last executing test programs: 8.006811863s ago: executing program 1 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8000004, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xe000000000000003, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") keyctl$get_security(0x11, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 7.961006255s ago: executing program 0 (id=435): mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103001, 0x111) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) syz_io_uring_setup(0x1541, &(0x7f0000000800)={0x0, 0x218a, 0x10, 0xffffe000, 0x32e}, 0x0, &(0x7f0000001080), 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) futex(0x0, 0x80, 0x0, &(0x7f0000002ec0), 0x0, 0x1) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 7.778968671s ago: executing program 0 (id=437): arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000000)) (async) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$VT_DISALLOCATE(r0, 0x5608) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x420e, r5) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4, 0x4, @remote, 0x1}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4, 0x4, @remote, 0x1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x42, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x42, 0x0) 7.337153266s ago: executing program 0 (id=439): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000001500100000007e5c0000007a000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0xe2000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x20}) socketpair(0x2f, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89fc, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c000000020601080000010000000000000000000900020073797a3200000000050004000000000014000780050015000c0000000800114000000000050005000a000000050001000600000010000300686173683a69702c6d6163"], 0x5c}}, 0x84000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737908000000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x8, 0x0, 0x82, 0x0, 0x0, 0x20680, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x4, 0xfffffffffffffffc, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000095000000000000000085000000130000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000300)={0x9, [0x4, 0x7f, 0x2, 0x7fff, 0x1, 0x2, 0xfffd, 0x5, 0x360]}, &(0x7f0000000340)=0x16) readahead(0xffffffffffffffff, 0x10, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000600000000000071123800"/31], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, &(0x7f00000002c0)) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu--0\t\t\t') r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x28902) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000ec0)={{0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x10000, 0x10}) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x7e, 0x0, 0x9, 0x9, 0x2, 0x81}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.104025833s ago: executing program 1 (id=442): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00060000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000000000268e0000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0xd386, 0x0, 0x3, 0xaa}, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x400000075f, 0xa382) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) 6.983150717s ago: executing program 2 (id=443): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000001500100000007e5c0000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0xe2000, 0x3, &(0x7f0000a00000/0x600000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x20}) socketpair(0x2f, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fc, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[], 0x5c}}, 0x84000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737908000000000008000440000000000900010073797a300000000008000340000000011400"], 0x64}}, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x8, 0x0, 0x82, 0x0, 0x0, 0x20680, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x4, 0xfffffffffffffffc, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000095000000000000000085000000130000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) readahead(0xffffffffffffffff, 0x10, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, &(0x7f00000002c0)) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu--0\t\t\t') r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x28902) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000ec0)={{0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x10000, 0x10}) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x7e, 0x0, 0x9, 0x9, 0x2, 0x81}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.868649301s ago: executing program 0 (id=444): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="30200000cd1f7e4eb6d2fa994c90f84cac47ad8fb853de9c1af449c327d98ad6a6f23ab14bf9e8d922f6c8e97491da90cceca48b80c026c7975164455d999efed75c1841e65b03447ea5ec8757b81207ad22b74911f890177a86e5f76a13f70869c11b14914e65c143a24d981102ffe4f1ab5bea81e509eda7653450d8d760ce33f0b802d48d7e1c9a1b0573b371ed986b52bfcec95469fbc44e456df2b66efb7c5ac0be8c49378b747ef7abb00b2d23221cc2a610", @ANYRES16=r2, @ANYBLOB="000828bd7000ffdbdf25030000000800020002000000080001000200000008000200020000000800020002000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004840}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r8, 0x509, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x40, r9, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xdf914cd3c10f80a}, 0x24004080) 5.973105391s ago: executing program 2 (id=447): mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103001, 0x111) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) syz_io_uring_setup(0x1541, &(0x7f0000000800)={0x0, 0x218a, 0x10, 0xffffe000, 0x32e}, 0x0, &(0x7f0000001080), 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) futex(0x0, 0x80, 0x0, &(0x7f0000002ec0), 0x0, 0x1) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 5.440457659s ago: executing program 2 (id=450): socket$kcm(0x11, 0x3, 0x0) socket(0x10, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@uid_eq}]}, 0x1, 0x67f, &(0x7f0000000740)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) (fail_nth: 1) 5.387859531s ago: executing program 3 (id=451): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80a01) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xc}}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023892) 5.327509432s ago: executing program 4 (id=452): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c00f40e1400020000000000000006e1f000000089090000000283fcf91a82963d2bd4b836954268e611", 0x2c}, {&(0x7f0000000240)="7cdb015fbb1990080000006a837b6487d32d2fb46cbd1523147f0741e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab81963cf096b4a6efb03d0a69ef39458a06a2bccd5f12f4584d19a07664fe933703f7f6030000003abfd437d1e03de09e6074561fe98ba01cb61fdd3c53bdba305901d7103513c9c2b71ea428a38f832416f3ca22ccc552044f00ff3570a9ab9cf26b9af6af17547bf7f4e1762be569a68ddff0edf9f2d21b53644c04dee00e429612b41cd862603e9abc6533e101497f9c870000ccc84a51ff1f965d390a4d51d9353d0d2717fa", 0xe1}, {&(0x7f0000001b40)="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", 0xdf9}], 0x3}, 0x2004408d) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x11, 0x0, @void}, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0xa}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x5, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x3, r4, 0x0) r5 = syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) io_uring_setup(0xd2, &(0x7f0000000140)={0x0, 0xf475, 0x80, 0x0, 0x2da}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="030000000000040000000a000000000000000000", @ANYRES32=r5, @ANYBLOB="0300"/20, @ANYRES32, @ANYRES32, @ANYBLOB="0500000003000000010000000000ec0000000000000000000000000098b708ed1eb4a80aba2ebc9c4266dcd39dee5adf00a1135b181f049aced420060f00131c7d5cd49f4e68a1101365705f1e6bbfa10c5815f9ff24bd131ddb6f9f996b169dd2b839942081"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r6, &(0x7f0000000300)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce49bd4af9b8cf0b15e8ad756f12238f66ee49d20487065dad7cffef082a59ee2b21eb73656d3dc03547888735a17218c20071551f0d51963e", 0x7a, 0x4044880, 0x0, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0, 0x0) 5.10824557s ago: executing program 1 (id=453): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040), 0x2, 0xbbf, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r4, 0x2004, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) 3.817064243s ago: executing program 2 (id=454): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000740)) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) timer_create(0x3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f0000000100)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000400)={0x28, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}]}, 0x28}}, 0x8804) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}], [@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x3, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0xe000000, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x5, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0xb891, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x4e, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0xffffffff, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x3, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x3, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) timer_gettime(0x0, &(0x7f0000000000)) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.767328595s ago: executing program 3 (id=455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={@loopback, 0x800021, r2}) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000180)={0xb4, 0x0, 0x0, 0x1ff, 0x7, 0x8, 0x7}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f0000000140)=0xfffffffd, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41100000000000000290000003b000000", 0xfe60) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x2b, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101000000000000080002"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff8000}]}) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtaction={0xf4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xe0, 0x1, [@m_ctinfo={0xdc, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}]}, {0xa6, 0x6, "12b1dc15a2c5e926a722a05f47893abb76218c0df4a6cb860c0e085841be4a3e762053efb4674bf55a7428fb57b7c5a67d48ccfa8119ae92d4fb9ca40ecc66726fd9fa41a634a40411972de706af84c7889335c0ccf379d46ab1812cabc239cd243a1bca566d0db0fa099c51802539883d1c6c94c3bf36d76a30c02d5b4f2ef59e49fc3eedd8910f763d58048cd6474193363cf29d270a7f5ed91e4ec5de3f63b80b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xf4}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x2, 0x0, 0x0, 0x0, 0x2000004}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) 3.580036431s ago: executing program 3 (id=456): socket$kcm(0xa, 0x922000000003, 0x11) syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x4dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@remote, 0x78, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x8, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002380)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 3.400071717s ago: executing program 4 (id=457): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b062dbd7000000000003000000005003600000000000500350004000000050033000300000005003400400000000a0001007770616e30000000b0272e918f17540502ff7d329ff6ae3113befdc9c66ac9d97df749a463698cbe3939751780a2c62b60ed5c8493e90103442f37889c61ef534fb8e024b595ca9c6556bea9ae78d9d88c68a0b7c7ac8055a0f78277b992ab8c74454b32fcf11125038f771d4b2fbbda15709bcb60a90875"], 0x40}}, 0x4) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b40)={0x20, r6, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000640), 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r13, r10, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088476621e99900003c89f0bb6cd0e0bc2f5ecaffff020000000000000000000000000001ff0100000000000000000000000000014118e1397844441163b9e340b66f282e7bbdcfdd2f607d45393c7bb30718e7d9713f8f9494d34f42391a629f24b5fac72cbafe52543fec84b12f7b1c8b739a6441a08b7ef7d887f09fb664ac58dee5b5c056dbb5ae86331642290c3ccff63493652031c02c6f5bfa799c1e555280c5ac9acaf3"], 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x840) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r14, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r14, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe46}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xb8f0, 0xc000, 0x3, 0x191}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.233225413s ago: executing program 4 (id=458): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, @in6={0xa, 0x4e21, 0x1000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, @in={0x2, 0x4e20, @rand_addr=0x64010100}], 0x3c) timer_create(0x1, &(0x7f0000000200)={0x0, 0x8000021, 0x2, @thr={&(0x7f0000000440)="983c3779207c3713f44c8a1a52c78d43c91f415a956715da463337c2dd94024518f4b79d70e3bd01364919aaba90cb1a3ea8dd9a90fc745e81ec74e40c08b8303000065b264bc689274130e48f680095c8fc6936c5b669df2b867c7df3ee82f6d6cfc9e0c3bfb522e1e3964af49ed2b8517431163f3392b35e4cdf5ef5bbde6f5bec5a63f2c93f48b4dc9a0f54d4888131a508c12b8358094386dda1ee34eb9d17ba62e30ab5a7c3d4e5c9091a2d69a9c3010954f7d2b693e73b3e", &(0x7f0000000500)="e6df3f6c96c037a251519edea4cf383112fc9f45017700c271f2"}}, &(0x7f00000002c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c000780080006"], 0x5c}}, 0x20084884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200000300000000000000300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003", @ANYRESOCT=0x0], 0x7c}}, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x37, 0x1, 0xfffffffe}}]}]}}}]}, 0x6c}}, 0x0) sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100f0ff00004300028005000100060000000c00030100008000000000000c0002"], 0xc0}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0x10, 0x10, &(0x7f0000000080)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000740)="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", 0x1000}], 0x1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)={0x30, r9, 0x1, 0x0, 0x180000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x1, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x9015) 3.113340057s ago: executing program 4 (id=459): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x0, 0x4000000000000a04, 0x40800000000000, 0x800000000000004}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="1100"/12, @ANYRES32=r7, @ANYRES64=0x0], 0x20) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'bond_slave_0\x00', 0x3}) fchdir(0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00010029bd7081d100000002202000000000000020000008001e"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) 3.041654689s ago: executing program 1 (id=460): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x0, 0x4000000000000a04, 0x40800000000000, 0x800000000000004}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="1100"/12, @ANYRES32=r7, @ANYRES64=0x0], 0x20) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'bond_slave_0\x00', 0x3}) fchdir(0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00010029bd7081d100000002202000000000000020000008001e"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) 2.823626366s ago: executing program 3 (id=461): mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103001, 0x111) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) syz_io_uring_setup(0x1541, &(0x7f0000000800)={0x0, 0x218a, 0x10, 0xffffe000, 0x32e}, 0x0, &(0x7f0000001080), 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) futex(0x0, 0x80, 0x0, &(0x7f0000002ec0), 0x0, 0x1) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 2.597846303s ago: executing program 3 (id=462): socket$kcm(0xa, 0x922000000003, 0x11) r0 = syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x4dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x78, r3}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x8, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r5 = socket$kcm(0x10, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002380)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f00000013c0)={[{@nodioread_nolock}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48b, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9tdfm1jrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLaWvoh4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaS7XbzQrPJpt3PB2b3eWaeyTzfPPPy7PPsBtC1BrOXJPrKfH+ebSowOP9249q5iZvXzk0kMTf31t9JXu76tXMTZdFyv21FZiiNSD9JioPcaubM2RPj9XrtdJEfmT353sjMmbPPfnBy/HjteO3U2KFDBw+MvvD82HNtiTOL6/qe89N7d7/6zuXXJ45efveX77L6/r/Y3hhHuwxmgf8zl2ve9lS7D9Zh2/PX+dMo6e1wZVi1nojImqsSEX9Ef/TEYuP1xysfd7RywLrKnk19S2++OAfcw5JYbclKwz0DuPuVD/rs82+5bEC3Y9O4+tL8B6As7hvFMr+lN9KiTGXh8237DUbE0Yv/fpUtsU7jEAAAjT6b+PJINfrio5vfvpb1PfoXtqTxYP7+Z/ZyfryYQxmIiPsiYmdE3B8RuyLigYi87EMR8fAa63N7/ye9ssY/uays//diMbd1a/+v7P3FQE+R257HX0mOTdVr+yNiR0QMRaUvy48uc4wfDv/++VLbGvt/2ZIdv+wLFvW40ts0QDc5PjselbVEvejqpYg9va3iTxZmApKI2B0Rexb2WtUEz44yMfX0N3uXKrRy/MtowzzT3NdZeBcX8o3xl5LG+cmp2+YnR7ZEvbZ/pDwrbvfrb5++udTx1xR/G1ytzb83tH9zkYGkcb52pr3Hv8PzP60mb+fzzNVizvHD8dnZ06MR1eRInq8WZfP1Y4v7lvmyfHb+D+1rff3vLPbJ4n8kIrKT+NGIeCwiHi/q/kREPBkR+5aJ8eeXV44/0g61/6WIyZb3v4Xzv6n9z5w9Ud4aF9csm+g58dP3Sx1/de1/ME8NFWvy+98KWlWnt0WV7/T/BgAAAHeTNP8OfJIOL6TTdHh4/jv8u+J/aX16ZvaZY9Pvn5qc/678QFTScqSrvxgPrU/Va6NJOYZWSQ5HvTZWjBWX46UHinHjL3q25vnhien6ZIdjh263bYnrP/NXT6drB6yzrS3XjlU3vCJABzTPo6e3Zi+8EW4GcK/ye23oXitc/+lG1QPYeJ7/0L1aXf8XmvLmAuDe5PkP3cv1D10q/bHTNQA6yPMfutKKP97vTGJL45rq8oWrm6TObUts1kbJExFlIt0U9ZFYp0Sn70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD///oQ1Qo=") setuid(0xee00) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf2502", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001380)={{0x0, 0x2, 0x7, 0x0, 0x5}}) 1.566197678s ago: executing program 0 (id=463): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="1100"/12, @ANYRES32=r7, @ANYRES64=0x0], 0x20) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'bond_slave_0\x00', 0x3}) fchdir(0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00010029bd7081d100000002202000000000000020000008001e"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) 1.066527135s ago: executing program 4 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={@loopback, 0x800021, r2}) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000180)={0xb4, 0x0, 0x0, 0x1ff, 0x7, 0x8, 0x7}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f0000000140)=0xfffffffd, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41100000000000000290000003b000000", 0xfe60) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x2b, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101000000000000080002"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff8000}]}) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtaction={0xf4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xe0, 0x1, [@m_ctinfo={0xdc, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}]}, {0xa6, 0x6, "12b1dc15a2c5e926a722a05f47893abb76218c0df4a6cb860c0e085841be4a3e762053efb4674bf55a7428fb57b7c5a67d48ccfa8119ae92d4fb9ca40ecc66726fd9fa41a634a40411972de706af84c7889335c0ccf379d46ab1812cabc239cd243a1bca566d0db0fa099c51802539883d1c6c94c3bf36d76a30c02d5b4f2ef59e49fc3eedd8910f763d58048cd6474193363cf29d270a7f5ed91e4ec5de3f63b80b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xf4}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x2, 0x0, 0x0, 0x0, 0x2000004}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) 1.022899246s ago: executing program 2 (id=465): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x5, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000000b050008000000001000000af1ee23ff6c81d50000040800024000000005080003651f4be342a3f5e5f0c3ad0000763a22b8fee4f20d22bb4843ff9ea43e35b678763ae08a57925942e963aefbfdcc9a28f19c1830246d420151f9262fe126c0e4cbf5696ad4c54b8d2de5a22d332f09b77b7121b6af3a7cf1f33eeb0c09b7431f55bf77602eebe194636cbbccc6cb08eb446ee96583ac0955c3c803242b1f8e9e6c4aaaee14fc21893f42f45628374133faacc7917b39f3197d51da8199a768b808d1b1cf086546133a3a31a2ab3a7a26630aee438d"], 0x2c}, 0x1, 0x0, 0x0, 0x4048800}, 0x44014) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x48c5}, 0x24008004) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, 0x0, 0x4004090) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r7, 0x0, 0x4004090) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) socket$kcm(0x29, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 993.500107ms ago: executing program 1 (id=466): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="30200000cd1f7e4eb6d2fa994c90f84cac47ad8fb853de9c1af449c327d98ad6a6f23ab14bf9e8d922f6c8e97491da90cceca48b80c026c7975164455d999efed75c1841e65b03447ea5ec8757b81207ad22b74911f890177a86e5f76a13f70869c11b14914e65c143a24d981102ffe4f1ab5bea81e509eda7653450d8d760ce33f0b802d48d7e1c9a1b0573b371ed986b52bfcec95469fbc44e456df2b66efb7c5ac0be8c49378b747ef7abb00b2d23221cc2a610", @ANYRES16=r2, @ANYBLOB="000828bd7000ffdbdf25030000000800020002000000080001000200000008000200020000000800020002000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004840}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r7, 0x509, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x40, 0x0, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xdf914cd3c10f80a}, 0x24004080) 69.743978ms ago: executing program 3 (id=467): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000001500100000007e5c0000007a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0xe2000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x20}) socketpair(0x2f, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89fc, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c000000020601080000010000000000000000000900020073797a3200000000050004000000000014000780050015000c0000000800114000000000050005000a000000050001000600000010000300686173683a69702c6d6163"], 0x5c}}, 0x84000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737908000000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x8, 0x0, 0x82, 0x0, 0x0, 0x20680, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x4, 0xfffffffffffffffc, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000095000000000000000085000000130000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000300)={0x9, [0x4, 0x7f, 0x2, 0x7fff, 0x1, 0x2, 0xfffd, 0x5, 0x360]}, &(0x7f0000000340)=0x16) readahead(0xffffffffffffffff, 0x10, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000600000000000071123800"/31], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, &(0x7f00000002c0)) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu--0\t\t\t') r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x28902) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000ec0)={{0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x10000, 0x10}) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x7e, 0x0, 0x9, 0x9, 0x2, 0x81}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 69.027268ms ago: executing program 2 (id=468): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200018, &(0x7f0000000880)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x4}}, {@norecovery}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@max_batch_time={'max_batch_time', 0x3d, 0x1ff}}, {@mblk_io_submit}, {@norecovery}]}, 0x3, 0x5a8, &(0x7f0000000a40)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x890, &(0x7f0000000340)={[{@nouid32}, {@data_err_ignore}, {@acl}, {@journal_checksum}, {@data_err_ignore}, {@noquota, 0x22}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x6, 0x4002) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) 68.153008ms ago: executing program 0 (id=469): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000000300)=[{&(0x7f0000001380)=""/4107, 0x100b}], 0x1) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x11, 0x0, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r5 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='\x00', 0x1, 0x8000c61) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, 0x1}, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r9, r9, 0x0, 0xe3aa6ea) 8.28824ms ago: executing program 1 (id=470): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040), 0x2, 0xbbf, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r4, 0x2004, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) 0s ago: executing program 4 (id=471): socket$kcm(0xa, 0x922000000003, 0x11) syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x4dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@remote, 0x78, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x8, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002380)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) kernel console output (not intermixed with test programs): r report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 54.567614][ T4336] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 54.585532][ T4331] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.107: mark_inode_dirty error [ 54.597072][ T4331] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 54.597440][ T4331] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 54.608623][ T28] audit: type=1400 audit(2000000010.650:365): avc: denied { write } for pid=4318 comm="syz.0.112" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.615860][ T4331] loop1: lost filesystem error report for type 5 error -117 [ 54.638655][ T4336] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 54.659045][ T4331] EXT4-fs (loop1): 1 truncate cleaned up [ 54.670433][ T4331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.683624][ T4331] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.707423][ T3896] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 54.721833][ T3896] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:19: Failed to release dquot type 1 [ 54.763773][ T28] audit: type=1400 audit(2000000010.810:366): avc: denied { connect } for pid=4346 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.830342][ T4347] loop2: detected capacity change from 0 to 512 [ 54.877559][ T4347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.923284][ T4347] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.989157][ T4319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 55.006280][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.202689][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.727960][ T28] audit: type=1400 audit(2000000011.770:367): avc: denied { create } for pid=4363 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 55.751342][ T4366] batadv_slave_1: entered promiscuous mode [ 55.764214][ T28] audit: type=1400 audit(2000000011.800:368): avc: denied { ioctl } for pid=4365 comm="syz.3.123" path="socket:[6658]" dev="sockfs" ino=6658 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.778009][ T4365] batadv_slave_1: left promiscuous mode [ 55.800522][ T28] audit: type=1400 audit(2000000011.850:369): avc: denied { connect } for pid=4371 comm="syz.4.124" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.827443][ T4362] netlink: 80 bytes leftover after parsing attributes in process `syz.0.121'. [ 55.836839][ T28] audit: type=1400 audit(2000000011.880:370): avc: denied { write } for pid=4371 comm="syz.4.124" laddr=fe80::12 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.900467][ T4374] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.920125][ T4376] loop4: detected capacity change from 0 to 512 [ 55.990661][ T4376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.019168][ T4374] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.051189][ T28] audit: type=1400 audit(2000000012.100:371): avc: denied { write } for pid=4375 comm="syz.4.126" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.118945][ T4374] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.159972][ T4391] syz_tun: entered promiscuous mode [ 56.168679][ T4391] macsec1: entered allmulticast mode [ 56.183101][ T4391] syz_tun: entered allmulticast mode [ 56.200784][ T4391] syz_tun: left allmulticast mode [ 56.205862][ T4391] syz_tun: left promiscuous mode [ 56.218332][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.234368][ T4374] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.257778][ T28] audit: type=1400 audit(2000000012.300:372): avc: denied { setopt } for pid=4395 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.337725][ T4399] loop0: detected capacity change from 0 to 4096 [ 56.348801][ T68] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.363719][ T4399] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 56.375729][ T4401] loop2: detected capacity change from 0 to 4096 [ 56.392750][ T4401] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 56.441181][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.488991][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.502019][ T4403] netlink: 80 bytes leftover after parsing attributes in process `syz.4.137'. [ 56.595073][ T4401] gretap1: entered promiscuous mode [ 56.606988][ T4405] loop4: detected capacity change from 0 to 1024 [ 56.620684][ T4405] EXT4-fs: quotafile must be on filesystem root [ 56.636463][ T4401] batman_adv: batadv0: Adding interface: gretap1 [ 56.658807][ T4401] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.714729][ T4401] batman_adv: batadv0: Interface activated: gretap1 [ 56.762730][ T4399] gretap1: entered promiscuous mode [ 56.782802][ T4399] batman_adv: batadv0: Adding interface: gretap1 [ 56.790757][ T4399] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.040919][ T4413] loop4: detected capacity change from 0 to 512 [ 57.069755][ T4399] batman_adv: batadv0: Interface activated: gretap1 [ 57.816538][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.969612][ T4418] loop2: detected capacity change from 0 to 512 [ 58.148783][ T4418] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.293478][ T4413] EXT4-fs (loop4): 1 orphan inode deleted [ 59.321083][ T4413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.343794][ T4418] EXT4-fs (loop2): 1 truncate cleaned up [ 59.504536][ T4418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.090727][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 60.090743][ T28] audit: type=1400 audit(2000000015.570:411): avc: denied { mount } for pid=4411 comm="syz.2.140" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.123535][ T28] audit: type=1400 audit(2000000015.830:412): avc: denied { setopt } for pid=4421 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.412143][ T4413] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.552848][ T49] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 60.573595][ T49] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 60.878243][ T28] audit: type=1400 audit(2000000016.480:413): avc: denied { egress } for pid=4411 comm="syz.2.140" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 60.905029][ T28] audit: type=1400 audit(2000000016.480:414): avc: denied { sendto } for pid=4411 comm="syz.2.140" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 60.929867][ T28] audit: type=1400 audit(2000000016.610:415): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.949492][ T28] audit: type=1400 audit(2000000016.640:416): avc: denied { read write } for pid=4424 comm="syz.0.143" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.973062][ T28] audit: type=1400 audit(2000000016.640:417): avc: denied { open } for pid=4424 comm="syz.0.143" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.996486][ T28] audit: type=1400 audit(2000000016.650:418): avc: denied { ioctl } for pid=4424 comm="syz.0.143" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.997627][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.021240][ T28] audit: type=1400 audit(2000000016.740:419): avc: denied { create } for pid=4429 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.032784][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.227725][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.237202][ T4437] loop1: detected capacity change from 0 to 4096 [ 61.280976][ T4437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.317187][ T4441] loop4: detected capacity change from 0 to 1024 [ 61.364044][ T4445] loop3: detected capacity change from 0 to 512 [ 61.384066][ T4446] netlink: 9 bytes leftover after parsing attributes in process `syz.2.148'. [ 61.393792][ T4446] gretap0: entered promiscuous mode [ 61.436521][ T4446] netlink: 5 bytes leftover after parsing attributes in process `syz.2.148'. [ 61.453567][ T4441] EXT4-fs: quotafile must be on filesystem root [ 61.503309][ T4445] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.546714][ T4445] EXT4-fs (loop3): 1 truncate cleaned up [ 61.557820][ T4445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.655380][ T4446] 0ªî{X¹¦: renamed from gretap0 [ 61.859607][ T4443] loop2: detected capacity change from 0 to 1024 [ 62.852773][ T4446] 0ªî{X¹¦: left promiscuous mode [ 62.883236][ T4443] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 63.604807][ T4443] System zones: 0-1, 3-36 [ 63.609804][ T4446] 0ªî{X¹¦: entered allmulticast mode [ 63.617644][ T4446] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 63.940240][ T4443] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.148: bad orphan inode 134217728 [ 63.965415][ T4443] loop2: lost filesystem error report for type 5 error -117 [ 63.966167][ T4443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.339256][ T4455] loop4: detected capacity change from 0 to 512 [ 64.540396][ T4455] EXT4-fs (loop4): 1 orphan inode deleted [ 64.555489][ T4455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.571158][ T4455] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.632194][ T49] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 64.830549][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.855898][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.873785][ T4459] loop0: detected capacity change from 0 to 164 [ 64.874627][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.913506][ T4463] loop3: detected capacity change from 0 to 1024 [ 64.958991][ T4459] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 64.967798][ T4463] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.973411][ T4459] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 64.995388][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.998066][ T4464] loop2: detected capacity change from 0 to 256 [ 65.006133][ T4463] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 65.012505][ T4464] vfat: Deprecated parameter 'posix' [ 65.024664][ T4464] FAT-fs: "posix" option is obsolete, not supported now [ 65.026187][ T4459] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 65.042303][ T4463] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.150: lblock 2 mapped to illegal pblock 2 (length 1) [ 65.056486][ T4463] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 65.056608][ T4463] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.150: lblock 0 mapped to illegal pblock 48 (length 1) [ 65.065681][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 65.065700][ C1] EXT4-fs (loop3): initial error at time 2000000021: ext4_map_blocks:791: inode 3: block 2 [ 65.065736][ C1] EXT4-fs (loop3): last error at time 2000000021: ext4_map_blocks:791: inode 3: block 2 [ 65.106145][ T4464] FAT-fs (loop2): codepage cp775 not found [ 65.119655][ T4463] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 65.120493][ T4463] __quota_error: 124 callbacks suppressed [ 65.120506][ T4463] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 65.126928][ T28] audit: type=1400 audit(2000000021.170:542): avc: denied { create } for pid=4461 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.166848][ T4464] netlink: 40 bytes leftover after parsing attributes in process `syz.2.152'. [ 65.181598][ T4468] loop1: detected capacity change from 0 to 1024 [ 65.188994][ T4463] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.150: Failed to acquire dquot type 0 [ 65.200868][ T4468] EXT4-fs: quotafile must be on filesystem root [ 65.248621][ T4463] loop3: lost filesystem error report for type 5 error -117 [ 65.312909][ T28] audit: type=1400 audit(2000000021.220:543): avc: denied { write } for pid=4461 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.333090][ T28] audit: type=1400 audit(2000000021.220:544): avc: denied { nlmsg_write } for pid=4461 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.385495][ T4463] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 66.220995][ T4463] loop3: lost filesystem error report for type 5 error -117 [ 66.285258][ T28] audit: type=1400 audit(2000000021.220:545): avc: denied { create } for pid=4461 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.360622][ T4463] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.150: mark_inode_dirty error [ 66.430548][ T28] audit: type=1400 audit(2000000021.220:546): avc: denied { write } for pid=4461 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.455313][ T4463] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.457203][ T4463] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 66.547703][ T28] audit: type=1400 audit(2000000021.220:547): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 66.567851][ T4463] EXT4-fs (loop3): 1 orphan inode deleted [ 66.578767][ T4463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.601916][ T28] audit: type=1400 audit(2000000000.000:548): avc: denied { name_bind } for pid=4470 comm="syz.0.155" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 66.638612][ T28] audit: type=1400 audit(2000000000.000:549): avc: denied { node_bind } for pid=4470 comm="syz.0.155" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 67.088774][ T4147] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.115460][ T4147] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 67.146809][ T4147] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:21: Failed to release dquot type 0 [ 67.160117][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.172369][ T3300] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 67.186365][ T3300] loop3: lost filesystem error report for type 5 error -117 [ 67.186458][ T3300] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 67.203671][ T3300] loop3: lost filesystem error report for type 5 error -117 [ 67.203937][ T3300] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 67.222774][ T3300] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.293855][ T4487] loop2: detected capacity change from 0 to 4096 [ 67.413323][ T4493] loop1: detected capacity change from 0 to 512 [ 67.480383][ T4493] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.503767][ T4493] EXT4-fs (loop1): 1 truncate cleaned up [ 67.533320][ T4493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.618417][ T4487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.837063][ T4488] loop0: detected capacity change from 0 to 512 [ 68.000170][ T4499] loop3: detected capacity change from 0 to 512 [ 68.028522][ T4499] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 68.072369][ T4488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.095605][ T4499] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.118074][ T4499] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.162: bad orphan inode 15 [ 68.153215][ T4485] mmap: syz.0.158 (4485) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.168056][ T4499] loop3: lost filesystem error report for type 5 error -117 [ 68.169934][ T4499] ext4_test_bit(bit=14, block=18) = 1 [ 68.182704][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 68.182726][ C0] EXT4-fs (loop3): initial error at time 2000000001: ext4_orphan_get:1423 [ 68.182753][ C0] EXT4-fs (loop3): last error at time 2000000001: ext4_orphan_get:1423 [ 68.247910][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.302850][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.322725][ T4499] is_bad_inode(inode)=0 [ 68.339077][ T4499] NEXT_ORPHAN(inode)=1023 [ 68.360671][ T4499] max_ino=32 [ 68.375690][ T4499] i_nlink=0 [ 68.390461][ T4499] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.162: corrupted xattr block 19: e_value size too large [ 68.410767][ T4506] loop0: detected capacity change from 0 to 1024 [ 68.437978][ T4506] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.452667][ T4499] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.452993][ T4499] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 68.495861][ T4506] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 68.529428][ T4499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.556013][ T4506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.585980][ T4499] Cannot find add_set index 2 as target [ 68.601005][ T4504] loop2: detected capacity change from 0 to 4096 [ 68.625167][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.716461][ T4514] loop3: detected capacity change from 0 to 128 [ 68.741074][ T4504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.755349][ T4514] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.836559][ T9] hid-generic 000C:0008:0000.0001: unknown main item tag 0x0 [ 68.865565][ T9] hid-generic 000C:0008:0000.0001: unknown main item tag 0x0 [ 68.897886][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.910167][ T9] hid-generic 000C:0008:0000.0001: unknown main item tag 0x0 [ 68.940040][ T9] hid-generic 000C:0008:0000.0001: unknown main item tag 0x0 [ 68.964236][ T9] hid-generic 000C:0008:0000.0001: unknown main item tag 0x0 [ 68.980079][ T9] hid-generic 000C:0008:0000.0001: unknown main item tag 0x0 [ 68.995939][ T9] hid-generic 000C:0008:0000.0001: unknown main item tag 0x0 [ 69.011182][ T9] hid-generic 000C:0008:0000.0001: unknown main item tag 0x0 [ 69.026654][ T9] hid-generic 000C:0008:0000.0001: unknown main item tag 0x0 [ 69.037214][ T4491] loop4: detected capacity change from 0 to 2048 [ 69.043785][ T9] hid-generic 000C:0008:0000.0001: unknown main item tag 0x0 [ 69.056874][ T9] hid-generic 000C:0008:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 69.122470][ T4522] macsec1: entered promiscuous mode [ 69.135862][ T4522] macsec1: entered allmulticast mode [ 69.161072][ T4520] fido_id[4520]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.198553][ T4491] loop4: p2 p3 p7 [ 69.344753][ T2984] loop4: p2 p3 p7 [ 69.606976][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 69.939235][ T4541] loop3: detected capacity change from 0 to 1024 [ 69.950804][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.963393][ T4541] EXT4-fs: quotafile must be on filesystem root [ 70.175244][ T4539] wireguard0: entered promiscuous mode [ 70.181417][ T4539] wireguard0: entered allmulticast mode [ 70.950575][ T4549] loop2: detected capacity change from 0 to 512 [ 71.289553][ T4549] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.289587][ T4549] EXT4-fs (loop2): 1 truncate cleaned up [ 73.298818][ T4549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.317549][ T4548] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 73.350177][ T4556] netlink: 60 bytes leftover after parsing attributes in process `syz.1.176'. [ 73.385403][ T4556] set_capacity_and_notify: 1 callbacks suppressed [ 73.385415][ T4556] loop1: detected capacity change from 0 to 2048 [ 73.443266][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.513910][ T4560] loop3: detected capacity change from 0 to 1024 [ 73.534453][ T4560] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.561242][ T4560] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 73.577690][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 73.577703][ T28] audit: type=1400 audit(2000000007.240:568): avc: denied { write } for pid=4563 comm="syz.4.179" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.606948][ T28] audit: type=1400 audit(2000000007.240:569): avc: denied { open } for pid=4563 comm="syz.4.179" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.701163][ T4568] loop2: detected capacity change from 0 to 512 [ 73.747964][ T4568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.815889][ T4560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.834235][ T4568] EXT4-fs (loop2): 1 truncate cleaned up [ 73.845103][ T4568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.887444][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.136778][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 74.172752][ T28] audit: type=1400 audit(2000000007.820:570): avc: denied { write } for pid=4559 comm="syz.3.178" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.375417][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 74.385217][ T4574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.180'. [ 75.342328][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 76.008693][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.021925][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.068836][ T28] audit: type=1400 audit(2000000009.730:571): avc: denied { create } for pid=4583 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.121806][ T4582] loop0: detected capacity change from 0 to 512 [ 76.128484][ T28] audit: type=1400 audit(2000000009.730:572): avc: denied { ioctl } for pid=4583 comm="syz.2.181" path="socket:[6997]" dev="sockfs" ino=6997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.173287][ T4582] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 76.193406][ T4582] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 76.201608][ T28] audit: type=1400 audit(2000000009.730:573): avc: denied { bind } for pid=4583 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.220845][ T28] audit: type=1400 audit(2000000009.730:574): avc: denied { setopt } for pid=4583 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.228755][ T4582] EXT4-fs (loop0): failed to initialize system zone (-117) [ 76.240142][ T28] audit: type=1400 audit(2000000009.730:575): avc: denied { write } for pid=4583 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.266418][ T28] audit: type=1400 audit(2000000009.760:576): avc: denied { create } for pid=4585 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.278788][ T4602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 76.285959][ T28] audit: type=1400 audit(2000000009.760:577): avc: denied { write } for pid=4585 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.311030][ T4582] EXT4-fs (loop0): mount failed [ 76.318359][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811fe6e000: rx timeout, send abort [ 76.818090][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aeb8c00: rx timeout, send abort [ 76.828599][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811fe6e000: abort rx timeout. Force session deactivation [ 77.326412][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aeb8c00: abort rx timeout. Force session deactivation [ 77.492777][ T4660] loop2: detected capacity change from 0 to 512 [ 77.547969][ T4660] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.188: corrupted inode contents [ 77.560458][ T4660] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.561075][ T4660] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.188: mark_inode_dirty error [ 77.570385][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 77.570464][ C0] EXT4-fs (loop2): initial error at time 2000000011: ext4_do_update_inode:5690: inode 16 [ 77.570633][ C0] EXT4-fs (loop2): last error at time 2000000011: ext4_do_update_inode:5690: inode 16 [ 77.608484][ T4660] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.609307][ T4660] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.188: corrupted inode contents [ 77.612929][ T4666] loop3: detected capacity change from 0 to 512 [ 77.618606][ T4660] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.639114][ T4660] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.188: mark_inode_dirty error [ 77.659975][ T4660] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.660837][ T4660] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.188: corrupted inode contents [ 77.682004][ T4660] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.683382][ T4660] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 77.701681][ T4660] loop2: lost filesystem error report for type 5 error -117 [ 77.702267][ T4660] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.188: corrupted inode contents [ 77.721937][ T4660] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.725272][ T4660] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.188: mark_inode_dirty error [ 77.726905][ T4666] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 77.734668][ T4660] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.748300][ T4660] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 77.773521][ T4660] loop2: lost filesystem error report for type 5 error -117 [ 77.775283][ T4660] EXT4-fs (loop2): 1 truncate cleaned up [ 77.783779][ T4666] EXT4-fs (loop3): 1 truncate cleaned up [ 77.792802][ T4660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.809172][ T4660] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.811570][ T4666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.824505][ T3886] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:14: Failed to release dquot type 1 [ 78.297360][ T4687] loop0: detected capacity change from 0 to 1024 [ 78.367381][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.379212][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.392054][ T4687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 78.411949][ T4693] loop1: detected capacity change from 0 to 1024 [ 78.419086][ T4693] EXT4-fs: quotafile must be on filesystem root [ 78.585471][ T3881] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.602582][ T3883] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.618728][ T3883] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.398172][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 80.398184][ T28] audit: type=1400 audit(2000000001.050:604): avc: denied { create } for pid=4691 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 80.442063][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 81.415699][ T4706] loop2: detected capacity change from 0 to 4096 [ 81.430409][ T4706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.736417][ T3883] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.747701][ T28] audit: type=1400 audit(2000000004.180:605): avc: denied { write } for pid=4705 comm="syz.2.197" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.819268][ T4712] loop3: detected capacity change from 0 to 512 [ 81.847651][ T4712] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.874945][ T4712] EXT4-fs (loop3): 1 truncate cleaned up [ 81.906811][ T4712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.947701][ T28] audit: type=1400 audit(2000000004.370:606): avc: denied { create } for pid=4705 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 81.989092][ T28] audit: type=1400 audit(2000000004.400:607): avc: denied { sys_admin } for pid=4705 comm="syz.2.197" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 82.025002][ T28] audit: type=1400 audit(2000000004.450:608): avc: denied { create } for pid=4716 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.047008][ T28] audit: type=1400 audit(2000000004.480:609): avc: denied { write } for pid=4716 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.113730][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.154504][ T28] audit: type=1400 audit(2000000004.580:610): avc: denied { write } for pid=3307 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.177277][ T3307] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 82.189932][ T28] audit: type=1400 audit(2000000004.610:611): avc: denied { write } for pid=3307 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.198916][ T3307] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 82.458497][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.472028][ T310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.522270][ T310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.571200][ T310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.621964][ T310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.686338][ T28] audit: type=1400 audit(2000000005.110:612): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 82.713271][ T28] audit: type=1400 audit(2000000005.110:613): avc: denied { search } for pid=3023 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.735643][ T310] bridge_slave_1: left allmulticast mode [ 82.741498][ T310] bridge_slave_1: left promiscuous mode [ 82.747248][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.759221][ T310] bridge_slave_0: left allmulticast mode [ 82.764866][ T310] bridge_slave_0: left promiscuous mode [ 82.770680][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.783247][ T310] batman_adv: batadv0: Interface deactivated: gretap1 [ 82.838112][ T310] batman_adv: batadv0: Removing interface: gretap1 [ 82.880231][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 82.922565][ T310] hsr_slave_0: left promiscuous mode [ 82.928279][ T310] hsr_slave_1: left promiscuous mode [ 82.934185][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.941757][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.949966][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.957488][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.969183][ T310] veth1_macvtap: left promiscuous mode [ 82.974729][ T310] veth0_macvtap: left promiscuous mode [ 82.980443][ T310] veth1_vlan: left promiscuous mode [ 82.985746][ T310] veth0_vlan: left promiscuous mode [ 83.043525][ T310] team0 (unregistering): Port device team_slave_1 removed [ 83.052726][ T310] team0 (unregistering): Port device team_slave_0 removed [ 83.080897][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 83.161558][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 83.242707][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 93.089492][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 93.089506][ T28] audit: type=1400 audit(2000000015.520:636): avc: denied { write } for pid=4790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.118619][ T28] audit: type=1400 audit(2000000015.530:637): avc: denied { write } for pid=4801 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.998339][ T28] audit: type=1400 audit(2000000016.420:638): avc: denied { write } for pid=4804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.021345][ T28] audit: type=1400 audit(2000000016.440:639): avc: denied { write } for pid=4815 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.215376][ T28] audit: type=1400 audit(2000000016.640:640): avc: denied { write } for pid=4818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.238791][ T28] audit: type=1400 audit(2000000016.660:641): avc: denied { write } for pid=4829 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.302303][ T28] audit: type=1400 audit(2000000016.730:642): avc: denied { write } for pid=4832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.325418][ T28] audit: type=1400 audit(2000000016.750:643): avc: denied { write } for pid=4843 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.890259][ T28] audit: type=1400 audit(2000000034.320:644): avc: denied { create } for pid=4848 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.914433][ T4850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'. [ 111.946119][ T28] audit: type=1400 audit(2000000034.320:645): avc: denied { create } for pid=4846 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.996042][ T28] audit: type=1400 audit(2000000034.360:646): avc: denied { bind } for pid=4848 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.034480][ T28] audit: type=1400 audit(2000000034.360:647): avc: denied { mounton } for pid=4854 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 112.066576][ T4851] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 112.088597][ T28] audit: type=1400 audit(2000000034.360:648): avc: denied { write } for pid=4848 comm="syz.3.203" path="socket:[8266]" dev="sockfs" ino=8266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.131746][ T28] audit: type=1400 audit(2000000034.370:649): avc: denied { sys_module } for pid=4854 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 112.152976][ T28] audit: type=1400 audit(2000000034.370:650): avc: denied { bind } for pid=4847 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.173254][ T28] audit: type=1400 audit(2000000034.400:651): avc: denied { create } for pid=4848 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.192985][ T28] audit: type=1400 audit(2000000034.410:652): avc: denied { bind } for pid=4848 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.212323][ T28] audit: type=1400 audit(2000000034.420:653): avc: denied { write } for pid=4848 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.232864][ T4869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.242404][ T4869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.365659][ T4854] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.380366][ T4854] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.394412][ T4854] bridge_slave_0: entered allmulticast mode [ 112.410147][ T4854] bridge_slave_0: entered promiscuous mode [ 112.422284][ T4854] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.429430][ T4854] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.436684][ T4854] bridge_slave_1: entered allmulticast mode [ 112.443292][ T4854] bridge_slave_1: entered promiscuous mode [ 112.461362][ T4854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.471702][ T4854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.491189][ T4854] team0: Port device team_slave_0 added [ 112.497834][ T4854] team0: Port device team_slave_1 added [ 112.513916][ T4854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.521262][ T4854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.548151][ T4854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.568913][ T4854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.577338][ T4854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.623543][ T4854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.668794][ T4854] hsr_slave_0: entered promiscuous mode [ 112.679128][ T4854] hsr_slave_1: entered promiscuous mode [ 112.688902][ T4854] debugfs: 'hsr0' already exists in 'hsr' [ 112.698598][ T4854] Cannot create hsr debugfs directory [ 112.804222][ T4880] loop1: detected capacity change from 0 to 1024 [ 112.820556][ T4880] EXT4-fs: quotafile must be on filesystem root [ 113.033249][ T4899] loop3: detected capacity change from 0 to 2048 [ 113.105583][ T4900] loop1: detected capacity change from 0 to 512 [ 113.272592][ T4899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.298533][ T4900] EXT4-fs (loop1): 1 orphan inode deleted [ 113.311001][ T4900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.335429][ T4900] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.805729][ T4909] netlink: 96 bytes leftover after parsing attributes in process `syz.3.210'. [ 113.987643][ T1918] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 1 [ 114.007210][ T4854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.041087][ T4854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.060014][ T4854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.638405][ T4854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.648533][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.670702][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.692555][ T4854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.781449][ T4854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.862890][ T4854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.875726][ T4854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.979450][ T4854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.987905][ T4929] loop0: detected capacity change from 0 to 4096 [ 115.000721][ T4930] siw: device registration error -23 [ 115.010125][ T4854] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.021567][ T1918] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.028715][ T1918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.030725][ T4930] netlink: 14 bytes leftover after parsing attributes in process `syz.3.214'. [ 115.048544][ T4929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.101891][ T4946] loop3: detected capacity change from 0 to 512 [ 115.159460][ T4946] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 115.272140][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.311318][ T4930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.485561][ T4930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.516915][ T4930] bond0 (unregistering): Released all slaves [ 115.711687][ T4975] loop0: detected capacity change from 0 to 764 [ 115.723494][ T4975] iso9660: Unknown parameter 'TPROXY' [ 115.788059][ T4976] ------------[ cut here ]------------ [ 115.793541][ T4976] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#1: syz.0.217/4976 [ 115.803223][ T4976] Modules linked in: [ 115.807111][ T4976] CPU: 1 UID: 0 PID: 4976 Comm: syz.0.217 Not tainted syzkaller #0 PREEMPT(full) [ 115.816312][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.826426][ T4976] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 115.832062][ T4976] Code: 8b 05 e1 88 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 04 08 5f 04 cc e8 8e 1b 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 80 1b 1e 00 90 0f 0b 90 e9 af fa ff ff [ 115.851664][ T4976] RSP: 0018:ffffc900037dfdd8 EFLAGS: 00010093 [ 115.857724][ T4976] RAX: ffffffff813b1762 RBX: ffff888101d75500 RCX: ffff888101d75500 [ 115.865762][ T4976] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 115.873735][ T4976] RBP: 0000000000000080 R08: ffff888101d76000 R09: 0000000000000000 [ 115.881710][ T4976] R10: ffffc900037dfdf0 R11: 0001c900037dfdf0 R12: ffff888101d75500 [ 115.889798][ T4976] R13: ffff888101d75d28 R14: ffff888101d27190 R15: 0000000000000080 [ 115.897795][ T4976] FS: 0000000000000000(0000) GS:ffff8882ae9fa000(0000) knlGS:0000000000000000 [ 115.906714][ T4976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.913424][ T4976] CR2: 0000001b3310eff8 CR3: 000000011b8f4000 CR4: 00000000003506f0 [ 115.921389][ T4976] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.929353][ T4976] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 115.937333][ T4976] Call Trace: [ 115.940604][ T4976] [ 115.943565][ T4976] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 115.949048][ T4976] ? __list_add_valid_or_report+0x38/0xe0 [ 115.954786][ T4976] do_exit+0xc13/0x1530 [ 115.958993][ T4976] ? switch_fpu_return+0xe7/0x1b0 [ 115.964023][ T4976] __x64_sys_exit+0x1f/0x20 [ 115.968531][ T4976] x64_sys_call+0x301d/0x3020 [ 115.973206][ T4976] do_syscall_64+0x12c/0x3b0 [ 115.977918][ T4976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.983802][ T4976] RIP: 0033:0x7f8a1d08ce59 [ 115.988206][ T4976] Code: Unable to access opcode bytes at 0x7f8a1d08ce2f. [ 115.995208][ T4976] RSP: 002b:00007f8a1baa4fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 116.003659][ T4976] RAX: ffffffffffffffda RBX: 00007f8a1d306180 RCX: 00007f8a1d08ce59 [ 116.011619][ T4976] RDX: 00007f8a1baa59c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.019596][ T4976] RBP: 00007f8a1d122d6f R08: 0000000000000000 R09: 0000000000000000 [ 116.027613][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.035580][ T4976] R13: 00007f8a1d306218 R14: 00007f8a1d306180 R15: 00007ffe4cdd8db8 [ 116.043559][ T4976] [ 116.046567][ T4976] ---[ end trace 0000000000000000 ]--- [ 116.367411][ T4940] loop4: detected capacity change from 0 to 2048 [ 116.430694][ T4940] loop4: p2 p3 p7 [ 116.523459][ T1918] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.530548][ T1918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.607994][ T4987] loop1: detected capacity change from 0 to 1024 [ 116.646439][ T4987] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.680573][ T4987] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 116.746829][ T4987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.358776][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 117.358796][ T28] audit: type=1400 audit(2000000039.790:677): avc: denied { write } for pid=4988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.506698][ T28] audit: type=1400 audit(2000000039.930:678): avc: denied { write } for pid=5021 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.587161][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.715730][ T5038] loop1: detected capacity change from 0 to 1024 [ 117.741115][ T5024] loop3: detected capacity change from 0 to 4096 [ 117.750156][ T5038] EXT4-fs: quotafile must be on filesystem root [ 117.773216][ T28] audit: type=1400 audit(2000000040.200:679): avc: denied { write } for pid=5027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.966329][ T4854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.966562][ T5024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.104590][ T5049] loop1: detected capacity change from 0 to 512 [ 118.154479][ T28] audit: type=1400 audit(2000000040.580:680): avc: denied { write } for pid=5023 comm="syz.3.221" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.197602][ T5049] EXT4-fs (loop1): 1 orphan inode deleted [ 118.208772][ T3890] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 118.216126][ T5049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.234163][ T3890] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:16: Failed to release dquot type 1 [ 118.237365][ T5049] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.265254][ T28] audit: type=1400 audit(2000000040.620:681): avc: denied { write } for pid=5048 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.386305][ T4854] veth0_vlan: entered promiscuous mode [ 118.410036][ T4854] veth1_vlan: entered promiscuous mode [ 118.456208][ T4854] veth0_macvtap: entered promiscuous mode [ 118.474684][ T4854] veth1_macvtap: entered promiscuous mode [ 118.542948][ T4854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.558924][ T4854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.566607][ T28] audit: type=1400 audit(2000000040.990:682): avc: denied { write } for pid=5057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.615156][ T28] audit: type=1400 audit(2000000041.040:683): avc: denied { write } for pid=5070 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.773577][ T5054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 118.824672][ T1918] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.837819][ T1918] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.858373][ T1918] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.889211][ T1918] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.921506][ T28] audit: type=1400 audit(2000000041.350:684): avc: denied { mounton } for pid=4854 comm="syz-executor" path="/root/syzkaller.XpbxtG/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 119.012401][ T28] audit: type=1400 audit(2000000041.380:685): avc: denied { mount } for pid=4854 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.070682][ T5073] siw: device registration error -23 [ 119.100550][ T5073] netlink: 14 bytes leftover after parsing attributes in process `syz.4.224'. [ 119.151739][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.176694][ T5092] loop4: detected capacity change from 0 to 512 [ 119.195269][ T5097] siw: device registration error -23 [ 119.201438][ T5097] netlink: 14 bytes leftover after parsing attributes in process `syz.2.202'. [ 119.213728][ T5095] loop3: detected capacity change from 0 to 512 [ 119.241004][ T5092] EXT4-fs (loop4): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 119.262083][ T5095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.292964][ T5108] loop2: detected capacity change from 0 to 512 [ 119.328110][ T5073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.340054][ T5108] EXT4-fs (loop2): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 119.449564][ T5073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.490781][ T5073] bond0 (unregistering): Released all slaves [ 119.527740][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.549849][ T5097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.610327][ T5097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.630072][ T5097] bond0 (unregistering): Released all slaves [ 119.839561][ T5140] loop3: detected capacity change from 0 to 512 [ 119.851879][ T5140] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.942173][ T5140] EXT4-fs (loop3): 1 truncate cleaned up [ 119.954351][ T5140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.342744][ T5146] loop0: detected capacity change from 0 to 512 [ 120.389097][ T5146] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.228: corrupted inode contents [ 120.401218][ T5146] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.418598][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 120.434115][ C0] EXT4-fs (loop0): initial error at time 2000000042: ext4_do_update_inode:5690: inode 16 [ 120.443964][ C0] EXT4-fs (loop0): last error at time 2000000042: ext4_do_update_inode:5690: inode 16 [ 120.579281][ T5146] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.228: mark_inode_dirty error [ 120.590900][ T5146] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.592803][ T5146] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.228: corrupted inode contents [ 120.614437][ T5146] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.616899][ T5146] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.228: mark_inode_dirty error [ 120.637599][ T5146] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.639681][ T5146] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.228: corrupted inode contents [ 120.660989][ T5146] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.662417][ T5146] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 120.680595][ T5146] loop0: lost filesystem error report for type 5 error -117 [ 120.684287][ T5146] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.228: corrupted inode contents [ 120.703668][ T5146] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.706373][ T5146] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.228: mark_inode_dirty error [ 120.727092][ T5146] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.727696][ T5146] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 120.746106][ T5146] loop0: lost filesystem error report for type 5 error -117 [ 120.747664][ T5146] EXT4-fs (loop0): 1 truncate cleaned up [ 120.765936][ T5146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.779138][ T5146] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.852463][ T3890] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:16: Failed to release dquot type 1 [ 120.885118][ T5152] loop4: detected capacity change from 0 to 1024 [ 120.907114][ T5152] EXT4-fs: Ignoring removed orlov option [ 120.931552][ T5152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.989602][ T5146] syz.0.228 (5146) used greatest stack depth: 8832 bytes left [ 121.000520][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.087374][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.473008][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.582418][ T5192] loop4: detected capacity change from 0 to 128 [ 121.680630][ T5193] syz.4.234: attempt to access beyond end of device [ 121.680630][ T5193] loop4: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 121.709551][ T5190] loop0: detected capacity change from 0 to 4096 [ 121.745165][ T5190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.807104][ T5197] loop2: detected capacity change from 0 to 256 [ 121.883150][ T5192] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 121.935451][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 122.121053][ T5217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.366272][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.381226][ T4854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.452361][ T5238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.471337][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 122.471350][ T28] audit: type=1400 audit(2000000044.900:711): avc: denied { write } for pid=5225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.512468][ T28] audit: type=1400 audit(2000000044.900:712): avc: denied { write } for pid=5242 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.762556][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.815349][ T28] audit: type=1400 audit(2000000000.130:713): avc: denied { execute } for pid=5251 comm="syz.1.245" path="/39/file1" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.061295][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.130942][ T5257] FAULT_INJECTION: forcing a failure. [ 123.130942][ T5257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.144141][ T5257] CPU: 1 UID: 0 PID: 5257 Comm: syz.3.247 Tainted: G W syzkaller #0 PREEMPT(full) [ 123.144176][ T5257] Tainted: [W]=WARN [ 123.144184][ T5257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.144197][ T5257] Call Trace: [ 123.144205][ T5257] [ 123.144212][ T5257] __dump_stack+0x1d/0x30 [ 123.144234][ T5257] dump_stack_lvl+0x95/0xd0 [ 123.144297][ T5257] dump_stack+0x15/0x1b [ 123.144383][ T5257] should_fail_ex+0x263/0x280 [ 123.144415][ T5257] should_fail+0xb/0x20 [ 123.144443][ T5257] should_fail_usercopy+0x1a/0x20 [ 123.144476][ T5257] _copy_to_user+0x20/0xa0 [ 123.144580][ T5257] simple_read_from_buffer+0xb5/0x130 [ 123.144640][ T5257] proc_fail_nth_read+0x10e/0x150 [ 123.144669][ T5257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.144694][ T5257] vfs_read+0x1ab/0x7f0 [ 123.144747][ T5257] ? __rcu_read_unlock+0x4e/0x70 [ 123.144766][ T5257] ? __fget_files+0x184/0x1c0 [ 123.144789][ T5257] ? mutex_lock+0x57/0x90 [ 123.144862][ T5257] ksys_read+0xdc/0x1a0 [ 123.144894][ T5257] __x64_sys_read+0x40/0x50 [ 123.144923][ T5257] x64_sys_call+0x2886/0x3020 [ 123.144950][ T5257] do_syscall_64+0x12c/0x3b0 [ 123.145066][ T5257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.145089][ T5257] RIP: 0033:0x7fd84873d68e [ 123.145109][ T5257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.145132][ T5257] RSP: 002b:00007fd8471b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.145152][ T5257] RAX: ffffffffffffffda RBX: 00007fd8471b66c0 RCX: 00007fd84873d68e [ 123.145202][ T5257] RDX: 000000000000000f RSI: 00007fd8471b60a0 RDI: 0000000000000004 [ 123.145214][ T5257] RBP: 00007fd8471b6090 R08: 0000000000000000 R09: 0000000000000000 [ 123.145225][ T5257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.145236][ T5257] R13: 00007fd8489f6128 R14: 00007fd8489f6090 R15: 00007fff430d2788 [ 123.145312][ T5257] [ 123.371910][ T28] audit: type=1400 audit(2000000000.690:714): avc: denied { connect } for pid=5260 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.462303][ T5266] netlink: 96 bytes leftover after parsing attributes in process `syz.1.251'. [ 123.499495][ T5268] set_capacity_and_notify: 2 callbacks suppressed [ 123.499510][ T5268] loop2: detected capacity change from 0 to 512 [ 123.517680][ T5272] sctp: [Deprecated]: syz.1.252 (pid 5272) Use of int in max_burst socket option. [ 123.517680][ T5272] Use struct sctp_assoc_value instead [ 123.520065][ T5268] vfat: Bad value for 'shortname' [ 123.560357][ T5277] FAULT_INJECTION: forcing a failure. [ 123.560357][ T5277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.596437][ T5277] CPU: 0 UID: 0 PID: 5277 Comm: syz.3.255 Tainted: G W syzkaller #0 PREEMPT(full) [ 123.596499][ T5277] Tainted: [W]=WARN [ 123.596506][ T5277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.596519][ T5277] Call Trace: [ 123.596513][ T28] audit: type=1400 audit(2000000000.910:715): avc: denied { write } for pid=5267 comm="syz.2.250" name="snmp" dev="proc" ino=4026532740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 123.596526][ T5277] [ 123.596532][ T5277] __dump_stack+0x1d/0x30 [ 123.596554][ T5277] dump_stack_lvl+0x95/0xd0 [ 123.596573][ T5277] dump_stack+0x15/0x1b [ 123.596608][ T5277] should_fail_ex+0x263/0x280 [ 123.596636][ T5277] should_fail+0xb/0x20 [ 123.596734][ T5277] should_fail_usercopy+0x1a/0x20 [ 123.596778][ T5277] _copy_to_user+0x20/0xa0 [ 123.596809][ T5277] simple_read_from_buffer+0xb5/0x130 [ 123.596871][ T5277] proc_fail_nth_read+0x10e/0x150 [ 123.596901][ T5277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.597024][ T5277] vfs_read+0x1ab/0x7f0 [ 123.597052][ T5277] ? __rcu_read_unlock+0x4e/0x70 [ 123.597072][ T5277] ? __fget_files+0x184/0x1c0 [ 123.597093][ T5277] ? mutex_lock+0x57/0x90 [ 123.597116][ T5277] ksys_read+0xdc/0x1a0 [ 123.597221][ T5277] __x64_sys_read+0x40/0x50 [ 123.597267][ T5277] x64_sys_call+0x2886/0x3020 [ 123.597291][ T5277] do_syscall_64+0x12c/0x3b0 [ 123.597322][ T5277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.597384][ T5277] RIP: 0033:0x7fd84873d68e [ 123.597400][ T5277] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.597419][ T5277] RSP: 002b:00007fd8471d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.597439][ T5277] RAX: ffffffffffffffda RBX: 00007fd8471d76c0 RCX: 00007fd84873d68e [ 123.597454][ T5277] RDX: 000000000000000f RSI: 00007fd8471d70a0 RDI: 0000000000000004 [ 123.597468][ T5277] RBP: 00007fd8471d7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.597511][ T5277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.597543][ T5277] R13: 00007fd8489f6038 R14: 00007fd8489f5fa0 R15: 00007fff430d2788 [ 123.597562][ T5277] [ 123.726630][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 123.741835][ T5286] loop5: detected capacity change from 0 to 7 [ 123.804792][ T5290] loop3: detected capacity change from 0 to 512 [ 123.825061][ T5271] loop4: detected capacity change from 0 to 4096 [ 123.854818][ T28] audit: type=1400 audit(2000000001.000:716): avc: denied { read } for pid=5281 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.902206][ T28] audit: type=1400 audit(2000000001.110:717): avc: denied { connect } for pid=5284 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.922196][ T28] audit: type=1400 audit(2000000001.230:718): avc: denied { setopt } for pid=5279 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.949884][ T5290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.963032][ T5271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.988927][ T28] audit: type=1400 audit(2000000001.300:719): avc: denied { write } for pid=5270 comm="syz.4.253" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.022570][ T5303] netlink: 96 bytes leftover after parsing attributes in process `syz.2.263'. [ 124.098538][ T5311] loop2: detected capacity change from 0 to 512 [ 124.146983][ T5311] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 124.155394][ T5311] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 124.165204][ T5311] EXT4-fs (loop2): 1 truncate cleaned up [ 124.183629][ T5311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.223060][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 124.276483][ T5312] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 124.306353][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.381899][ T5322] loop3: detected capacity change from 0 to 1024 [ 124.398841][ T5322] EXT4-fs: quotafile must be on filesystem root [ 124.687838][ T5327] loop3: detected capacity change from 0 to 512 [ 124.755954][ T5327] EXT4-fs (loop3): 1 orphan inode deleted [ 124.769150][ T5327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.784465][ T5327] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.843428][ T3881] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 124.886698][ T3881] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 1 [ 125.541852][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.557887][ T4854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.635986][ T5337] netlink: 32 bytes leftover after parsing attributes in process `syz.2.273'. [ 125.672776][ T5341] netlink: 96 bytes leftover after parsing attributes in process `syz.1.276'. [ 125.831511][ T5352] loop1: detected capacity change from 0 to 512 [ 125.846388][ T5352] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.871417][ T5352] EXT4-fs (loop1): 1 truncate cleaned up [ 125.886807][ T5352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.948008][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 126.061119][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.107896][ T5362] FAULT_INJECTION: forcing a failure. [ 126.107896][ T5362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.121605][ T5362] CPU: 1 UID: 0 PID: 5362 Comm: syz.1.284 Tainted: G W syzkaller #0 PREEMPT(full) [ 126.121636][ T5362] Tainted: [W]=WARN [ 126.121643][ T5362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.121656][ T5362] Call Trace: [ 126.121663][ T5362] [ 126.121670][ T5362] __dump_stack+0x1d/0x30 [ 126.121841][ T5362] dump_stack_lvl+0x95/0xd0 [ 126.121864][ T5362] dump_stack+0x15/0x1b [ 126.121945][ T5362] should_fail_ex+0x263/0x280 [ 126.122016][ T5362] should_fail+0xb/0x20 [ 126.122043][ T5362] should_fail_usercopy+0x1a/0x20 [ 126.122122][ T5362] _copy_from_user+0x1c/0xb0 [ 126.122156][ T5362] ___sys_sendmsg+0xc1/0x1e0 [ 126.122191][ T5362] __x64_sys_sendmsg+0xd4/0x160 [ 126.122343][ T5362] x64_sys_call+0x194c/0x3020 [ 126.122366][ T5362] do_syscall_64+0x12c/0x3b0 [ 126.122425][ T5362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.122448][ T5362] RIP: 0033:0x7f58baeece59 [ 126.122465][ T5362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.122483][ T5362] RSP: 002b:00007f58b9947028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.122504][ T5362] RAX: ffffffffffffffda RBX: 00007f58bb165fa0 RCX: 00007f58baeece59 [ 126.122541][ T5362] RDX: 0000000000000040 RSI: 00002000000038c0 RDI: 0000000000000003 [ 126.122567][ T5362] RBP: 00007f58b9947090 R08: 0000000000000000 R09: 0000000000000000 [ 126.122582][ T5362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.122596][ T5362] R13: 00007f58bb166038 R14: 00007f58bb165fa0 R15: 00007ffee516e4d8 [ 126.122616][ T5362] [ 126.125265][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.282313][ T5367] siw: device registration error -23 [ 126.312948][ T5367] netlink: 14 bytes leftover after parsing attributes in process `syz.0.283'. [ 126.366450][ T5370] loop0: detected capacity change from 0 to 512 [ 126.378158][ T5370] EXT4-fs (loop0): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 126.479494][ T5371] 9p: Bad value for 'rfdno' [ 126.492834][ T5371] loop3: detected capacity change from 0 to 512 [ 126.521625][ T5371] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.285: corrupted inode contents [ 126.533574][ T5371] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 126.535160][ T5371] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.285: mark_inode_dirty error [ 126.544479][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 126.544542][ C0] EXT4-fs (loop3): initial error at time 2000000003: ext4_do_update_inode:5690: inode 16 [ 126.544680][ C0] EXT4-fs (loop3): last error at time 2000000003: ext4_do_update_inode:5690: inode 16 [ 126.582047][ T5371] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 126.582336][ T5371] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.285: corrupted inode contents [ 126.603516][ T5371] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 126.603708][ T5371] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.285: mark_inode_dirty error [ 126.624186][ T5371] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 126.624691][ T5371] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.285: corrupted inode contents [ 126.645731][ T5371] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 126.646178][ T5371] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 126.664031][ T5371] loop3: lost filesystem error report for type 5 error -117 [ 126.664393][ T5371] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.285: corrupted inode contents [ 126.683612][ T5371] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 126.683901][ T5371] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.285: mark_inode_dirty error [ 126.704109][ T5371] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 126.704390][ T5371] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 126.722608][ T5371] loop3: lost filesystem error report for type 5 error -117 [ 126.723670][ T5371] EXT4-fs (loop3): 1 truncate cleaned up [ 126.737499][ T5371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.750310][ T5371] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.763745][ T3883] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:13: Failed to release dquot type 1 [ 129.179706][ T5367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.242324][ T5367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.254846][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.274952][ T5367] bond0 (unregistering): Released all slaves [ 129.289460][ T5385] loop4: detected capacity change from 0 to 4096 [ 129.374830][ T5389] loop2: detected capacity change from 0 to 512 [ 129.395666][ T5389] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.413717][ T5385] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 129.429820][ T5389] EXT4-fs (loop2): 1 truncate cleaned up [ 129.449592][ T5389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.704209][ T5399] loop3: detected capacity change from 0 to 512 [ 129.735396][ T5399] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.292: corrupted inode contents [ 129.747238][ T5399] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 129.747547][ T5399] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.292: mark_inode_dirty error [ 129.756759][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 129.756773][ C0] EXT4-fs (loop3): initial error at time 2000000007: ext4_do_update_inode:5690: inode 16 [ 129.756810][ C0] EXT4-fs (loop3): last error at time 2000000007: ext4_do_update_inode:5690: inode 16 [ 129.793785][ T5399] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 129.794765][ T5399] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.292: corrupted inode contents [ 129.815613][ T5399] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 129.815956][ T5399] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.292: mark_inode_dirty error [ 129.836640][ T5399] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.292: corrupted inode contents [ 129.849254][ T5399] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 129.857876][ T5399] loop3: lost filesystem error report for type 5 error -117 [ 129.858205][ T5399] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.292: corrupted inode contents [ 129.877583][ T5399] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.292: mark_inode_dirty error [ 129.888978][ T5399] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 129.898135][ T5399] loop3: lost filesystem error report for type 5 error -117 [ 129.898956][ T5399] EXT4-fs (loop3): 1 truncate cleaned up [ 129.912931][ T5399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.925632][ T5399] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.979046][ T3894] __quota_error: 2 callbacks suppressed [ 129.979067][ T3894] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 130.067602][ T5385] gretap1: entered promiscuous mode [ 130.089602][ T5401] netlink: 'syz.1.295': attribute type 3 has an invalid length. [ 130.089646][ T5401] netlink: 132 bytes leftover after parsing attributes in process `syz.1.295'. [ 130.094001][ T3894] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:18: Failed to release dquot type 1 [ 130.111608][ T5385] batman_adv: batadv0: Adding interface: gretap1 [ 130.111631][ T5385] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.119777][ T5385] batman_adv: batadv0: Interface activated: gretap1 [ 130.258901][ T28] audit: type=1400 audit(2000000006.760:721): avc: denied { read } for pid=5394 comm="syz.1.295" dev="nsfs" ino=4026532504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 130.258947][ T28] audit: type=1400 audit(2000000006.760:722): avc: denied { open } for pid=5394 comm="syz.1.295" path="net:[4026532504]" dev="nsfs" ino=4026532504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 130.258972][ T28] audit: type=1400 audit(2000000006.760:723): avc: denied { create } for pid=5394 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 130.258993][ T28] audit: type=1400 audit(2000000006.780:724): avc: denied { mount } for pid=5388 comm="syz.2.294" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 130.259018][ T28] audit: type=1400 audit(2000000006.790:725): avc: denied { read write } for pid=5388 comm="syz.2.294" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.259123][ T28] audit: type=1400 audit(2000000006.800:726): avc: denied { open } for pid=5388 comm="syz.2.294" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.259159][ T28] audit: type=1400 audit(2000000006.810:727): avc: denied { open } for pid=5388 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 130.259319][ T28] audit: type=1400 audit(2000000006.820:728): avc: denied { perfmon } for pid=5388 comm="syz.2.294" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.259341][ T28] audit: type=1400 audit(2000000006.820:729): avc: denied { kernel } for pid=5388 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 130.468750][ T4854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.977696][ T5418] 9p: Bad value for 'rfdno' [ 131.096692][ T5412] loop4: detected capacity change from 0 to 2048 [ 131.113123][ T5418] loop0: detected capacity change from 0 to 512 [ 131.153078][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.170555][ T5424] loop2: detected capacity change from 0 to 512 [ 131.189672][ T5418] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.302: corrupted inode contents [ 131.203308][ T5418] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.302: mark_inode_dirty error [ 131.215018][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 131.215086][ C1] EXT4-fs (loop0): initial error at time 2000000008: ext4_do_update_inode:5690: inode 16 [ 131.215247][ C1] EXT4-fs (loop0): last error at time 2000000008: ext4_do_update_inode:5690: inode 16 [ 131.244255][ T5418] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.302: corrupted inode contents [ 131.256855][ T5418] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.302: mark_inode_dirty error [ 131.269620][ T5418] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.302: corrupted inode contents [ 131.275967][ T5412] loop4: p2 p3 p7 [ 131.282421][ T5418] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 131.294430][ T5418] loop0: lost filesystem error report for type 5 error -117 [ 131.295085][ T5418] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.302: corrupted inode contents [ 131.298044][ T5424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.327370][ T5418] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.302: mark_inode_dirty error [ 131.340065][ T5418] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 131.349148][ T5433] loop3: detected capacity change from 0 to 1024 [ 131.355788][ T5418] loop0: lost filesystem error report for type 5 error -117 [ 131.356069][ T5433] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.374800][ T5418] EXT4-fs (loop0): 1 truncate cleaned up [ 131.386940][ T5418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.390173][ T5433] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 131.400330][ T5418] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.422283][ T1918] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 1 [ 131.444487][ T2984] loop4: p2 p3 p7 [ 131.530524][ T4854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.533285][ T5433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.793407][ T5444] loop4: detected capacity change from 0 to 512 [ 131.829297][ T5444] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.909631][ T5444] EXT4-fs (loop4): 1 truncate cleaned up [ 131.927459][ T5444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.038901][ T5441] loop2: detected capacity change from 0 to 512 [ 132.087835][ T5441] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.312572][ T5441] EXT4-fs (loop2): 1 truncate cleaned up [ 132.325644][ T5441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.383343][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.418526][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.447348][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.506161][ T5459] loop4: detected capacity change from 0 to 512 [ 132.523780][ T5460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.556293][ T5459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.755493][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.762791][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.868676][ T5474] pimreg: entered allmulticast mode [ 132.886856][ T4854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.897183][ T5474] pimreg: left allmulticast mode [ 132.932420][ T5476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.990846][ T5474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.004649][ T5474] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.091632][ T5480] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.319: bg 0: block 217: padding at end of block bitmap is not set [ 133.137644][ T5476] netlink: 96 bytes leftover after parsing attributes in process `syz.1.321'. [ 133.148461][ T5491] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.164454][ T5491] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 133.164939][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.195739][ T5491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.211040][ T5474] bond0 (unregistering): Released all slaves [ 133.240367][ T5502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.422521][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.647077][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.101585][ T4854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.153450][ T5532] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 134.178598][ T5532] EXT4-fs (loop0): 1 truncate cleaned up [ 134.307343][ T5547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 134.353244][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 134.525721][ T5572] set_capacity_and_notify: 7 callbacks suppressed [ 134.525736][ T5572] loop1: detected capacity change from 0 to 512 [ 134.556655][ T5576] loop3: detected capacity change from 0 to 512 [ 134.558472][ T5543] netlink: 96 bytes leftover after parsing attributes in process `syz.4.335'. [ 134.575875][ T5576] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 134.617292][ T5576] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 134.646399][ T5576] EXT4-fs (loop3): 1 truncate cleaned up [ 134.777199][ T5576] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 134.844002][ T5586] loop4: detected capacity change from 0 to 512 [ 134.880078][ T5581] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.340: Logical block already allocated [ 134.948026][ T5589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5589 comm=syz.2.343 [ 135.022477][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 135.022490][ T28] audit: type=1400 audit(2000000012.340:842): avc: denied { write } for pid=5575 comm="syz.3.340" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.053509][ T5581] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 135.403427][ T5595] program syz.1.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.701915][ T5606] FAULT_INJECTION: forcing a failure. [ 135.701915][ T5606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.715884][ T5606] CPU: 1 UID: 0 PID: 5606 Comm: syz.3.348 Tainted: G W syzkaller #0 PREEMPT(full) [ 135.715914][ T5606] Tainted: [W]=WARN [ 135.715921][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.715934][ T5606] Call Trace: [ 135.715940][ T5606] [ 135.715990][ T5606] __dump_stack+0x1d/0x30 [ 135.716128][ T5606] dump_stack_lvl+0x95/0xd0 [ 135.716147][ T5606] dump_stack+0x15/0x1b [ 135.716164][ T5606] should_fail_ex+0x263/0x280 [ 135.716251][ T5606] should_fail+0xb/0x20 [ 135.716357][ T5606] should_fail_usercopy+0x1a/0x20 [ 135.716411][ T5606] _copy_from_iter+0xcf/0xea0 [ 135.716440][ T5606] ? __alloc_skb+0x4f6/0x690 [ 135.716458][ T5606] ? __alloc_skb+0x200/0x690 [ 135.716492][ T5606] netlink_sendmsg+0x4ae/0x6f0 [ 135.716600][ T5606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.716684][ T5606] ____sys_sendmsg+0x563/0x5b0 [ 135.716713][ T5606] ___sys_sendmsg+0x195/0x1e0 [ 135.716784][ T5606] __x64_sys_sendmsg+0xd4/0x160 [ 135.716813][ T5606] x64_sys_call+0x194c/0x3020 [ 135.716840][ T5606] do_syscall_64+0x12c/0x3b0 [ 135.716911][ T5606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.716935][ T5606] RIP: 0033:0x7fd84877ce59 [ 135.716952][ T5606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.716971][ T5606] RSP: 002b:00007fd8471b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.716992][ T5606] RAX: ffffffffffffffda RBX: 00007fd8489f6090 RCX: 00007fd84877ce59 [ 135.717087][ T5606] RDX: 0000000000040800 RSI: 0000200000000100 RDI: 0000000000000006 [ 135.717102][ T5606] RBP: 00007fd8471b6090 R08: 0000000000000000 R09: 0000000000000000 [ 135.717116][ T5606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.717130][ T5606] R13: 00007fd8489f6128 R14: 00007fd8489f6090 R15: 00007fff430d2788 [ 135.717151][ T5606] [ 135.914563][ T5608] loop2: detected capacity change from 0 to 2048 [ 135.942189][ T5611] loop1: detected capacity change from 0 to 512 [ 135.979167][ T28] audit: type=1400 audit(2000000013.270:843): avc: denied { write } for pid=5607 comm="syz.2.353" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.101361][ T5608] netlink: 96 bytes leftover after parsing attributes in process `syz.2.353'. [ 136.257614][ T5620] loop0: detected capacity change from 0 to 512 [ 136.292167][ T5620] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 136.320838][ T5620] EXT4-fs (loop0): 1 truncate cleaned up [ 136.546268][ T5628] loop2: detected capacity change from 0 to 164 [ 136.552774][ T5630] loop4: detected capacity change from 0 to 512 [ 136.555163][ T5628] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 136.580161][ T5628] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 136.581816][ T28] audit: type=1400 audit(2000000013.890:844): avc: denied { mount } for pid=5627 comm="syz.2.357" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 136.589461][ T5628] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 136.688405][ T28] audit: type=1400 audit(2000000014.000:845): avc: denied { unmount } for pid=4854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 136.742178][ T28] audit: type=1400 audit(2000000014.060:846): avc: denied { read } for pid=5637 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 136.775556][ T5639] loop2: detected capacity change from 0 to 1024 [ 136.788215][ T28] audit: type=1400 audit(2000000014.100:847): avc: denied { ioctl } for pid=5637 comm="syz.1.363" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.794611][ T5639] EXT4-fs: quotafile must be on filesystem root [ 136.820099][ T5641] loop3: detected capacity change from 0 to 2048 [ 136.826752][ T28] audit: type=1400 audit(2000000014.140:848): avc: denied { read } for pid=5637 comm="syz.1.363" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.007789][ T5641] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 137.020604][ T5641] loop3: partition table partially beyond EOD, truncated [ 137.038236][ T5641] loop3: p1 size 393216 extends beyond EOD, truncated [ 137.060507][ T5641] loop3: p3 start 4225 is beyond EOD, truncated [ 137.097516][ T5641] loop3: p5 size 393216 extends beyond EOD, truncated [ 137.214579][ T5653] EXT4-fs (loop2): 1 orphan inode deleted [ 137.232561][ T5653] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.004237][ T3890] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 138.021338][ T3890] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:16: Failed to release dquot type 1 [ 138.050337][ T28] audit: type=1400 audit(2000000015.360:849): avc: denied { write } for pid=5661 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.137825][ T28] audit: type=1400 audit(2000000015.400:850): avc: denied { accept } for pid=5661 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.235632][ T5669] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 138.246370][ T5671] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 138.288493][ T5671] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 138.329878][ T5671] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 138.384283][ T5677] gretap1: entered promiscuous mode [ 138.780698][ T5686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.378'. [ 138.790932][ T5686] tipc: Invalid UDP bearer configuration [ 138.790945][ T5686] tipc: Enabling of bearer rejected, failed to enable media [ 139.056851][ T5698] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.096721][ T5698] EXT4-fs (loop0): 1 truncate cleaned up [ 140.021128][ T5706] set_capacity_and_notify: 6 callbacks suppressed [ 140.021144][ T5706] loop3: detected capacity change from 0 to 4096 [ 140.091246][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 140.091309][ T28] audit: type=1400 audit(2000000017.410:897): avc: denied { write } for pid=5705 comm="syz.3.383" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.293085][ T28] audit: type=1400 audit(2000000017.410:898): avc: denied { add_name } for pid=5705 comm="syz.3.383" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.325567][ T28] audit: type=1400 audit(2000000017.410:899): avc: denied { create } for pid=5705 comm="syz.3.383" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 140.345709][ T28] audit: type=1400 audit(2000000017.450:900): avc: denied { ioctl } for pid=5705 comm="syz.3.383" path="/77/file0/file1" dev="loop3" ino=15 ioctlcmd=0x6604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.383878][ T28] audit: type=1400 audit(2000000017.570:901): avc: denied { map_read map_write } for pid=5710 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 140.430429][ T5719] loop3: detected capacity change from 0 to 164 [ 140.433810][ T28] audit: type=1400 audit(2000000017.580:902): avc: denied { create } for pid=5708 comm="syz.1.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 140.466364][ T5719] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 140.507591][ T28] audit: type=1400 audit(2000000017.610:903): avc: denied { write } for pid=5708 comm="syz.1.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 140.511216][ T5719] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 140.558445][ T28] audit: type=1400 audit(2000000017.740:904): avc: denied { setopt } for pid=5715 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 140.561208][ T5719] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 140.615459][ T28] audit: type=1400 audit(2000000017.750:905): avc: denied { module_request } for pid=5715 comm="syz.0.387" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 140.668942][ T28] audit: type=1400 audit(2000000017.810:906): avc: denied { sys_module } for pid=5715 comm="syz.0.387" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 140.747495][ T5732] loop3: detected capacity change from 0 to 512 [ 141.251155][ T5735] loop0: detected capacity change from 0 to 512 [ 141.319297][ T5735] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.372371][ T5735] EXT4-fs (loop0): 1 truncate cleaned up [ 141.702373][ T5749] loop4: detected capacity change from 0 to 512 [ 142.276192][ T5754] loop3: detected capacity change from 0 to 1024 [ 142.285403][ T5754] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.307606][ T5754] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 142.413237][ T5768] loop1: detected capacity change from 0 to 164 [ 142.421159][ T5768] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 142.488921][ T5768] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 142.510739][ T5768] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 143.321768][ T3308] EXT4-fs unmount: 34 callbacks suppressed [ 143.321784][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.392949][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.517139][ T5784] loop3: detected capacity change from 0 to 4096 [ 143.559230][ T5784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.758522][ T5793] debugfs: 'netdev@ffff888119f30598' already exists in 'ref_tracker' [ 144.529816][ T5801] loop1: detected capacity change from 0 to 4096 [ 144.570871][ T5801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.677342][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.796724][ T5806] loop2: detected capacity change from 0 to 164 [ 144.824325][ T5806] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 144.867476][ T5806] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 144.913880][ T5806] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 145.449694][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.488790][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 145.573035][ T5816] netlink: 52 bytes leftover after parsing attributes in process `syz.0.416'. [ 145.601310][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 145.601429][ T28] audit: type=1400 audit(2000000022.920:937): avc: denied { accept } for pid=5817 comm="syz.3.417" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.639091][ T28] audit: type=1400 audit(2000000022.950:938): avc: denied { create } for pid=5817 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.660229][ T28] audit: type=1400 audit(2000000022.950:939): avc: denied { listen } for pid=5819 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.680818][ T28] audit: type=1400 audit(2000000022.950:940): avc: denied { accept } for pid=5819 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.701459][ T28] audit: type=1400 audit(2000000022.950:941): avc: denied { mount } for pid=5820 comm="syz.2.418" name="/" dev="autofs" ino=10008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 145.705724][ T5823] loop2: detected capacity change from 0 to 512 [ 145.724800][ T28] audit: type=1400 audit(2000000022.980:942): avc: denied { create } for pid=5820 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.730670][ T5824] loop1: detected capacity change from 0 to 2048 [ 145.754375][ T5830] loop4: detected capacity change from 0 to 512 [ 145.756497][ T5823] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.774297][ T28] audit: type=1400 audit(2000000022.980:943): avc: denied { write } for pid=5820 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.793744][ T28] audit: type=1400 audit(2000000023.070:944): avc: denied { mounton } for pid=5820 comm="syz.2.418" path="/file0" dev="autofs" ino=10011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 145.819012][ T5830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.822683][ T28] audit: type=1400 audit(2000000023.120:945): avc: denied { mount } for pid=5820 comm="syz.2.418" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 145.878427][ T5824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.930980][ T28] audit: type=1400 audit(2000000023.250:946): avc: denied { write } for pid=5821 comm="syz.1.420" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.060507][ T5824] netlink: 96 bytes leftover after parsing attributes in process `syz.1.420'. [ 146.110316][ T5842] loop2: detected capacity change from 0 to 512 [ 146.138273][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.147641][ T5842] EXT4-fs (loop2): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 146.396926][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.565017][ T5854] loop3: detected capacity change from 0 to 512 [ 146.600728][ T5854] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 146.629093][ T5854] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 146.641747][ T5854] EXT4-fs (loop3): 1 truncate cleaned up [ 146.656681][ T5854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.707922][ T5854] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 146.730445][ T5854] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.427: Logical block already allocated [ 146.738280][ T5859] loop2: detected capacity change from 0 to 164 [ 146.759356][ T5859] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 146.768606][ T5859] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 146.783571][ T5859] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 146.802723][ T5854] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 146.970928][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.001517][ T5863] loop3: detected capacity change from 0 to 4096 [ 147.014440][ T5863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.062332][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.090688][ T5870] loop2: detected capacity change from 0 to 128 [ 147.104533][ T5869] loop0: detected capacity change from 0 to 512 [ 147.115790][ T5870] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.163780][ T5869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.192843][ T5870] openvswitch: netlink: Missing key (keys=40, expected=80) [ 147.245823][ T310] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.271361][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.293445][ T5872] 9p: Bad value for 'wfdno' [ 147.332253][ T5877] netlink: 14 bytes leftover after parsing attributes in process `syz.2.436'. [ 147.456574][ T5872] loop1: detected capacity change from 0 to 512 [ 147.502844][ T5872] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.432: corrupted inode contents [ 147.514788][ T5872] fserror_report: 11 callbacks suppressed [ 147.514814][ T5872] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.524568][ T5872] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.432: mark_inode_dirty error [ 147.533879][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 147.533918][ C0] EXT4-fs (loop1): initial error at time 2000000024: ext4_do_update_inode:5690: inode 16 [ 147.533998][ C0] EXT4-fs (loop1): last error at time 2000000024: ext4_do_update_inode:5690: inode 16 [ 147.572039][ T5872] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.572658][ T5872] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.432: corrupted inode contents [ 147.593675][ T5872] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.594129][ T5872] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.432: mark_inode_dirty error [ 147.615049][ T5872] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.615633][ T5872] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.432: corrupted inode contents [ 147.636985][ T5872] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.639154][ T5872] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 147.658444][ T5872] loop1: lost filesystem error report for type 5 error -117 [ 147.660818][ T5872] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.432: corrupted inode contents [ 147.680646][ T5872] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.681408][ T5872] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.432: mark_inode_dirty error [ 147.702039][ T5872] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.705271][ T5872] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 147.724121][ T5872] loop1: lost filesystem error report for type 5 error -117 [ 147.726752][ T5872] EXT4-fs (loop1): 1 truncate cleaned up [ 147.743232][ T5872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.756342][ T5872] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.772899][ T3894] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:18: Failed to release dquot type 1 [ 147.882716][ T5898] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 148.003343][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.548959][ T5908] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.442: corrupted inode contents [ 148.560760][ T5908] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 148.561326][ T5908] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.442: mark_inode_dirty error [ 148.570450][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 148.570465][ C0] EXT4-fs (loop1): initial error at time 2000000025: ext4_do_update_inode:5690: inode 16 [ 148.570504][ C0] EXT4-fs (loop1): last error at time 2000000025: ext4_do_update_inode:5690: inode 16 [ 148.607680][ T5908] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 148.611207][ T5908] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.442: corrupted inode contents [ 148.632175][ T5908] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 148.632737][ T5908] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.442: mark_inode_dirty error [ 148.653319][ T5908] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.442: corrupted inode contents [ 148.665536][ T5908] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 148.674147][ T5908] loop1: lost filesystem error report for type 5 error -117 [ 148.674678][ T5908] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.442: corrupted inode contents [ 148.693948][ T5908] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.442: mark_inode_dirty error [ 148.705334][ T5908] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 148.714332][ T5908] loop1: lost filesystem error report for type 5 error -117 [ 148.715734][ T5908] EXT4-fs (loop1): 1 truncate cleaned up [ 148.729494][ T5908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.744346][ T3881] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 1 [ 148.760798][ T5908] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.869837][ T5917] rock: directory entry would overflow storage [ 148.878796][ T5914] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 148.896438][ T5906] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 148.915750][ T5917] rock: sig=0x5850, size=36, remaining=22 [ 148.931182][ T5914] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 149.023943][ T5914] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 149.069915][ T5906] EXT4-fs (loop0): 1 truncate cleaned up [ 149.244845][ T5920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.248974][ T5906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.331852][ T5917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5917 comm=syz.3.446 [ 149.472546][ T5923] rock: directory entry would overflow storage [ 149.510327][ T5923] rock: sig=0x5850, size=36, remaining=22 [ 149.599521][ T4854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.930586][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.074292][ T5932] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.452: corrupted inode contents [ 150.086494][ T5932] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.452: mark_inode_dirty error [ 150.097765][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 150.097786][ C1] EXT4-fs (loop4): initial error at time 2000000027: ext4_do_update_inode:5690: inode 16 [ 150.097811][ C1] EXT4-fs (loop4): last error at time 2000000027: ext4_do_update_inode:5690: inode 16 [ 150.128125][ T5932] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.452: corrupted inode contents [ 150.142406][ T5932] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.452: mark_inode_dirty error [ 150.154030][ T5932] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.452: corrupted inode contents [ 150.166669][ T5932] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 150.175237][ T5932] loop4: lost filesystem error report for type 5 error -117 [ 150.176160][ T5932] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.452: corrupted inode contents [ 150.195714][ T5932] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.452: mark_inode_dirty error [ 150.207713][ T5932] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 150.216662][ T5932] loop4: lost filesystem error report for type 5 error -117 [ 150.217899][ T5932] EXT4-fs (loop4): 1 truncate cleaned up [ 150.231634][ T5932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.244324][ T5932] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.291946][ T310] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 150.334195][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.341427][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.460775][ T5935] rock: directory entry would overflow storage [ 150.517007][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.527783][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.791623][ T5932] batman_adv: batadv0: Interface deactivated: gretap1 [ 150.801136][ T3881] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.825221][ T5935] rock: sig=0x5850, size=36, remaining=22 [ 150.837372][ T5940] set_capacity_and_notify: 9 callbacks suppressed [ 150.837399][ T5940] loop1: detected capacity change from 0 to 4096 [ 150.853803][ T3881] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.880371][ T3881] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.905781][ T5940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.934489][ T3881] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.954132][ T5935] FAULT_INJECTION: forcing a failure. [ 150.954132][ T5935] name failslab, interval 1, probability 0, space 0, times 0 [ 150.995711][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: syz.2.450 Tainted: G W syzkaller #0 PREEMPT(full) [ 150.995741][ T5935] Tainted: [W]=WARN [ 150.995747][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.995759][ T5935] Call Trace: [ 150.995766][ T5935] [ 150.995773][ T5935] __dump_stack+0x1d/0x30 [ 150.995847][ T5935] dump_stack_lvl+0x95/0xd0 [ 150.995871][ T5935] dump_stack+0x15/0x1b [ 150.995888][ T5935] should_fail_ex+0x263/0x280 [ 150.995914][ T5935] should_failslab+0x8c/0xb0 [ 150.995981][ T5935] kmem_cache_alloc_noprof+0x66/0x3f0 [ 150.996012][ T5935] ? do_getname+0x2e/0x1c0 [ 150.996035][ T5935] do_getname+0x2e/0x1c0 [ 150.996056][ T5935] getname_flags+0x1d/0x30 [ 150.996076][ T5935] do_sys_openat2+0x60/0x130 [ 150.996169][ T5935] __x64_sys_openat+0xf2/0x120 [ 150.996197][ T5935] x64_sys_call+0x1e39/0x3020 [ 150.996224][ T5935] do_syscall_64+0x12c/0x3b0 [ 150.996317][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.996381][ T5935] RIP: 0033:0x7fba75a1ce59 [ 150.996396][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.996413][ T5935] RSP: 002b:00007fba7446f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.996436][ T5935] RAX: ffffffffffffffda RBX: 00007fba75c95fa0 RCX: 00007fba75a1ce59 [ 150.996503][ T5935] RDX: 00000000001c1840 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 150.996518][ T5935] RBP: 00007fba7446f090 R08: 0000000000000000 R09: 0000000000000000 [ 150.996534][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.996549][ T5935] R13: 00007fba75c96038 R14: 00007fba75c95fa0 R15: 00007fff91b6d4b8 [ 150.996603][ T5935] [ 151.182473][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 151.182488][ T28] audit: type=1400 audit(2000000028.500:1015): avc: denied { write } for pid=5939 comm="syz.1.453" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.221935][ T5943] loop2: detected capacity change from 0 to 512 [ 151.240782][ T28] audit: type=1400 audit(2000000028.500:1016): avc: denied { add_name } for pid=5939 comm="syz.1.453" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.292956][ T5943] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 151.312272][ T5943] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 151.329518][ T28] audit: type=1400 audit(2000000028.500:1017): avc: denied { create } for pid=5939 comm="syz.1.453" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 151.377191][ T5943] EXT4-fs (loop2): 1 truncate cleaned up [ 151.393685][ T5943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.407439][ T28] audit: type=1400 audit(2000000028.640:1018): avc: denied { create } for pid=5947 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 151.492175][ T5952] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 151.501758][ T28] audit: type=1400 audit(2000000028.810:1019): avc: denied { ioctl } for pid=5950 comm="syz.3.456" path="socket:[11278]" dev="sockfs" ino=11278 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.584618][ T5953] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.454: Logical block already allocated [ 151.613805][ T28] audit: type=1400 audit(2000000028.870:1020): avc: denied { bind } for pid=5950 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.640542][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.683707][ T5953] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 151.701770][ T28] audit: type=1400 audit(2000000028.900:1021): avc: denied { write } for pid=5942 comm="syz.2.454" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.723888][ T28] audit: type=1400 audit(2000000028.900:1022): avc: denied { create } for pid=5942 comm="syz.2.454" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 151.746016][ T28] audit: type=1400 audit(2000000028.970:1023): avc: denied { create } for pid=5950 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 151.769121][ T28] audit: type=1400 audit(2000000028.980:1024): avc: denied { write } for pid=5950 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 151.826118][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.458'. [ 151.855745][ T5959] netlink: 56 bytes leftover after parsing attributes in process `syz.4.458'. [ 151.864711][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.458'. [ 151.873761][ T5959] netlink: 31 bytes leftover after parsing attributes in process `syz.4.458'. [ 151.883045][ T5959] netlink: 'syz.4.458': attribute type 2 has an invalid length. [ 151.890908][ T5959] netlink: 31 bytes leftover after parsing attributes in process `syz.4.458'. [ 151.972009][ T5962] netlink: 68 bytes leftover after parsing attributes in process `syz.4.459'. [ 151.996213][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.039670][ T5965] netlink: 68 bytes leftover after parsing attributes in process `syz.1.460'. [ 152.108678][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 152.200497][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 152.221710][ T5981] loop3: detected capacity change from 0 to 512 [ 152.255465][ T5981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.945971][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.946589][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.998937][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'. [ 154.017928][ T4854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.247237][ T6048] loop1: detected capacity change from 0 to 512 [ 154.286050][ T6043] loop3: detected capacity change from 0 to 512 [ 154.293460][ T6048] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 154.321788][ T6048] EXT4-fs (loop1): 1 truncate cleaned up [ 154.327133][ T6043] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 154.341641][ T6048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.965455][ T6154] loop2: detected capacity change from 0 to 1024 [ 154.989878][ T6154] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.004961][ T6160] loop0: detected capacity change from 0 to 512 [ 155.030983][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.059298][ T3898] ================================================================== [ 155.067393][ T3898] BUG: KCSAN: data-race in touch_atime / touch_atime [ 155.074073][ T3898] [ 155.076390][ T3898] write to 0xffff88811b4fb148 of 4 bytes by task 12 on cpu 0: [ 155.083840][ T3898] touch_atime+0x1d7/0x330 [ 155.088258][ T3898] shmem_file_read_iter+0x3f4/0x4b0 [ 155.093463][ T3898] lo_rw_aio+0x67d/0x730 [ 155.097715][ T3898] loop_process_work+0x56c/0xac0 [ 155.102664][ T3898] loop_rootcg_workfn+0x22/0x30 [ 155.107523][ T3898] process_scheduled_works+0x4f0/0x9c0 [ 155.112988][ T3898] worker_thread+0x58a/0x780 [ 155.117586][ T3898] kthread+0x22a/0x280 [ 155.121657][ T3898] ret_from_fork+0x146/0x330 [ 155.126264][ T3898] ret_from_fork_asm+0x1a/0x30 [ 155.131033][ T3898] [ 155.133353][ T3898] read to 0xffff88811b4fb148 of 4 bytes by task 3898 on cpu 1: [ 155.140889][ T3898] touch_atime+0x16c/0x330 [ 155.145317][ T3898] shmem_file_read_iter+0x3f4/0x4b0 [ 155.150520][ T3898] lo_rw_aio+0x67d/0x730 [ 155.154771][ T3898] loop_process_work+0x56c/0xac0 [ 155.159708][ T3898] loop_workfn+0x31/0x40 [ 155.163952][ T3898] process_scheduled_works+0x4f0/0x9c0 [ 155.169420][ T3898] worker_thread+0x58a/0x780 [ 155.174013][ T3898] kthread+0x22a/0x280 [ 155.178068][ T3898] ret_from_fork+0x146/0x330 [ 155.182655][ T3898] ret_from_fork_asm+0x1a/0x30 [ 155.187420][ T3898] [ 155.189732][ T3898] value changed: 0x160dc257 -> 0x16a658d7 [ 155.195442][ T3898] [ 155.197755][ T3898] Reported by Kernel Concurrency Sanitizer on: [ 155.203896][ T3898] CPU: 1 UID: 0 PID: 3898 Comm: kworker/u8:20 Tainted: G W syzkaller #0 PREEMPT(full) [ 155.215018][ T3898] Tainted: [W]=WARN [ 155.218814][ T3898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.228867][ T3898] Workqueue: loop2 loop_workfn [ 155.233647][ T3898] ================================================================== [ 155.258369][ T6154] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 155.305173][ T6160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.335240][ T6160] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.357437][ T6154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.374137][ T6173] loop1: detected capacity change from 0 to 4096 [ 155.394140][ T6173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.050739][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.091133][ T4854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.129997][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.