last executing test programs: 1m25.943110396s ago: executing program 2 (id=3): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x81, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x6) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x400c040) rseq(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000980)=[{&(0x7f0000000480)="bbffad5e99be72d1ab91928508319751cc5c441e014a33fb0956a608754713f9e83a603d54640396b2b5b2d5c572be32732ace7e44acbef4825b77fde522f227a11dab09085ff93f57f89d96f9c2bc78076f1747ebbd4a3a39a6b6e8cfc334a75d3c5dc43565f2421364293861d2a9902f37095f6b404bfa74c16dc368a798d65ce865106543590edf9a29220e4b44a29f39513ab8acb34576293f4a63827710bf29922e9c18fecafaaf68b5f8", 0xad}, {&(0x7f0000000540)="7adc14fd81ec111df2757fb13479a2cc3d33c85de93984b4e3200b21138285662fcc7bce1d95bde91922e62ee732943d8cada13994fd256bf1c312b8b8", 0x3d}, {&(0x7f0000000580)="d0ab6a9d400626ec0bf73c75788400827b677f707791eb649429c9b81f13a1b63e66e88238a9f1352f082348644fbf7459f17e0e830fb551e82ff6e014157cb295163a33", 0x44}, {&(0x7f0000000600)="b29e87a717ccef544178ce754b", 0xd}, {&(0x7f0000000640)="08d421380e5486075da608f87fc8fbfaae40d486369afb230773c34b711993bd6d56255c690c46f724bc7a2f2bed2721da88f635a46d8a9c4dd6334200a64b", 0x3f}, {&(0x7f0000000680)="d2c6fbd14fd52f095df2be1378fdc4eb13a51407f4b3ba1d310e3c92b2349022b2c3f112392bf8b431f74cf8a06a1401a91dd4b1d714d82ea8d5c92d638e096173b0fbfb0a14ebe168851815f9ed75f48c67e3e1e77458dffb56", 0x5a}, {&(0x7f0000000700)="eeb1d0084363729aa120116b62192017434f3f529942e5570522c630eba248909380ffc1c9de6fe9352daaac64cccf36d2c4061cf7bb48b305b88e360ace21339f85c1a5d93987a193b730abc7c95f21369f81c46f00e3e5c37ba265c9c1ebaf2ad17dc4217ad86725ad9001152f17ee69333e0a02938ddb33c35d5466913d3bcda540d25a8f68324df063b7e24cbb4c8fc6c3fc2dd2b01f3fe0", 0x9a}, {&(0x7f00000007c0)="8490f0bdd48f3acbfb172bbc1077a4b286ac6440a90bd1cfab1dc477774db467fb1d0db855bc89a99ed7c46cba293578faf9ddec6e37d89b93b446e0883411f52cb2ebe37d782be17fa75b68431037074109785d03cacf3718a394e071d44679ea5c6f07cd101daf752e258a139131360f975ddf64da1053a6e6eaaa604aa499ff311fe13dfea70792fe759580ffdb2d6c8e59ae86f57f72fe5712b57361730a4e0654eab5e4123d0a3ecd1935840a052863df1cb9a7a7d4", 0xb8}, {&(0x7f0000000880)="de1f64d1e45cc6858d2863947c281a382a94260c0209c8119c36c9", 0x1b}, {&(0x7f00000008c0)="fed8e9a1140f728cc10252fd5c08c222a62f92722946d69f3b2e70fcad631bbede28a6a6e1e2c6665c709e78f6badc41e72cd1d5f79a511cb39ea35c5b375298eb6c6d34deedf01539ec6d14cb44df233225211d8045342ff717bcf82943bf439afacbe07e75a6918db74a43939342a7d9ac6b9d03643de353d3c56b74aed04f0943a83f775238ae8c3128b7d590ca086879c3e9cec6058d63", 0x99}], 0xa, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e22, 0x9, @empty, 0x1ff}}, 0xf1, 0x5480}, 0x90) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) waitid(0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x10005, 0x200000003, 0xfffffbff, 0xb, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = socket(0x400000000010, 0x807, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m24.677069636s ago: executing program 2 (id=7): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.111545593s ago: executing program 2 (id=18): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xc, 0x0, &(0x7f0000001600)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = dup(r3) r5 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) fallocate(r5, 0x0, 0x0, 0x8) sendfile(r4, r5, 0x0, 0x40) preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/247, 0xf7}], 0x1, 0xa, 0x7400) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) 1m19.521690131s ago: executing program 2 (id=23): getresuid(&(0x7f0000000100)=0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000280)=0x10) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='.\x00', 0x0, 0x4001, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x7036f766d6fa8554, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x989056, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x9, 0xa]}}) io_setup(0x6, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f00000004c0)="e4", 0xb, 0x5, 0x0, 0x2}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x0, 0x0, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x44004) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x878b, &(0x7f0000000a80)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10000000000005}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5d}}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nobh}], [{@obj_user={'obj_user', 0x3d, '\x00\xfa\xad\xfb\xfdR\x9c\xb6_cX#1Z\x8b\xaermcVS\x81D<\xdfi}\xa2Q\xad|\x1e\xbe#\b\x89H\xb3\xc2\xe6\"\x0e\x9a\xc4\x19]8\xa0\x9f\xca\xdd\xfd\xff\xff\xbds`]q\x85\x891\xeb\x1eE\xa9\xe5\v\xde\xeb\x92\xa2\x8e\x18\x91\x1d\xe0\x01]%\xa1'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_gt}, {@euid_gt}, {@measure}, {@uid_lt={'uid<', r0}}, {@measure}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}, 0x0, 0x475, &(0x7f0000001040)="$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") socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x300, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xd, 0xffff}, {0x4, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40194}, 0x8840) 1m19.497737022s ago: executing program 32 (id=23): getresuid(&(0x7f0000000100)=0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000280)=0x10) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='.\x00', 0x0, 0x4001, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x7036f766d6fa8554, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x989056, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x9, 0xa]}}) io_setup(0x6, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f00000004c0)="e4", 0xb, 0x5, 0x0, 0x2}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x0, 0x0, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x44004) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x878b, &(0x7f0000000a80)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10000000000005}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5d}}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nobh}], [{@obj_user={'obj_user', 0x3d, '\x00\xfa\xad\xfb\xfdR\x9c\xb6_cX#1Z\x8b\xaermcVS\x81D<\xdfi}\xa2Q\xad|\x1e\xbe#\b\x89H\xb3\xc2\xe6\"\x0e\x9a\xc4\x19]8\xa0\x9f\xca\xdd\xfd\xff\xff\xbds`]q\x85\x891\xeb\x1eE\xa9\xe5\v\xde\xeb\x92\xa2\x8e\x18\x91\x1d\xe0\x01]%\xa1'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_gt}, {@euid_gt}, {@measure}, {@uid_lt={'uid<', r0}}, {@measure}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}, 0x0, 0x475, &(0x7f0000001040)="$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") socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x300, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xd, 0xffff}, {0x4, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40194}, 0x8840) 4.689428026s ago: executing program 3 (id=520): sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xd0002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0xc0f0, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xdd5}, 0x0, 0x7, 0x10000, 0xd, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x41}, 0x94) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x80) unlinkat(0xffffffffffffffff, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$FIONCLEX(r0, 0x5450) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000001a80)=ANY=[@ANYBLOB="1800000000400000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000850000007d0000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6, r5}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) stat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x79dd}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 4.55220559s ago: executing program 3 (id=521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x10c, 0x24, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0xb, 0xc}, {0x2}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x407ff, "0b2544d2fc15f19e38c4dcd761f4dc56"}}}, @qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x0, 0x3, 0x1, 0xca, 0x9, 0x8}}, {0x14, 0x2, [0x2, 0x1, 0x2, 0x1, 0x2, 0x100, 0x9, 0x3]}}, {{0x1c, 0x1, {0x3, 0x9, 0x3, 0x9, 0x0, 0x6, 0xd, 0x5}}, {0xe, 0x2, [0x2, 0xfff, 0xfffc, 0x4, 0xad4]}}, {{0x1c, 0x1, {0x7, 0xd4, 0x2, 0x6, 0x2, 0xeff, 0x100, 0x7}}, {0x12, 0x2, [0x4, 0x4, 0x4, 0x3, 0x3bf, 0x1, 0xfffd]}}]}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_RATE={0x6, 0x5, {0xb4, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) io_setup(0x4, &(0x7f00000013c0)=0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000100)="469dc2d34ae2b700000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000f06010200000000000000000000000905000100070000000500010700"], 0x24}}, 0x8000) io_submit(r1, 0x0, &(0x7f0000002c00)) 4.409075323s ago: executing program 3 (id=524): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.196139458s ago: executing program 0 (id=526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10e88d, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.088344241s ago: executing program 0 (id=529): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200fffe0900020073797a32000000000900010073939b797a30000000004400048024000180090001006d657461000000001400028008000180090001006d617371000000000c00028008bc793544beb9a11a000240000000000000000000000000000a281616d44cf2405ad9c6c27db823647a88bb2ecbc1bddb7334eb89c111b06af51565c373a2dff9e22e255a2b934ab9de0000000000000000"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x6, 0x5}, 0x8) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0xfffffffd, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x109000, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4c011}, 0xf0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x1, 0x2, 0x2a000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="000000002400000000000000000000000000000096b20a7e40d6aea1b3c73d49dd44a53c9696ca165eb632fe9e2300679e0a82305283e3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000067da000000", @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="df00f8810000faffffffffffffff0000000000000008000000000000"], 0x50) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000280)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060300000000000000000007000000050001000600b533050005000200000005000400040000000900020073797a310000000015000300686173683a69702c706ff2742c6e657400000000"], 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x80000) unshare(0x2c020400) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000010201020000000000000000d6000005060007400000000008000600524153000800084000000003"], 0x2c}}, 0x4040040) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xfffffffffffffffc, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r5, &(0x7f0000001000)=""/4075, 0xfeb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00090007001088", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) 3.944801344s ago: executing program 0 (id=532): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001002bbd70000200000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="000200007f000001000000000000006d730010273f991200"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100), 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = inotify_init() inotify_add_watch(r7, 0x0, 0x14000402) fcntl$lock(r6, 0x24, 0x0) r8 = getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) syz_pidfd_open(r8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xc, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000046000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006000000095"], &(0x7f00000010c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x90ac33d9d53e1b16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 3.162112093s ago: executing program 5 (id=536): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x28485, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat(r0, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x40102, 0x3) read(r3, &(0x7f0000000080)=""/1, 0x1) (async, rerun: 32) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffe2d) (async) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0x5) socket$inet(0x2, 0x2, 0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x4010, r6, 0xdabc3000) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x6) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB="240d4584", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fddbdf25050000000500010001000000080004007f000001"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4100) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xc, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240002f00032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001df9a7bf03869c92aab7e8d7340bf7b8d70c065de09af8eaca92a0797f4fa75baffaaab79390bbb825a419463c0ef45ec8ffa91cf29546e050ac0e2afb446dc2b3c9bde60453c4c26d8e5f507d1ecfb92ed1d1d6c1dfa4302a01ac3658e365bb19219a3f41732996a"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000001f0000010000000d5284ef000000ec3e041ca01f00000000000200000908000340", @ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="7e0877559eff581e0211da0333478268c25f3ecfd3bf469a5338daa55a65334b2319d88d1f64cd0df48bee6344007ab2ea2a81559b6c4122488eb3516b0cfff69ff23306bd1a7f74bb87b912e79953cbc0f1fe8523550b99b1d937ba8fead4710a3bbeb6527ba78850979b59d40cc9152e5dae279e0ba2c577479f5fcb8232576cca6c363aad2267809b6e0488374f3c0520788bcb7bb633aa612f36b4d98690cda8be79c5280892946842b392638f818d7a4279b90d8c6199c88400c3f6517e77de30decb41a1c873d244598fae7e5a1a875622454313b99fcc4801b72df409b5659029797755a51e7bb8f9ab7f0a661c1fec6a45ec4030c56a413c1161c17729206b9c20c1e8683a3fc1a110ffb04fe42a6161480cfd02518354fe0220b98c9d993463c590402d55611b7f66228cda2e2f5237d8be65eaca995ddafc2f8659175092bd3ed819b161d2df2a32c2291270c84726844f8f0b60fa8bd6b2077abc883ad2cd5603a9aeb6cdf96e0e07ebcddeca9b2b4677a5a37c391e625d2ff051b9c77279db8c829755fa30b9697ab3038b1817618ac5c59d75154055c8628c616a89d8bcee2f6ff74f9017a155815691c58212f43b0b89f4e5529b8f01304cd12c7b1028d4139438dd580b980c65c0c04083e621b32d3005b72e583c7ecdecaa6f48e8f8fa61c1763e63cf7ac43de68e9fba652fa79610df0c9f6e4dd719b72a46b2375083df4cf9871bd2c7ca736f07fcf2fe0d12d68b7702e05570e66907f53ae853e378d337e6e1cf6db5cb05539edf6c3b696ec35b16f335ae4620636a51d0d12616e8f390a0ba747e58a804656c5a6a9aeec2ab9f904c3e323dd269b5a81be71ee626dd6d921d3bfebf1d356f3d1bc70aa68c9d9efde6917354d341520fe7b758bb8f1484992e6b9c6263d7e1da7c3a1d0de61cafca26084b9cc5687153f5be1fd47b0a3980252f2727ef1b2e4c52680efc11fac920d1864ba68b2af260cd8438656fe293d98b81ac6f9bcb467b2fdba3af3377d90c807db8d61a3fbd2d8badb921cfd595b0a12632e073ce0af1cae8d4b473b1956bd86e9983544acdb3365e342b57af28a4474f5301b1679b44a5882bf15e0f40e6c10b1c96bd1cf1e6e62cd1ca4fb49fff4a463ae41e65c3227c910a99278b8dd7b32ad125e2bf0e09036f96b4e0c4687992ac2f59c52bca8670bc3b6c032923560bfbb090b96a7b8f8dc607baafaa14dad00ee0423c83b999d27c4966f223e0bf15713900e0d7c10dd6502acf36cdcaf35e0110da77601b813e39ee3079f5fe4f328c459892ea31f92b0ef85be5ffce119d05327e5fef7be11b3de5a3240a169a7bb105d92e6ad8b687253665ffbba880eecbf559ad77f7d02b68af7edc14861012aae40a9f8b1cff42a1547e3bb60f2e06b0372150ce424845a20e44e694730bc6e17cfa430030747ba3a4c3e3e2a8e5fcef0fef04aadc933549526f37e0a40ef7e2de5532fd39c8c0b6b00004f2481e3ecca329fc7ddc326acc4d84f880b9562da283b9b10b10326b658905fbe802cb3a82a49562c84dadc3699f3e4af1a3751901fa07727c561038a80cbe4b4f22ab72ddc37b03297177818cd41a913b2217ba257ec7ab4378f3822660c13a2a0ac18e832605053475a07a12b9989292e4be290c47313ee1b1ec526550d7240995b9c3b1e4ed9df8568c64c6fdba0785901b4fcf4305e8149797c839230b81929d33d57971220f9ea7f37d91cbc2029db98f11621fc89a0087de8783233f9361aeb57baf0d47e28066993a5faf3a9beb803536524dfd89c12138076477894f1f15993aed086b16724d83dc8a9fb6bdad037a6c47969b19f70ba9186daec252caba2f8fa3517a20787868a36365e478defec89bf6a2be68b9ab68df24ee1c5a8e305b7c5f83f788bcfdda1b3f19fcb69153da39d306f9e0307b840cf794f6ed7395eac56d02ab6e0ec1fc9964996bce8b35e3b68e748097f51058a4535723ce303a6c5ef50a9d2c6f66f5848dc0874dc701bdeb60a909c5143d791010c69a5dfb0c766a58650d5c086722a88ed15300475fa1b574429e571987e4526c80ac651c5f602a2f117f89a2ae6a1412a0152e6151b2a50e7952fad0ac7e43a761028fcd911790223d9629b681c51876b49c3491b0e141c0489f31137a92a732bb953a6afc1d3b69d1acec04a33c76ec089b9466b9904b3fc737d6ee28d5a812ef9f72652df24561a1441310c73612c8ec8bd6d8dacdda73aef0053d77bb0af8e2a19a870c0579d318f38cab02f00aed69d4b1ce99f63cf95ac6f8b830797ebf02fcdf5f7650c949c20ba4bcc3b1cd5e67cbd792818ccca4c334a8a8d681b249649e5d16a974af5ab870fe74277a24f1d750a38887670ee2aebca83ca2d15a0d92bc6f4f933b4090f50cd112c201e3af4e118b007126776460d889b319a0cbb54d1ca322f3d17f78f046c7c9910970268712e787331a86a8f6bdc30196309074d3da3f3922e036cc137f8670712690fd40f494748bbb23d8537b77daa2d42a684ed8a6ca4b749226ade59888a0df58a4ecc21acb864ced7e6fb9c0839c6c7699f8892d319a8f09bc62d6d67ee2a66674d5f23d2bf43e54642a3c449aef4fb9350780ec858d557ce7bb90716cd6b11bb9337d8c1bbc4357c6d0a1b5aee40a558176b9f4c667d3e445657139463b0d031d76c0aae2d9e39760e5db02af66db1f7c20b99691c211301d1ee3ac211179e4182edc7d5cdf456b5219202aa9dc079f130e32ded4e304c791d93678a617bd11730a494dc32acd0e4789d53c4c97cef978a63c8421ea36937a0fcfe64bafb20465201ba7d906aa60f3f9883bd721355cc84a564222f392109046232d29f61abe51fc21a141f70e40dfd5d894c4ea813657979df0a0eaf51489e6af84defd4b62fcbc4e20056b01e9d5c405ff1f6cf34bd95151df7a2cb07cfefdf85b6eedb07e16af27ea7ee43f9d830e5ca782fd264dc87665c0cf42856091fa53f2c66008c66dd23b129d66cf16c487eda4ebfe7ee3d74e6de88939f7ad2872bca658ea5af75d1d0a1fae57b213ac7d3b5f611be41ff3bde825d7d51f4439a4f8eccae578a40b07f791715e9c85df0e232124dd1b72c6bac864896158188346a5cb2c9ae7f408e7bf0077cb20fd2258d1efa81f957d1470e9a9c413f417d1532d9200fd642d60447dce05adb6da56aeb877bccc62fc68047e32514db6041863f8fc635246273418eedeca890274bf4cee60cffb5128510e6b70357c389e35eba6eb56c5cd318568239d61c66259746270629d7fc801af185f7113d6eb7ad91b8bcf9029dd1ad3eb39d81295b25972bcc0faf19f7e2451f1ef600d5f1a0cb10395cd18a88e238ebc0bd94b8a665eb40d722d959a8a71144678065d11f9f5c3aa1f7544cb5623d09969386ed526751de2334042c461f4efe74b3cb93d606f758353b941088258f5e6fa141a1629846e75e893dc199faeab8cf37d1fc7da83406f7f90f8d6f8d5a54446e320cdb91fe825fb53b037ef696bc2db86674bb066629391182bb523b3f3d41acc83a7ab54fcad55ddf8dc1ce14d1ada0e9116ded4f83a5bd98836b17a2a4581da1296b8081d398da2d96bf1593566f6c2c2ce50944df5c595778d0cc4339a5b2f9a028b7f280b28f38325bf45d7c2ec4487985adc694348bb1250832e22cbc03977bd37de74615763f0c586a564292e5bcca5a6439f96e9eaf10c5ecf21739330571b9ffae18a9859b799dfe5bb2badacc4419ff0446391512be1fd872d63667e725ffaceb9c9a93fe238172f752178e4641f522573163ea22df34278a316d2ca20f9dbe47dd22ad5b667554acf5aa6c957a077bb7ec168aff3e4e00d80e79e91e3eedd9f0a2d146b8e77b9d023132cd01c187ae291a5cb543e0a2e4d8776e18add1a5e5ce39df2f3330fd51670dcfaf2a2a2ece4f8f59a1fc2708028e845ab4c6c2d9bbde21c5c80b7a4a87834f2a90b3c6aaf3c4fc305ba3cc15ffa41f5666e8ee3cb73ed1fe56db40d0b21341d4420438e195cd2569d28f1e8521f895491f2f23e73b18b21bb0587744cec32a0fe12862ec14f426c5ebbb537edbabd5307f8e5cf1965908ef6b9e64235afde8de3c8ad8fbad5e68876ee1f84cb644edec90e73269b1352b4c62ed0f4e2ada08dd579555dd9d3ea45983a68bf52ea1aaefa8b791778c4e134103042ac1894699377df293b058ce8139f427d448be407db34f154bdff2cc9f1effd497e56f553f9edfba2dde3a14a2aa35936e49a8a698d4c9ba6438d97c5c5e50e19a0fe1d34d2b29bc73e89d3df375734fcb668cafc6bf01409cb265a59e1887639621e2bb4dcc2ca1447b0dc2d61ac5556b0794ebc7bd6cad8f68998614b17b5f12c2acbbc1d7bceb93e492d067e371023d7c0fef54feac7c8efe3160a283395050ec99f3964632209d0126bece7fa443c39ef7632b47b10a93f37df89d00f3726a7912220b315cac63663675a55236d47f206694a3abc7ecb380fe2e10e7cf914decaa2263b2251a7cd0304579b70d97e5422047961c64d368c3c4d3542a98900ee64b613480ac7301f5a175bcb1e013da07c3907fcc3cefbc935e717806c56dc5c2a460fb587f833f3ae438f5a421bde47058358b9775f5b9dac9d6bf36985914d140fabe271b1baf86801ae036713015c18a233079cd294a22207a6090c0e9b51003825a33547b58187a51cc1907b5b196f9f12526da6b9f1e7bb0a42cd3bcc10809d62e94cf3e252d81b3d2c9f56c01f7ab1419ea758e9189b2dcbf8726b20f8ee31dbef418c6ab4d3db0ba447f6068537b1e5e5b1cf4fa48ef5884867b2e8e5b12469dcbfb87b587b86a38e8b4bf986a1d2178722a4ad92a9508740c2d77b52143b868e5a000de495e1387e376ee166fe53f7b72d148f1a7f8e2513a1f84dcb4055a577734d7bf8dc7eba93fd5ec0eda921091b41ef964a85eba551850544734f5ac6ebc4715eb59e1c708d6f8cdba7c17824d9c3fa1fce0701f85689130fc1f4a5112e33ccbc347196e3032dd244e3372ebea66eebc833bd4935be34aabf19f08135aae7c50e9a2f0a1a454c8a532736081359958905b4ad50970cbfdaf9b10fc398004e0f839c9331e5ad9b031f669aea2aae85f23670ea9de0233bb8f6be3dae83f3396e9672ec7a64232d6e2188c3eb9ccb044b58910f2dbd931b815825b1eb8ea7b0c5170081bc57359dbe6262336da040a697ae04f1dcd1ba437d7823515eef9355dce2f7c0afcfbe50e5af3b51098a705622eff0fb9f096c143d7cab0638b85ad936e5a2866b762057dd313d42720921881c8cb2d8654fc9cb23065110c9d51fe50725fab1df40c8bfccf74adc9a94836a8fa96d987f2bec87836aa54ae7b3472a6bc822d25f9d692f086732c66d07d87b6a58f882a6d88c8c2ec1a99a4b77c86e9f0b234a181454c0714a3b53f87ef979e28e4381468b879c29e77d6d46bd9a52c87db4f83dabd9279e21ff35677d105fa9ad2f3afe244f332d51347646cd9c5f3feb9e7198a148363d140e6171b620c6ce11b97992847131c9c022c0e88ed213bacce0362bef4e0f769bc8c5c43efb4d69b7febb8bfe24706acee2ff9557ec3489ea87202e097110039cf2d592fc96eb3ef47d258ba8422a70de9d6d2cf9ccfdc0d7c2cc064451621bc2b35deb1e692a29db74970fb3ded240c2e261ac4fc8d9037508397bf3da15c4a9a7242751f8c3939acf4b382003a03a1f0b866328ee8377743f4fd1fe625a69ea69f8429fe15bba8547b1f8723e617dd3a787", @ANYRES64=r2], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) close_range(0xffffffffffffffff, r3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0xe8, 0x1f0, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @broadcast, 0xff000000, 0xff, 0xe, 0x0, {@mac=@remote, {[0xff]}}, {@empty, {[0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x3, 0x0, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@private=0xa010101, @broadcast, 0xff, 0xb49b011140318888, 0x9, 0xb, {@mac, {[0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0xffff, 0x5, 0x8001, 0x9, 0x3, 'geneve1\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc7bbd73e14b227cd}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xffffffffffffff90) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x118, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0xffffffff, 0xffffffff], 'rose0\x00', 'ipvlan0\x00', {}, {}, 0x2c, 0x2, 0x1, 0x20}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x2d5, 0x4, 0x15, '\x00', 'syz0\x00', {0x566bf4b4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) (rerun: 32) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000440)={0x0, 0x1000}, &(0x7f0000000480)=0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000040), &(0x7f0000000580)='%pB \x00'}, 0x20) semget$private(0x0, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 3.080255375s ago: executing program 5 (id=537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x81) statfs(0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008801}, 0x8000) 3.053122775s ago: executing program 5 (id=539): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x4000000, @loopback}, 0x1c) 3.038494266s ago: executing program 0 (id=540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10e88d, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.627289846s ago: executing program 0 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x321042, 0x1aa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$FITHAW(r3, 0xc0045878) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.820912096s ago: executing program 5 (id=545): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000400)={[{@acl}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {}, {@delalloc}, {@usrjquota}, {@minixdf}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x8012, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x20, 0x0, 0x11, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000900)={0x80041, 0x4}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000080)="75a101010100188d9233a34871d6000000000003", 0x14, 0xfffffffffffffffe) sendmsg$tipc(r7, &(0x7f0000000180)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}, 0x4}}, 0x10, 0x0}, 0x4000040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000040)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x200040c0}, 0x20000090) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) accept(r10, &(0x7f0000000300)=@un=@abs, &(0x7f0000000380)=0x80) sendmsg$IPSET_CMD_SWAP(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000606010300000000000000000700000a0900020073797a3100000000e800020073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40240, 0x0) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f0000000400)={'dvmrp1\x00', 0x200}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, 0x0) 1.566148082s ago: executing program 1 (id=547): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') writev(r1, &(0x7f0000000080)=[{&(0x7f0000000680)='4', 0x1}, {0x0, 0x500}], 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x7, 0x91}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=@newtaction={0x89c, 0x30, 0x8, 0x0, 0x0, {}, [{0x888, 0x1, [@m_tunnel_key={0xdc, 0x11, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}]}, {0x8d, 0x6, "73d2d7d13008808299f3e862f7429aa8da3ad68d7edc8d146b6b9d581bf83da799e8cc07fa978025bd3eb8ac43e5a22934310af11d358e7169526acfcfb4d87f0a11b75a569bb67b3a2c5bfa2e46ccafff2d71d907f992c3e9918291d5e942c79aaa3602f1944f3f4870407519f55a349a004dd9f6598fa0ff20aded5c9666aaef5754180dd0f71a9f"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0xe8, 0x3, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x8, 0x14, 0x1000, 0x5}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x81, 0xffffffffffffffff, 0x80, 0x5}, 0x1}}]}, {0x62, 0x6, "66925f56478d69e1291ada8a35ff745fcaa2bd7910e3e74e82e081089443703dcae2e8d23cd6e1daa77ea81026dd1e464ed8b2a1e15120b5bc8e3e4e54c715d197e89aeac623623a89bbc3cde619fa47a9584608467f4f1f72a523a21c7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x7c, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x35, 0x6, "a6356902922998d57cabf66675335d4fbbf12ad0a3ec179712bf650f9f8f64231059fd30b1bea45cec7cdf5c802929e18c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0xc8, 0x17, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffffb}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x73, 0x6, "f80d566e3bb93b7da6f0dc20981e26f7497cd01bd50ceb48a8424601102526f81e521a818dd2291ba4d53196fea47498d7d4bec3b2a69e9b475d1a3e0c6f247668d873e58b82d1607b30f60fb93654a1a5837c4677f990568d25baee469f0d68f8c261ef19439a582e2c5ca5286cb1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x418, 0x1f, 0x0, 0x0, {{0x7}, {0x3b0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x113, 0x6, {0x0, 'raw\x00', 0xfd, 0x2, "fd4de37b0a3b41075074f3cb447c2ecf51741e36eb799488a3bdba714cb0c7ce2adf0258619cf0f91e802dcfb318b7f271dc39029319d82cfd0d89a17574969a51aa397df0be373391f6283ed59c21bc0c16be672c3e8b5b72606d7d555b6246b555041053d84696f95dfa018611845eb1b170c91b3c0b44bfafbbcbfe18d462799238d4958ded1d27df22d250df61404bc046226263ac07fad8073596549bf07e351d28c81946121b6308420eb5deffe05c4bb63da5d5e1e9ef298c4266f8991efd959fdc61b1ec2568f2c6e48d07ef172a7792e4ef603a59650c4651bc7e7755021b897f23bc1b7a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TARG={0x7a, 0x6, {0x8, 'mangle\x00', 0x5, 0x6, "844b3eca0c546641ce93beed501d72a44063ca1a972911a1b9ecaac62fd826bd0475489c4bd6d668cd94f940b40fabfd73a02f4f05304249a2227dfc3d560ab9533418f387ce8996fe1ae819c0afed28"}}, @TCA_IPT_TARG={0x156, 0x6, {0xff01, 'security\x00', 0x1, 0x8, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x64, 0x6, {0x3, 'mangle\x00', 0x1, 0x83, "1c78791cbf153a129bcd33eabf2eacdca7a75f235c11998241a2c665e5d8a46fd88c671f412d0db169c0133b27252171f87a7931228ede29683a"}}]}, {0x44, 0x6, "6b4993d23f21388eb37a31a5226f039b393142394cd70ac2737ef0f33881581628e8438111b7f5eb9f14eced3ecb52610979a97337f43290e95bae32763ff1ab"}, {0xc}, {0xc}}}, @m_nat={0x164, 0x18, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2, 0x1, 0xffffffff, 0xe92}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff7, 0x2, 0x3, 0xfffffffc, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9f3, 0x2, 0x2, 0xfffffffd, 0x40}, @local, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1ff, 0x4, 0x0, 0x8}, @local, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0x1, 0xb, 0xffffffff}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x10, 0x0, 0xffffffba, 0xe75e}, @rand_addr=0x64010101, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x91b4, 0x3, 0x9, 0x40}, @private=0xa010101, @multicast1, 0xffffff00}}]}, {0x21, 0x6, "142fddaf16ce23d6027831b08a6620c9650b14e910bdec7f7a5b17a244"}, {0xfffffffffffffdda}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x89c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) connect$can_bcm(r4, &(0x7f0000000080)={0x1d, r8}, 0x10) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r10, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_flags=0x1000}) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000201, 0x0, 0x0) 1.203889971s ago: executing program 4 (id=548): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x421, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @remote}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x5c}}, 0xc080) 1.182414081s ago: executing program 3 (id=549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x81) statfs(0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008801}, 0x8000) 1.174094731s ago: executing program 1 (id=550): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4004}}, {@errors_remount}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@nogrpid}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '\x00\x7f\x00\x00\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'journal_path'}}, {@euid_lt}, {@smackfsfloor}, {@smackfsdef={'smackfsdef', 0x3d, 'stripe'}}, {@uid_lt}, {@smackfstransmute={'smackfstransmute', 0x3d, '*+'}}]}, 0x3, 0x43d, &(0x7f0000000880)="$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") r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x20b}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x154, 0x10, 0x1, 0xfffffffe, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x820, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc, 0xfffffffd}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x4, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e23, @in6=@mcast1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x40) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f00000001c0)={0x7, 0x0, '\x00', 0x1, &(0x7f0000000140)}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.055742084s ago: executing program 3 (id=551): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001002bbd70000200000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="000200007f000001000000000000006d730010273f991200"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100), 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = inotify_init() inotify_add_watch(r7, 0x0, 0x14000402) fcntl$lock(r6, 0x24, 0x0) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) socket(0x400000000010, 0x3, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xc, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000046000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006000000095"], &(0x7f00000010c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x90ac33d9d53e1b16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 983.172106ms ago: executing program 4 (id=552): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0xffff0000, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 898.923308ms ago: executing program 4 (id=553): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x946, 0x66, 0x0, 0xb, 0x29, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f0000000440)=""/178, 0xb2}, {&(0x7f0000000500)=""/202, 0xca}, {&(0x7f0000000600)=""/105, 0x69}, {&(0x7f0000000680)=""/67, 0x43}, {&(0x7f0000000700)=""/64, 0x40}, {&(0x7f0000000740)=""/43, 0x2b}], 0x8, 0x2, 0x7) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r4, 0x7, 0x4) 626.900144ms ago: executing program 5 (id=554): sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xd0002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0xc0f0, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xdd5}, 0x0, 0x7, 0x10000, 0xd, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x41}, 0x94) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x80) unlinkat(0xffffffffffffffff, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$FIONCLEX(r0, 0x5450) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000001a80)=ANY=[@ANYBLOB="1800000000400000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000850000007d0000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6, r5}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) stat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x79dd}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 560.008486ms ago: executing program 4 (id=555): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x8e, 0x0, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x40, 0x7800, 0x0, 0x6}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@delchain={0x2c, 0x11, 0x1, 0x10, 0x0, {0x0, 0x0, 0x0, r0, {0xb, 0xb}, {0x5}, {0x0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x24}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c804}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f0000000840)={0x0, 0x80000001, &(0x7f0000000500), 0x0}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x0, 0x2}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000680)={0x0, 0x6, 0x0, 'queue0\x00', 0x8}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000592000000008"], 0x50) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6005048a00143afffe8000000000000000000000000000aafe80000000000000000000000000aa87a9b9b479dd009078000000000000"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="f6ffffa8ffffffffbf"], 0x8) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) kexec_load(0xfffbfffffffffffc, 0x0, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) fadvise64(r5, 0x2000000001000, 0xd1a6, 0x1) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x38, 0x604, 0x0, 0xb, 0x13, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) r7 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000280)={{0x0, 0x1}, {0xe}, 0x0, 0x1}) recvmmsg$unix(r5, &(0x7f0000001a80)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/12, 0xc}, {&(0x7f0000001980)=""/83, 0x53}], 0x4, &(0x7f0000001a40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x40000000, 0x0) 505.353187ms ago: executing program 4 (id=556): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x2, 0x2, 0x6, 0xfffffff9}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r2) socket$igmp(0x2, 0x3, 0x2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setreuid(0x0, 0xee00) fchown(r4, 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x12000, 0x4, 0xf}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f0000000300)={@id={0x2, 0x0, @auto="086e1202d8f86fd587ef13922a344922"}}) syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaab84fbdff8a2086dd60ff00f700240600fe800000000000000000000000000034090000000000000000000000000000aa00024e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="904f000090"], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0xb, 0x4) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) mq_unlink(&(0x7f0000000000)='%:\xd2^/!\x00') syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) 488.576098ms ago: executing program 1 (id=557): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$inet(0xa, 0x801, 0x84) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='.\x02\x00', 0x20000402, &(0x7f0000000800)={[{@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noinit_itable}, {@noacl}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nomblk_io_submit, 0x2e}, {@dax_inode}, {@noauto_da_alloc}, {@nomblk_io_submit}, {@usrquota}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@mb_optimize_scan}, {@nolazytime}], [{@subj_role={'subj_role', 0x3d, 'discard'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'data_err=abort'}}, {@measure}, {@appraise}], 0x2c}, 0x1, 0x506, &(0x7f0000001340)="$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") getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, 0x4df5, 0x5, 0x1c0000, 0x2}, &(0x7f0000000580)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)={r1, 0x7fff, 0x3, [0x5, 0x8, 0x2]}, &(0x7f0000000600)=0xe) (async) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20001, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xffffffffffffffde, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000106000028000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000cbff1b000000020000000900010073797a30000001000900030073797a320000000014000000118806"], 0x7c}, 0x1, 0x0, 0x0, 0x4a041}, 0x44041) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000040)={0x9}) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) unshare(0x20000400) (async) faccessat2(0xffffffffffffffff, 0x0, 0x1, 0x1100) (async) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_linger(r5, 0x1, 0x4a, &(0x7f0000000180)={0x1, 0x7}, 0x8) (async) sendto$inet(r3, 0x0, 0x0, 0x20008080, 0x0, 0x0) (async) ioctl$TCSETS(r2, 0x40045431, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000400)={[{@errors_remount}, {@nobh}], [{@seclabel}, {@measure}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@euid_eq}, {@appraise_type}, {@uid_lt}]}, 0x1, 0x51b, &(0x7f0000001880)="$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") (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40100, 0x92) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000000)={0x101, 0x2000003, 0x1758}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x89) ioctl$FITRIM(r7, 0xc0185879, &(0x7f00000000c0)={0x3, 0x1731b, 0x3}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c0002800800034000000004080001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 479.800278ms ago: executing program 0 (id=558): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000100)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") socket$inet6_icmp(0xa, 0x2, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x7) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x33, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg2\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r6, &(0x7f0000000600)="05d936277c6f542200", 0x9, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xff, 0x8, 0xed, 0x0, 0x0, 0x8000000000000001, 0x1020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x81, 0xffffffffffffffec}, 0x24, 0x3ffffd, 0xfffffffd, 0x7, 0x8000000000000000, 0x94d3, 0x0, 0x0, 0x0, 0x0, 0x2000000000000007}, r1, 0xffffffffffffffff, r6, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r5) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') poll(0x0, 0x0, 0xb) syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) unshare(0x2a020480) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) syz_ublk_setup_io_uring(0x729, &(0x7f0000000700)={0x0, 0x9d19, 0x10000, 0x3, 0x364}, &(0x7f0000000000), &(0x7f00000007c0), &(0x7f0000000800)) 318.560972ms ago: executing program 1 (id=559): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)={0x4c, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "503a05035bdf23f73ce4ba80459a7a00"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}]}, 0x4c}, 0x1, 0x300}, 0x0) 317.710912ms ago: executing program 5 (id=560): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) 184.190445ms ago: executing program 1 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x81) statfs(0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x8000) 134.167776ms ago: executing program 1 (id=562): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], &(0x7f00000020c0)=""/4105, 0x66, 0x1009, 0x5, 0x10}, 0x28) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x22) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2cd, &(0x7f0000000c40)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x17, 0x4, 0x0, 0x3f, 0x2bf, 0x65, 0x0, 0xbd, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, {[@cipso={0x86, 0x46, 0x2, [{0x6, 0xc, "68ed3e5a36bfbb70863e"}, {0x0, 0xe, "0a0a4bf48ae7677b0b2a6d85"}, {0x6, 0x11, "32758e4c749d31e66e33f94986934b"}, {0x2, 0xf, "d8805448897b23b3f08fe66431"}, {0x1, 0x6, "5f628af8"}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x75, 0x0, [], "f51f58c3ae4762acbb15a6623f3699bd39dee948f6310569517213626b2d88d36d93b350ff0568edec89140526906af3ae1b910b8964fd55e466201aeb1304771e691950ad14de7bb001483aa23bc43e23dec947988d5cfb42967eb7e0fba8c8df882acd839ed0fa2a18b857fab53f1a794d46436f"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x40], "32e73a76df9fe84afed7274e49f52db94a7882a6704185abf80393657c277dcdb0af6584d4b0a5e5e76de960f10724af3b39c4067c1f888e24f920be6d6c315c58010055d551dcba8326306340a7f466710e07fe278ef192f37d7beb9a1c297a44862db3bcbd21640c20e478bcbf5a31fbab5679d4599f4cd5bc73e54d215988de23f4ffab346a132d0f9d303b512142804b412d42faabe2c3a81c18c5f841ea09279299daf9dbd344d309cbd459017b6f654db0a50dbab9f1"}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1}, 0x1, {0x26}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x8}, 0x2, {0x9, 0x0, 0x2, 0x3, 0x1, 0x0, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "5be922064dedfe9a52d9fb45585d4dac027abc6f10462512854fd2223ea4259d6f378e6a04c3fd8ebfbd4c88ef63a514e906a3e118476bdf1b29ad1b4661da33240590f278c4cc44f570db2791747fa461e90df64a3dbfd261f8f6672a9ebc3b31cecc2d1a7e3705d9f1913b21d5a31fb8102639e16936bbc53bf30e91a694d88fbfd4f26ba98d59f519a4e38c9408c5c77c18aaf57767da26992d523ed69cf58008b91717f1b2dc13efa0ab326c0b13c90bc9a96403988bb9fff8eb2cc7891f5cbefa66ea31461fb9e653c421ef511ea5ca702821819a323d16dc15671c280431632f75e3519ee90cccd734b3482f"}}}}}}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x168) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x22000, 0xc6b5897ef189faf9) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000300)='%', 0x1}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r3 = socket$kcm(0x2d, 0x2, 0x0) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_access(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mmap$usbfs(&(0x7f00004e3000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r5, 0xfffffffffffff000) sendmsg$kcm(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000002040)}, 0x8040) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000a40)={[{@noblock_validity}, {@grpquota}, {@grpid}, {@nombcache}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000006800020027bd7000fbdbdf250a00000000000001080001000200000004000b0006000400"], 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64) r8 = getpgrp(0x0) move_pages(r8, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) syz_open_procfs(r8, &(0x7f0000001000)='gid_map\x00') 119.555197ms ago: executing program 3 (id=563): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000080)="802000800000a8a80000cd7a0003", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0x6, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r1, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f0000001140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048010}, 0x404c800) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000a40)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)={0x20, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}, @typed={0x8, 0x59, 0x0, 0x0, @uid}]}, 0x20}], 0x1}, 0x10) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 0s ago: executing program 4 (id=564): syz_emit_ethernet(0x46, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11, 0xe, 0xc18, 0xa00fff5}}}}}}, 0x0) kernel console output (not intermixed with test programs): slaves [ 46.076663][ T3619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 46.155895][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 46.454243][ T3615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=3615 comm=syz.3.27 [ 46.454243][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.454488][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.486505][ T3615] Zero length message leads to an empty skb [ 46.542521][ T2232] hsr_slave_0: left promiscuous mode [ 46.552321][ T3654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=3654 comm=syz.0.30 [ 46.570962][ T2232] hsr_slave_1: left promiscuous mode [ 46.583763][ T2232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.597988][ T3656] tipc: Can't bind to reserved service type 1 [ 46.604354][ T2232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.621410][ T2232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.626033][ T3658] loop4: detected capacity change from 0 to 512 [ 46.628892][ T2232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.730930][ T3658] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #3: comm syz.4.32: corrupted inode contents [ 46.759963][ T3658] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.762960][ T3658] EXT4-fs (loop4): Remounting filesystem read-only [ 46.772123][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 46.772148][ C1] EXT4-fs (loop4): initial error at time 1784930018: ext4_do_update_inode:5742: inode 3 [ 46.772193][ C1] EXT4-fs (loop4): last error at time 1784930018: ext4_do_update_inode:5742: inode 3 [ 46.849836][ T2232] veth1_macvtap: left promiscuous mode [ 46.860283][ T2232] veth0_macvtap: left promiscuous mode [ 46.877608][ T2232] veth1_vlan: left promiscuous mode [ 46.884539][ T2232] veth0_vlan: left promiscuous mode [ 46.933164][ T3658] EXT4-fs (loop4): 1 truncate cleaned up [ 46.940851][ T3658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.983404][ T3658] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.005969][ T3654] loop0: detected capacity change from 0 to 1024 [ 47.027230][ T3654] EXT4-fs: inline encryption not supported [ 47.041606][ T3654] EXT4-fs: Ignoring removed bh option [ 47.051069][ T3654] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 47.080877][ T3654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.119572][ T28] kauditd_printk_skb: 131 callbacks suppressed [ 47.119591][ T28] audit: type=1400 audit(1784930018.586:360): avc: denied { write } for pid=3653 comm="syz.0.30" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.151501][ T3656] loop3: detected capacity change from 0 to 4096 [ 47.225443][ T28] audit: type=1400 audit(1784930018.666:361): avc: denied { mount } for pid=3657 comm="syz.4.32" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 47.261530][ T3668] netlink: 276 bytes leftover after parsing attributes in process `syz.4.32'. [ 47.329690][ T3656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.387562][ T28] audit: type=1400 audit(1784930018.846:362): avc: denied { setattr } for pid=3655 comm="syz.3.31" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.424307][ T2232] team0 (unregistering): Port device team_slave_1 removed [ 47.489830][ T2232] team0 (unregistering): Port device team_slave_0 removed [ 47.500486][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.578291][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 47.592870][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.612807][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.724681][ T3658] syz.4.32 (3658) used greatest stack depth: 9848 bytes left [ 47.767874][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.941788][ T28] audit: type=1400 audit(1784930019.406:363): avc: denied { write } for pid=3690 comm="syz.4.35" name="syz1" dev="cgroup2" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 48.021603][ T28] audit: type=1400 audit(1784930019.486:364): avc: denied { write } for pid=3679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.037973][ T3691] loop4: detected capacity change from 0 to 512 [ 48.089878][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.134249][ T3591] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.161707][ T28] audit: type=1400 audit(1784930019.526:365): avc: denied { write } for pid=3690 comm="syz.4.35" name="syz1" dev="cgroup2" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 48.163028][ T3703] loop4: detected capacity change from 0 to 764 [ 48.194196][ T3591] bridge_slave_0: entered allmulticast mode [ 48.201117][ T3591] bridge_slave_0: entered promiscuous mode [ 48.208145][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.277631][ T28] audit: type=1400 audit(1784930019.576:366): avc: denied { write } for pid=3700 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.335007][ T28] audit: type=1400 audit(1784930019.616:367): avc: denied { write } for pid=3702 comm="syz.4.36" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.341754][ T3591] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.365426][ T3591] bridge_slave_1: entered allmulticast mode [ 48.372220][ T3591] bridge_slave_1: entered promiscuous mode [ 48.379228][ T28] audit: type=1400 audit(1784930019.686:368): avc: denied { remount } for pid=3702 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.416488][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 48.425469][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.503538][ T3591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.515121][ T3591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.550453][ T28] audit: type=1400 audit(1784930020.006:369): avc: denied { setopt } for pid=3702 comm="syz.4.36" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.820160][ T3591] team0: Port device team_slave_0 added [ 48.910262][ T3591] team0: Port device team_slave_1 added [ 49.199732][ T3591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.229350][ T3591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.366048][ T3591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.438865][ T3591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.466149][ T3729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3729 comm=syz.0.34 [ 49.494683][ T3591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.587398][ T3733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 49.609044][ T3591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.638986][ T3711] loop3: detected capacity change from 0 to 512 [ 49.653215][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 49.828216][ T3591] hsr_slave_0: entered promiscuous mode [ 49.912375][ T3591] hsr_slave_1: entered promiscuous mode [ 50.006297][ T3591] debugfs: 'hsr0' already exists in 'hsr' [ 50.034396][ T3711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.092063][ T3591] Cannot create hsr debugfs directory [ 50.191886][ T3711] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.325909][ T3803] loop4: detected capacity change from 0 to 2048 [ 50.373313][ T3803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.374594][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.480992][ T3803] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #12: comm syz.4.38: corrupted in-inode xattr: e_name out of bounds [ 50.495986][ T3803] EXT4-fs (loop4): Remounting filesystem read-only [ 50.506590][ T3591] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.518727][ T3591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.526577][ T3591] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.540490][ T3591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.552552][ T3591] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.568495][ T3591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.576371][ T3591] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.586363][ T3591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.720069][ T3825] loop0: detected capacity change from 0 to 512 [ 50.726773][ T3591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.747248][ T3825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.769672][ T3825] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 50.889970][ T3825] EXT4-fs error (device loop0): ext4_xattr_set_entry:1672: inode #2: comm syz.0.41: corrupted xattr entries [ 50.916719][ T3591] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.926424][ T3783] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.933549][ T3783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.945930][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.953033][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.275968][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.828284][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.901084][ T3591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.023793][ T3849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.43'. [ 52.088227][ T3849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'. [ 52.199333][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 52.199348][ T28] audit: type=1400 audit(1784930023.656:475): avc: denied { create } for pid=3859 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.300559][ T28] audit: type=1400 audit(1784930023.696:476): avc: denied { connect } for pid=3859 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.416308][ T3591] veth0_vlan: entered promiscuous mode [ 52.461304][ T3866] syz.0.45 uses obsolete (PF_INET,SOCK_PACKET) [ 52.469008][ T28] audit: type=1400 audit(1784930023.916:477): avc: denied { bind } for pid=3859 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.489797][ T3591] veth1_vlan: entered promiscuous mode [ 52.560712][ T3591] veth0_macvtap: entered promiscuous mode [ 52.587725][ T28] audit: type=1400 audit(1784930023.976:478): avc: denied { ioctl } for pid=3859 comm="syz.0.45" path="socket:[6668]" dev="sockfs" ino=6668 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.634020][ T3867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27745 sclass=netlink_route_socket pid=3867 comm=syz.0.45 [ 52.653883][ T3851] loop4: detected capacity change from 0 to 512 [ 52.654177][ T3591] veth1_macvtap: entered promiscuous mode [ 52.735288][ T3591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.780881][ T3591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.792389][ T3851] EXT4-fs (loop4): 1 orphan inode deleted [ 52.812570][ T3777] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 52.825832][ T3760] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.846256][ T3851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.865144][ T3760] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.866136][ T3777] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:16: Failed to release dquot type 1 [ 52.885682][ T3777] loop4: lost filesystem error report for type 5 error -117 [ 52.897069][ T3851] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.919669][ T3760] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.931059][ T3760] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.030866][ T28] audit: type=1400 audit(1784930024.496:479): avc: denied { read write } for pid=3871 comm="syz.3.46" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 53.082310][ T3877] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 53.082310][ T3877] The task syz.3.46 (3877) triggered the difference, watch for misbehavior. [ 53.316060][ T3884] loop5: detected capacity change from 0 to 512 [ 53.337914][ T3877] loop3: detected capacity change from 0 to 512 [ 53.450661][ T3877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.791131][ T3893] loop0: detected capacity change from 0 to 512 [ 53.800545][ T3391] IPVS: starting estimator thread 0... [ 53.853390][ T3893] EXT4-fs (loop0): 1 orphan inode deleted [ 53.885375][ T3893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.898416][ T3895] IPVS: using max 1776 ests per chain, 88800 per kthread [ 53.953796][ T3893] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.019140][ T36] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 54.021533][ T28] audit: type=1400 audit(1784930024.496:480): avc: denied { open } for pid=3871 comm="syz.3.46" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 54.053877][ T28] audit: type=1400 audit(1784930024.756:481): avc: denied { write } for pid=3881 comm="syz.5.48" name="syz1" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 54.054793][ T36] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 54.520322][ T3902] netlink: 'syz.1.51': attribute type 335 has an invalid length. [ 54.617237][ T28] audit: type=1400 audit(1784930024.806:482): avc: denied { write } for pid=3881 comm="syz.5.48" name="syz1" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 54.691552][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.517476][ T3915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3915 comm=syz.1.54 [ 55.572068][ T3914] loop5: detected capacity change from 0 to 512 [ 55.650814][ T3914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.688450][ T3918] loop3: detected capacity change from 0 to 136 [ 55.701915][ T3914] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.795080][ T3918] iso9660: Bad value for 'block' [ 55.858993][ T3922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.54'. [ 55.983965][ T3591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.360929][ T3918] loop3: detected capacity change from 0 to 512 [ 56.398782][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.652276][ T3926] loop5: detected capacity change from 0 to 512 [ 56.694658][ T3918] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 56.795866][ T3936] openvswitch: netlink: Flow actions attr not present in new flow. [ 56.819282][ T3918] ------------[ cut here ]------------ [ 56.825506][ T3918] EA inode 11 i_nlink=2 [ 56.825603][ T3918] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.3.53/3918 [ 56.840871][ T3918] Modules linked in: [ 56.845463][ T3918] CPU: 0 UID: 0 PID: 3918 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.855302][ T3918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 56.865825][ T3918] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 56.873013][ T3918] Code: 76 c1 96 ff 49 8d 7e 40 4c 8d 2d db 9f 5a 05 e8 c6 a5 b5 ff 49 8b 6e 40 4c 89 e7 e8 fa a0 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 f1 f8 d9 03 90 90 90 90 90 90 90 [ 56.893083][ T3918] RSP: 0018:ffffc90002e037f8 EFLAGS: 00010246 [ 56.899683][ T3918] RAX: ffff888104649c70 RBX: ffff88811accc5a8 RCX: ffffffff81c29656 [ 56.907833][ T3918] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3620 [ 56.916433][ T3918] RBP: 000000000000000b R08: 000188811accc55b R09: 0000000000000000 [ 56.924662][ T3918] R10: ffffc90002e03728 R11: 0001c90002e03728 R12: ffff88811accc558 [ 56.933023][ T3918] R13: ffffffff871d3620 R14: ffff88811accc510 R15: 0000000000000001 [ 56.941632][ T3918] FS: 00007f758f3876c0(0000) GS:ffff8882ae8cc000(0000) knlGS:0000000000000000 [ 56.950913][ T3918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.957792][ T3918] CR2: 000000110c260930 CR3: 0000000104ef8000 CR4: 00000000003506f0 [ 56.967330][ T3918] Call Trace: [ 56.970751][ T3918] [ 56.973853][ T3918] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 56.980402][ T3918] ext4_xattr_delete_inode+0x6b5/0x790 [ 56.986423][ T3918] ext4_evict_inode+0xb18/0xdf0 [ 56.992102][ T3918] ? __pfx_ext4_evict_inode+0x10/0x10 [ 56.997702][ T3918] evict+0x2a5/0x510 [ 57.001943][ T3918] iput+0x430/0x5a0 [ 57.006423][ T3918] ext4_process_orphan+0x1a4/0x1c0 [ 57.012423][ T3918] ext4_orphan_cleanup+0x6a6/0xa10 [ 57.018963][ T3918] ext4_fill_super+0x33ab/0x3760 [ 57.024849][ T3918] ? set_blocksize+0x14c/0x270 [ 57.030293][ T3918] ? __pfx_ext4_fill_super+0x10/0x10 [ 57.036133][ T3918] get_tree_bdev_flags+0x291/0x300 [ 57.042101][ T3918] ? __pfx_ext4_fill_super+0x10/0x10 [ 57.047613][ T3918] get_tree_bdev+0x1f/0x30 [ 57.052422][ T3918] ext4_get_tree+0x1c/0x30 [ 57.057273][ T3918] vfs_get_tree+0x57/0x1d0 [ 57.061953][ T3918] do_new_mount+0x288/0x8d0 [ 57.067080][ T3918] path_mount+0x4ad/0xb90 [ 57.071893][ T3918] __se_sys_mount+0x28c/0x2e0 [ 57.077093][ T3918] __x64_sys_mount+0x67/0x80 [ 57.082421][ T3918] x64_sys_call+0x2d61/0x3020 [ 57.087512][ T3918] do_syscall_64+0x136/0x3c0 [ 57.092732][ T3918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.099091][ T3918] RIP: 0033:0x7f759092f10a [ 57.103713][ T3918] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.123702][ T3918] RSP: 002b:00007f758f386e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 57.132723][ T3918] RAX: ffffffffffffffda RBX: 00007f758f386ee0 RCX: 00007f759092f10a [ 57.141365][ T3918] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f758f386ea0 [ 57.149742][ T3918] RBP: 00002000000009c0 R08: 00007f758f386ee0 R09: 0000000000800718 [ 57.158153][ T3918] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 57.167143][ T3918] R13: 00007f758f386ea0 R14: 000000000000048d R15: 0000200000000200 [ 57.175973][ T3918] [ 57.179442][ T3918] ---[ end trace 0000000000000000 ]--- [ 57.192863][ T3918] EXT4-fs (loop3): 1 orphan inode deleted [ 57.201792][ T3918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.354187][ T3926] EXT4-fs (loop5): 1 orphan inode deleted [ 57.380634][ T3943] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.381191][ T36] __quota_error: 11 callbacks suppressed [ 57.381255][ T36] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 57.393179][ T3926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.396809][ T3946] netlink: 'syz.4.60': attribute type 16 has an invalid length. [ 57.425984][ T3926] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.441307][ T3943] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.443226][ T3946] netlink: 'syz.4.60': attribute type 17 has an invalid length. [ 57.454718][ T3947] loop1: detected capacity change from 0 to 512 [ 57.474896][ T36] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 57.497920][ T3947] netlink: 60 bytes leftover after parsing attributes in process `syz.1.61'. [ 57.510198][ T28] audit: type=1400 audit(1784930028.956:494): avc: denied { getopt } for pid=3944 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.573628][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.605693][ T3945] bridge1: entered promiscuous mode [ 57.658885][ T28] audit: type=1400 audit(1784930029.116:495): avc: denied { read } for pid=3949 comm="syz.3.62" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.724009][ T28] audit: type=1400 audit(1784930029.116:496): avc: denied { open } for pid=3949 comm="syz.3.62" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.823520][ T3946] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.830660][ T3946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.855738][ T3946] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.862918][ T3946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.068021][ T3950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.120868][ T3950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.239741][ T3958] loop4: detected capacity change from 0 to 512 [ 58.503974][ T3960] loop3: detected capacity change from 0 to 512 [ 58.511638][ T3960] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 58.726058][ T28] audit: type=1400 audit(1784930029.426:497): avc: denied { ioctl } for pid=3949 comm="syz.3.62" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.750933][ T28] audit: type=1400 audit(1784930029.686:498): avc: denied { write } for pid=3957 comm="syz.4.65" name="syz1" dev="cgroup2" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 58.850396][ T3964] loop4: detected capacity change from 0 to 128 [ 58.940329][ T3964] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.964229][ T3964] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.997269][ T3964] FAULT_INJECTION: forcing a failure. [ 58.997269][ T3964] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.009292][ T28] audit: type=1400 audit(1784930029.746:499): avc: denied { write } for pid=3957 comm="syz.4.65" name="syz1" dev="cgroup2" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 59.043183][ T28] audit: type=1326 audit(1784930030.246:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.3.62" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759092de99 code=0x7ffc0000 [ 59.068415][ T28] audit: type=1326 audit(1784930030.246:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.3.62" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759092de99 code=0x7ffc0000 [ 59.093616][ T28] audit: type=1326 audit(1784930030.246:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.3.62" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759092de99 code=0x7ffc0000 [ 59.131760][ T3964] CPU: 0 UID: 0 PID: 3964 Comm: syz.4.67 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 59.131798][ T3964] Tainted: [W]=WARN [ 59.131805][ T3964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 59.131821][ T3964] Call Trace: [ 59.131827][ T3964] [ 59.131835][ T3964] __dump_stack+0x1d/0x30 [ 59.131885][ T3964] dump_stack_lvl+0x95/0xd0 [ 59.131913][ T3964] dump_stack+0x15/0x1b [ 59.131934][ T3964] should_fail_ex+0x25e/0x270 [ 59.131974][ T3964] should_fail+0xb/0x20 [ 59.132003][ T3964] should_fail_usercopy+0x1a/0x20 [ 59.132111][ T3964] _copy_to_user+0x20/0xa0 [ 59.132131][ T3964] simple_read_from_buffer+0xb5/0x130 [ 59.132158][ T3964] proc_fail_nth_read+0x10e/0x150 [ 59.132180][ T3964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.132228][ T3964] vfs_read+0x18e/0x7c0 [ 59.132248][ T3964] ? __rcu_read_unlock+0x4e/0x70 [ 59.132280][ T3964] ? __fget_files+0x184/0x1c0 [ 59.132315][ T3964] ? mutex_lock+0x57/0x90 [ 59.132429][ T3964] ksys_read+0xdc/0x1a0 [ 59.132487][ T3964] __x64_sys_read+0x40/0x50 [ 59.132579][ T3964] x64_sys_call+0x2886/0x3020 [ 59.132607][ T3964] do_syscall_64+0x136/0x3c0 [ 59.132639][ T3964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.132686][ T3964] RIP: 0033:0x7f17728ce6ce [ 59.132722][ T3964] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 59.132779][ T3964] RSP: 002b:00007f1771366fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.132800][ T3964] RAX: ffffffffffffffda RBX: 00007f17713676c0 RCX: 00007f17728ce6ce [ 59.132819][ T3964] RDX: 000000000000000f RSI: 00007f17713670a0 RDI: 0000000000000004 [ 59.132836][ T3964] RBP: 00007f1771367090 R08: 0000000000000000 R09: 0000000000000000 [ 59.132853][ T3964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.132866][ T3964] R13: 00007f1772b96038 R14: 00007f1772b95fa0 R15: 00007ffdc3c4a3c8 [ 59.132898][ T3964] [ 59.455850][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.415313][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.618923][ T3976] loop1: detected capacity change from 0 to 512 [ 60.633959][ T3591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.234820][ T3993] netlink: 'syz.3.72': attribute type 10 has an invalid length. [ 61.456918][ T3993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.494912][ T3993] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 61.572095][ T3994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.618019][ T3994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.647143][ T3994] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 61.679678][ T3994] bond0 (unregistering): Released all slaves [ 61.708088][ T4011] netlink: 424 bytes leftover after parsing attributes in process `syz.1.74'. [ 61.837418][ T4020] loop1: detected capacity change from 0 to 1024 [ 61.890542][ T4021] loop3: detected capacity change from 0 to 512 [ 61.977535][ T4020] loop1: detected capacity change from 0 to 1764 [ 61.991845][ T4021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.028708][ T4021] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.427937][ T28] kauditd_printk_skb: 495 callbacks suppressed [ 62.427975][ T28] audit: type=1400 audit(1784930033.886:998): avc: denied { create } for pid=4028 comm="syz.5.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 62.465012][ T4020] ISOFS: Bad logical zone size 1280 [ 62.553311][ T4021] netlink: 830 bytes leftover after parsing attributes in process `syz.3.76'. [ 62.749230][ T28] audit: type=1400 audit(1784930033.966:999): avc: denied { write } for pid=4018 comm="syz.3.76" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.890367][ T28] audit: type=1400 audit(1784930033.966:1000): avc: denied { write } for pid=4018 comm="syz.3.76" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.912224][ T28] audit: type=1400 audit(1784930033.966:1001): avc: denied { write } for pid=4018 comm="syz.3.76" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 62.946483][ T28] audit: type=1400 audit(1784930033.966:1002): avc: denied { rename } for pid=4018 comm="syz.3.76" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 63.006169][ T4041] loop0: detected capacity change from 0 to 512 [ 63.007460][ T28] audit: type=1400 audit(1784930033.966:1003): avc: denied { reparent } for pid=4018 comm="syz.3.76" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 63.071138][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.141805][ T28] audit: type=1400 audit(1784930033.966:1004): avc: denied { unlink } for pid=4018 comm="syz.3.76" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.176976][ T4041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.212549][ T28] audit: type=1400 audit(1784930033.966:1005): avc: denied { rename } for pid=4018 comm="syz.3.76" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.268882][ T28] audit: type=1400 audit(1784930034.286:1006): avc: denied { accept } for pid=4019 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.275517][ T4041] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.288276][ T28] audit: type=1400 audit(1784930034.526:1007): avc: denied { write } for pid=4017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.330838][ T4069] loop3: detected capacity change from 0 to 1024 [ 63.356297][ T4069] EXT4-fs: Ignoring removed nobh option [ 63.373829][ T4069] EXT4-fs: Ignoring removed bh option [ 63.390140][ T4069] EXT4-fs: Ignoring removed nobh option [ 63.422188][ T4069] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 63.481333][ T4069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.612780][ T4041] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.79: iget: bad i_size value: 2533274857506816 [ 63.682216][ T4085] netlink: 14 bytes leftover after parsing attributes in process `syz.1.83'. [ 63.775161][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.880509][ T4114] syzkaller1: entered promiscuous mode [ 63.889911][ T4114] syzkaller1: entered allmulticast mode [ 63.931459][ T4117] loop1: detected capacity change from 0 to 1024 [ 63.954302][ T4117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.970564][ T4108] loop0: detected capacity change from 0 to 512 [ 63.985898][ T4108] EXT4-fs: Ignoring removed bh option [ 64.020370][ T4108] EXT4-fs (loop0): 1 truncate cleaned up [ 64.039371][ T4108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.052628][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.146805][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.211184][ T4125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 64.295777][ T4114] x_tables: duplicate underflow at hook 1 [ 64.487328][ T4138] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.494689][ T4138] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.579581][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.777034][ T4146] bridge1: entered promiscuous mode [ 65.082018][ T4159] loop0: detected capacity change from 0 to 256 [ 65.101020][ T4159] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.974817][ T4159] IPVS: Unknown mcast interface: /vcsa# [ 66.071665][ T4172] loop0: detected capacity change from 0 to 1024 [ 66.079737][ T4172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.104365][ T4172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.117007][ T4179] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 66.124572][ T4179] vhci_hcd vhci_hcd.3: default hub control req: 600b v0000 i0000 l0 [ 66.273940][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.536976][ T4169] loop4: detected capacity change from 0 to 512 [ 66.605968][ T4195] dvmrp0: entered allmulticast mode [ 66.636969][ T4190] netlink: 32 bytes leftover after parsing attributes in process `syz.3.114'. [ 66.653650][ T4195] loop0: detected capacity change from 0 to 512 [ 66.779859][ T4195] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 66.812924][ T4195] loop0: detected capacity change from 0 to 512 [ 66.872485][ T4195] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.990787][ T4195] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 198:freeing already freed block (bit 197); block bitmap corrupt. [ 67.035216][ T4195] EXT4-fs (loop0): Remounting filesystem read-only [ 67.041929][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 67.041944][ C1] EXT4-fs (loop0): initial error at time 1784930038: mb_free_blocks:2049: inode 11: block 198 [ 67.041971][ C1] EXT4-fs (loop0): last error at time 1784930038: mb_free_blocks:2049: inode 11: block 198 [ 67.145521][ T4195] EXT4-fs (loop0): 1 truncate cleaned up [ 67.164691][ T4195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.243463][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.261609][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.281224][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.302070][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.322315][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.351517][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.469868][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.547334][ T4208] loop0: detected capacity change from 0 to 512 [ 67.610795][ T4208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.636887][ T4198] __nla_validate_parse: 61 callbacks suppressed [ 67.636903][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.671310][ T4208] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.704143][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.717176][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.746980][ T28] kauditd_printk_skb: 192 callbacks suppressed [ 67.746996][ T28] audit: type=1400 audit(1784930039.206:1200): avc: denied { write } for pid=4215 comm="syz.5.121" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.802518][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.829189][ T4216] loop5: detected capacity change from 0 to 4096 [ 67.842387][ T4219] loop4: detected capacity change from 0 to 1024 [ 67.853514][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.876004][ T28] audit: type=1400 audit(1784930039.256:1201): avc: denied { write } for pid=4207 comm="syz.0.118" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.910944][ T4219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 67.927198][ T4216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.939916][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.962418][ T4219] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.974021][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.994073][ T28] audit: type=1400 audit(1784930039.446:1202): avc: denied { write } for pid=4215 comm="syz.5.121" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.026393][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 68.040394][ T4219] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.120: lblock 0 mapped to illegal pblock 0 (length 1) [ 68.057204][ T3591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.069752][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 68.101074][ T4219] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 68.113606][ T28] audit: type=1400 audit(1784930039.496:1203): avc: denied { append } for pid=4213 comm="syz.4.120" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.144878][ T4198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 68.156012][ T4198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.165827][ T4219] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.165827][ T4219] [ 68.289430][ T4198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.297247][ T28] audit: type=1400 audit(1784930039.636:1204): avc: denied { bind } for pid=4223 comm="syz.5.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.320012][ T4219] netlink: 'syz.4.120': attribute type 11 has an invalid length. [ 68.421596][ T3783] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.431119][ T3783] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.459254][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.470438][ T3783] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.488868][ T3783] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.510543][ T3783] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.522994][ T3783] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.532061][ T3783] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.541070][ T3783] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.592247][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 68.607338][ T4236] capability: warning: `syz.3.126' uses deprecated v2 capabilities in a way that may be insecure [ 68.617987][ T28] audit: type=1400 audit(1784930040.066:1205): avc: denied { create } for pid=4232 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.645821][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 68.762245][ T28] audit: type=1400 audit(1784930040.106:1206): avc: denied { ioctl } for pid=4232 comm="syz.1.124" path="socket:[5943]" dev="sockfs" ino=5943 ioctlcmd=0xf518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.791081][ T28] audit: type=1400 audit(1784930040.136:1207): avc: denied { connect } for pid=4231 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.814086][ T28] audit: type=1400 audit(1784930040.226:1208): avc: denied { mounton } for pid=4237 comm="syz.3.128" path="/syzcgroup/unified/syz3/syz1/file1" dev="cgroup2" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 68.844940][ T4238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.857676][ T4238] ext4 filesystem being mounted at /syzcgroup/unified/syz3/syz1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.872572][ T28] audit: type=1400 audit(1784930040.276:1209): avc: denied { create } for pid=4232 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.310393][ T4268] syzkaller0: entered promiscuous mode [ 69.329056][ T4268] syzkaller0: entered allmulticast mode [ 69.351561][ T4268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4268 comm=syz.0.136 [ 69.372775][ T4261] set_capacity_and_notify: 1 callbacks suppressed [ 69.373031][ T4261] loop5: detected capacity change from 0 to 1024 [ 69.415582][ T4268] vlan2: entered allmulticast mode [ 69.432244][ T4268] bond1: entered allmulticast mode [ 69.511989][ T4261] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 69.511989][ T4261] [ 69.566908][ T4273] loop1: detected capacity change from 0 to 512 [ 69.636380][ T4273] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 69.654073][ T4273] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.137: iget: bogus i_mode (2) [ 69.700554][ T4273] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.700752][ T4273] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.137: couldn't read orphan inode 15 (err -117) [ 69.710034][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 69.710050][ C1] EXT4-fs (loop1): initial error at time 1784930041: ext4_orphan_get:1399: inode 15 [ 69.710112][ C1] EXT4-fs (loop1): last error at time 1784930041: ext4_orphan_get:1399: inode 15 [ 69.828067][ T4273] loop1: lost filesystem error report for type 5 error -117 [ 69.828665][ T4273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.889477][ T4286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.894406][ T4283] loop5: detected capacity change from 0 to 512 [ 69.898491][ T4286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.101156][ T4282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.165323][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.179486][ T4282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.540457][ T4296] loop5: detected capacity change from 0 to 256 [ 70.739980][ T4298] FAULT_INJECTION: forcing a failure. [ 70.739980][ T4298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.759228][ T4298] CPU: 0 UID: 0 PID: 4298 Comm: syz.5.146 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 70.759262][ T4298] Tainted: [W]=WARN [ 70.759271][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 70.759287][ T4298] Call Trace: [ 70.759296][ T4298] [ 70.759305][ T4298] __dump_stack+0x1d/0x30 [ 70.759336][ T4298] dump_stack_lvl+0x95/0xd0 [ 70.759394][ T4298] dump_stack+0x15/0x1b [ 70.759463][ T4298] should_fail_ex+0x25e/0x270 [ 70.759492][ T4298] should_fail+0xb/0x20 [ 70.759517][ T4298] should_fail_usercopy+0x1a/0x20 [ 70.759556][ T4298] _copy_from_user+0x1c/0xb0 [ 70.759662][ T4298] __copy_msghdr+0x242/0x300 [ 70.759705][ T4298] ___sys_sendmsg+0x10c/0x1e0 [ 70.759808][ T4298] ? terminate_walk+0x1d5/0x200 [ 70.759998][ T4298] __sys_sendmmsg+0x185/0x320 [ 70.760041][ T4298] __x64_sys_sendmmsg+0x57/0x70 [ 70.760073][ T4298] x64_sys_call+0x27aa/0x3020 [ 70.760097][ T4298] do_syscall_64+0x136/0x3c0 [ 70.760154][ T4298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.760235][ T4298] RIP: 0033:0x7fd7e9a0de99 [ 70.760256][ T4298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.760279][ T4298] RSP: 002b:00007fd7e8467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.760301][ T4298] RAX: ffffffffffffffda RBX: 00007fd7e9c95fa0 RCX: 00007fd7e9a0de99 [ 70.760368][ T4298] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000005 [ 70.760413][ T4298] RBP: 00007fd7e8467090 R08: 0000000000000000 R09: 0000000000000000 [ 70.760432][ T4298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.760448][ T4298] R13: 00007fd7e9c96038 R14: 00007fd7e9c95fa0 R15: 00007ffd152bae58 [ 70.760473][ T4298] [ 70.959695][ T4300] loop1: detected capacity change from 0 to 512 [ 70.983639][ T4300] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.144: bg 0: block 393: padding at end of block bitmap is not set [ 71.013541][ T4300] loop1: lost filesystem error report for type 5 error -117 [ 71.013730][ T4300] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 71.021112][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 71.021127][ C0] EXT4-fs (loop1): initial error at time 1784930042: ext4_validate_block_bitmap:441 [ 71.021160][ C0] EXT4-fs (loop1): last error at time 1784930042: ext4_validate_block_bitmap:441 [ 71.080755][ T4300] loop1: lost filesystem error report for type 5 error -117 [ 71.081029][ T4300] EXT4-fs (loop1): 2 truncates cleaned up [ 71.111187][ T4300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.182147][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.436590][ T4317] loop4: detected capacity change from 0 to 128 [ 71.461958][ T4317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 71.486282][ T4317] System zones: 1-3, 19-19, 35-36 [ 71.500332][ T4317] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 71.526600][ T4317] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.859123][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.934819][ T4332] sctp: [Deprecated]: syz.5.155 (pid 4332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.934819][ T4332] Use struct sctp_sack_info instead [ 71.979520][ T4335] SELinux: invalid class [ 71.987668][ T4335] SELinux: failed to load policy [ 72.398177][ T4343] loop4: detected capacity change from 0 to 512 [ 72.413244][ T4343] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.459535][ T4343] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.157: invalid indirect mapped block 665123328 (level 2) [ 72.473420][ T4343] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 72.474959][ T4343] EXT4-fs (loop4): 1 orphan inode deleted [ 72.484263][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 72.484298][ C0] EXT4-fs (loop4): initial error at time 1784930043: ext4_free_branches:1023: inode 16 [ 72.484367][ C0] EXT4-fs (loop4): last error at time 1784930043: ext4_free_branches:1023: inode 16 [ 72.515823][ T4343] EXT4-fs (loop4): 1 truncate cleaned up [ 72.522034][ T4343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.803130][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 72.803145][ T28] audit: type=1400 audit(1784930044.256:1232): avc: denied { ioctl } for pid=4355 comm="syz.0.160" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.918908][ T4359] xt_TPROXY: Can be used only with -p tcp or -p udp [ 72.985025][ T28] audit: type=1400 audit(1784930044.436:1233): avc: denied { mounton } for pid=4361 comm="syz.1.162" path="/29/file0" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.072038][ T4365] loop0: detected capacity change from 0 to 512 [ 73.177320][ T4365] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.160: bg 0: block 393: padding at end of block bitmap is not set [ 73.274757][ T4365] loop0: lost filesystem error report for type 5 error -117 [ 73.276043][ T4365] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 73.283441][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 73.283458][ C1] EXT4-fs (loop0): initial error at time 1784930044: ext4_validate_block_bitmap:441 [ 73.283480][ C1] EXT4-fs (loop0): last error at time 1784930044: ext4_validate_block_bitmap:441 [ 73.410848][ T4365] loop0: lost filesystem error report for type 5 error -117 [ 73.411158][ T4365] EXT4-fs (loop0): 2 truncates cleaned up [ 73.435180][ T28] audit: type=1400 audit(1784930044.866:1234): avc: denied { setopt } for pid=4370 comm="syz.5.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.526840][ T4365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.556279][ T4383] __nla_validate_parse: 63 callbacks suppressed [ 73.556294][ T4383] netlink: 68 bytes leftover after parsing attributes in process `syz.3.169'. [ 73.679518][ T28] audit: type=1400 audit(1784930045.146:1235): avc: denied { write } for pid=4380 comm="syz.1.168" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.719468][ T4387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.165'. [ 73.738247][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.767119][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.800987][ T4394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.172'. [ 73.812341][ T28] audit: type=1400 audit(1784930045.276:1236): avc: denied { mount } for pid=4393 comm="syz.1.172" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.999069][ T28] audit: type=1400 audit(1784930045.456:1237): avc: denied { setopt } for pid=4407 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.024360][ T28] audit: type=1400 audit(1784930045.466:1238): avc: denied { watch } for pid=4403 comm="syz.4.174" path="/27" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.370208][ T4414] sg_write: data in/out 286804/136 bytes for SCSI command 0x0-- guessing data in; [ 74.370208][ T4414] program syz.1.176 not setting count and/or reply_len properly [ 74.468951][ T4417] loop4: detected capacity change from 0 to 164 [ 74.538585][ T4417] iso9660: Unknown parameter 'Aj6ė„o&/[ZµO)–check' [ 74.779277][ T28] audit: type=1326 audit(1784930046.236:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.5.179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9a0de99 code=0x7ffc0000 [ 74.906837][ T28] audit: type=1326 audit(1784930046.266:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.5.179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9a0de99 code=0x7ffc0000 [ 75.029426][ T28] audit: type=1326 audit(1784930046.266:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.5.179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9a0de99 code=0x7ffc0000 [ 75.852750][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.184'. [ 76.055934][ T4448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.186'. [ 76.172871][ T4450] loop0: detected capacity change from 0 to 4096 [ 76.185460][ T4457] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 76.258862][ T4459] syzkaller0: entered promiscuous mode [ 76.266595][ T4450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.271749][ T4459] syzkaller0: entered allmulticast mode [ 76.323448][ T4459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4459 comm=syz.5.191 [ 76.348912][ T4468] loop4: detected capacity change from 0 to 128 [ 76.362155][ T4469] FAULT_INJECTION: forcing a failure. [ 76.362155][ T4469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.372469][ T4468] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.402571][ T4469] CPU: 0 UID: 0 PID: 4469 Comm: syz.3.192 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 76.402610][ T4469] Tainted: [W]=WARN [ 76.402619][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 76.402636][ T4469] Call Trace: [ 76.402708][ T4469] [ 76.402718][ T4469] __dump_stack+0x1d/0x30 [ 76.402766][ T4469] dump_stack_lvl+0x95/0xd0 [ 76.402789][ T4469] dump_stack+0x15/0x1b [ 76.402815][ T4469] should_fail_ex+0x25e/0x270 [ 76.402848][ T4469] should_fail+0xb/0x20 [ 76.402940][ T4469] should_fail_usercopy+0x1a/0x20 [ 76.402989][ T4469] _copy_to_user+0x20/0xa0 [ 76.403015][ T4469] simple_read_from_buffer+0xb5/0x130 [ 76.403046][ T4469] proc_fail_nth_read+0x10e/0x150 [ 76.403106][ T4469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.403170][ T4469] vfs_read+0x18e/0x7c0 [ 76.403192][ T4469] ? __rcu_read_unlock+0x4e/0x70 [ 76.403224][ T4469] ? __fget_files+0x184/0x1c0 [ 76.403257][ T4469] ? mutex_lock+0x57/0x90 [ 76.403356][ T4469] ksys_read+0xdc/0x1a0 [ 76.403381][ T4469] __x64_sys_read+0x40/0x50 [ 76.403405][ T4469] x64_sys_call+0x2886/0x3020 [ 76.403501][ T4469] do_syscall_64+0x136/0x3c0 [ 76.403530][ T4469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.403552][ T4469] RIP: 0033:0x7f75908ee6ce [ 76.403571][ T4469] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.403593][ T4469] RSP: 002b:00007f758f344fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.403689][ T4469] RAX: ffffffffffffffda RBX: 00007f758f3456c0 RCX: 00007f75908ee6ce [ 76.403707][ T4469] RDX: 000000000000000f RSI: 00007f758f3450a0 RDI: 0000000000000003 [ 76.403722][ T4469] RBP: 00007f758f345090 R08: 0000000000000000 R09: 0000000000000000 [ 76.403738][ T4469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.403787][ T4469] R13: 00007f7590bb6218 R14: 00007f7590bb6180 R15: 00007ffdc5466c18 [ 76.403810][ T4469] [ 76.764229][ T4480] FAULT_INJECTION: forcing a failure. [ 76.764229][ T4480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.819946][ T4480] CPU: 1 UID: 0 PID: 4480 Comm: syz.5.196 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 76.819987][ T4480] Tainted: [W]=WARN [ 76.819995][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 76.820008][ T4480] Call Trace: [ 76.820066][ T4480] [ 76.820094][ T4480] __dump_stack+0x1d/0x30 [ 76.820118][ T4480] dump_stack_lvl+0x95/0xd0 [ 76.820138][ T4480] dump_stack+0x15/0x1b [ 76.820156][ T4480] should_fail_ex+0x25e/0x270 [ 76.820187][ T4480] should_fail+0xb/0x20 [ 76.820225][ T4480] should_fail_usercopy+0x1a/0x20 [ 76.820326][ T4480] _copy_to_user+0x20/0xa0 [ 76.820352][ T4480] bpf_verifier_vlog+0x2c5/0x5a0 [ 76.820406][ T4480] btf_verifier_log+0xb2/0xf0 [ 76.820478][ T4480] ? __btf_verifier_log+0x7f/0xb0 [ 76.820588][ T4480] btf_func_proto_log+0x1a9/0x4a0 [ 76.820622][ T4480] __btf_verifier_log_type+0x275/0x330 [ 76.820689][ T4480] ? should_failslab+0x8c/0xb0 [ 76.820722][ T4480] btf_func_proto_check_meta+0xcd/0x100 [ 76.820760][ T4480] btf_parse_type_sec+0x291/0x1520 [ 76.820845][ T4480] ? __kvmalloc_node_noprof+0x306/0x590 [ 76.820882][ T4480] ? btf_parse_hdr+0x43a/0x440 [ 76.820916][ T4480] ? btf_parse_str_sec+0x1ae/0x1b0 [ 76.820960][ T4480] btf_new_fd+0x2ec/0x670 [ 76.821052][ T4480] bpf_btf_load+0x116/0x130 [ 76.821076][ T4480] ? vfs_write+0x780/0x990 [ 76.821100][ T4480] __sys_bpf+0xbce/0xc30 [ 76.821141][ T4480] ? vfs_write+0x780/0x990 [ 76.821187][ T4480] ? vfs_write+0x780/0x990 [ 76.821248][ T4480] __x64_sys_bpf+0x69/0x80 [ 76.821282][ T4480] x64_sys_call+0x10cb/0x3020 [ 76.821382][ T4480] do_syscall_64+0x136/0x3c0 [ 76.821414][ T4480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.821438][ T4480] RIP: 0033:0x7fd7e9a0de99 [ 76.821465][ T4480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.821489][ T4480] RSP: 002b:00007fd7e8467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.821589][ T4480] RAX: ffffffffffffffda RBX: 00007fd7e9c95fa0 RCX: 00007fd7e9a0de99 [ 76.821687][ T4480] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 76.821704][ T4480] RBP: 00007fd7e8467090 R08: 0000000000000000 R09: 0000000000000000 [ 76.821722][ T4480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.821737][ T4480] R13: 00007fd7e9c96038 R14: 00007fd7e9c95fa0 R15: 00007ffd152bae58 [ 76.821763][ T4480] [ 77.134271][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.298166][ T4483] nfs4: Unknown parameter 'rdma¼Ļīg>`ĮÉYoˆ —žś¶cŅź>' [ 77.311945][ T4489] loop4: detected capacity change from 0 to 512 [ 77.339733][ T4489] ext3: Unknown parameter 'permit_directio' [ 77.358628][ T4489] loop4: detected capacity change from 0 to 256 [ 77.419642][ T4496] netlink: 'syz.0.202': attribute type 11 has an invalid length. [ 77.468932][ T4496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.202'. [ 77.474642][ T4501] netlink: 'syz.4.204': attribute type 3 has an invalid length. [ 77.510529][ T4501] netlink: 'syz.4.204': attribute type 1 has an invalid length. [ 77.510898][ T4503] netlink: 40 bytes leftover after parsing attributes in process `syz.0.202'. [ 77.526811][ T4501] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.204'. [ 77.537001][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 77.570227][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 77.612723][ T4485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.724976][ T4511] loop0: detected capacity change from 0 to 512 [ 77.769264][ T4485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.846175][ T4511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.861709][ T28] kauditd_printk_skb: 122 callbacks suppressed [ 77.861761][ T28] audit: type=1400 audit(1784930049.326:1364): avc: denied { create } for pid=4484 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 77.909375][ T4511] ext4 filesystem being mounted at /syzcgroup/unified/syz0/syz1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.923892][ T28] audit: type=1400 audit(1784930049.356:1365): avc: denied { write } for pid=4484 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 78.023110][ T4520] loop5: detected capacity change from 0 to 256 [ 78.068258][ T4520] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.281987][ T28] audit: type=1400 audit(1784930049.726:1366): avc: denied { create } for pid=4519 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 78.375919][ T4514] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 78.386024][ T4514] FAT-fs (loop5): Filesystem has been set read-only [ 78.402210][ T28] audit: type=1400 audit(1784930049.736:1367): avc: denied { ioctl } for pid=4519 comm="syz.3.209" path="socket:[8274]" dev="sockfs" ino=8274 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 78.427032][ T28] audit: type=1400 audit(1784930049.746:1368): avc: denied { audit_read } for pid=4519 comm="syz.3.209" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.448484][ T28] audit: type=1400 audit(1784930049.786:1369): avc: denied { setopt } for pid=4522 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.468473][ T28] audit: type=1400 audit(1784930049.856:1370): avc: denied { read write } for pid=4484 comm="syz.1.199" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 78.493208][ T28] audit: type=1400 audit(1784930049.856:1371): avc: denied { open } for pid=4484 comm="syz.1.199" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 78.604405][ T28] audit: type=1400 audit(1784930050.066:1372): avc: denied { connect } for pid=4484 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.703209][ T4531] __nla_validate_parse: 34 callbacks suppressed [ 78.703230][ T4531] netlink: 72 bytes leftover after parsing attributes in process `syz.4.214'. [ 78.720988][ T28] audit: type=1400 audit(1784930050.186:1373): avc: denied { execute } for pid=4532 comm="syz.5.213" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 78.833975][ T4531] loop4: detected capacity change from 0 to 512 [ 78.850215][ T4531] ext4: Bad value for 'auto_da_alloc' [ 79.007308][ T4536] loop5: detected capacity change from 0 to 512 [ 79.034619][ T4536] msdos: Bad value for 'uid' [ 79.046057][ T4536] msdos: Bad value for 'uid' [ 79.178879][ T4553] loop5: detected capacity change from 0 to 512 [ 79.245714][ T4553] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.262844][ T4553] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.392588][ T4568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.407757][ T4568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.826130][ T4588] set_capacity_and_notify: 1 callbacks suppressed [ 79.826276][ T4588] loop4: detected capacity change from 0 to 512 [ 79.845426][ T4588] msdos: Bad value for 'uid' [ 79.863514][ T4588] msdos: Bad value for 'uid' [ 79.994088][ T4594] syzkaller0: entered promiscuous mode [ 80.030325][ T4594] syzkaller0: entered allmulticast mode [ 80.064866][ T4594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4594 comm=syz.3.234 [ 80.180667][ T4594] vlan2: entered allmulticast mode [ 80.212917][ T4594] bond0: entered allmulticast mode [ 80.231621][ T4590] loop1: detected capacity change from 0 to 4096 [ 80.248784][ T4590] EXT4-fs: Ignoring removed orlov option [ 80.270301][ T4590] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.308761][ T4590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.354759][ T4601] netlink: 'syz.4.236': attribute type 1 has an invalid length. [ 80.495586][ T4601] bond1: entered promiscuous mode [ 80.508445][ T4601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.558655][ T4604] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 80.621908][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.654209][ T4604] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 80.688816][ T4604] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 80.786066][ T4618] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in; [ 80.786066][ T4618] program syz.0.240 not setting count and/or reply_len properly [ 80.979290][ T4623] No such timeout policy "syz1" [ 81.305735][ T4628] loop4: detected capacity change from 0 to 512 [ 81.489417][ T4637] syzkaller0: entered promiscuous mode [ 81.502789][ T4637] syzkaller0: entered allmulticast mode [ 81.504283][ T4639] netlink: 'syz.4.248': attribute type 2 has an invalid length. [ 81.536689][ T4637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4637 comm=syz.3.247 [ 81.590596][ T4637] vlan2: entered allmulticast mode [ 81.595982][ T4637] bond1: entered allmulticast mode [ 81.814661][ T4649] loop4: detected capacity change from 0 to 1024 [ 82.594500][ T4649] loop4: detected capacity change from 0 to 512 [ 82.609714][ T3591] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.637876][ T4649] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 82.760790][ T4654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.254'. [ 82.831726][ T4656] loop5: detected capacity change from 0 to 512 [ 82.867269][ T4656] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.907051][ T4656] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.253: corrupted xattr entries [ 82.930530][ T4656] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.930832][ T4656] EXT4-fs (loop5): Remounting filesystem read-only [ 82.940056][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 82.940097][ C0] EXT4-fs (loop5): initial error at time 1784930054: xattr_find_entry:337: inode 15 [ 82.940134][ C0] EXT4-fs (loop5): last error at time 1784930054: xattr_find_entry:337: inode 15 [ 83.018105][ T4663] loop4: detected capacity change from 0 to 512 [ 83.057432][ T4663] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.255: bg 0: block 393: padding at end of block bitmap is not set [ 83.092553][ T4656] EXT4-fs (loop5): 1 truncate cleaned up [ 83.106978][ T4663] loop4: lost filesystem error report for type 5 error -117 [ 83.107217][ T4663] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 83.114644][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 83.114667][ C0] EXT4-fs (loop4): initial error at time 1784930054: ext4_validate_block_bitmap:441 [ 83.114697][ C0] EXT4-fs (loop4): last error at time 1784930054: ext4_validate_block_bitmap:441 [ 83.151747][ T4656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.177784][ T4656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.195851][ T4663] loop4: lost filesystem error report for type 5 error -117 [ 83.196313][ T4663] EXT4-fs (loop4): 2 truncates cleaned up [ 83.236306][ T4663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.269417][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 83.269431][ T28] audit: type=1400 audit(1784930054.736:1398): avc: denied { write } for pid=4662 comm="syz.4.255" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.337130][ T4663] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 83.363070][ T28] audit: type=1400 audit(1784930054.796:1399): avc: denied { write } for pid=4662 comm="syz.4.255" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.411601][ T28] audit: type=1400 audit(1784930054.796:1400): avc: denied { write } for pid=4662 comm="syz.4.255" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.488388][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.708701][ T4678] xt_hashlimit: size too large, truncated to 1048576 [ 83.773559][ T4692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.800139][ T4692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.857274][ T4698] loop1: detected capacity change from 0 to 512 [ 83.879913][ T4698] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.267: bg 0: block 393: padding at end of block bitmap is not set [ 83.902377][ T4698] loop1: lost filesystem error report for type 5 error -117 [ 83.906835][ T4698] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 83.914246][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 83.914268][ C1] EXT4-fs (loop1): initial error at time 1784930055: ext4_validate_block_bitmap:441 [ 83.914294][ C1] EXT4-fs (loop1): last error at time 1784930055: ext4_validate_block_bitmap:441 [ 83.959162][ T4698] loop1: lost filesystem error report for type 5 error -117 [ 83.959505][ T4698] EXT4-fs (loop1): 2 truncates cleaned up [ 83.992400][ T4698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.007225][ T28] audit: type=1400 audit(1784930055.466:1401): avc: denied { write } for pid=4697 comm="syz.1.267" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.047583][ T4698] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 84.058845][ T28] audit: type=1400 audit(1784930055.506:1402): avc: denied { write } for pid=4697 comm="syz.1.267" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.098058][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.116587][ T28] audit: type=1400 audit(1784930055.506:1403): avc: denied { write } for pid=4697 comm="syz.1.267" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.197490][ T4711] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 84.197490][ T4711] program syz.1.272 not setting count and/or reply_len properly [ 84.292190][ T28] audit: type=1400 audit(1784930055.756:1404): avc: denied { bind } for pid=4712 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.321555][ T4717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 84.371580][ T28] audit: type=1400 audit(1784930055.836:1405): avc: denied { checkpoint_restore } for pid=4715 comm="syz.1.274" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.552049][ T4728] random: crng reseeded on system resumption [ 84.558208][ T28] audit: type=1400 audit(1784930056.016:1406): avc: denied { write } for pid=4726 comm="syz.1.279" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.599295][ T4730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.278'. [ 84.623453][ T4730] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 84.623453][ T4730] program syz.5.278 not setting count and/or reply_len properly [ 84.626070][ T4731] loop1: detected capacity change from 0 to 4096 [ 84.661018][ T4731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.704039][ T28] audit: type=1400 audit(1784930056.016:1407): avc: denied { open } for pid=4726 comm="syz.1.279" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.751100][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.831006][ T4739] loop1: detected capacity change from 0 to 512 [ 84.838131][ T4736] loop5: detected capacity change from 0 to 512 [ 84.870430][ T4739] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.280: bg 0: block 393: padding at end of block bitmap is not set [ 84.890925][ T4736] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 84.952401][ T4739] loop1: lost filesystem error report for type 5 error -117 [ 84.954290][ T4739] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 84.961644][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 84.961666][ C1] EXT4-fs (loop1): initial error at time 1784930056: ext4_validate_block_bitmap:441 [ 84.961692][ C1] EXT4-fs (loop1): last error at time 1784930056: ext4_validate_block_bitmap:441 [ 84.995677][ T4739] loop1: lost filesystem error report for type 5 error -117 [ 84.996592][ T4739] EXT4-fs (loop1): 2 truncates cleaned up [ 85.010251][ T4739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.071605][ T4739] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 85.103077][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.190052][ T4753] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 85.190052][ T4753] program syz.0.286 not setting count and/or reply_len properly [ 85.286096][ T4758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'. [ 85.295703][ T4751] loop1: detected capacity change from 0 to 8192 [ 85.310563][ T4758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'. [ 85.422666][ T4757] netlink: 'syz.5.282': attribute type 16 has an invalid length. [ 85.446369][ T4757] netlink: 'syz.5.282': attribute type 17 has an invalid length. [ 85.734568][ T4777] loop4: detected capacity change from 0 to 512 [ 85.768020][ T4777] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.294: bg 0: block 393: padding at end of block bitmap is not set [ 85.784819][ T4777] loop4: lost filesystem error report for type 5 error -117 [ 85.789095][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 85.802931][ C0] EXT4-fs (loop4): initial error at time 1784930057: ext4_validate_block_bitmap:441 [ 85.812367][ C0] EXT4-fs (loop4): last error at time 1784930057: ext4_validate_block_bitmap:441 [ 85.838204][ T4777] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 85.887131][ T4777] loop4: lost filesystem error report for type 5 error -117 [ 85.888229][ T4777] EXT4-fs (loop4): 2 truncates cleaned up [ 85.939554][ T4777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.019529][ T4777] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 86.052092][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.120520][ T4796] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 86.128154][ T4796] vhci_hcd vhci_hcd.3: default hub control req: 600b v0000 i0000 l0 [ 86.137421][ T4795] loop4: detected capacity change from 0 to 1024 [ 86.146993][ T4795] EXT4-fs: inline encryption not supported [ 86.164714][ T4799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.301'. [ 86.192521][ T4799] syzkaller0: entered promiscuous mode [ 86.199660][ T4799] syzkaller0: entered allmulticast mode [ 86.201907][ T4795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.415872][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.529990][ T4818] loop1: detected capacity change from 0 to 512 [ 86.562673][ T4818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.604331][ T4809] loop5: detected capacity change from 0 to 512 [ 86.617055][ T4818] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.670764][ T4819] loop4: detected capacity change from 0 to 8192 [ 86.687201][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 86.748462][ T4832] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 86.756453][ T4832] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 86.823664][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.851078][ T4837] netlink: 476 bytes leftover after parsing attributes in process `syz.4.309'. [ 86.873341][ T4819] loop4: p1 p2 p4 [ 86.877833][ T4819] loop4: p1 start 51379968 is beyond EOD, truncated [ 86.886289][ T4819] loop4: p4 start 33554440 is beyond EOD, truncated [ 86.905076][ T2981] loop4: p1 p2 p4 [ 86.917658][ T2981] loop4: p1 start 51379968 is beyond EOD, truncated [ 86.946348][ T2981] loop4: p4 start 33554440 is beyond EOD, truncated [ 86.963576][ T4846] FAULT_INJECTION: forcing a failure. [ 86.963576][ T4846] name failslab, interval 1, probability 0, space 0, times 0 [ 87.103335][ T4846] CPU: 0 UID: 0 PID: 4846 Comm: syz.5.316 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 87.103460][ T4846] Tainted: [W]=WARN [ 87.103470][ T4846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 87.103487][ T4846] Call Trace: [ 87.103513][ T4846] [ 87.103524][ T4846] __dump_stack+0x1d/0x30 [ 87.103556][ T4846] dump_stack_lvl+0x95/0xd0 [ 87.103605][ T4846] dump_stack+0x15/0x1b [ 87.103631][ T4846] should_fail_ex+0x25e/0x270 [ 87.103747][ T4846] should_failslab+0x8c/0xb0 [ 87.103779][ T4846] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 87.103816][ T4846] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 87.103851][ T4846] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 87.103892][ T4846] kmemdup_nul+0x36/0xc0 [ 87.103996][ T4846] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 87.104033][ T4846] vfs_parse_monolithic_sep+0x16a/0x270 [ 87.104075][ T4846] generic_parse_monolithic+0x24/0x30 [ 87.104126][ T4846] parse_monolithic_mount_data+0x46/0x60 [ 87.104173][ T4846] do_new_mount+0x24e/0x8d0 [ 87.104205][ T4846] ? security_capable+0x7b/0x90 [ 87.104247][ T4846] path_mount+0x4ad/0xb90 [ 87.104347][ T4846] __se_sys_mount+0x28c/0x2e0 [ 87.104378][ T4846] ? fput+0x8f/0xc0 [ 87.104487][ T4846] __x64_sys_mount+0x67/0x80 [ 87.104519][ T4846] x64_sys_call+0x2d61/0x3020 [ 87.104584][ T4846] do_syscall_64+0x136/0x3c0 [ 87.104618][ T4846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.104642][ T4846] RIP: 0033:0x7fd7e9a0de99 [ 87.104663][ T4846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.104687][ T4846] RSP: 002b:00007fd7e8425028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.104783][ T4846] RAX: ffffffffffffffda RBX: 00007fd7e9c96180 RCX: 00007fd7e9a0de99 [ 87.104801][ T4846] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 87.104818][ T4846] RBP: 00007fd7e8425090 R08: 0000200000000540 R09: 0000000000000000 [ 87.104862][ T4846] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 87.104880][ T4846] R13: 00007fd7e9c96218 R14: 00007fd7e9c96180 R15: 00007ffd152bae58 [ 87.104907][ T4846] [ 87.470623][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 87.527428][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 87.894905][ T4864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 88.304739][ T28] kauditd_printk_skb: 211 callbacks suppressed [ 88.304757][ T28] audit: type=1400 audit(1784930059.766:1619): avc: denied { accept } for pid=4877 comm="syz.3.329" lport=56155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.723106][ T28] audit: type=1400 audit(1784930060.176:1620): avc: denied { mount } for pid=4883 comm="syz.0.331" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 88.773056][ T28] audit: type=1400 audit(1784930060.176:1621): avc: denied { search } for pid=4883 comm="syz.0.331" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.838287][ T28] audit: type=1400 audit(1784930060.176:1622): avc: denied { search } for pid=4883 comm="syz.0.331" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.884728][ T28] audit: type=1400 audit(1784930060.176:1623): avc: denied { read } for pid=4883 comm="syz.0.331" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.910573][ T28] audit: type=1400 audit(1784930060.176:1624): avc: denied { read open } for pid=4883 comm="syz.0.331" path="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.956374][ T28] audit: type=1400 audit(1784930060.176:1625): avc: denied { search } for pid=4883 comm="syz.0.331" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.999537][ T28] audit: type=1400 audit(1784930060.176:1626): avc: denied { search } for pid=4883 comm="syz.0.331" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.030438][ T28] audit: type=1400 audit(1784930060.176:1627): avc: denied { write search } for pid=4883 comm="syz.0.331" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.053877][ T28] audit: type=1400 audit(1784930060.176:1628): avc: denied { search } for pid=4883 comm="syz.0.331" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.274015][ T4904] loop4: detected capacity change from 0 to 256 [ 89.441645][ T4906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.817652][ T4909] FAULT_INJECTION: forcing a failure. [ 89.817652][ T4909] name failslab, interval 1, probability 0, space 0, times 0 [ 89.863035][ T4911] syzkaller0: entered promiscuous mode [ 89.877154][ T4909] CPU: 0 UID: 0 PID: 4909 Comm: syz.0.341 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 89.877191][ T4909] Tainted: [W]=WARN [ 89.877200][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 89.877217][ T4909] Call Trace: [ 89.877239][ T4909] [ 89.877249][ T4909] __dump_stack+0x1d/0x30 [ 89.877292][ T4909] dump_stack_lvl+0x95/0xd0 [ 89.877319][ T4909] dump_stack+0x15/0x1b [ 89.877345][ T4909] should_fail_ex+0x25e/0x270 [ 89.877459][ T4909] ? __se_sys_memfd_create+0x1df/0x3b0 [ 89.877512][ T4909] should_failslab+0x8c/0xb0 [ 89.877597][ T4909] __kmalloc_cache_noprof+0x7b/0x3d0 [ 89.877631][ T4909] ? __se_sys_memfd_create+0x1df/0x3b0 [ 89.877727][ T4909] ? fput+0x8f/0xc0 [ 89.877764][ T4909] __se_sys_memfd_create+0x1df/0x3b0 [ 89.877811][ T4909] __x64_sys_memfd_create+0x31/0x40 [ 89.877931][ T4909] x64_sys_call+0x1f22/0x3020 [ 89.877962][ T4909] do_syscall_64+0x136/0x3c0 [ 89.877994][ T4909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.878105][ T4909] RIP: 0033:0x7f5bd719de99 [ 89.878126][ T4909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.878151][ T4909] RSP: 002b:00007f5bd5bf6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 89.878174][ T4909] RAX: ffffffffffffffda RBX: 000000000000044a RCX: 00007f5bd719de99 [ 89.878189][ T4909] RDX: 00007f5bd5bf6ee0 RSI: 0000000000000000 RDI: 00007f5bd723408f [ 89.878207][ T4909] RBP: 00002000000006c0 R08: 00000000ffffffff R09: 0000000000000000 [ 89.878271][ T4909] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000300 [ 89.878296][ T4909] R13: 00007f5bd5bf6ee0 R14: 00007f5bd5bf6ea0 R15: 0000200000000380 [ 89.878319][ T4909] [ 89.878507][ T4911] syzkaller0: entered allmulticast mode [ 89.957432][ T4915] loop5: detected capacity change from 0 to 512 [ 89.969677][ T4911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4911 comm=syz.4.342 [ 89.977668][ T4915] msdos: Bad value for 'uid' [ 90.085028][ T4915] msdos: Bad value for 'uid' [ 90.137771][ T4921] FAULT_INJECTION: forcing a failure. [ 90.137771][ T4921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.152835][ T4921] CPU: 0 UID: 0 PID: 4921 Comm: syz.3.345 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 90.152926][ T4921] Tainted: [W]=WARN [ 90.152935][ T4921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.152949][ T4921] Call Trace: [ 90.152957][ T4921] [ 90.152965][ T4921] __dump_stack+0x1d/0x30 [ 90.152991][ T4921] dump_stack_lvl+0x95/0xd0 [ 90.153038][ T4921] dump_stack+0x15/0x1b [ 90.153058][ T4921] should_fail_ex+0x25e/0x270 [ 90.153086][ T4921] should_fail+0xb/0x20 [ 90.153108][ T4921] should_fail_usercopy+0x1a/0x20 [ 90.153166][ T4921] _copy_to_user+0x20/0xa0 [ 90.153235][ T4921] simple_read_from_buffer+0xb5/0x130 [ 90.153258][ T4921] proc_fail_nth_read+0x10e/0x150 [ 90.153279][ T4921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.153307][ T4921] vfs_read+0x18e/0x7c0 [ 90.153321][ T4921] ? __rcu_read_unlock+0x4e/0x70 [ 90.153349][ T4921] ? __fget_files+0x184/0x1c0 [ 90.153378][ T4921] ? mutex_lock+0x57/0x90 [ 90.153486][ T4921] ksys_read+0xdc/0x1a0 [ 90.153508][ T4921] __x64_sys_read+0x40/0x50 [ 90.153597][ T4921] x64_sys_call+0x2886/0x3020 [ 90.153624][ T4921] do_syscall_64+0x136/0x3c0 [ 90.153652][ T4921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.153679][ T4921] RIP: 0033:0x7f75908ee6ce [ 90.153693][ T4921] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 90.153771][ T4921] RSP: 002b:00007f758f386fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.153792][ T4921] RAX: ffffffffffffffda RBX: 00007f758f3876c0 RCX: 00007f75908ee6ce [ 90.153805][ T4921] RDX: 000000000000000f RSI: 00007f758f3870a0 RDI: 0000000000000005 [ 90.153819][ T4921] RBP: 00007f758f387090 R08: 0000000000000000 R09: 0000000000000000 [ 90.153833][ T4921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.153846][ T4921] R13: 00007f7590bb6038 R14: 00007f7590bb5fa0 R15: 00007ffdc5466c18 [ 90.153866][ T4921] [ 90.360791][ T4924] loop1: detected capacity change from 0 to 512 [ 90.372101][ T4924] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.391257][ T4924] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.344: corrupted xattr entries [ 90.402827][ T4924] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.403007][ T4924] EXT4-fs (loop1): Remounting filesystem read-only [ 90.412172][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 90.412191][ C0] EXT4-fs (loop1): initial error at time 1784930061: xattr_find_entry:337: inode 15 [ 90.412228][ C0] EXT4-fs (loop1): last error at time 1784930061: xattr_find_entry:337: inode 15 [ 90.498826][ T4924] EXT4-fs (loop1): 1 truncate cleaned up [ 90.507974][ T4924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.630856][ T4929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 90.679338][ T4937] loop5: detected capacity change from 0 to 512 [ 90.738976][ T4940] loop4: detected capacity change from 0 to 512 [ 90.779767][ T4946] syz_tun: entered allmulticast mode [ 90.788920][ T4940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.806322][ T4940] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.070848][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.181318][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.221462][ T4944] syz_tun: left allmulticast mode [ 91.322520][ T4966] loop1: detected capacity change from 0 to 512 [ 91.343990][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 91.356687][ T4966] msdos: Bad value for 'uid' [ 91.364460][ T4966] msdos: Bad value for 'uid' [ 91.388982][ T4977] bond2 (unregistering): Released all slaves [ 91.425562][ T4983] syzkaller0: entered promiscuous mode [ 91.433149][ T4983] syzkaller0: entered allmulticast mode [ 91.433672][ T4971] loop4: detected capacity change from 0 to 512 [ 91.475970][ T4978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4978 comm=syz.5.361 [ 91.580104][ T4994] loop1: detected capacity change from 0 to 256 [ 91.646131][ T4971] EXT4-fs (loop4): 1 orphan inode deleted [ 91.670947][ T3781] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:18: Failed to release dquot type 1 [ 91.713975][ T3781] loop4: lost filesystem error report for type 5 error -117 [ 91.718637][ T4971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.758738][ T4971] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.823092][ T5005] loop5: detected capacity change from 0 to 128 [ 91.984737][ T5003] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=5003 comm=syz.1.374 [ 92.015498][ T5013] loop5: detected capacity change from 0 to 512 [ 92.040093][ T5013] msdos: Bad value for 'uid' [ 92.121836][ T5013] msdos: Bad value for 'uid' [ 92.322380][ T5030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=5030 comm=syz.0.382 [ 92.397176][ T5028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5028 comm=syz.1.383 [ 93.664419][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 93.664459][ T28] audit: type=1400 audit(1784930064.676:1653): avc: denied { sqpoll } for pid=5057 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 93.684846][ T5058] netlink: 'syz.0.387': attribute type 6 has an invalid length. [ 93.684860][ T5058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.387'. [ 93.814186][ T5061] netlink: 256 bytes leftover after parsing attributes in process `syz.0.387'. [ 94.174104][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.253377][ T5064] syzkaller0: entered promiscuous mode [ 94.284500][ T5064] syzkaller0: entered allmulticast mode [ 95.103780][ T5078] Cannot find map_set index 17 as target [ 95.397955][ T5082] loop4: detected capacity change from 0 to 512 [ 95.434818][ T5082] msdos: Bad value for 'uid' [ 95.449275][ T5082] msdos: Bad value for 'uid' [ 95.890872][ T5123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5123 comm=syz.1.392 [ 95.936783][ T5123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 96.335957][ T28] audit: type=1400 audit(1784930067.796:1654): avc: denied { create } for pid=5181 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.381458][ T28] audit: type=1400 audit(1784930067.816:1655): avc: denied { write } for pid=5181 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.532909][ T5197] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 96.532909][ T5197] program syz.3.404 not setting count and/or reply_len properly [ 96.732437][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'. [ 96.773218][ T5209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.295439][ T28] audit: type=1400 audit(1784930069.756:1656): avc: denied { create } for pid=5212 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 98.657754][ T5225] netlink: 240 bytes leftover after parsing attributes in process `syz.5.414'. [ 98.695469][ T5219] loop4: detected capacity change from 0 to 512 [ 98.708689][ T28] audit: type=1400 audit(1784930070.166:1657): avc: denied { read } for pid=5226 comm="syz.1.415" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.754503][ T5219] msdos: Bad value for 'uid' [ 98.773050][ T5219] msdos: Bad value for 'uid' [ 98.925836][ T5238] random: crng reseeded on system resumption [ 99.002570][ T5240] netlink: 'syz.1.418': attribute type 10 has an invalid length. [ 99.042268][ T5242] loop5: detected capacity change from 0 to 2048 [ 99.147085][ T5244] Cannot find add_set index 0 as target [ 99.180944][ T5240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.418'. [ 99.470352][ T5248] team0: Port device team_slave_1 removed [ 99.505009][ T5240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.525399][ T5240] team0: Port device netdevsim0 added [ 99.914775][ T5262] loop1: detected capacity change from 0 to 512 [ 99.935592][ T5262] msdos: Bad value for 'uid' [ 99.940335][ T5262] msdos: Bad value for 'uid' [ 99.994524][ T5267] loop4: detected capacity change from 0 to 1764 [ 100.039987][ T5259] loop5: detected capacity change from 0 to 512 [ 100.172687][ T5273] loop1: detected capacity change from 0 to 512 [ 100.187713][ T5273] msdos: Bad value for 'uid' [ 100.192986][ T5273] msdos: Bad value for 'uid' [ 100.412969][ T5282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.469343][ T5282] loop4: detected capacity change from 0 to 764 [ 100.477273][ T5282] iso9660: Unknown parameter 'moŚnde' [ 100.702653][ T5259] EXT4-fs (loop5): 1 orphan inode deleted [ 100.721314][ T2232] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 100.737653][ T2232] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 1 [ 100.742806][ T5259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.759510][ T2232] loop5: lost filesystem error report for type 5 error -117 [ 100.789790][ T5259] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.834314][ T28] audit: type=1326 audit(1784930072.296:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759092de99 code=0x7ffc0000 [ 100.860023][ T28] audit: type=1326 audit(1784930072.306:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759092de99 code=0x7ffc0000 [ 100.905739][ T28] audit: type=1326 audit(1784930072.306:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759092de99 code=0x7ffc0000 [ 101.000223][ T28] audit: type=1326 audit(1784930072.306:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f759092de99 code=0x7ffc0000 [ 101.051973][ T5294] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 101.066995][ T5294] vhci_hcd vhci_hcd.3: default hub control req: 600b v0000 i0000 l0 [ 101.100538][ T28] audit: type=1326 audit(1784930072.326:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759092de99 code=0x7ffc0000 [ 101.211763][ T28] audit: type=1326 audit(1784930072.336:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759092de99 code=0x7ffc0000 [ 101.322188][ T28] audit: type=1326 audit(1784930072.336:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759092de99 code=0x7ffc0000 [ 101.417962][ T28] audit: type=1326 audit(1784930072.336:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.3.431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759092de99 code=0x7ffc0000 [ 101.564958][ T5297] team0: Port device team_slave_1 removed [ 101.584132][ T5299] loop4: detected capacity change from 0 to 128 [ 101.596670][ T5288] loop1: detected capacity change from 0 to 512 [ 101.622351][ T5299] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.702989][ T5299] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.740364][ T5299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.434'. [ 101.768021][ T5299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.434'. [ 102.326846][ T5319] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 102.365317][ T5319] SELinux: failed to load policy [ 102.390513][ T5317] loop1: detected capacity change from 0 to 512 [ 102.418386][ T5317] msdos: Bad value for 'uid' [ 102.634170][ T5317] msdos: Bad value for 'uid' [ 102.693253][ T5324] loop4: detected capacity change from 0 to 512 [ 102.714440][ T5324] msdos: Bad value for 'uid' [ 102.768216][ T5324] msdos: Bad value for 'uid' [ 103.373615][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.827108][ T5332] 9pnet_fd: Insufficient options for proto=fd [ 103.863708][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 103.863733][ T28] audit: type=1400 audit(1784930075.286:1720): avc: denied { mounton } for pid=5325 comm="syz.4.443" path="/97/file0" dev="tmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.449206][ T5060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.546838][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.555088][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.563343][ T35] IPVS: starting estimator thread 0... [ 104.717081][ T5340] loop1: detected capacity change from 0 to 1024 [ 105.675141][ T5344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.691479][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.721191][ T5337] IPVS: using max 2256 ests per chain, 112800 per kthread [ 105.752730][ T5340] EXT4-fs: Ignoring removed nobh option [ 105.758536][ T5340] EXT4-fs: Ignoring removed bh option [ 105.764192][ T5340] EXT4-fs: Ignoring removed nobh option [ 105.773980][ T28] audit: type=1400 audit(1784930077.236:1721): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 105.845234][ T5340] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 106.037928][ T5350] syzkaller1: entered promiscuous mode [ 106.060509][ T5340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.076314][ T5350] syzkaller1: entered allmulticast mode [ 106.113809][ T28] audit: type=1400 audit(1784930077.576:1722): avc: denied { write } for pid=5334 comm="syz.1.447" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.255959][ T5350] x_tables: duplicate underflow at hook 1 [ 106.436817][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.463632][ T5361] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 106.471327][ T5361] vhci_hcd vhci_hcd.3: default hub control req: 600b v0000 i0000 l0 [ 106.780584][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.858280][ T5367] loop1: detected capacity change from 0 to 512 [ 106.882086][ T5360] loop4: detected capacity change from 0 to 512 [ 106.894393][ T5367] msdos: Bad value for 'uid' [ 106.933690][ T5367] msdos: Bad value for 'uid' [ 107.432720][ T5383] 9pnet_fd: Insufficient options for proto=fd [ 107.446278][ T3399] IPVS: starting estimator thread 0... [ 107.569238][ T5384] IPVS: using max 1632 ests per chain, 81600 per kthread [ 107.923623][ T3591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.938459][ T5060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.977764][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.159814][ T5388] loop4: detected capacity change from 0 to 1024 [ 108.191497][ T5388] loop4: detected capacity change from 0 to 1764 [ 108.201109][ T5388] ISOFS: Bad logical zone size 1280 [ 108.401331][ T5397] syzkaller1: entered promiscuous mode [ 108.409564][ T5398] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 108.428587][ T5397] syzkaller1: entered allmulticast mode [ 108.438930][ T5398] vhci_hcd vhci_hcd.3: default hub control req: 600b v0000 i0000 l0 [ 108.708451][ T5403] loop4: detected capacity change from 0 to 512 [ 108.743653][ T5397] x_tables: duplicate underflow at hook 1 [ 108.753911][ T5403] msdos: Bad value for 'uid' [ 108.778507][ T5403] msdos: Bad value for 'uid' [ 108.944018][ T28] audit: type=1326 audit(1784930080.406:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.0.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd719de99 code=0x7ffc0000 [ 109.005096][ T5398] loop5: detected capacity change from 0 to 512 [ 109.081461][ T28] audit: type=1326 audit(1784930080.436:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.0.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd719de99 code=0x7ffc0000 [ 109.149968][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.187272][ T28] audit: type=1326 audit(1784930080.436:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.0.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd719de99 code=0x7ffc0000 [ 109.212843][ T28] audit: type=1326 audit(1784930080.436:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.0.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd719de99 code=0x7ffc0000 [ 109.238218][ T28] audit: type=1326 audit(1784930080.436:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.0.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f5bd719de99 code=0x7ffc0000 [ 109.265509][ T28] audit: type=1326 audit(1784930080.436:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.0.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd719de99 code=0x7ffc0000 [ 109.290894][ T28] audit: type=1326 audit(1784930080.436:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.0.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd719de99 code=0x7ffc0000 [ 109.316258][ T28] audit: type=1326 audit(1784930080.436:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.0.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5bd719de99 code=0x7ffc0000 [ 109.341652][ T28] audit: type=1326 audit(1784930080.436:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.0.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5bd719de99 code=0x7ffc0000 [ 109.367359][ T5416] loop1: detected capacity change from 0 to 512 [ 109.390359][ T5416] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.471: bg 0: block 393: padding at end of block bitmap is not set [ 109.419106][ T5416] loop1: lost filesystem error report for type 5 error -117 [ 109.420494][ T5416] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 109.436643][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 109.436668][ C1] EXT4-fs (loop1): initial error at time 1784930080: ext4_validate_block_bitmap:441 [ 109.436696][ C1] EXT4-fs (loop1): last error at time 1784930080: ext4_validate_block_bitmap:441 [ 109.486044][ T5416] loop1: lost filesystem error report for type 5 error -117 [ 109.486278][ T5416] EXT4-fs (loop1): 2 truncates cleaned up [ 109.513348][ T5416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.554272][ T5419] netlink: 'syz.5.472': attribute type 21 has an invalid length. [ 109.563249][ T28] audit: type=1400 audit(1784930081.016:1732): avc: denied { write } for pid=5415 comm="syz.1.471" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.593234][ T5419] netlink: 'syz.5.472': attribute type 5 has an invalid length. [ 109.607206][ T5416] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 109.652564][ T5422] loop5: detected capacity change from 0 to 512 [ 109.698391][ T5422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.728580][ T5422] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.743683][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.794080][ T5422] netlink: 830 bytes leftover after parsing attributes in process `syz.5.474'. [ 109.877830][ T3591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.889144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.056365][ T5435] loop5: detected capacity change from 0 to 512 [ 110.057350][ T5434] loop4: detected capacity change from 0 to 512 [ 110.092308][ T5435] msdos: Bad value for 'uid' [ 110.106423][ T5434] msdos: Bad value for 'uid' [ 110.108771][ T5435] msdos: Bad value for 'uid' [ 110.127496][ T5434] msdos: Bad value for 'uid' [ 110.211382][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.357932][ T5445] -1O2~: renamed from syzkaller0 [ 111.035222][ T5060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.157735][ T5460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.166082][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.203346][ T5462] usb usb8: usbfs: process 5462 (syz.1.484) did not claim interface 0 before use [ 111.409234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.734399][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.146375][ T5456] netlink: 14 bytes leftover after parsing attributes in process `syz.5.485'. [ 112.258908][ T5456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.307745][ T5456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.359956][ T5456] bond0 (unregistering): Released all slaves [ 112.477496][ T5485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.492'. [ 112.716204][ T5495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5495 comm=syz.1.494 [ 112.769706][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.817238][ T5492] syzkaller0: entered promiscuous mode [ 112.825146][ T5492] syzkaller0: entered allmulticast mode [ 112.953763][ T5504] syzkaller1: entered promiscuous mode [ 112.965742][ T5504] syzkaller1: entered allmulticast mode [ 113.177282][ T5502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.221838][ T5502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.626671][ T5507] loop4: detected capacity change from 0 to 512 [ 113.665562][ T5507] msdos: Bad value for 'uid' [ 113.681165][ T5507] msdos: Bad value for 'uid' [ 113.729699][ T281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.672669][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.700455][ T5517] loop5: detected capacity change from 0 to 512 [ 114.757008][ T281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.865150][ T5517] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 114.887209][ T5522] syz_tun: entered allmulticast mode [ 115.855338][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.948132][ T5526] netlink: set zone limit has 4 unknown bytes [ 116.006182][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.058708][ T5521] syz_tun: left allmulticast mode [ 116.129860][ T28] kauditd_printk_skb: 188 callbacks suppressed [ 116.129873][ T28] audit: type=1326 audit(1784930087.596:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.5.495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9a0de99 code=0x7ffc0000 [ 116.221621][ T5524] loop1: detected capacity change from 0 to 512 [ 116.263782][ T28] audit: type=1326 audit(1784930087.626:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.5.495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9a0de99 code=0x7ffc0000 [ 116.379305][ T28] audit: type=1326 audit(1784930087.626:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.5.495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9a0de99 code=0x7ffc0000 [ 116.432893][ T5524] EXT4-fs (loop1): 1 orphan inode deleted [ 116.489958][ T28] audit: type=1326 audit(1784930087.626:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.5.495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9a0de99 code=0x7ffc0000 [ 116.527920][ T5524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.586239][ T5524] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.608887][ T28] audit: type=1326 audit(1784930087.636:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.5.495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fd7e9a0de99 code=0x7ffc0000 [ 116.641641][ T28] audit: type=1326 audit(1784930087.636:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.5.495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9a0de99 code=0x7ffc0000 [ 116.669953][ T28] audit: type=1326 audit(1784930087.636:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.5.495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9a0de99 code=0x7ffc0000 [ 116.695893][ T28] audit: type=1326 audit(1784930087.636:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.5.495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9a0de99 code=0x7ffc0000 [ 116.740896][ T28] audit: type=1326 audit(1784930087.636:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.5.495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7e9a0de99 code=0x7ffc0000 [ 116.811999][ T28] audit: type=1326 audit(1784930087.636:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.5.495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e9a0de99 code=0x7ffc0000 [ 117.011551][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.170670][ T5556] syzkaller0: entered promiscuous mode [ 117.187630][ T5556] syzkaller0: entered allmulticast mode [ 117.303983][ T5560] loop5: detected capacity change from 0 to 512 [ 117.326797][ T5560] msdos: Bad value for 'uid' [ 117.367973][ T5560] msdos: Bad value for 'uid' [ 118.050080][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.074323][ T5576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5576 comm=syz.4.516 [ 118.131837][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.819269][ T5595] netlink: 140 bytes leftover after parsing attributes in process `syz.0.523'. [ 119.018876][ T5601] syzkaller0: entered promiscuous mode [ 119.024586][ T5601] syzkaller0: entered allmulticast mode [ 119.092846][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.205650][ T5608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.221830][ T5606] netlink: 68 bytes leftover after parsing attributes in process `syz.0.529'. [ 119.334998][ T5617] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 119.493474][ T5620] loop5: detected capacity change from 0 to 512 [ 119.519271][ T5620] msdos: Bad value for 'uid' [ 119.547224][ T5620] msdos: Bad value for 'uid' [ 120.085105][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.222081][ T5635] syzkaller0: entered promiscuous mode [ 120.222085][ T5629] loop1: detected capacity change from 0 to 512 [ 120.260414][ T5635] syzkaller0: entered allmulticast mode [ 120.290797][ T5629] msdos: Bad value for 'uid' [ 120.295491][ T5629] msdos: Bad value for 'uid' [ 121.012301][ T5633] loop4: detected capacity change from 0 to 4096 [ 121.552305][ T5657] loop5: detected capacity change from 0 to 512 [ 121.594630][ T5657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.659318][ T5657] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.545: iget: bad i_size value: 38620345925642 [ 121.710723][ T5662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.546'. [ 121.730536][ T5657] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 121.732184][ T5657] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.545: couldn't read orphan inode 15 (err -117) [ 121.741450][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 121.741464][ C0] EXT4-fs (loop5): initial error at time 1784930093: ext4_orphan_get:1399: inode 15 [ 121.741506][ C0] EXT4-fs (loop5): last error at time 1784930093: ext4_orphan_get:1399: inode 15 [ 121.779686][ T5664] syz.1.547 (5664): /proc/5663/oom_adj is deprecated, please use /proc/5663/oom_score_adj instead. [ 121.822657][ T5664] loop1: detected capacity change from 0 to 512 [ 121.863218][ T5664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.909078][ T28] kauditd_printk_skb: 307 callbacks suppressed [ 121.909097][ T28] audit: type=1400 audit(1784930093.366:2238): avc: denied { write } for pid=5663 comm="syz.1.547" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.959366][ T5657] loop5: lost filesystem error report for type 5 error -117 [ 121.959975][ T5657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.017791][ T5671] loop4: detected capacity change from 0 to 164 [ 122.025780][ T28] audit: type=1400 audit(1784930093.416:2239): avc: denied { create } for pid=5663 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.071585][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.084714][ T5671] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 122.119208][ T5660] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 122.160606][ T28] audit: type=1400 audit(1784930093.416:2240): avc: denied { ioctl } for pid=5663 comm="syz.1.547" path="socket:[11868]" dev="sockfs" ino=11868 ioctlcmd=0x8994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.160715][ T28] audit: type=1400 audit(1784930093.546:2241): avc: denied { write } for pid=5656 comm="syz.5.545" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.202817][ T5677] loop1: detected capacity change from 0 to 512 [ 122.209452][ T5677] journal_path: not usable as path [ 122.209478][ T5677] EXT4-fs: error: could not find journal device path [ 122.293000][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.545'. [ 122.293653][ T28] audit: type=1400 audit(1784930093.756:2242): avc: denied { map } for pid=5656 comm="syz.5.545" path="/95/bus/cpuset.effective_mems" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 122.418803][ T5683] syzkaller1: entered promiscuous mode [ 122.418873][ T5683] syzkaller1: entered allmulticast mode [ 122.613675][ T3591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.763094][ T5690] loop4: detected capacity change from 0 to 512 [ 122.771344][ T5690] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.787717][ T5690] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 122.812383][ T5695] loop1: detected capacity change from 0 to 512 [ 122.856866][ T5695] ext4: Unknown parameter 'noacl' [ 122.872317][ T5690] EXT4-fs (loop4): 1 truncate cleaned up [ 122.894007][ T5690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.926342][ T28] audit: type=1400 audit(1784930094.386:2243): avc: denied { write } for pid=5689 comm="syz.4.556" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.966333][ T5690] ucma_write: process 378 (syz.4.556) changed security contexts after opening file descriptor, this is not allowed. [ 122.991839][ T28] audit: type=1400 audit(1784930094.416:2244): avc: denied { write } for pid=5704 comm="syz.4.556" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.037369][ T5706] loop5: detected capacity change from 0 to 512 [ 123.079728][ T28] audit: type=1400 audit(1784930094.536:2245): avc: denied { mounton } for pid=5689 comm="syz.4.556" path="/128/file0/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.190452][ T5706] EXT4-fs (loop5): 1 orphan inode deleted [ 123.202721][ T49] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 123.229287][ T5706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.244239][ T49] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1 [ 123.273764][ T5706] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.296549][ T5715] bond3: option all_slaves_active: invalid value (5) [ 123.304122][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.314309][ T5715] bond3 (unregistering): Released all slaves [ 123.341116][ T2] ================================================================== [ 123.349274][ T2] BUG: KCSAN: data-race in alloc_pid / copy_process [ 123.355895][ T2] [ 123.358316][ T2] read-write to 0xffffffff86c5c268 of 4 bytes by task 5723 on cpu 1: [ 123.366388][ T2] alloc_pid+0x6bb/0x930 [ 123.370669][ T2] copy_process+0x11aa/0x2310 [ 123.375359][ T2] kernel_clone+0x1c0/0x5f0 [ 123.379876][ T2] __se_sys_clone3+0x1f5/0x230 [ 123.384665][ T2] __x64_sys_clone3+0x31/0x40 [ 123.389362][ T2] x64_sys_call+0x580/0x3020 [ 123.393975][ T2] do_syscall_64+0x136/0x3c0 [ 123.398588][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.404498][ T2] [ 123.406832][ T2] read to 0xffffffff86c5c268 of 4 bytes by task 2 on cpu 0: [ 123.414128][ T2] copy_process+0x1aae/0x2310 [ 123.418820][ T2] kernel_clone+0x1c0/0x5f0 [ 123.423345][ T2] kernel_thread+0xe5/0x120 [ 123.427882][ T2] kthreadd+0x25b/0x320 [ 123.432065][ T2] ret_from_fork+0x146/0x330 [ 123.436677][ T2] ret_from_fork_asm+0x1a/0x30 [ 123.441459][ T2] [ 123.443792][ T2] value changed: 0x80000117 -> 0x80000118 [ 123.449516][ T2] [ 123.451849][ T2] Reported by Kernel Concurrency Sanitizer on: [ 123.458015][ T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 123.468452][ T2] Tainted: [W]=WARN [ 123.472278][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.482343][ T2] ================================================================== [ 124.500013][ T5721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.512751][ T5721] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.535858][ T28] audit: type=1400 audit(1784930095.996:2246): avc: denied { write } for pid=5712 comm="syz.1.562" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.562111][ T5713] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.562: lblock 0 mapped to illegal pblock 0 (length 1) [ 124.577723][ T5713] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 124.612041][ T5713] EXT4-fs (loop1): This should not happen!! Data will be lost [ 124.612041][ T5713] [ 124.777838][ T3301] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 124.797142][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.129399][ T3591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.