leftover after parsing attributes in process `syz.4.710'. [ 191.708198][ T6571] bond0 (unregistering): left promiscuous mode [ 191.724109][ T6571] bond0 (unregistering): Released all slaves [ 191.765546][ T23] tipc: Node number set to 2886997007 [ 191.777982][ T6601] program syz.5.713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.793730][ T6562] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 191.828216][ T6562] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 192.049317][ T6612] loop4: detected capacity change from 0 to 512 [ 192.056874][ T6612] EXT4-fs: Ignoring removed orlov option [ 192.062833][ T6612] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.069734][ T6612] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.161207][ T6612] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 192.224500][ T6612] EXT4-fs (loop4): 1 truncate cleaned up [ 192.231807][ T6612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.374412][ T6621] netlink: 44 bytes leftover after parsing attributes in process `syz.2.718'. [ 192.590023][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.643822][ T6625] loop4: detected capacity change from 0 to 512 [ 192.662700][ T6625] EXT4-fs: Mount option(s) incompatible with ext2 [ 192.814774][ T6637] loop5: detected capacity change from 0 to 1024 [ 192.823714][ T6637] EXT4-fs: dax option not supported [ 192.881982][ T6640] loop4: detected capacity change from 0 to 1024 [ 192.899571][ T6640] EXT4-fs: Ignoring removed bh option [ 192.926367][ T6640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.939791][ T6637] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.955463][ T6645] loop2: detected capacity change from 0 to 512 [ 192.961579][ T6637] vhci_hcd vhci_hcd.0: invalid port number 255 [ 192.969289][ T6637] netlink: 'syz.5.726': attribute type 10 has an invalid length. [ 192.989362][ T6637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.992787][ T28] audit: type=1400 audit(1780883471.707:1099): avc: denied { write } for pid=6639 comm="syz.4.727" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.999861][ T6637] team0: Port device bond0 added [ 193.043731][ T6645] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.056911][ T6638] loop3: detected capacity change from 0 to 512 [ 193.077487][ T28] audit: type=1400 audit(1780883471.807:1100): avc: denied { create } for pid=6636 comm="syz.5.726" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.107133][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.116331][ T6645] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.728: corrupted xattr entries [ 193.142555][ T6645] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.142660][ T28] audit: type=1400 audit(1780883471.827:1101): avc: denied { write } for pid=6636 comm="syz.5.726" name="file0" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.174302][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 193.174324][ C1] EXT4-fs (loop2): initial error at time 1780883471: xattr_find_entry:337: inode 15 [ 193.174368][ C1] EXT4-fs (loop2): last error at time 1780883471: xattr_find_entry:337: inode 15 [ 193.215190][ T6645] EXT4-fs (loop2): Remounting filesystem read-only [ 193.216397][ T28] audit: type=1400 audit(1780883471.827:1102): avc: denied { open } for pid=6636 comm="syz.5.726" path="/55/file0" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.244664][ T28] audit: type=1400 audit(1780883471.827:1103): avc: denied { ioctl } for pid=6636 comm="syz.5.726" path="/55/file0" dev="tmpfs" ino=309 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.269027][ T6645] EXT4-fs (loop2): 1 truncate cleaned up [ 193.275767][ T6645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.310401][ T6638] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.320509][ T6638] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 193.369019][ T28] audit: type=1400 audit(1780883472.087:1104): avc: denied { unlink } for pid=5232 comm="syz-executor" name="file0" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.907268][ T6654] loop5: detected capacity change from 0 to 512 [ 193.914129][ T6654] EXT4-fs: Ignoring removed orlov option [ 193.919942][ T6654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.926620][ T6654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.951657][ T6654] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 194.104706][ T6638] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 194.132738][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.195587][ T6638] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 194.229292][ T28] audit: type=1400 audit(1780883472.947:1105): avc: denied { write } for pid=3303 comm="syz-executor" name="153" dev="tmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 194.299832][ T6654] EXT4-fs (loop5): 1 truncate cleaned up [ 194.306693][ T6654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.353659][ T6638] System zones: 0-2, 18-18, 34-35 [ 194.363341][ T28] audit: type=1400 audit(1780883472.947:1106): avc: denied { remove_name } for pid=3303 comm="syz-executor" name="file0" dev="tmpfs" ino=851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 194.390844][ T28] audit: type=1400 audit(1780883472.947:1107): avc: denied { unlink } for pid=3303 comm="syz-executor" name="file0" dev="tmpfs" ino=851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 194.413361][ T28] audit: type=1400 audit(1780883472.947:1108): avc: denied { write } for pid=3303 comm="syz-executor" name="153" dev="tmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 194.459944][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.550280][ T6638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.574233][ T6671] SELinux: failed to load policy [ 194.582158][ T6668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6668 comm=syz.5.733 [ 194.598478][ T6670] SELinux: failed to load policy [ 194.920222][ T6688] sg_write: data in/out 1969188161/284 bytes for SCSI command 0x3a-- guessing data in; [ 194.920222][ T6688] program syz.3.725 not setting count and/or reply_len properly [ 195.331676][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.823455][ T6703] loop0: detected capacity change from 0 to 512 [ 195.829568][ T6708] loop4: detected capacity change from 0 to 512 [ 195.830613][ T6703] EXT4-fs: Ignoring removed orlov option [ 195.841928][ T6703] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.848615][ T6703] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.856505][ T6703] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 195.875063][ T6703] EXT4-fs (loop0): 1 truncate cleaned up [ 195.881155][ T6703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.898426][ T6708] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.746: Directory hole found for htree index block 0 [ 195.915938][ T6708] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 195.916900][ T6708] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 195.926022][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 195.926047][ C1] EXT4-fs (loop4): initial error at time 1780883474: dx_probe:791: inode 2 [ 195.926116][ C1] EXT4-fs (loop4): last error at time 1780883474: dx_probe:791: inode 2 [ 195.960694][ T6708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.070450][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.108545][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.147192][ T6725] tipc: Enabling of bearer rejected, already enabled [ 196.161455][ T6728] tipc: Enabling of bearer rejected, already enabled [ 196.249224][ T6735] loop4: detected capacity change from 0 to 128 [ 196.404708][ T6744] loop5: detected capacity change from 0 to 1024 [ 196.471647][ T6735] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.484697][ T6744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.497315][ T6735] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.542914][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.567606][ T6735] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.865163][ T6758] program syz.3.759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.144075][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.764'. [ 197.156475][ T6768] netlink: 36 bytes leftover after parsing attributes in process `syz.3.764'. [ 197.226999][ T6774] tipc: Enabling of bearer rejected, already enabled [ 197.809607][ T6780] loop2: detected capacity change from 0 to 512 [ 197.824444][ T6780] EXT4-fs: Ignoring removed orlov option [ 197.832929][ T6780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.840756][ T6780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.946000][ T6780] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 197.998715][ T6780] EXT4-fs (loop2): 1 truncate cleaned up [ 198.026406][ T6780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.935254][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.950558][ T6795] futex_wake_op: syz.3.771 tries to shift op by 32; fix this program [ 199.156234][ T6799] netlink: 100 bytes leftover after parsing attributes in process `syz.0.772'. [ 199.183170][ T6801] program syz.2.770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.234575][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 199.234595][ T28] audit: type=1400 audit(1780883477.967:1120): avc: denied { wake_alarm } for pid=6798 comm="syz.0.772" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.350767][ T6811] loop4: detected capacity change from 0 to 128 [ 199.368241][ T6811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 199.382800][ T6811] System zones: 1-3, 19-19, 35-36 [ 199.401313][ T6811] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.414212][ T6811] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.452050][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.480328][ T6821] loop2: detected capacity change from 0 to 512 [ 199.506989][ T3979] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.518485][ T6823] loop4: detected capacity change from 0 to 512 [ 199.527393][ T6821] EXT4-fs: Ignoring removed bh option [ 199.533606][ T6823] EXT4-fs: Ignoring removed bh option [ 199.539302][ T6821] EXT4-fs: inline encryption not supported [ 199.550160][ T6823] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.559377][ T6823] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 199.569785][ T6823] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 199.585779][ T6821] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.599947][ T6823] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 199.610218][ T6823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.628074][ T6823] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 32: comm syz.4.780: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0 [ 199.653185][ T6821] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 199.667913][ T6821] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.781: bg 0: block 248: padding at end of block bitmap is not set [ 199.682644][ T6821] loop2: lost filesystem error report for type 5 error -117 [ 199.682970][ T6821] Quota error (device loop2): write_blk: dquota write failed [ 199.697777][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 199.697799][ C0] EXT4-fs (loop2): last error at time 1780883478: ext4_validate_block_bitmap:441 [ 199.713600][ T6821] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 199.723493][ T6821] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.781: Failed to acquire dquot type 1 [ 199.734808][ T6821] loop2: lost filesystem error report for type 5 error -28 [ 199.735514][ T6821] EXT4-fs (loop2): 1 truncate cleaned up [ 199.749174][ T6821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 199.773464][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.809031][ T6830] loop4: detected capacity change from 0 to 1024 [ 199.835713][ T6830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.873656][ T28] audit: type=1400 audit(1780883478.607:1121): avc: denied { write } for pid=6829 comm="syz.4.782" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.956089][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 199.976983][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.986643][ T28] audit: type=1326 audit(1780883478.717:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.5.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81590ce59 code=0x7ffc0000 [ 200.013041][ T28] audit: type=1326 audit(1780883478.717:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.5.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81590ce59 code=0x7ffc0000 [ 200.038807][ T28] audit: type=1326 audit(1780883478.717:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.5.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fb81590ce59 code=0x7ffc0000 [ 200.064536][ T28] audit: type=1326 audit(1780883478.717:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.5.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81590ce59 code=0x7ffc0000 [ 200.113486][ T28] audit: type=1326 audit(1780883478.717:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.5.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fb81590ce59 code=0x7ffc0000 [ 200.143895][ T28] audit: type=1326 audit(1780883478.717:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.5.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81590ce59 code=0x7ffc0000 [ 200.466282][ T6850] program syz.2.784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.744087][ T6865] random: crng reseeded on system resumption [ 201.372994][ T3020] veth0_vlan: left promiscuous mode [ 201.387368][ T3020] veth0_vlan: entered promiscuous mode [ 201.420123][ T6902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.802'. [ 201.440855][ T6902] IPv6: sit1: Disabled Multicast RS [ 201.447776][ T6902] sit1: entered allmulticast mode [ 201.492910][ T6905] loop0: detected capacity change from 0 to 1024 [ 201.509447][ T6905] EXT4-fs: Ignoring removed bh option [ 201.667655][ T6905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.238187][ T6921] loop2: detected capacity change from 0 to 512 [ 202.257038][ T6921] EXT4-fs: Ignoring removed orlov option [ 202.264922][ T6921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.278415][ T6921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.295214][ T6921] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 202.370823][ T6921] EXT4-fs (loop2): 1 truncate cleaned up [ 202.391922][ T6921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.768078][ T6930] loop3: detected capacity change from 0 to 1024 [ 202.815135][ T6930] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 202.861277][ T6930] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 202.899558][ T6930] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.805: lblock 2 mapped to illegal pblock 2 (length 1) [ 202.913922][ T6930] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 202.931740][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 202.947643][ C1] EXT4-fs (loop3): initial error at time 1780883481: ext4_map_blocks:791: inode 3: block 2 [ 202.957707][ C1] EXT4-fs (loop3): last error at time 1780883481: ext4_map_blocks:791: inode 3: block 2 [ 203.068197][ T6930] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.805: lblock 0 mapped to illegal pblock 48 (length 1) [ 203.104721][ T6930] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 203.104845][ T6930] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.805: Failed to acquire dquot type 0 [ 203.169310][ T6930] loop3: lost filesystem error report for type 5 error -117 [ 203.169442][ T6930] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 203.236079][ T6930] loop3: lost filesystem error report for type 5 error -117 [ 203.236197][ T6930] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.805: mark_inode_dirty error [ 203.307754][ T6930] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.307990][ T6930] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 203.373320][ T6930] EXT4-fs (loop3): 1 orphan inode deleted [ 203.397637][ T6930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.558437][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.570395][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.585103][ T3959] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 203.626254][ T3959] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 203.626881][ T3959] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 0 [ 203.651826][ T3959] loop3: lost filesystem error report for type 5 error -117 [ 203.654849][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.672667][ T3304] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 203.685751][ T3304] loop3: lost filesystem error report for type 5 error -117 [ 203.685880][ T3304] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 203.704128][ T3304] loop3: lost filesystem error report for type 5 error -117 [ 203.704237][ T3304] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 203.728089][ T6969] loop2: detected capacity change from 0 to 1024 [ 203.735763][ T6969] journal_path: Non-blockdev passed as './file1' [ 203.742637][ T6969] EXT4-fs: error: could not find journal device path [ 203.749505][ T3304] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 203.989315][ T6983] loop2: detected capacity change from 0 to 512 [ 204.044566][ T6983] loop2: detected capacity change from 0 to 512 [ 204.055746][ T6983] EXT4-fs: Invalid want_extra_isize 9 [ 204.087121][ T6985] loop0: detected capacity change from 0 to 512 [ 204.094022][ T6985] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.102458][ T6985] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 204.113440][ T6985] EXT4-fs (loop0): 1 truncate cleaned up [ 204.119630][ T6985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.132868][ T6985] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 204.310093][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.529391][ T6994] SET target dimension over the limit! [ 204.572620][ T6994] loop4: detected capacity change from 0 to 1024 [ 204.956014][ T7010] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 205.075100][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 205.075130][ T28] audit: type=1400 audit(1780883483.717:1163): avc: denied { relabelto } for pid=6998 comm="syz.3.816" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 205.128609][ T6994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.351753][ T28] audit: type=1400 audit(1780883483.717:1164): avc: denied { associate } for pid=6998 comm="syz.3.816" name="cgroup.procs" dev="cgroup" ino=102 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 205.436978][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.610358][ T28] audit: type=1400 audit(1780883484.347:1165): avc: denied { write } for pid=7015 comm="syz.0.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 205.645157][ T7016] loop0: detected capacity change from 0 to 1024 [ 205.716616][ T7016] EXT4-fs: Ignoring removed bh option [ 205.835791][ T7016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.850607][ T28] audit: type=1400 audit(1780883484.597:1166): avc: denied { write } for pid=7015 comm="syz.0.819" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.897273][ T28] audit: type=1400 audit(1780883484.637:1167): avc: denied { getopt } for pid=7015 comm="syz.0.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.933601][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.391842][ T28] audit: type=1400 audit(1780883485.127:1168): avc: denied { read } for pid=7029 comm="syz.3.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 206.630732][ T7038] loop5: detected capacity change from 0 to 512 [ 206.642693][ T7038] ext4: Unknown parameter 'uid>00000000000000000000' [ 206.667457][ T7046] loop0: detected capacity change from 0 to 1024 [ 206.699167][ T7046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 206.711932][ T7046] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.740429][ T28] audit: type=1400 audit(1780883485.477:1169): avc: denied { append } for pid=7045 comm="syz.0.824" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 206.788765][ T7046] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.824: lblock 0 mapped to illegal pblock 0 (length 6) [ 206.819155][ T7046] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 206.831852][ T7046] EXT4-fs (loop0): This should not happen!! Data will be lost [ 206.831852][ T7046] [ 206.850076][ T7046] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.824: bg 0: block 112: padding at end of block bitmap is not set [ 206.887027][ T7046] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 8 with error 28 [ 206.906079][ T7046] EXT4-fs (loop0): This should not happen!! Data will be lost [ 206.906079][ T7046] [ 206.931328][ T7046] EXT4-fs (loop0): Total free blocks count 0 [ 206.938750][ T7046] EXT4-fs (loop0): Free/Dirty block details [ 206.946288][ T7046] EXT4-fs (loop0): free_blocks=0 [ 206.952433][ T7046] EXT4-fs (loop0): dirty_blocks=64 [ 206.963930][ T7063] loop5: detected capacity change from 0 to 512 [ 206.970705][ T7046] EXT4-fs (loop0): Block reservation details [ 206.980656][ T7063] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 206.990100][ T7063] EXT4-fs (loop5): 1 truncate cleaned up [ 207.003672][ T7063] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.043756][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.832'. [ 207.053305][ T3969] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 207.069260][ T3303] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 207.258582][ T7065] loop4: detected capacity change from 0 to 512 [ 207.279631][ T7065] ext4: Unknown parameter 'uid>00000000000000000000' [ 207.289258][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.309875][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.403334][ T28] audit: type=1326 audit(1780883486.137:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.2.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f893591ce59 code=0x0 [ 207.449480][ T7080] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 207.466097][ T7080] System zones: 0-1, 3-8 [ 207.484736][ T7080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 207.498754][ T7080] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.514498][ T7080] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.835: Freeing blocks not in datazone - block = 0, count = 16 [ 207.514651][ T28] audit: type=1400 audit(1780883486.257:1171): avc: denied { write } for pid=7074 comm="syz.0.835" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.572355][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 207.604318][ T7091] ext4: Bad value for 'auto_da_alloc' [ 207.742002][ T7095] EXT4-fs: Ignoring removed i_version option [ 207.764598][ T7095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.777438][ T7095] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.789688][ T28] audit: type=1400 audit(1780883486.537:1172): avc: denied { write } for pid=7094 comm="syz.2.841" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.789733][ T7095] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.841: iget: bad i_size value: 2533274857506816 [ 207.965257][ T7095] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.841: iget: bad i_size value: 2533274857506816 [ 208.127043][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.273238][ T7116] futex_wake_op: syz.5.845 tries to shift op by -1; fix this program [ 208.285548][ T7114] netlink: 68 bytes leftover after parsing attributes in process `syz.4.846'. [ 208.505408][ T7120] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 208.553160][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.582657][ T7120] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 208.649209][ T7125] iso9660: Unknown parameter 'chec¹' [ 208.664153][ T7120] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: inode #32: comm syz.5.845: iget: special inode unallocated [ 208.701532][ T7120] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 208.701685][ T7120] EXT4-fs (loop5): no journal found [ 208.701747][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 208.722685][ C1] EXT4-fs (loop5): initial error at time 1780883487: ext4_get_journal_inode:5896: inode 32 [ 208.732740][ C1] EXT4-fs (loop5): last error at time 1780883487: ext4_get_journal_inode:5896: inode 32 [ 208.745203][ T7120] EXT4-fs (loop5): can't get journal size [ 208.751560][ T7120] EXT4-fs (loop5): filesystem is read-only [ 208.758591][ T7120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 209.402946][ T7133] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 209.429477][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.667025][ T7145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58838 sclass=netlink_route_socket pid=7145 comm=syz.0.850 [ 209.729374][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'. [ 209.748283][ T7143] set_capacity_and_notify: 8 callbacks suppressed [ 209.748300][ T7143] loop3: detected capacity change from 0 to 4096 [ 209.825022][ T7143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.871442][ T7149] loop4: detected capacity change from 0 to 512 [ 209.943100][ T7149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.955770][ T7149] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.967891][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.017336][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.085408][ T7170] 9p: Bad value for 'wfdno' [ 210.162288][ T7173] loop5: detected capacity change from 0 to 764 [ 210.607519][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 210.657100][ T7206] loop0: detected capacity change from 0 to 256 [ 210.675898][ T7206] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.898551][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 211.115087][ T7230] vhci_hcd vhci_hcd.0: invalid port number 0 [ 211.206042][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.877'. [ 211.268797][ T7237] loop0: detected capacity change from 0 to 512 [ 211.339327][ T7237] EXT4-fs: Ignoring removed i_version option [ 211.350514][ T7237] EXT4-fs: Ignoring removed bh option [ 211.438709][ T7237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.467979][ T7237] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.517201][ T7237] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.878: iget: bad i_size value: 2533274857506816 [ 211.652651][ T7245] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.878: iget: bad i_size value: 2533274857506816 [ 211.665092][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 211.665106][ T28] audit: type=1400 audit(1780883490.397:1175): avc: denied { write } for pid=7235 comm="syz.0.878" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.747514][ T7248] loop5: detected capacity change from 0 to 256 [ 211.810048][ T7248] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.827705][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.294019][ T7257] loop0: detected capacity change from 0 to 128 [ 212.418815][ T7257] bio_check_eod: 73 callbacks suppressed [ 212.418832][ T7257] syz.0.884: attempt to access beyond end of device [ 212.418832][ T7257] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 212.489934][ T7257] syz.0.884: attempt to access beyond end of device [ 212.489934][ T7257] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 212.607073][ T7266] syz.3.888 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 212.701267][ T7268] loop5: detected capacity change from 0 to 512 [ 212.712688][ T7266] loop3: detected capacity change from 0 to 1024 [ 212.807169][ T7266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 212.822115][ T7268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.835963][ T7266] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.854620][ T7268] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.879690][ T28] audit: type=1400 audit(1780883491.617:1176): avc: denied { write } for pid=7265 comm="syz.3.888" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.898801][ T7266] EXT4-fs (loop3): shut down requested (2) [ 212.925117][ T28] audit: type=1400 audit(1780883491.637:1177): avc: denied { setattr } for pid=7262 comm="syz.5.887" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.975780][ T28] audit: type=1400 audit(1780883491.637:1178): avc: denied { read } for pid=2963 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 213.021166][ T28] audit: type=1400 audit(1780883491.637:1179): avc: denied { search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.055046][ T28] audit: type=1400 audit(1780883491.637:1180): avc: denied { write search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.093228][ T28] audit: type=1400 audit(1780883491.637:1181): avc: denied { add_name } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.134320][ T28] audit: type=1400 audit(1780883491.637:1182): avc: denied { create } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 213.166850][ T28] audit: type=1400 audit(1780883491.637:1183): avc: denied { append open } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 213.213347][ T28] audit: type=1400 audit(1780883491.637:1184): avc: denied { getattr } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.113693][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 215.183426][ T7308] loop4: detected capacity change from 0 to 1024 [ 215.193108][ T7307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.892'. [ 215.206623][ T7309] loop3: detected capacity change from 0 to 1756 [ 215.229714][ T7308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.239203][ T7309] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 215.247543][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.343279][ T7311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.350552][ T7311] IPv6: NLM_F_CREATE should be set when creating new route [ 215.366627][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.388312][ T7324] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 215.413249][ T7326] loop5: detected capacity change from 0 to 512 [ 215.441892][ T7326] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.897: bg 0: block 393: padding at end of block bitmap is not set [ 215.459850][ T7326] loop5: lost filesystem error report for type 5 error -117 [ 215.460180][ T7326] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 215.468206][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 215.468222][ C1] EXT4-fs (loop5): initial error at time 1780883494: ext4_validate_block_bitmap:441 [ 215.468617][ C1] EXT4-fs (loop5): last error at time 1780883494: ext4_validate_block_bitmap:441 [ 215.476314][ T7328] loop4: detected capacity change from 0 to 1024 [ 215.509571][ T7326] loop5: lost filesystem error report for type 5 error -117 [ 215.509895][ T7326] EXT4-fs (loop5): 2 truncates cleaned up [ 215.523291][ T7328] EXT4-fs: quotafile must be on filesystem root [ 215.533807][ T7326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.598072][ T7328] loop4: detected capacity change from 0 to 512 [ 215.641995][ T7328] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 215.681553][ T7328] EXT4-fs (loop4): 1 truncate cleaned up [ 215.694591][ T7328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.777119][ T7340] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 215.789233][ T7330] geneve2: entered allmulticast mode [ 215.821996][ T3959] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.836951][ T3959] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.888507][ T3959] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.908837][ T3959] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.936227][ T7352] program syz.0.901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.989317][ T7343] loop5: detected capacity change from 0 to 128 [ 216.123939][ T7368] loop2: detected capacity change from 0 to 512 [ 216.148245][ T7368] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 216.190858][ T7368] EXT4-fs (loop2): 1 truncate cleaned up [ 216.261114][ T7381] loop3: detected capacity change from 0 to 512 [ 216.362030][ T7393] loop0: detected capacity change from 0 to 128 [ 216.387755][ T7393] FAT-fs (loop0): bogus number of reserved sectors [ 216.398403][ T7393] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 216.408143][ T7393] FAT-fs (loop0): Can't find a valid FAT filesystem [ 216.442454][ T7381] netlink: 48 bytes leftover after parsing attributes in process `syz.3.909'. [ 216.467987][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 218.837577][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.911'. [ 218.852820][ T7403] loop2: detected capacity change from 0 to 512 [ 218.864732][ T7403] EXT4-fs: Ignoring removed bh option [ 218.897356][ T7403] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.911: corrupted in-inode xattr: e_value size too large [ 218.926509][ T7403] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.936140][ T7403] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.911: couldn't read orphan inode 15 (err -117) [ 218.957275][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 218.957295][ C1] EXT4-fs (loop2): initial error at time 1780883497: ext4_iget_extra_inode:5128: inode 15 [ 218.957326][ C1] EXT4-fs (loop2): last error at time 1780883497: ext4_iget_extra_inode:5128: inode 15 [ 218.983996][ T7403] loop2: lost filesystem error report for type 5 error -117 [ 218.988907][ T28] kauditd_printk_skb: 151 callbacks suppressed [ 218.988923][ T28] audit: type=1400 audit(1780883497.727:1336): avc: denied { write } for pid=7402 comm="syz.2.911" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.058438][ T28] audit: type=1400 audit(1780883497.787:1337): avc: denied { sys_module } for pid=7402 comm="syz.2.911" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 219.098508][ T7426] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 219.112252][ T7425] netlink: 'syz.5.918': attribute type 2 has an invalid length. [ 219.121826][ T3080] team_slave_0: entered promiscuous mode [ 219.127560][ T3080] team_slave_1: entered promiscuous mode [ 219.148095][ T28] audit: type=1400 audit(1780883497.827:1338): avc: denied { write } for pid=7402 comm="syz.2.911" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.170278][ T28] audit: type=1400 audit(1780883497.827:1339): avc: denied { mounton } for pid=7402 comm="syz.2.911" path="/208/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 219.218931][ T28] audit: type=1400 audit(1780883497.917:1340): avc: denied { setopt } for pid=7427 comm="syz.0.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.280423][ T7431] FAULT_INJECTION: forcing a failure. [ 219.280423][ T7431] name failslab, interval 1, probability 0, space 0, times 0 [ 219.280524][ T7431] CPU: 0 UID: 0 PID: 7431 Comm: syz.3.921 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 219.280681][ T7431] Tainted: [W]=WARN [ 219.280721][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 219.280782][ T7431] Call Trace: [ 219.280820][ T7431] [ 219.280847][ T7431] __dump_stack+0x1d/0x30 [ 219.280985][ T7431] dump_stack_lvl+0x95/0xd0 [ 219.281053][ T7431] dump_stack+0x15/0x1b [ 219.281110][ T7431] should_fail_ex+0x263/0x280 [ 219.281193][ T7431] should_failslab+0x8c/0xb0 [ 219.281280][ T7431] kmem_cache_alloc_noprof+0x66/0x3f0 [ 219.281382][ T7431] ? _sctp_make_chunk+0xbf/0x210 [ 219.281434][ T7431] _sctp_make_chunk+0xbf/0x210 [ 219.281507][ T7431] sctp_make_heartbeat+0x59/0x290 [ 219.281646][ T7431] sctp_sf_do_prm_requestheartbeat+0x29/0x130 [ 219.281818][ T7431] sctp_do_sm+0xd0/0x3330 [ 219.281928][ T7431] ? lockref_put_return+0xf7/0x130 [ 219.282039][ T7431] ? __rcu_read_unlock+0x4e/0x70 [ 219.282152][ T7431] sctp_primitive_REQUESTHEARTBEAT+0x74/0x90 [ 219.282258][ T7431] sctp_apply_peer_addr_params+0x93/0xbe0 [ 219.282416][ T7431] sctp_setsockopt_peer_addr_params+0x41a/0x4e0 [ 219.282506][ T7431] sctp_setsockopt+0x6fc/0xea0 [ 219.282579][ T7431] sock_common_setsockopt+0x69/0x80 [ 219.282765][ T7431] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 219.282861][ T7431] __sys_setsockopt+0x184/0x200 [ 219.282946][ T7431] __x64_sys_setsockopt+0x64/0x80 [ 219.283065][ T7431] x64_sys_call+0x2327/0x3020 [ 219.283134][ T7431] do_syscall_64+0x12c/0x3b0 [ 219.283233][ T7431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.283375][ T7431] RIP: 0033:0x7f1ea192ce59 [ 219.283435][ T7431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.283488][ T7431] RSP: 002b:00007f1ea037f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 219.283559][ T7431] RAX: ffffffffffffffda RBX: 00007f1ea1ba5fa0 RCX: 00007f1ea192ce59 [ 219.283675][ T7431] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 219.283717][ T7431] RBP: 00007f1ea037f090 R08: 000000000000009c R09: 0000000000000000 [ 219.283757][ T7431] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 219.283797][ T7431] R13: 00007f1ea1ba6038 R14: 00007f1ea1ba5fa0 R15: 00007fff60bef548 [ 219.283866][ T7431] [ 219.365938][ T7437] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.366095][ T7437] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.377827][ T28] audit: type=1400 audit(1780883497.917:1342): avc: denied { setattr } for pid=7424 comm="syz.5.918" name="NETLINK" dev="sockfs" ino=16541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.377873][ T28] audit: type=1400 audit(1780883497.917:1341): avc: denied { ioctl } for pid=7427 comm="syz.0.920" path="socket:[15950]" dev="sockfs" ino=15950 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.377907][ T28] audit: type=1400 audit(1780883497.917:1343): avc: denied { write } for pid=7427 comm="syz.0.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.499426][ T7437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.505469][ T7437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.585353][ T7449] syz.4.924: attempt to access beyond end of device [ 219.585353][ T7449] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 219.695130][ T135] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.709478][ T7449] syz.4.924: attempt to access beyond end of device [ 219.709478][ T7449] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 219.790178][ T7449] syz.4.924: attempt to access beyond end of device [ 219.790178][ T7449] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 219.794051][ T135] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.812020][ T135] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.820429][ T135] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.829112][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.856184][ T7449] syz.4.924: attempt to access beyond end of device [ 219.856184][ T7449] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 219.859858][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.875525][ T7449] syz.4.924: attempt to access beyond end of device [ 219.875525][ T7449] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 219.907418][ T7449] syz.4.924: attempt to access beyond end of device [ 219.907418][ T7449] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 219.947059][ T7449] syz.4.924: attempt to access beyond end of device [ 219.947059][ T7449] loop4: rw=2049, sector=249, nr_sectors = 16 limit=128 [ 219.960703][ T7449] syz.4.924: attempt to access beyond end of device [ 219.960703][ T7449] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 219.974132][ T7449] syz.4.924: attempt to access beyond end of device [ 219.974132][ T7449] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 219.987566][ T7449] syz.4.924: attempt to access beyond end of device [ 219.987566][ T7449] loop4: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 220.024115][ T7461] FAULT_INJECTION: forcing a failure. [ 220.024115][ T7461] name failslab, interval 1, probability 0, space 0, times 0 [ 220.037039][ T7461] CPU: 1 UID: 0 PID: 7461 Comm: syz.2.929 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 220.037079][ T7461] Tainted: [W]=WARN [ 220.037088][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 220.037104][ T7461] Call Trace: [ 220.037112][ T7461] [ 220.037122][ T7461] __dump_stack+0x1d/0x30 [ 220.037152][ T7461] dump_stack_lvl+0x95/0xd0 [ 220.037235][ T7461] dump_stack+0x15/0x1b [ 220.037258][ T7461] should_fail_ex+0x263/0x280 [ 220.037284][ T7461] should_failslab+0x8c/0xb0 [ 220.037389][ T7461] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 220.037431][ T7461] ? __d_alloc+0x37/0x340 [ 220.037461][ T7461] __d_alloc+0x37/0x340 [ 220.037488][ T7461] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 220.037541][ T7461] d_alloc+0x2e/0x100 [ 220.037584][ T7461] lookup_one_qstr_excl+0x95/0x240 [ 220.037681][ T7461] start_dirop+0x3e/0x70 [ 220.037706][ T7461] simple_start_creating+0xa2/0xd0 [ 220.037734][ T7461] debugfs_start_creating+0xda/0x150 [ 220.037768][ T7461] __debugfs_create_file+0x70/0x2b0 [ 220.037839][ T7461] debugfs_create_file_full+0x3f/0x60 [ 220.038005][ T7461] blk_trace_setup_prepare+0x201/0x300 [ 220.038032][ T7461] blk_trace_ioctl+0x634/0x710 [ 220.038065][ T7461] ? __pfx_blkdev_ioctl+0x10/0x10 [ 220.038096][ T7461] blkdev_ioctl+0x2ac/0x460 [ 220.038166][ T7461] ? __pfx_blkdev_ioctl+0x10/0x10 [ 220.038248][ T7461] __se_sys_ioctl+0xce/0x140 [ 220.038300][ T7461] __x64_sys_ioctl+0x43/0x50 [ 220.038386][ T7461] x64_sys_call+0x1563/0x3020 [ 220.038411][ T7461] do_syscall_64+0x12c/0x3b0 [ 220.038442][ T7461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.038468][ T7461] RIP: 0033:0x7f893591ce59 [ 220.038491][ T7461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.038522][ T7461] RSP: 002b:00007f893436f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.038545][ T7461] RAX: ffffffffffffffda RBX: 00007f8935b95fa0 RCX: 00007f893591ce59 [ 220.038559][ T7461] RDX: 0000200000000140 RSI: 00000000c0c0128e RDI: 0000000000000003 [ 220.038571][ T7461] RBP: 00007f893436f090 R08: 0000000000000000 R09: 0000000000000000 [ 220.038582][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.038608][ T7461] R13: 00007f8935b96038 R14: 00007f8935b95fa0 R15: 00007ffc6fd5f9e8 [ 220.038626][ T7461] [ 220.319910][ T7465] set_capacity_and_notify: 2 callbacks suppressed [ 220.319930][ T7465] loop2: detected capacity change from 0 to 256 [ 220.334200][ T7465] vfat: Unknown parameter './file2' [ 220.576148][ T7467] random: crng reseeded on system resumption [ 220.730402][ T7467] loop2: detected capacity change from 0 to 1024 [ 220.741865][ T7467] EXT4-fs: Ignoring removed bh option [ 220.763163][ T28] audit: type=1400 audit(1780883499.317:1344): avc: denied { write } for pid=7464 comm="syz.2.931" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 220.861263][ T28] audit: type=1400 audit(1780883499.317:1345): avc: denied { ioctl } for pid=7464 comm="syz.2.931" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 221.021098][ T7475] loop0: detected capacity change from 0 to 1024 [ 221.035346][ T7475] EXT4-fs: Ignoring removed bh option [ 222.379861][ T3298] EXT4-fs unmount: 10 callbacks suppressed [ 222.379881][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.383662][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.121335][ T7501] loop0: detected capacity change from 0 to 1024 [ 223.147006][ T7490] loop5: detected capacity change from 0 to 512 [ 223.153647][ T7490] EXT4-fs: Ignoring removed orlov option [ 223.159397][ T7490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.166220][ T7490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.173386][ T7490] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 223.178163][ T7501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.199052][ T7490] EXT4-fs (loop5): 1 truncate cleaned up [ 223.205426][ T7490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.246491][ T7509] loop2: detected capacity change from 0 to 512 [ 223.259249][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.269961][ T7509] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 223.349434][ T7509] EXT4-fs (loop2): 1 truncate cleaned up [ 223.390180][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.415469][ T7509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.566480][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.465675][ T7533] loop2: detected capacity change from 0 to 512 [ 224.472472][ T7533] EXT4-fs: Ignoring removed orlov option [ 224.478279][ T7533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.484987][ T7533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.553863][ T7533] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 224.596405][ T7533] EXT4-fs (loop2): 1 truncate cleaned up [ 224.602636][ T7533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.282658][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.400278][ T7547] loop4: detected capacity change from 0 to 1024 [ 225.413549][ T7549] pim6reg99999999: entered allmulticast mode [ 225.445163][ T7547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.460649][ T7549] veth0: entered promiscuous mode [ 225.486072][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 225.486088][ T28] audit: type=1400 audit(1780883504.227:1349): avc: denied { write } for pid=7546 comm="syz.4.955" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.538646][ T7548] veth0: left promiscuous mode [ 225.557082][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.606583][ T7558] program syz.3.959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.668528][ T7563] netlink: 132 bytes leftover after parsing attributes in process `syz.4.958'. [ 225.773230][ T28] audit: type=1400 audit(1780883504.517:1350): avc: denied { read } for pid=7562 comm="syz.4.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.995115][ T7566] Cannot find add_set index 65532 as target [ 226.013079][ T7568] loop2: detected capacity change from 0 to 1024 [ 226.019759][ T28] audit: type=1400 audit(1780883504.757:1351): avc: denied { getopt } for pid=7565 comm="syz.3.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 226.041611][ T7568] EXT4-fs: Ignoring removed orlov option [ 226.137047][ T7568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.247613][ T28] audit: type=1400 audit(1780883504.987:1352): avc: denied { write } for pid=7567 comm="syz.2.962" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.306619][ T28] audit: type=1400 audit(1780883505.047:1353): avc: denied { write } for pid=7567 comm="syz.2.962" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.356606][ T28] audit: type=1400 audit(1780883505.047:1354): avc: denied { write } for pid=7567 comm="syz.2.962" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.592028][ T7592] loop5: detected capacity change from 0 to 512 [ 226.628649][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.641980][ T7592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 226.672210][ T7592] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.794946][ T7592] FAULT_INJECTION: forcing a failure. [ 226.794946][ T7592] name failslab, interval 1, probability 0, space 0, times 0 [ 226.916954][ T7592] CPU: 1 UID: 0 PID: 7592 Comm: syz.5.966 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 226.916993][ T7592] Tainted: [W]=WARN [ 226.917002][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 226.917019][ T7592] Call Trace: [ 226.917027][ T7592] [ 226.917077][ T7592] __dump_stack+0x1d/0x30 [ 226.917108][ T7592] dump_stack_lvl+0x95/0xd0 [ 226.917130][ T7592] dump_stack+0x15/0x1b [ 226.917148][ T7592] should_fail_ex+0x263/0x280 [ 226.917209][ T7592] should_failslab+0x8c/0xb0 [ 226.917255][ T7592] __kmalloc_noprof+0xb8/0x4d0 [ 226.917362][ T7592] ? io_cache_alloc_new+0x2a/0xb0 [ 226.917419][ T7592] io_cache_alloc_new+0x2a/0xb0 [ 226.917449][ T7592] __io_prep_rw+0x116/0x710 [ 226.917483][ T7592] ? io_issue_sqe+0x494/0xba0 [ 226.917606][ T7592] io_prep_read+0x31/0xe0 [ 226.917631][ T7592] io_submit_sqes+0x754/0x1170 [ 226.917664][ T7592] __se_sys_io_uring_enter+0x25c/0xfc0 [ 226.917764][ T7592] ? mutex_unlock+0x4e/0x90 [ 226.917811][ T7592] ? fput+0x8f/0xc0 [ 226.917833][ T7592] __x64_sys_io_uring_enter+0x78/0x90 [ 226.917980][ T7592] x64_sys_call+0x1e16/0x3020 [ 226.918011][ T7592] do_syscall_64+0x12c/0x3b0 [ 226.918053][ T7592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.918188][ T7592] RIP: 0033:0x7fb81590ce59 [ 226.918204][ T7592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.918222][ T7592] RSP: 002b:00007fb81435f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 226.918242][ T7592] RAX: ffffffffffffffda RBX: 00007fb815b85fa0 RCX: 00007fb81590ce59 [ 226.918259][ T7592] RDX: 000000000000771f RSI: 0000000000002219 RDI: 0000000000000000 [ 226.918292][ T7592] RBP: 00007fb81435f090 R08: 0000000000000000 R09: fffffffffffffe16 [ 226.918322][ T7592] R10: 000000000000005e R11: 0000000000000246 R12: 0000000000000001 [ 226.918352][ T7592] R13: 00007fb815b86038 R14: 00007fb815b85fa0 R15: 00007ffcff8bec38 [ 226.918377][ T7592] [ 227.316383][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 227.377061][ T7599] loop2: detected capacity change from 0 to 1024 [ 227.412980][ T7599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.475898][ T28] audit: type=1400 audit(1780883506.207:1355): avc: denied { write } for pid=7598 comm="syz.2.968" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.529428][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.589351][ T28] audit: type=1326 audit(1780883506.287:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7604 comm="syz.3.971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea192ce59 code=0x7ffc0000 [ 227.640336][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.973'. [ 227.672964][ T7615] program syz.2.972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.694180][ T7617] FAULT_INJECTION: forcing a failure. [ 227.694180][ T7617] name failslab, interval 1, probability 0, space 0, times 0 [ 227.713404][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.973'. [ 227.744203][ T28] audit: type=1326 audit(1780883506.287:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7604 comm="syz.3.971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea192ce59 code=0x7ffc0000 [ 227.809753][ T7617] CPU: 0 UID: 0 PID: 7617 Comm: syz.3.974 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 227.809816][ T7617] Tainted: [W]=WARN [ 227.809823][ T7617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 227.809835][ T7617] Call Trace: [ 227.809842][ T7617] [ 227.809849][ T7617] __dump_stack+0x1d/0x30 [ 227.809881][ T7617] dump_stack_lvl+0x95/0xd0 [ 227.809923][ T7617] dump_stack+0x15/0x1b [ 227.809947][ T7617] should_fail_ex+0x263/0x280 [ 227.809972][ T7617] should_failslab+0x8c/0xb0 [ 227.810080][ T7617] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 227.810116][ T7617] ? __alloc_skb+0x2d6/0x690 [ 227.810216][ T7617] __alloc_skb+0x2d6/0x690 [ 227.810238][ T7617] ? __alloc_skb+0x200/0x690 [ 227.810264][ T7617] xfrm_alloc_userspi+0x5cd/0x760 [ 227.810367][ T7617] ? __nla_parse+0x40/0x60 [ 227.810394][ T7617] xfrm_user_rcv_msg+0x576/0x670 [ 227.810417][ T7617] ? __account_obj_stock+0x3ba/0x5f0 [ 227.810451][ T7617] ? __rcu_read_unlock+0x4e/0x70 [ 227.810545][ T7617] netlink_rcv_skb+0x123/0x220 [ 227.810620][ T7617] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 227.810649][ T7617] xfrm_netlink_rcv+0x48/0x60 [ 227.810667][ T7617] netlink_unicast+0x5a8/0x680 [ 227.810695][ T7617] netlink_sendmsg+0x5c8/0x6f0 [ 227.810795][ T7617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.810911][ T7617] ____sys_sendmsg+0x563/0x5b0 [ 227.810945][ T7617] ___sys_sendmsg+0x195/0x1e0 [ 227.810983][ T7617] __x64_sys_sendmsg+0xd4/0x160 [ 227.811022][ T7617] x64_sys_call+0x194c/0x3020 [ 227.811107][ T7617] do_syscall_64+0x12c/0x3b0 [ 227.811196][ T7617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.811250][ T7617] RIP: 0033:0x7f1ea192ce59 [ 227.811269][ T7617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.811314][ T7617] RSP: 002b:00007f1ea037f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.811333][ T7617] RAX: ffffffffffffffda RBX: 00007f1ea1ba5fa0 RCX: 00007f1ea192ce59 [ 227.811346][ T7617] RDX: 0000000000048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 227.811358][ T7617] RBP: 00007f1ea037f090 R08: 0000000000000000 R09: 0000000000000000 [ 227.811372][ T7617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.811389][ T7617] R13: 00007f1ea1ba6038 R14: 00007f1ea1ba5fa0 R15: 00007fff60bef548 [ 227.811414][ T7617] [ 228.052282][ T7620] netlink: 'syz.2.975': attribute type 2 has an invalid length. [ 228.060569][ T28] audit: type=1326 audit(1780883506.287:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7604 comm="syz.3.971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea192ce59 code=0x7ffc0000 [ 228.467106][ T7644] 9p: Invalid gid '0x00000000ffffffff' [ 228.497909][ T7646] loop3: detected capacity change from 0 to 1024 [ 228.544732][ T7646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.572019][ T7640] loop5: detected capacity change from 0 to 7 [ 228.579309][ T7649] loop2: detected capacity change from 0 to 128 [ 228.671356][ T7653] loop5: detected capacity change from 0 to 2048 [ 228.683762][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.710215][ T7653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.739408][ T7649] bio_check_eod: 53 callbacks suppressed [ 228.739428][ T7649] syz.2.978: attempt to access beyond end of device [ 228.739428][ T7649] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 228.758734][ T7649] syz.2.978: attempt to access beyond end of device [ 228.758734][ T7649] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 228.768211][ T7653] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.776234][ T7649] syz.2.978: attempt to access beyond end of device [ 228.776234][ T7649] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 228.796247][ T7649] syz.2.978: attempt to access beyond end of device [ 228.796247][ T7649] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 228.809636][ T7649] syz.2.978: attempt to access beyond end of device [ 228.809636][ T7649] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 228.823071][ T7649] syz.2.978: attempt to access beyond end of device [ 228.823071][ T7649] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 228.836545][ T7649] syz.2.978: attempt to access beyond end of device [ 228.836545][ T7649] loop2: rw=2049, sector=249, nr_sectors = 16 limit=128 [ 228.850212][ T7649] syz.2.978: attempt to access beyond end of device [ 228.850212][ T7649] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 228.863666][ T7649] syz.2.978: attempt to access beyond end of device [ 228.863666][ T7649] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 228.877109][ T7649] syz.2.978: attempt to access beyond end of device [ 228.877109][ T7649] loop2: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 228.952390][ T7662] loop4: detected capacity change from 0 to 512 [ 231.337069][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.386602][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 231.386620][ T28] audit: type=1400 audit(1780883510.077:1396): avc: denied { write } for pid=7660 comm="syz.4.986" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 231.487312][ T7667] can0: slcan on ttyS3. [ 232.171728][ T7666] can0 (unregistered): slcan off ttyS3. [ 232.218176][ T7688] loop5: detected capacity change from 0 to 512 [ 232.225312][ T7688] EXT4-fs: Ignoring removed orlov option [ 232.231128][ T7688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.240249][ T7688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.282496][ T7688] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 232.330622][ T7694] usb usb1: usbfs: process 7694 (syz.2.995) did not claim interface 0 before use [ 232.363794][ T7688] EXT4-fs (loop5): 1 truncate cleaned up [ 232.382270][ T7688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.713181][ T28] audit: type=1400 audit(1780883511.447:1397): avc: denied { write } for pid=7673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.886021][ T28] audit: type=1400 audit(1780883511.497:1398): avc: denied { write } for pid=7704 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.462423][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.599784][ T3969] bridge_slave_1: left allmulticast mode [ 233.649516][ T3969] bridge_slave_1: left promiscuous mode [ 233.689973][ T3969] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.983641][ T7715] loop4: detected capacity change from 0 to 1024 [ 234.005028][ T7715] EXT4-fs: Ignoring removed orlov option [ 234.026846][ T3969] bridge_slave_0: left allmulticast mode [ 234.032621][ T3969] bridge_slave_0: left promiscuous mode [ 234.038423][ T3969] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.067460][ T7715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.158114][ T7745] loop5: detected capacity change from 0 to 512 [ 234.164776][ T7745] EXT4-fs: Ignoring removed orlov option [ 234.170479][ T7745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.177149][ T7745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.184767][ T7745] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 234.201919][ T7745] EXT4-fs (loop5): 1 truncate cleaned up [ 234.207509][ T28] audit: type=1400 audit(1780883512.937:1399): avc: denied { write } for pid=7714 comm="syz.4.999" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.208448][ T7745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.264351][ T28] audit: type=1400 audit(1780883512.987:1400): avc: denied { write } for pid=7726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.287412][ T28] audit: type=1400 audit(1780883513.027:1401): avc: denied { write } for pid=7752 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.312877][ T28] audit: type=1400 audit(1780883513.047:1402): avc: denied { write } for pid=7714 comm="syz.4.999" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.346720][ T28] audit: type=1400 audit(1780883513.047:1403): avc: denied { write } for pid=7714 comm="syz.4.999" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.434424][ T3969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.451632][ T3969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.462266][ T3969] bond0 (unregistering): Released all slaves [ 234.470688][ T3969] bond1 (unregistering): Released all slaves [ 234.484201][ T3969] bond2 (unregistering): Released all slaves [ 234.493920][ T3969] bond3 (unregistering): Released all slaves [ 234.503014][ T3969] bond4 (unregistering): Released all slaves [ 234.559417][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.591634][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.604263][ T7753] syzkaller0: entered promiscuous mode [ 234.609789][ T7753] syzkaller0: entered allmulticast mode [ 234.641110][ T3969] tipc: Disabling bearer [ 234.651358][ T3969] tipc: Left network mode [ 234.670680][ T3969] IPVS: stopping master sync thread 7340 ... [ 234.683708][ T3969] IPVS: stopping backup sync thread 7324 ... [ 234.694689][ T7765] loop5: detected capacity change from 0 to 128 [ 234.727304][ T7767] random: crng reseeded on system resumption [ 234.806840][ T7765] bio_check_eod: 43 callbacks suppressed [ 234.806877][ T7765] syz.5.1003: attempt to access beyond end of device [ 234.806877][ T7765] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 234.857005][ T3969] hsr_slave_0: left promiscuous mode [ 234.873370][ T7765] syz.5.1003: attempt to access beyond end of device [ 234.873370][ T7765] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 234.889462][ T3969] hsr_slave_1: left promiscuous mode [ 234.895190][ T3969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.909890][ T3969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.921475][ T7778] loop4: detected capacity change from 0 to 1024 [ 234.928669][ T7765] syz.5.1003: attempt to access beyond end of device [ 234.928669][ T7765] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 234.945930][ T7778] EXT4-fs: Ignoring removed bh option [ 234.953475][ T3969] pim6reg99999999 (unregistering): left allmulticast mode [ 234.963121][ T7765] syz.5.1003: attempt to access beyond end of device [ 234.963121][ T7765] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 234.976680][ T7765] syz.5.1003: attempt to access beyond end of device [ 234.976680][ T7765] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 234.990447][ T7765] syz.5.1003: attempt to access beyond end of device [ 234.990447][ T7765] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 235.004255][ T7765] syz.5.1003: attempt to access beyond end of device [ 235.004255][ T7765] loop5: rw=2049, sector=249, nr_sectors = 16 limit=128 [ 235.024052][ T7778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.036706][ T7784] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1009'. [ 235.056693][ T7789] FAULT_INJECTION: forcing a failure. [ 235.056693][ T7789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.069526][ T7765] syz.5.1003: attempt to access beyond end of device [ 235.069526][ T7765] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 235.083411][ T7765] syz.5.1003: attempt to access beyond end of device [ 235.083411][ T7765] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 235.097008][ T7765] syz.5.1003: attempt to access beyond end of device [ 235.097008][ T7765] loop5: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 235.098832][ T28] audit: type=1400 audit(1780883513.797:1404): avc: denied { write } for pid=7777 comm="syz.4.1008" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.113604][ T7789] CPU: 0 UID: 0 PID: 7789 Comm: syz.0.1010 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 235.113699][ T7789] Tainted: [W]=WARN [ 235.113728][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 235.113838][ T7789] Call Trace: [ 235.113861][ T7789] [ 235.113883][ T7789] __dump_stack+0x1d/0x30 [ 235.113964][ T7789] dump_stack_lvl+0x95/0xd0 [ 235.114027][ T7789] dump_stack+0x15/0x1b [ 235.114137][ T7789] should_fail_ex+0x263/0x280 [ 235.114201][ T7789] should_fail+0xb/0x20 [ 235.114255][ T7789] should_fail_usercopy+0x1a/0x20 [ 235.114334][ T7789] _copy_to_user+0x20/0xa0 [ 235.114415][ T7789] simple_read_from_buffer+0xb5/0x130 [ 235.114600][ T7789] proc_fail_nth_read+0x10e/0x150 [ 235.114765][ T7789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.114851][ T7789] vfs_read+0x1ab/0x7f0 [ 235.114976][ T7789] ? __rcu_read_unlock+0x4e/0x70 [ 235.115054][ T7789] ? __fget_files+0x184/0x1c0 [ 235.115149][ T7789] ? mutex_lock+0x57/0x90 [ 235.115231][ T7789] ksys_read+0xdc/0x1a0 [ 235.115332][ T7789] __x64_sys_read+0x40/0x50 [ 235.115396][ T7789] x64_sys_call+0x2886/0x3020 [ 235.115498][ T7789] do_syscall_64+0x12c/0x3b0 [ 235.115600][ T7789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.115674][ T7789] RIP: 0033:0x7f1b9b54d68e [ 235.115791][ T7789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.115846][ T7789] RSP: 002b:00007f1b99fdefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.115961][ T7789] RAX: ffffffffffffffda RBX: 00007f1b99fdf6c0 RCX: 00007f1b9b54d68e [ 235.116005][ T7789] RDX: 000000000000000f RSI: 00007f1b99fdf0a0 RDI: 0000000000000003 [ 235.116025][ T7789] RBP: 00007f1b99fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 235.116037][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.116050][ T7789] R13: 00007f1b9b806038 R14: 00007f1b9b805fa0 R15: 00007ffe2104d388 [ 235.116173][ T7789] [ 235.345131][ T28] audit: type=1400 audit(1780883513.917:1405): avc: denied { listen } for pid=7781 comm="syz.2.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 235.376757][ T7804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.385796][ T7804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.646824][ T3969] team0 (unregistering): Port device team_slave_1 removed [ 237.658667][ T3969] team0 (unregistering): Port device team_slave_0 removed [ 237.785200][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 237.823032][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 237.823049][ T28] audit: type=1400 audit(1780883516.567:1409): avc: denied { setattr } for pid=7820 comm="syz.2.1014" name="tty2" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 237.846458][ T7684] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.869426][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.031596][ T7684] bridge_slave_0: entered allmulticast mode [ 238.038568][ T7684] bridge_slave_0: entered promiscuous mode [ 238.096218][ T7827] loop5: detected capacity change from 0 to 512 [ 238.103016][ T7827] EXT4-fs: Ignoring removed orlov option [ 238.108746][ T7827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.115481][ T7827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.122739][ T7827] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 238.135638][ T7827] EXT4-fs (loop5): 1 truncate cleaned up [ 238.141962][ T7827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.155421][ T7684] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.162618][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.169846][ T7684] bridge_slave_1: entered allmulticast mode [ 238.176492][ T7684] bridge_slave_1: entered promiscuous mode [ 238.194864][ T7684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.207357][ T7684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.261307][ T7684] team0: Port device team_slave_0 added [ 238.269782][ T7684] team0: Port device team_slave_1 added [ 238.302923][ T7684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.327222][ T7684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.354366][ T7684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.366409][ T7684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.373664][ T7684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.400029][ T7684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.478925][ T7684] hsr_slave_0: entered promiscuous mode [ 238.486181][ T7684] hsr_slave_1: entered promiscuous mode [ 238.493149][ T7684] debugfs: 'hsr0' already exists in 'hsr' [ 238.499046][ T7684] Cannot create hsr debugfs directory [ 238.537564][ T28] audit: type=1400 audit(1780883517.277:1410): avc: denied { write } for pid=7831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.565135][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.624563][ T28] audit: type=1400 audit(1780883517.327:1411): avc: denied { write } for pid=7849 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.669592][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 238.726903][ T7848] random: crng reseeded on system resumption [ 238.735454][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.744196][ T7684] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 238.778155][ T7684] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 238.789483][ T7684] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 238.813988][ T7684] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.833763][ T7684] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 238.855070][ T7684] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 238.872357][ T7859] FAULT_INJECTION: forcing a failure. [ 238.872357][ T7859] name failslab, interval 1, probability 0, space 0, times 0 [ 238.893252][ T7859] CPU: 1 UID: 0 PID: 7859 Comm: syz.4.1020 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 238.893296][ T7859] Tainted: [W]=WARN [ 238.893305][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 238.893321][ T7859] Call Trace: [ 238.893329][ T7859] [ 238.893340][ T7859] __dump_stack+0x1d/0x30 [ 238.893403][ T7859] dump_stack_lvl+0x95/0xd0 [ 238.893502][ T7859] dump_stack+0x15/0x1b [ 238.893526][ T7859] should_fail_ex+0x263/0x280 [ 238.893614][ T7859] should_failslab+0x8c/0xb0 [ 238.893659][ T7859] __kvmalloc_node_noprof+0x155/0x640 [ 238.893686][ T7859] ? alloc_netdev_mqs+0x718/0xa70 [ 238.893724][ T7859] alloc_netdev_mqs+0x718/0xa70 [ 238.893770][ T7859] rtnl_create_link+0x239/0x720 [ 238.893886][ T7859] rtnl_newlink_create+0x174/0x650 [ 238.893912][ T7859] ? security_capable+0x7b/0x90 [ 238.893952][ T7859] rtnl_newlink+0x1185/0x1400 [ 238.894000][ T7859] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 238.894042][ T7859] ? __rcu_read_unlock+0x4e/0x70 [ 238.894115][ T7859] ? avc_has_perm_noaudit+0xab/0x130 [ 238.894164][ T7859] ? cred_has_capability+0x224/0x2a0 [ 238.894252][ T7859] ? selinux_capable+0x31/0x40 [ 238.894318][ T7859] ? security_capable+0x7b/0x90 [ 238.894355][ T7859] ? ns_capable+0x7c/0xb0 [ 238.894387][ T7859] ? __pfx_rtnl_newlink+0x10/0x10 [ 238.894482][ T7859] rtnetlink_rcv_msg+0x64b/0x720 [ 238.894527][ T7859] netlink_rcv_skb+0x123/0x220 [ 238.894632][ T7859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.894670][ T7859] rtnetlink_rcv+0x1c/0x30 [ 238.894788][ T7859] netlink_unicast+0x5a8/0x680 [ 238.894818][ T7859] netlink_sendmsg+0x5c8/0x6f0 [ 238.894859][ T7859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.894975][ T7859] ____sys_sendmsg+0x563/0x5b0 [ 238.895014][ T7859] ___sys_sendmsg+0x195/0x1e0 [ 238.895081][ T7859] __x64_sys_sendmsg+0xd4/0x160 [ 238.895121][ T7859] x64_sys_call+0x194c/0x3020 [ 238.895154][ T7859] do_syscall_64+0x12c/0x3b0 [ 238.895240][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.895288][ T7859] RIP: 0033:0x7f1f89dace59 [ 238.895305][ T7859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.895339][ T7859] RSP: 002b:00007f1f88807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.895365][ T7859] RAX: ffffffffffffffda RBX: 00007f1f8a025fa0 RCX: 00007f1f89dace59 [ 238.895383][ T7859] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000004 [ 238.895399][ T7859] RBP: 00007f1f88807090 R08: 0000000000000000 R09: 0000000000000000 [ 238.895416][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.895466][ T7859] R13: 00007f1f8a026038 R14: 00007f1f8a025fa0 R15: 00007ffd23af7a78 [ 238.895528][ T7859] [ 239.172234][ T7684] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 239.186333][ T7684] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 239.233678][ T7868] loop4: detected capacity change from 0 to 512 [ 239.286437][ T7684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.296318][ T7868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.321879][ T7868] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.342491][ T7684] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.352317][ T3969] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.359488][ T3969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.372498][ T28] audit: type=1400 audit(1780883518.087:1412): avc: denied { write } for pid=7866 comm="syz.4.1021" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.425712][ T3974] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.432834][ T3974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.447059][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.505964][ T28] audit: type=1400 audit(1780883518.247:1413): avc: denied { write } for pid=7869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.552919][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.596609][ T28] audit: type=1400 audit(1780883518.337:1414): avc: denied { write } for pid=7885 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.629184][ T7887] netlink: 'syz.5.1023': attribute type 1 has an invalid length. [ 239.685018][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 239.715358][ T7887] bond1: (slave bridge4): Enslaving as a backup interface with an up link [ 239.838857][ T7892] loop4: detected capacity change from 0 to 128 [ 239.847100][ T7887] bond1: (slave bridge5): Enslaving as a backup interface with a down link [ 239.860444][ T7887] bond1: (slave bridge6): Enslaving as a backup interface with a down link [ 239.944741][ T7907] bio_check_eod: 23 callbacks suppressed [ 239.944756][ T7907] syz.4.1022: attempt to access beyond end of device [ 239.944756][ T7907] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 239.953069][ T7684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.983433][ T7907] syz.4.1022: attempt to access beyond end of device [ 239.983433][ T7907] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 239.996930][ T7907] syz.4.1022: attempt to access beyond end of device [ 239.996930][ T7907] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 240.010564][ T7907] syz.4.1022: attempt to access beyond end of device [ 240.010564][ T7907] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 240.024146][ T7907] syz.4.1022: attempt to access beyond end of device [ 240.024146][ T7907] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 240.037568][ T7907] syz.4.1022: attempt to access beyond end of device [ 240.037568][ T7907] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 240.117974][ T28] audit: type=1400 audit(1780883518.857:1415): avc: denied { write } for pid=7901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.215782][ T28] audit: type=1400 audit(1780883518.957:1416): avc: denied { write } for pid=7926 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.233897][ T7907] syz.4.1022: attempt to access beyond end of device [ 240.233897][ T7907] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 240.279187][ T7907] syz.4.1022: attempt to access beyond end of device [ 240.279187][ T7907] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 240.305390][ T7907] syz.4.1022: attempt to access beyond end of device [ 240.305390][ T7907] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 240.319350][ T7907] syz.4.1022: attempt to access beyond end of device [ 240.319350][ T7907] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 240.413986][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 241.018424][ T7684] veth0_vlan: entered promiscuous mode [ 241.079462][ T7684] veth1_vlan: entered promiscuous mode [ 241.195592][ T7684] veth0_macvtap: entered promiscuous mode [ 241.250456][ T7684] veth1_macvtap: entered promiscuous mode [ 241.346325][ T7684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.378437][ T7684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.419981][ T135] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.434803][ T135] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.388475][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 242.414594][ T28] audit: type=1400 audit(1780883521.157:1417): avc: denied { connect } for pid=7947 comm="syz.2.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.629351][ T135] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.654087][ T135] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.682061][ T7952] netlink: 'syz.4.1030': attribute type 2 has an invalid length. [ 242.727897][ T7949] hsr_slave_1 (unregistering): left promiscuous mode [ 242.835403][ T7961] loop6: detected capacity change from 0 to 164 [ 242.860488][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 242.882015][ T28] audit: type=1400 audit(1780883521.617:1418): avc: denied { mounton } for pid=7960 comm="syz.6.994" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 242.980152][ T7968] loop6: detected capacity change from 0 to 1024 [ 243.026725][ T7968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.073634][ T28] audit: type=1400 audit(1780883521.817:1419): avc: denied { write } for pid=7967 comm="syz.6.1034" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.115196][ T7684] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.318369][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1038'. [ 243.339162][ T7981] syz_tun: entered promiscuous mode [ 243.344838][ T7981] macvtap1: entered promiscuous mode [ 243.350340][ T7981] macvtap1: entered allmulticast mode [ 243.356026][ T7981] syz_tun: entered allmulticast mode [ 243.364175][ T7981] netlink: 'syz.5.1038': attribute type 5 has an invalid length. [ 243.456567][ T7985] random: crng reseeded on system resumption [ 243.861272][ T7987] loop5: detected capacity change from 0 to 128 [ 243.886858][ T7990] loop4: detected capacity change from 0 to 128 [ 243.977502][ T7990] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.007855][ T7990] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.071026][ T28] audit: type=1400 audit(1780883522.807:1420): avc: denied { write } for pid=7989 comm="syz.4.1040" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.139200][ T28] audit: type=1400 audit(1780883522.867:1421): avc: denied { ioctl } for pid=7989 comm="syz.4.1040" path="/195/file1/file1" dev="loop4" ino=12 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 244.656772][ T7994] loop0: detected capacity change from 0 to 512 [ 244.756895][ T7994] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 244.798166][ T7994] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 244.867574][ T7994] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 244.879474][ T7994] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 244.900467][ T7994] System zones: 0-2, 18-18, 34-35 [ 244.940355][ T7994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.954732][ T28] audit: type=1400 audit(1780883523.697:1422): avc: denied { bind } for pid=7998 comm="syz.2.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 244.956522][ T7999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1044'. [ 244.988495][ T28] audit: type=1400 audit(1780883523.727:1423): avc: denied { write } for pid=7992 comm="syz.0.1041" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.270609][ T8001] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8001 comm=syz.6.1045 [ 245.302176][ T8003] loop6: detected capacity change from 0 to 512 [ 245.310443][ T8003] EXT4-fs: old and new quota format mixing [ 245.361015][ T8005] loop6: detected capacity change from 0 to 1024 [ 245.383311][ T8005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.400177][ T28] audit: type=1400 audit(1780883524.147:1424): avc: denied { write } for pid=8004 comm="syz.6.1047" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.439972][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.459405][ T7684] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.485632][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.656459][ T28] audit: type=1400 audit(1780883525.397:1425): avc: denied { getopt } for pid=8008 comm="syz.4.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.966823][ T8029] random: crng reseeded on system resumption [ 247.093213][ T8031] loop0: detected capacity change from 0 to 1024 [ 247.114399][ T8031] EXT4-fs: Ignoring removed orlov option [ 247.168734][ T8031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.282027][ T28] audit: type=1400 audit(1780883526.017:1426): avc: denied { write } for pid=8030 comm="syz.0.1052" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.361159][ T28] audit: type=1400 audit(1780883526.097:1427): avc: denied { write } for pid=8030 comm="syz.0.1052" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.449952][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.494351][ T8042] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.611852][ T8043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.625911][ T23] IPVS: starting estimator thread 0... [ 247.720255][ T8050] loop4: detected capacity change from 0 to 1024 [ 247.731770][ T8047] IPVS: using max 2304 ests per chain, 115200 per kthread [ 247.744540][ T8050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.886421][ T8061] loop0: detected capacity change from 0 to 1024 [ 247.949713][ T8061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.974609][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 247.974628][ T28] audit: type=1400 audit(1780883526.717:1430): avc: denied { write } for pid=8060 comm="syz.0.1058" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.026300][ T8059] ================================================================== [ 248.034450][ T8059] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 248.041791][ T8059] [ 248.044133][ T8059] read-write to 0xffff888107a7fd98 of 8 bytes by task 8050 on cpu 1: [ 248.052217][ T8059] xas_clear_mark+0x91/0x180 [ 248.056846][ T8059] __folio_start_writeback+0x270/0x370 [ 248.062550][ T8059] ext4_bio_write_folio+0x5a6/0xa20 [ 248.067815][ T8059] ext4_do_writepages+0x1422/0x2770 [ 248.073059][ T8059] ext4_writepages+0x18f/0x320 [ 248.077860][ T8059] do_writepages+0x1c6/0x310 [ 248.082492][ T8059] file_write_and_wait_range+0x178/0x2f0 [ 248.088265][ T8059] mmb_fsync_noflush+0x48/0x140 [ 248.093157][ T8059] ext4_sync_file+0x1f1/0x6b0 [ 248.097869][ T8059] vfs_fsync_range+0xc5/0xe0 [ 248.102489][ T8059] ext4_buffered_write_iter+0x447/0x4c0 [ 248.108088][ T8059] ext4_file_write_iter+0x380/0xfa0 [ 248.113327][ T8059] do_iter_readv_writev+0x4fd/0x5a0 [ 248.118570][ T8059] vfs_writev+0x2e1/0x900 [ 248.123016][ T8059] __se_sys_pwritev2+0xfc/0x1c0 [ 248.127897][ T8059] __x64_sys_pwritev2+0x67/0x80 [ 248.132804][ T8059] x64_sys_call+0xe07/0x3020 [ 248.137433][ T8059] do_syscall_64+0x12c/0x3b0 [ 248.142066][ T8059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.147993][ T8059] [ 248.150338][ T8059] read to 0xffff888107a7fd98 of 8 bytes by task 8059 on cpu 0: [ 248.157896][ T8059] xas_find_marked+0x213/0x620 [ 248.162707][ T8059] filemap_get_folios_tag+0xfa/0x430 [ 248.168039][ T8059] mpage_prepare_extent_to_map+0x328/0xc50 [ 248.173890][ T8059] ext4_do_writepages+0x9f6/0x2770 [ 248.179051][ T8059] ext4_writepages+0x18f/0x320 [ 248.183852][ T8059] do_writepages+0x1c6/0x310 [ 248.188473][ T8059] file_write_and_wait_range+0x178/0x2f0 [ 248.194189][ T8059] mmb_fsync_noflush+0x48/0x140 [ 248.199086][ T8059] ext4_sync_file+0x1f1/0x6b0 [ 248.203844][ T8059] vfs_fsync_range+0xc5/0xe0 [ 248.208469][ T8059] ext4_buffered_write_iter+0x447/0x4c0 [ 248.214071][ T8059] ext4_file_write_iter+0x380/0xfa0 [ 248.219323][ T8059] iter_file_splice_write+0x6c4/0xa80 [ 248.224743][ T8059] direct_splice_actor+0x156/0x2a0 [ 248.229900][ T8059] splice_direct_to_actor+0x311/0x670 [ 248.235315][ T8059] do_splice_direct+0x119/0x1a0 [ 248.240216][ T8059] do_sendfile+0x382/0x650 [ 248.244671][ T8059] __x64_sys_sendfile64+0x105/0x150 [ 248.249730][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.249896][ T8059] x64_sys_call+0x2dc4/0x3020 [ 248.263550][ T8059] do_syscall_64+0x12c/0x3b0 [ 248.268187][ T8059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.274115][ T8059] [ 248.276461][ T8059] value changed: 0xffffffe00000ffff -> 0xfffffe000000ffff [ 248.283616][ T8059] [ 248.285953][ T8059] Reported by Kernel Concurrency Sanitizer on: [ 248.292127][ T8059] CPU: 0 UID: 0 PID: 8059 Comm: syz.4.1056 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 248.303043][ T8059] Tainted: [W]=WARN [ 248.306862][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 248.316937][ T8059] ================================================================== [ 248.396404][ T8067] loop6: detected capacity change from 0 to 1024 [ 248.403216][ T8067] EXT4-fs: Ignoring removed orlov option [ 248.434356][ T8071] loop0: detected capacity change from 0 to 128 [ 248.456545][ T8067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.478626][ T8071] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 248.507195][ T8071] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 248.516326][ T8071] FAT-fs (loop0): Filesystem has been set read-only [ 248.528268][ T8071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8071 comm=syz.0.1060 [ 248.558374][ T28] audit: type=1400 audit(1780883527.297:1431): avc: denied { write } for pid=8063 comm="syz.6.1059" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.562957][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.612053][ T3959] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 248.649206][ T28] audit: type=1400 audit(1780883527.377:1432): avc: denied { write } for pid=8063 comm="syz.6.1059" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.704380][ T28] audit: type=1400 audit(1780883527.377:1433): avc: denied { write } for pid=8063 comm="syz.6.1059" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.747798][ T7684] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.692531][ T28] audit: type=1400 audit(1780883530.437:1434): avc: denied { write } for pid=8077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.726682][ T28] audit: type=1400 audit(1780883530.467:1435): avc: denied { write } for pid=8088 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.375428][ T28] audit: type=1400 audit(1780883532.117:1436): avc: denied { write } for pid=8091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.408815][ T28] audit: type=1400 audit(1780883532.147:1437): avc: denied { write } for pid=8102 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.500358][ T28] audit: type=1400 audit(1780883532.237:1438): avc: denied { write } for pid=8105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.533651][ T28] audit: type=1400 audit(1780883532.277:1439): avc: denied { write } for pid=8116 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.624332][ T28] audit: type=1400 audit(1780883532.367:1440): avc: denied { write } for pid=8119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.658114][ T28] audit: type=1400 audit(1780883532.397:1441): avc: denied { write } for pid=8130 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1