last executing test programs: 7.214533541s ago: executing program 0 (id=89): io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1811000082abd5ce14a32c3236b9fee4e36c3b4a8001af822ea90751495ddd3482b625faa170f71cdd07028b8b22efd088cb526b722eac6224f516630246e5063e6a619a889abdd22721fca210e03c01f741ccca5099e0782e157baf6a1c27d1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085100000feffffff185800000c00"/88], &(0x7f00000004c0)='GPL\x00', 0x7, 0xd6, &(0x7f0000000680)=""/214, 0x41100, 0x1a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0xe, 0x9, 0x7ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[r0, r0], 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000064b60a0000000000000000007b1af8ff00000000bfa1000000000000ffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200, 0x830, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = socket$kcm(0x2, 0x2, 0x73) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)}, 0x900000000000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af"], 0x6) 7.111187845s ago: executing program 0 (id=92): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r2, 0x0) read(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x20000840}, 0x24000840) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getqdisc={0x3c, 0x26, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x2}, {0x10, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x40840) getgroups(0xffffffffffffff7b, 0x0) 7.009549178s ago: executing program 0 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x14, 0x14, 0x1, 0x3, 0x25dfdbfc, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0xca1de99cf558760b}, 0x20004000) socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) 5.834241667s ago: executing program 4 (id=101): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000300)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003640)='?', 0x1}], 0x1}}], 0x1, 0xc005) sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)='@', 0x1}], 0xef}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}], 0x1}}], 0x2, 0x4000000) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00'/18, @ANYRESHEX=r0, @ANYBLOB="0000008200"/20], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x8000000000000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001000000000000800000180000000c120000000000000045007d0000019f9bba3afb5938ed00197d5258"], 0x28}], 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x20000328) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) 5.359908883s ago: executing program 4 (id=107): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x400141a42, 0x192) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x1002020, 0x1020884, 0x12) 4.82115227s ago: executing program 1 (id=112): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) r1 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f0000000300)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@noload}, {@noblock_validity}, {@noblock_validity}, {@grpjquota}]}, 0x1, 0x625, &(0x7f0000000800)="$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") sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100030e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000020013"], 0x70}}, 0x0) 4.780886071s ago: executing program 0 (id=113): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x20001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, 0x0, 0x0) fadvise64(r0, 0x807f, 0x1000000, 0x4) socketpair(0x9, 0x3, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r7, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$TIOCSLCKTRMIOS(r4, 0x80047437, &(0x7f0000020780)) sendmsg$can_j1939(r2, &(0x7f00000005c0)={&(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x2}, 0xff}, 0x18, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20040000) keyctl$invalidate(0x15, r1) keyctl$read(0xb, r1, 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='##:@\\@}[%\x00', r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 4.242796589s ago: executing program 4 (id=117): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x47cf, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc26, @multicast2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e23, @empty}}) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000402, r2, &(0x7f0000000080)) sendfile(r0, r1, 0x0, 0x20000023896) 4.23841834s ago: executing program 1 (id=118): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x500, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x3502, 0x5}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x0, 0x7}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x33}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x2, @in6=@mcast1, 0x0, 0x1}]}]}, 0x23c}}, 0x0) 4.178005321s ago: executing program 4 (id=120): socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x4827e, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) poll(0x0, 0x0, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) 4.177358491s ago: executing program 2 (id=121): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x211}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod$loop(0x0, 0x2000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) open(&(0x7f0000000000)='./file0\x00', 0x1e507f, 0x10c) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000f82000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\"P\x00') munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f8b221697e7818049006ba7a7f39f77954f0", 0x18}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40044582, 0x0) 4.054469795s ago: executing program 3 (id=122): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) poll(&(0x7f0000000140)=[{r0, 0x44}], 0x1, 0x172) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000008c0)={0x0, ""/256, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket(0x11, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) bind$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001300)={{r2}, r3, 0x2, @inherit={0x60, &(0x7f0000000ac0)={0x1, 0x3, 0x5, 0x62, {0x8, 0xffffffffffffffff, 0x8, 0x8, 0x8}, [0x0, 0x5, 0x18d078d]}}, @subvolid=0x752a}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x9}, {}, {}, {0x7}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000400)={@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x8}, @mcast1, 0x4, 0x6, 0x9, 0x400, 0x40006, 0x4110002}) 4.005595667s ago: executing program 1 (id=123): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff}) close(0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x8, 0x6, 0x1, 0x4, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_ident={0x2, 0xa, 0x77, 0x0, 0x2}]}, 0x20}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x640b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0xa81eb313d007ac2b, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x5a1000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.934146239s ago: executing program 2 (id=124): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) unshare(0x22060600) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000400000000000000070000008f2580da0100008085800000550000000d0000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x22, &(0x7f0000000280)=""/34, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x52, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x5, 0xb, 0x4}, {0x1, 0x1, 0x2, 0x8}], 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$qrtr(0x2a, 0x2, 0x0) writev(r3, &(0x7f0000001b00)=[{0x0}, {&(0x7f0000000b00)="13", 0x1}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, &(0x7f00000001c0)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x300}) 3.864336892s ago: executing program 3 (id=125): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf, 0xc28c2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f19000000000000000000ffff0000000000000000000000004e00", [0x7, 0xffffffff9673e35d]}}) fallocate(r0, 0x1, 0x10, 0x5345) 3.697684247s ago: executing program 3 (id=126): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x5a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x5, &(0x7f0000000380)=0x3, 0x9) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x7, @private0, 0x7}, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x7, {[0xffff8000, 0x3, 0xc, 0x9, 0x7, 0x4, 0x4, 0x4]}}, 0x5c) 3.538246792s ago: executing program 1 (id=127): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa, {0x1}}}}]}]}, 0x48}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0xa9525000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000000100)="2a1b1a4552", 0x5}, {&(0x7f0000002b40)='-', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000002f00)}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)}], 0x1}}], 0x4, 0x4040084) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.516512053s ago: executing program 2 (id=128): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x400141a42, 0x192) pwritev2(r0, &(0x7f0000000000), 0x0, 0x1002020, 0x1020884, 0x12) 3.277664372s ago: executing program 3 (id=129): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa, {0x1}}}}]}]}, 0x48}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0xa9525000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000000100)="2a1b1a4552", 0x5}, {&(0x7f0000002b40)='-', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000002f00)}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)}], 0x1}}], 0x4, 0x4040084) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.200533064s ago: executing program 2 (id=130): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r2, 0x0) read(r2, &(0x7f0000000000)=""/269, 0xfffffdef) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getqdisc={0x3c, 0x26, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x2}, {0x10, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x40840) getgroups(0xffffffffffffff7b, 0x0) 2.684110321s ago: executing program 4 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}, @var={0x1, 0x0, 0x0, 0xe, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x52}, 0x28) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) (async) unshare(0x28000600) r2 = syz_open_dev$loop(&(0x7f0000000600), 0x24c, 0x200) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xd4b, &(0x7f0000000040)={0x0, 0xc8a1, 0x40, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r3, 0x28e5, 0xc637, 0x13, 0x0, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0xfff, 0x20da, 0x0, 0xa, 0xcf, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94010000100001002dbd700000000000ff020000000000000000000000000001ac141411000000000000000000000000fffeecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x44050) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) (async, rerun: 64) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) (async, rerun: 64) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x20040010) 2.142316409s ago: executing program 2 (id=132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) syz_open_pts(r2, 0x161000) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0xffff, 0x81, 0x53c, 0x5, 0x16, "9b4c3a0000000000000000000000000e0000bc"}) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000740)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}}], 0x1, 0x10) 654.012288ms ago: executing program 2 (id=133): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x100, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x2}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x4000000080000001, 0x0, 0x6, 0x0, 0xfffffffffffffffa, 0x100000001, 0x0, 0x7a8b, 0x0, 0x1, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x2, 0x8}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x24000000, 0x0, 0x840}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000eef000/0x2000)=nil) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000600)={[{@grpquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpjquota}]}, 0x3, 0x79b, &(0x7f0000001200)="$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") 506.022233ms ago: executing program 1 (id=134): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00f00013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 436.901495ms ago: executing program 4 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x210, 0x210, 0xfeffffff, 0x210, 0xe8, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6, 0x3}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@tcp={{0x30}, {[], [], 0x8, 0x0, 0x2, 0x6}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0xffffff00, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ipvlan1\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) sendmsg$NFT_BATCH(r1, 0x0, 0x40) chdir(&(0x7f0000000540)='./cgroup\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x4e3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount$cgroup(0x0, 0x0, 0x0, 0x2000, 0x0) fsopen(0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000140)={0x440042, 0xc, 0x8}, 0x18) r5 = openat(r4, 0x0, 0x408201, 0x1b2) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x45) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="610000000700000091115900000085fa5aed0011ff000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x6e, 0x6, 0x0, 0x29, 0x0, @empty, @local}, "27a9cab689530011"}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000001010102f6ffffffffffffff0500000a0600124000010000240019"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 436.478025ms ago: executing program 1 (id=136): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x20001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, 0x0, 0x0) fadvise64(r0, 0x807f, 0x1000000, 0x4) socketpair(0x9, 0x3, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r6, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x80047437, &(0x7f0000020780)) sendmsg$can_j1939(r2, &(0x7f00000005c0)={&(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x2}, 0xff}, 0x18, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20040000) keyctl$invalidate(0x15, r1) keyctl$read(0xb, r1, 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='##:@\\@}[%\x00', r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 298.0852ms ago: executing program 3 (id=137): connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x9c}}, 0x0) pipe2(0x0, 0x800) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='\x0e9h\xb5\xe1\x00\xe4\xa6A\xb0{\xf4\x80opyr\xc5 z\fG@J\x7f\xa8\xeb{\x82\xea\x17!&\a\x80\x90\xcb\xe210\x9b\x13\xfd/\xbac4\x05\xd1\xf5\xaf\x9b\xbc\x96\xe6Y;\xbe\xcb.qVu\xae^\xdd\x04\x8a|\x1fA\x1e\x01\xfa`PyGj\x12W\xbe\xc00\xef\xe4a\x10W,\xaaz\xceE\xa0\xc4cV\xbcxV\x90\a\xb9\xdcpB\x80\x18\x0e\x82oso\xa07>E\xc2\x878\x94\x83\xc3\xab\xfb\xab\xa0\xc2R\xa9\xc5Un\xc9\x1fc\xbc)\xba3\xdf75\xc3D)\x1d-\x1c\xb6O\xf5\xdfp]\xb1o\xe1\x06\xf9\xb7\x195vAcbV\xed\x82\xe3\xbe!fq\x00E\xe98WO\xef\xc0\x94\x17$\x13\xf5J\xc4\xc2eE\xd2a\xe2\xa7\x18\xe1\xc9\xc9\xcf\xd0a0\xf0II\thN\x89=\x83\xee\xd0T\xac\xfd{\x9e2Wc\xdf\x98\x83s xy-\x9b\x1d\xf4\xf3\xc9\xb1c^\ta\x01\xabn\x05%\xef\x9f\xca\r\x82Su\xfa\xd1\xd8\xc1\xba\x00/', 0x0) pipe2$9p(&(0x7f00000002c0), 0x84000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004814) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000500)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)="9021cce50103a4062b2c45640288677c175a439af4d6112da65bc4f5a0b920e0bd3a393d47d8f4b907172cd48ee2a4798a0215d53a1ebdc2f6080320b1479f11d37b97460ab8710072502d193006f9985eb4dad4c7e279d0722bda9b362555d181c14405fb1701ac23fcfb358ceb7b9a5011631f16a223b00bd87f0eb6a398c05c14815f7de741a9d80dad5ed57f6877b53af948ce996ba6da884e6b3e1be6287b6243b11f153253caecce38b7558d6790fbc1b63b450b27f2faac52b5172aaf225fd4330ef24a650a15b6acc545", 0xce}, {&(0x7f00000008c0)="771f10066cb88e43f3f14c5a5af0b77588a530cc345754ff3157c1ad8674203aa346dec4398bda3e8058fcdbfbc3d82ba331216b8163445732747a40e422979b0c9bdcdd18effbca3a642e61a88716fb9df59f7ee356a4337e17b46786952131df82c0d455b5c5fcaab1d91d8ef66a1b", 0x70}], 0x2, &(0x7f0000000980)=[{0x98, 0x6, 0xfffffffd, "ec74dc5742769e2ed8dfef786f85d76b3d3454ef1c6128eb315bdf7b359e71d00abe8341dad2ef1a3b275c561dbcca9241ae51b99c2bcf07ff01b367fa9d2ba999319234f17644cd63513c1ef2c244714e5d55e2e3156e1c221f95a73a153cfba99d9fe1fcb74d3a9a0fe8cc296eaa2f1626699269a5c406a0657132583b26cc9f"}, {0x58, 0x102, 0xd, "7893ac193bbe0cfef00b1deae63c40d4c62a60e213fefef4163ffc967cd47f8ab89d3a2a30cb1e63f4c3f131c24339c0404ffb8e1515964c78f5967c7d46aa809a0b3612be"}, {0x60, 0x10a, 0x0, "00ded0215779018f28d7c167689a2117d97d323ac2912ed1a939a9597a728524d808d8f54e904aca461d13120eb7238d3352120d41c259451ba55a0524547bf7ed54829877efe4f272"}, {0xa0, 0x109, 0x9, "45f8c188b2c7a821525330e40061431c44c426f4bae991fe0805d318423d3d7d14c8d83ea9e84440b47e564ef9bbddd0033729aac68f3f8f4efa31de606a0e7d6be1a5dd14b8f95e960b1e5814e9447f278989a90bc9741178e47fe9fbd4e629b4cac38c7606623e3416d49fc5e10b61543506da975bb1f77234a87eefad53dc4557b01d0a4993c6824b0c36e0"}], 0x1f0}, 0x804) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 134.015875ms ago: executing program 0 (id=138): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff}) close(0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x8, 0x6, 0x1, 0x4, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_ident={0x2, 0xa, 0x77, 0x0, 0x2}]}, 0x20}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x640b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0xa81eb313d007ac2b, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x5a1000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7fff, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 64.414977ms ago: executing program 3 (id=139): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) unshare(0x22060600) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$eJzs3UFvI1cdAPD/jONtdjeLXUCoVKJUtChbwdpJQ9sIISgXOFUCyn0JiRNFseModsomqiAV3wAhgcSJExckPgBS1QMfAFWqBBfEAQECIdjCAQnoINtjmnXsJGydOI1/P+mt35uZvP97Y/l5Zvx2JoCp9WREvBgRhYh4JiJK+fI0T3HYS53t3r7/6monJZFlL/81iSRf1q+rU56JiJv5n81GxNe+HPHN5Hjc1v7B1kq9XtvNy9V2Y6fa2j+4s9lY2aht1LaXlhafX35h+bnlhSz3nvpZ7md+8qXPv/7pb/3u7p9vf7vTrM99JIox0I9x6nW92N0XfZ19tHsewSagkPenOOmGAABwJp1j/A9GxCe6x/+lKHSP5gYUJtEyAAAAYFyyLyTx7yQiAwAAAK6sNCLmIkkr+VyAuUjTa/m1gQ/HjbTebLU/td7c217rrIsoRzFd36zXFvK5wuUoJp3yYj7Htl9+dqC8FBGPRsT3S9e75cpqs7424WsfAAAAMC1uDpz//6OUdvOnG/L/BAAAAIDLqzyyAAAAAFwVTvkBAADg6hs8/399Qu0AAAAAzsVXXnqpk7L+86/XXtnf22q+cmet1tqqNPZWK6vN3Z3KRrO50b1nX+O0+urN5s5nYnvvXrVda7Wrrf2Du43m3nb77uYDj8AGAAAALtCjH3/j10lEHH72ejdFfh9AgAf8YdINAMapMOkGABPz8HfxLo61HcDF8ykGklPWm7wDAADvf/MfPf77f//5/64NwNVmrg8ATB9P8YbpVTQDEKZaGhEf6GUfGbXNyN//f3nWKFkW8Wbp6BLXFwEA4GLNdVOSVv53gJ+mlUrErYi0HMVkfbNeW8jPD35VKj7SKS92t0tOnTMMAAAAAAAAAAAAAAAAAAAAAAAAAPRkWRIZAAAAcKVFpH9Kunfzj5gvPT03eH3gWvLPUvwxL/zo5R/cW2m3dxc7y//WfZbXtYho/zBf/uzIx4cBAAAA45YcjlzVO0/PXxcvtFUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATIG377+62k9HlxfOOe5fvhgR5WHxZ2K2+zobxYi48fckZo78XTKmth2+FhGPDYufxDtZlpXzVgzGTyPi+jnHL3d3zej4N8cQH6bZG53x58Vhn780nuy+Dv/8zeTpvRo9/qV55Me649yw8e/WsdoaQ2M8/tbPqiPjvxbx+Mzw8ac//iYj4j91rLZ/ZVl2PMY3vn5wMCp+9uOI+aHfP8kDsartxk61tX9wZ7OxslHbqG0vLS0+v/zC8nPLC9X1zXot/3dojO997OfvnNT/G0Pi//Y3vfH3pP4/ParSAf956979D/WyxWHxbz81+vt3WPxCnj6Zfw901s/384e9/FFP/PTNJ07q/9qI/X/a+3/7jP1/5qvf/f0ZNwUALkBr/2BrpV6v7Z6QmT11m/RM9Vy2zC9mL0Uz/s9M9p3eO3dZ2vOwmc7R6rtL+r16+ApvnUNTswvbG4UYX4WtsdQz0WEJAAA4B+8e9E+6JQAAAAAAAAAAAAAAAAAAADC9LuL2ZoMxDyfTVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAE/03AAD//4zO3ss=") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000400000000000000070000008f2580da0100008085800000550000000d0000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x22, &(0x7f0000000280)=""/34, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x52, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x5, 0xb, 0x4}, {0x1, 0x1, 0x2, 0x8}], 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$qrtr(0x2a, 0x2, 0x0) writev(r3, &(0x7f0000001b00)=[{0x0}, {&(0x7f0000000b00)="13", 0x1}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, &(0x7f00000001c0)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x300}) 0s ago: executing program 0 (id=140): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1811000082abd5ce14a32c3236b9fee4e36c3b4a8001af822ea90751495ddd3482b625faa170f71cdd07028b8b22efd088cb526b722eac6224f516630246e5063e6a619a889abdd22721fca210e03c01f741ccca5099e0782e157baf6a1c27d1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085100000feffffff185800000c00"/88], &(0x7f00000004c0)='GPL\x00', 0x7, 0xd6, &(0x7f0000000680)=""/214, 0x41100, 0x1a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0xe, 0x9, 0x7ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[r0, r0], 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000064b60a0000000000000000007b1af8ff00000000bfa1000000000000ffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200, 0x830, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af"], 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 33.192168][ T28] audit: type=1400 audit(1780735377.379:123): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.215309][ T28] audit: type=1400 audit(1780735377.399:124): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.217655][ T3287] cgroup: Unknown subsys name 'net' [ 33.243182][ T28] audit: type=1400 audit(1780735377.429:125): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.359027][ T3287] cgroup: Unknown subsys name 'cpuset' [ 33.365352][ T3287] cgroup: Unknown subsys name 'rlimit' [ 33.458218][ T28] audit: type=1400 audit(1780735377.639:126): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.490131][ T28] audit: type=1400 audit(1780735377.649:127): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.511470][ T28] audit: type=1400 audit(1780735377.649:128): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.532012][ T28] audit: type=1400 audit(1780735377.649:129): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.552673][ T28] audit: type=1400 audit(1780735377.659:130): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.572393][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.578416][ T28] audit: type=1400 audit(1780735377.659:131): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.609577][ T28] audit: type=1400 audit(1780735377.669:132): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.647736][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.108555][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.115754][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.123000][ T3305] bridge_slave_0: entered allmulticast mode [ 35.129394][ T3305] bridge_slave_0: entered promiscuous mode [ 35.147551][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.154860][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.162008][ T3299] bridge_slave_0: entered allmulticast mode [ 35.168628][ T3299] bridge_slave_0: entered promiscuous mode [ 35.175042][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.182307][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.189485][ T3305] bridge_slave_1: entered allmulticast mode [ 35.195791][ T3305] bridge_slave_1: entered promiscuous mode [ 35.202110][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.209232][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.216368][ T3300] bridge_slave_0: entered allmulticast mode [ 35.222823][ T3300] bridge_slave_0: entered promiscuous mode [ 35.236311][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.243560][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.250952][ T3299] bridge_slave_1: entered allmulticast mode [ 35.257527][ T3299] bridge_slave_1: entered promiscuous mode [ 35.268973][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.276118][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.283358][ T3300] bridge_slave_1: entered allmulticast mode [ 35.289874][ T3300] bridge_slave_1: entered promiscuous mode [ 35.296474][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.303681][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.310869][ T3303] bridge_slave_0: entered allmulticast mode [ 35.317256][ T3303] bridge_slave_0: entered promiscuous mode [ 35.342421][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.349658][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.356862][ T3303] bridge_slave_1: entered allmulticast mode [ 35.363517][ T3303] bridge_slave_1: entered promiscuous mode [ 35.380221][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.399286][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.406428][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.413647][ T3304] bridge_slave_0: entered allmulticast mode [ 35.420082][ T3304] bridge_slave_0: entered promiscuous mode [ 35.427643][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.437936][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.448370][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.462009][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.469252][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.476366][ T3304] bridge_slave_1: entered allmulticast mode [ 35.482931][ T3304] bridge_slave_1: entered promiscuous mode [ 35.490334][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.510089][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.520386][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.531027][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.569480][ T3299] team0: Port device team_slave_0 added [ 35.576272][ T3299] team0: Port device team_slave_1 added [ 35.582695][ T3305] team0: Port device team_slave_0 added [ 35.598524][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.608965][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.623685][ T3305] team0: Port device team_slave_1 added [ 35.630021][ T3300] team0: Port device team_slave_0 added [ 35.636469][ T3303] team0: Port device team_slave_0 added [ 35.660412][ T3300] team0: Port device team_slave_1 added [ 35.666807][ T3303] team0: Port device team_slave_1 added [ 35.681872][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.688904][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.714968][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.726085][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.733147][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.759107][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.780212][ T3304] team0: Port device team_slave_0 added [ 35.786837][ T3304] team0: Port device team_slave_1 added [ 35.792830][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.799894][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.825924][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.837076][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.844261][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.870270][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.886192][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.893296][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.919367][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.945700][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.952747][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.978722][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.989691][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.996707][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.022669][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.038104][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.045243][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.071703][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.083752][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.090890][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.117135][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.134602][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.141632][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.167665][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.207645][ T3305] hsr_slave_0: entered promiscuous mode [ 36.213819][ T3305] hsr_slave_1: entered promiscuous mode [ 36.227042][ T3299] hsr_slave_0: entered promiscuous mode [ 36.233257][ T3299] hsr_slave_1: entered promiscuous mode [ 36.239186][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 36.244949][ T3299] Cannot create hsr debugfs directory [ 36.290345][ T3300] hsr_slave_0: entered promiscuous mode [ 36.296427][ T3300] hsr_slave_1: entered promiscuous mode [ 36.302546][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 36.308339][ T3300] Cannot create hsr debugfs directory [ 36.316103][ T3303] hsr_slave_0: entered promiscuous mode [ 36.322280][ T3303] hsr_slave_1: entered promiscuous mode [ 36.328186][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 36.333959][ T3303] Cannot create hsr debugfs directory [ 36.341960][ T3304] hsr_slave_0: entered promiscuous mode [ 36.348056][ T3304] hsr_slave_1: entered promiscuous mode [ 36.353992][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 36.359749][ T3304] Cannot create hsr debugfs directory [ 36.579135][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.588765][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.596546][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.605487][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.613299][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.622188][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.630063][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.638679][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.664073][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.673053][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.680827][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.689620][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.697502][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.706546][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.715321][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.724049][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.772460][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.781612][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.789976][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.798612][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.806298][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.815141][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.823414][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.832452][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.859655][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.868084][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.877256][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.886067][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.894552][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.903253][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.910949][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.919858][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.946000][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.955014][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.963055][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.972008][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.985479][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.994665][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.009694][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.018848][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.029754][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.069563][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.081778][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.091567][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.098682][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.111404][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.118521][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.143470][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.156064][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.169985][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.181174][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.188334][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.200379][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.207523][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.219280][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.226395][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.241553][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.248719][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.284187][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.304717][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.329391][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.342600][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.359015][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.366135][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.386692][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.393857][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.410456][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.417622][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.447995][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.455150][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.632229][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.650879][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.687434][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.791445][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.807309][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.853496][ T3300] veth0_vlan: entered promiscuous mode [ 37.888450][ T3300] veth1_vlan: entered promiscuous mode [ 37.898853][ T3299] veth0_vlan: entered promiscuous mode [ 37.909923][ T3299] veth1_vlan: entered promiscuous mode [ 37.926718][ T3305] veth0_vlan: entered promiscuous mode [ 37.945916][ T3300] veth0_macvtap: entered promiscuous mode [ 37.956901][ T3305] veth1_vlan: entered promiscuous mode [ 37.968697][ T3300] veth1_macvtap: entered promiscuous mode [ 37.981170][ T3299] veth0_macvtap: entered promiscuous mode [ 37.992774][ T3299] veth1_macvtap: entered promiscuous mode [ 38.015921][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.030248][ T3305] veth0_macvtap: entered promiscuous mode [ 38.044932][ T3304] veth0_vlan: entered promiscuous mode [ 38.052533][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.060935][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.070546][ T3305] veth1_macvtap: entered promiscuous mode [ 38.086655][ T147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.096093][ T147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.106538][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.118952][ T3304] veth1_vlan: entered promiscuous mode [ 38.125023][ T147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.134071][ T147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.156306][ T147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.165366][ T147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.181754][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.191224][ T147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.200058][ T147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.215205][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 38.215220][ T28] audit: type=1400 audit(1780735382.399:143): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.P0kg88/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.219332][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.228725][ T28] audit: type=1400 audit(1780735382.399:144): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.276365][ T28] audit: type=1400 audit(1780735382.419:145): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.P0kg88/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.304393][ T28] audit: type=1400 audit(1780735382.419:146): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.316388][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.329949][ T28] audit: type=1400 audit(1780735382.449:147): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.P0kg88/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.342415][ T3303] veth0_vlan: entered promiscuous mode [ 38.362287][ T28] audit: type=1400 audit(1780735382.449:148): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.P0kg88/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.395081][ T28] audit: type=1400 audit(1780735382.449:149): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.402796][ T3303] veth1_vlan: entered promiscuous mode [ 38.415934][ T28] audit: type=1400 audit(1780735382.469:150): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.443725][ T28] audit: type=1400 audit(1780735382.469:151): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=3883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.476130][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.481998][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.487793][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.520368][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.537152][ T28] audit: type=1400 audit(1780735382.729:152): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.565220][ T3303] veth0_macvtap: entered promiscuous mode [ 38.573559][ T3303] veth1_macvtap: entered promiscuous mode [ 38.621818][ T3304] veth0_macvtap: entered promiscuous mode [ 38.638057][ T3304] veth1_macvtap: entered promiscuous mode [ 38.664190][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.676935][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.693186][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.710729][ T360] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.712846][ T3509] loop5: detected capacity change from 0 to 7 [ 38.720109][ T360] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.758406][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.773585][ T360] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.783502][ T360] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.823332][ T360] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.832997][ T360] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.851731][ T3521] loop1: detected capacity change from 0 to 256 [ 38.859140][ T360] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.868888][ T3521] ======================================================= [ 38.868888][ T3521] WARNING: The mand mount option has been deprecated and [ 38.868888][ T3521] and is ignored by this kernel. Remove the mand [ 38.868888][ T3521] option from the mount to silence this warning. [ 38.868888][ T3521] ======================================================= [ 38.881014][ T360] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.915621][ T3519] tipc: Started in network mode [ 38.921083][ T3519] tipc: Node identity ac14140f, cluster identity 4711 [ 38.928607][ T3519] tipc: New replicast peer: 172.30.0.1 [ 38.934618][ T3519] tipc: Enabled bearer , priority 10 [ 38.969160][ T3522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 38.978597][ T3521] FAT-fs (loop1): Directory bread(block 64) failed [ 38.998557][ T3521] FAT-fs (loop1): Directory bread(block 65) failed [ 39.004758][ T3522] tipc: Disabling bearer [ 39.010713][ T3521] FAT-fs (loop1): Directory bread(block 66) failed [ 39.017318][ T3521] FAT-fs (loop1): Directory bread(block 67) failed [ 39.030771][ T3521] FAT-fs (loop1): Directory bread(block 68) failed [ 39.067997][ T3528] loop4: detected capacity change from 0 to 256 [ 39.075360][ T3521] FAT-fs (loop1): Directory bread(block 69) failed [ 39.097065][ T3521] FAT-fs (loop1): Directory bread(block 70) failed [ 39.113148][ T3521] FAT-fs (loop1): Directory bread(block 71) failed [ 39.120185][ T3521] FAT-fs (loop1): Directory bread(block 72) failed [ 39.126489][ T3528] FAT-fs (loop4): Directory bread(block 64) failed [ 39.127041][ T3521] FAT-fs (loop1): Directory bread(block 73) failed [ 39.165664][ T3528] FAT-fs (loop4): Directory bread(block 65) failed [ 39.172841][ T3532] serio: Serial port ptm1 [ 39.188897][ T3521] syz.1.9: attempt to access beyond end of device [ 39.188897][ T3521] loop1: rw=2049, sector=1800, nr_sectors = 32 limit=256 [ 39.192629][ T3528] FAT-fs (loop4): Directory bread(block 66) failed [ 39.216001][ T3521] syz.1.9: attempt to access beyond end of device [ 39.216001][ T3521] loop1: rw=2049, sector=1864, nr_sectors = 32 limit=256 [ 39.234326][ T3528] FAT-fs (loop4): Directory bread(block 67) failed [ 39.249751][ T3521] syz.1.9: attempt to access beyond end of device [ 39.249751][ T3521] loop1: rw=2049, sector=1928, nr_sectors = 24 limit=256 [ 39.252817][ T3528] FAT-fs (loop4): Directory bread(block 68) failed [ 39.302863][ T3528] FAT-fs (loop4): Directory bread(block 69) failed [ 39.325336][ T3528] FAT-fs (loop4): Directory bread(block 70) failed [ 39.335356][ T3528] FAT-fs (loop4): Directory bread(block 71) failed [ 39.353192][ T3528] FAT-fs (loop4): Directory bread(block 72) failed [ 39.357859][ T3538] loop1: detected capacity change from 0 to 256 [ 39.368706][ T3528] FAT-fs (loop4): Directory bread(block 73) failed [ 39.385874][ T3538] FAT-fs (loop1): Directory bread(block 64) failed [ 39.397019][ T3538] FAT-fs (loop1): Directory bread(block 65) failed [ 39.421340][ T3538] FAT-fs (loop1): Directory bread(block 66) failed [ 39.434803][ T3538] FAT-fs (loop1): Directory bread(block 67) failed [ 39.449386][ T3538] FAT-fs (loop1): Directory bread(block 68) failed [ 39.463765][ T3538] FAT-fs (loop1): Directory bread(block 69) failed [ 39.466092][ T3526] loop2: detected capacity change from 0 to 1024 [ 39.478485][ T3538] FAT-fs (loop1): Directory bread(block 70) failed [ 39.492253][ T3539] syz.4.5: attempt to access beyond end of device [ 39.492253][ T3539] loop4: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 39.492625][ T3538] FAT-fs (loop1): Directory bread(block 71) failed [ 39.492672][ T3538] FAT-fs (loop1): Directory bread(block 72) failed [ 39.492695][ T3538] FAT-fs (loop1): Directory bread(block 73) failed [ 39.542660][ T3526] EXT4-fs: Ignoring removed oldalloc option [ 39.552820][ T3539] syz.4.5: attempt to access beyond end of device [ 39.552820][ T3539] loop4: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 39.568295][ T3526] EXT4-fs: Ignoring removed i_version option [ 39.592119][ T3526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.615122][ T3539] syz.4.5: attempt to access beyond end of device [ 39.615122][ T3539] loop4: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 39.633321][ T3539] syz.4.5: attempt to access beyond end of device [ 39.633321][ T3539] loop4: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 39.680019][ T3539] syz.4.5: attempt to access beyond end of device [ 39.680019][ T3539] loop4: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 39.700886][ T3539] syz.4.5: attempt to access beyond end of device [ 39.700886][ T3539] loop4: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 39.714361][ T3540] syz.1.13: attempt to access beyond end of device [ 39.714361][ T3540] loop1: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 40.052396][ T3545] ip6_vti0 speed is unknown, defaulting to 1000 [ 40.140741][ T3526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.159062][ T3545] ip6_vti0 speed is unknown, defaulting to 1000 [ 40.210724][ T3545] ip6_vti0 speed is unknown, defaulting to 1000 [ 40.244945][ T3558] loop0: detected capacity change from 0 to 1024 [ 40.305365][ T3558] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 40.305365][ T3558] [ 40.448388][ T3564] x_tables: duplicate underflow at hook 1 [ 40.523676][ T3566] loop7: detected capacity change from 0 to 16384 [ 40.654952][ T3545] infiniband syz2: set active [ 40.659743][ T3393] ip6_vti0 speed is unknown, defaulting to 1000 [ 40.675271][ T3545] infiniband syz2: added ip6_vti0 [ 40.688331][ T3569] sctp: [Deprecated]: syz.0.15 (pid 3569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 40.688331][ T3569] Use struct sctp_sack_info instead [ 40.691533][ T3545] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 40.706532][ T3568] loop7: detected capacity change from 16384 to 0 [ 40.739188][ C0] I/O error, dev loop7, sector 448 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 40.751104][ T3545] infiniband syz2: Couldn't open port 1 [ 40.783306][ T3545] RDS/IB: syz2: added [ 40.803140][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.814146][ T3545] smc: adding ib device syz2 with port count 1 [ 40.832119][ T3545] smc: ib device syz2 port 1 has no pnetid [ 40.865007][ T3545] ip6_vti0 speed is unknown, defaulting to 1000 [ 40.902379][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 40.908474][ T3576] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 41.014319][ T3576] Zero length message leads to an empty skb [ 41.044345][ T3574] loop2: detected capacity change from 0 to 128 [ 41.054255][ T3545] ip6_vti0 speed is unknown, defaulting to 1000 [ 41.066528][ T3574] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.100072][ T3574] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.112858][ T3581] loop0: detected capacity change from 0 to 256 [ 41.203673][ T3581] FAT-fs (loop0): Directory bread(block 64) failed [ 41.210372][ T3581] FAT-fs (loop0): Directory bread(block 65) failed [ 41.217014][ T3581] FAT-fs (loop0): Directory bread(block 66) failed [ 41.237108][ T3581] FAT-fs (loop0): Directory bread(block 67) failed [ 41.255269][ T3581] FAT-fs (loop0): Directory bread(block 68) failed [ 41.276029][ T3581] FAT-fs (loop0): Directory bread(block 69) failed [ 41.288209][ T3545] ip6_vti0 speed is unknown, defaulting to 1000 [ 41.294366][ T3581] FAT-fs (loop0): Directory bread(block 70) failed [ 41.317131][ T3581] FAT-fs (loop0): Directory bread(block 71) failed [ 41.336809][ T3581] FAT-fs (loop0): Directory bread(block 72) failed [ 41.361089][ T3581] FAT-fs (loop0): Directory bread(block 73) failed [ 41.387892][ T3584] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.425893][ T3584] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.674254][ T3545] ip6_vti0 speed is unknown, defaulting to 1000 [ 42.399206][ T3590] syz.2.19 (3590) used greatest stack depth: 10368 bytes left [ 42.530613][ T3545] ip6_vti0 speed is unknown, defaulting to 1000 [ 42.686011][ T3597] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.773816][ T3597] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 42.789287][ T3597] System zones: 0-2, 18-18, 34-34 [ 42.802075][ T3597] EXT4-fs (loop1): 1 orphan inode deleted [ 42.811308][ T3597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.939925][ T3597] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.445920][ T3607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24'. [ 43.460818][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 43.460843][ T28] audit: type=1400 audit(1781259675.552:227): avc: denied { setopt } for pid=3604 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.493056][ T36] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 43.529760][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 43.596061][ T28] audit: type=1400 audit(1781259675.552:228): avc: denied { bind } for pid=3604 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.622676][ T3545] syz.3.12 (3545) used greatest stack depth: 10280 bytes left [ 43.649948][ T36] EXT4-fs (loop1): Remounting filesystem read-only [ 43.673525][ T3597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.683850][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.754090][ T28] audit: type=1400 audit(1781259675.552:229): avc: denied { setopt } for pid=3604 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.096624][ T3611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 45.107613][ T3615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 45.141333][ T3617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 45.185733][ T3619] set_capacity_and_notify: 3 callbacks suppressed [ 45.185767][ T3619] loop4: detected capacity change from 0 to 256 [ 45.420909][ T3620] netlink: 64 bytes leftover after parsing attributes in process `syz.1.29'. [ 45.470106][ T3619] FAT-fs (loop4): Directory bread(block 64) failed [ 45.490020][ T3619] FAT-fs (loop4): Directory bread(block 65) failed [ 45.506834][ T3619] FAT-fs (loop4): Directory bread(block 66) failed [ 45.526298][ T3619] FAT-fs (loop4): Directory bread(block 67) failed [ 45.678565][ T30] bio_check_eod: 765 callbacks suppressed [ 45.678583][ T30] kworker/u8:1: attempt to access beyond end of device [ 45.678583][ T30] loop0: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 45.699008][ T3619] FAT-fs (loop4): Directory bread(block 68) failed [ 45.705643][ T3619] FAT-fs (loop4): Directory bread(block 69) failed [ 45.712512][ T3619] FAT-fs (loop4): Directory bread(block 70) failed [ 45.719255][ T30] kworker/u8:1: attempt to access beyond end of device [ 45.719255][ T30] loop0: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 46.529746][ T3626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 46.556571][ T30] kworker/u8:1: attempt to access beyond end of device [ 46.556571][ T30] loop0: rw=1, sector=12784, nr_sectors = 24 limit=256 [ 46.570699][ T30] kworker/u8:1: attempt to access beyond end of device [ 46.570699][ T30] loop0: rw=1, sector=12840, nr_sectors = 32 limit=256 [ 46.584519][ T30] kworker/u8:1: attempt to access beyond end of device [ 46.584519][ T30] loop0: rw=1, sector=12904, nr_sectors = 32 limit=256 [ 46.598520][ T30] kworker/u8:1: attempt to access beyond end of device [ 46.598520][ T30] loop0: rw=1, sector=12968, nr_sectors = 32 limit=256 [ 46.612438][ T30] kworker/u8:1: attempt to access beyond end of device [ 46.612438][ T30] loop0: rw=1, sector=13032, nr_sectors = 32 limit=256 [ 46.818108][ T3619] FAT-fs (loop4): Directory bread(block 71) failed [ 46.826355][ T30] kworker/u8:1: attempt to access beyond end of device [ 46.826355][ T30] loop0: rw=1, sector=13096, nr_sectors = 32 limit=256 [ 46.842684][ T3628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33'. [ 46.851744][ T3619] FAT-fs (loop4): Directory bread(block 72) failed [ 46.858478][ T3619] FAT-fs (loop4): Directory bread(block 73) failed [ 46.865358][ T30] kworker/u8:1: attempt to access beyond end of device [ 46.865358][ T30] loop0: rw=1, sector=13160, nr_sectors = 32 limit=256 [ 46.889975][ T28] audit: type=1400 audit(1781259678.916:230): avc: denied { name_bind } for pid=3627 comm="syz.3.33" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.917421][ T3628] netlink: 64 bytes leftover after parsing attributes in process `syz.3.33'. [ 46.930889][ T30] kworker/u8:1: attempt to access beyond end of device [ 46.930889][ T30] loop0: rw=1, sector=13224, nr_sectors = 32 limit=256 [ 46.970550][ T28] audit: type=1400 audit(1781259678.916:231): avc: denied { node_bind } for pid=3627 comm="syz.3.33" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 47.015065][ T3630] loop4: detected capacity change from 0 to 512 [ 47.071421][ T3632] loop0: detected capacity change from 0 to 256 [ 47.086181][ T3630] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 47.246754][ T3632] FAT-fs (loop0): Directory bread(block 64) failed [ 47.254737][ T3630] System zones: 0-2, 18-18, 34-34 [ 47.265139][ T3630] EXT4-fs (loop4): 1 orphan inode deleted [ 47.271709][ T3632] FAT-fs (loop0): Directory bread(block 65) failed [ 47.484635][ T3630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.497323][ T3632] FAT-fs (loop0): Directory bread(block 66) failed [ 47.504630][ T3632] FAT-fs (loop0): Directory bread(block 67) failed [ 47.511462][ T3630] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.524959][ T3632] FAT-fs (loop0): Directory bread(block 68) failed [ 48.101064][ T3632] FAT-fs (loop0): Directory bread(block 69) failed [ 48.111487][ T36] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 48.147334][ T28] audit: type=1400 audit(1781259680.140:232): avc: denied { shutdown } for pid=3640 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.339802][ T3632] FAT-fs (loop0): Directory bread(block 70) failed [ 48.346597][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 48.382617][ T3632] FAT-fs (loop0): Directory bread(block 71) failed [ 48.397747][ T3632] FAT-fs (loop0): Directory bread(block 72) failed [ 48.402158][ T36] EXT4-fs (loop4): Remounting filesystem read-only [ 48.404700][ T3632] FAT-fs (loop0): Directory bread(block 73) failed [ 48.423437][ T3630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.535003][ T3648] loop3: detected capacity change from 0 to 4096 [ 48.592457][ T3648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.734026][ T3654] loop1: detected capacity change from 0 to 512 [ 48.748561][ T28] audit: type=1400 audit(1781259680.708:233): avc: denied { map_read map_write } for pid=3646 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.817224][ T3654] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.39: corrupted inode contents [ 48.829065][ T3654] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.829758][ T3654] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.39: mark_inode_dirty error [ 48.839021][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 48.839037][ C0] EXT4-fs (loop1): initial error at time 1781259680: ext4_do_update_inode:5690: inode 16 [ 48.839063][ C0] EXT4-fs (loop1): last error at time 1781259680: ext4_do_update_inode:5690: inode 16 [ 48.876267][ T3654] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.877870][ T3654] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.39: corrupted inode contents [ 48.898888][ T3654] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.900787][ T3654] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.39: mark_inode_dirty error [ 48.921241][ T3654] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.921908][ T3654] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.39: corrupted inode contents [ 48.942810][ T3654] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.943484][ T3654] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 48.961265][ T3654] loop1: lost filesystem error report for type 5 error -117 [ 48.962153][ T3654] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.39: corrupted inode contents [ 48.981372][ T3654] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.981919][ T3654] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.39: mark_inode_dirty error [ 49.002132][ T3654] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 49.003832][ T3654] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 49.022029][ T3654] loop1: lost filesystem error report for type 5 error -117 [ 49.027577][ T3654] EXT4-fs (loop1): 1 truncate cleaned up [ 49.042132][ T3654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.054943][ T3654] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.079256][ T49] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 50.079038][ T49] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 50.093378][ T28] audit: type=1400 audit(1781259680.787:234): avc: denied { create } for pid=3652 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 50.231367][ T3654] syz.1.39 (3654) used greatest stack depth: 9080 bytes left [ 50.319353][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.329925][ T28] audit: type=1400 audit(1781259681.601:235): avc: denied { mounton } for pid=3645 comm="syz.3.37" path="/6/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.033202][ T3669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 51.118899][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.165759][ T28] audit: type=1400 audit(1781259683.084:236): avc: denied { mount } for pid=3643 comm="syz.2.38" name="/" dev="autofs" ino=5091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 51.219497][ T3644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.38'. [ 51.425199][ T3671] netlink: 76 bytes leftover after parsing attributes in process `syz.3.42'. [ 51.468837][ T3667] loop2: detected capacity change from 0 to 1024 [ 51.502175][ T3667] ext4: Unknown parameter 'euid' [ 51.608272][ T28] audit: type=1400 audit(1781259683.547:237): avc: denied { read write } for pid=3677 comm="syz.3.45" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.728511][ T28] audit: type=1400 audit(1781259683.547:238): avc: denied { open } for pid=3677 comm="syz.3.45" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.822065][ T3682] loop4: detected capacity change from 0 to 4096 [ 51.836840][ T3686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 51.872774][ T28] audit: type=1400 audit(1781259683.635:239): avc: denied { ioctl } for pid=3677 comm="syz.3.45" path="socket:[6153]" dev="sockfs" ino=6153 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.080353][ T3682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.387189][ T28] audit: type=1400 audit(1781259683.635:240): avc: denied { bind } for pid=3677 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.606427][ T3695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 52.892489][ T3697] loop0: detected capacity change from 0 to 256 [ 52.906618][ T3686] netlink: 64 bytes leftover after parsing attributes in process `syz.3.48'. [ 52.966248][ T3697] FAT-fs (loop0): Directory bread(block 64) failed [ 52.975487][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.989860][ T3697] FAT-fs (loop0): Directory bread(block 65) failed [ 53.004315][ T3692] loop2: detected capacity change from 0 to 1024 [ 53.010982][ T3697] FAT-fs (loop0): Directory bread(block 66) failed [ 53.026554][ T3697] FAT-fs (loop0): Directory bread(block 67) failed [ 53.037122][ T3692] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 53.049150][ T3697] FAT-fs (loop0): Directory bread(block 68) failed [ 53.062804][ T3692] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.074093][ T3697] FAT-fs (loop0): Directory bread(block 69) failed [ 53.080985][ T3697] FAT-fs (loop0): Directory bread(block 70) failed [ 53.100782][ T3692] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: inode #32: comm syz.2.50: iget: special inode unallocated [ 53.119049][ T3697] FAT-fs (loop0): Directory bread(block 71) failed [ 53.140135][ T3697] FAT-fs (loop0): Directory bread(block 72) failed [ 53.150923][ T3692] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 53.151297][ T3692] EXT4-fs (loop2): no journal found [ 53.160608][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 53.160636][ C0] EXT4-fs (loop2): initial error at time 1781259685: ext4_get_journal_inode:5896: inode 32 [ 53.160744][ C0] EXT4-fs (loop2): last error at time 1781259685: ext4_get_journal_inode:5896: inode 32 [ 53.198245][ T3697] FAT-fs (loop0): Directory bread(block 73) failed [ 53.248072][ T28] audit: type=1400 audit(1781259685.151:241): avc: denied { read } for pid=3699 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 53.353799][ T3701] bio_check_eod: 103 callbacks suppressed [ 53.353823][ T3701] syz.0.51: attempt to access beyond end of device [ 53.353823][ T3701] loop0: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 53.514039][ T3701] syz.0.51: attempt to access beyond end of device [ 53.514039][ T3701] loop0: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 53.657270][ T3701] syz.0.51: attempt to access beyond end of device [ 53.657270][ T3701] loop0: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 53.806855][ T3701] syz.0.51: attempt to access beyond end of device [ 53.806855][ T3701] loop0: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 53.894248][ T3701] syz.0.51: attempt to access beyond end of device [ 53.894248][ T3701] loop0: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 53.936049][ T3701] syz.0.51: attempt to access beyond end of device [ 53.936049][ T3701] loop0: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 53.974152][ T3701] syz.0.51: attempt to access beyond end of device [ 53.974152][ T3701] loop0: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 54.092793][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 54.092843][ T28] audit: type=1400 audit(1781259685.989:245): avc: denied { create } for pid=3726 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.142098][ T3701] syz.0.51: attempt to access beyond end of device [ 54.142098][ T3701] loop0: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 54.188206][ T3729] loop3: detected capacity change from 0 to 4096 [ 54.350799][ T3731] loop4: detected capacity change from 0 to 4096 [ 54.354522][ T3729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.371786][ T3701] syz.0.51: attempt to access beyond end of device [ 54.371786][ T3701] loop0: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 54.396825][ T3701] syz.0.51: attempt to access beyond end of device [ 54.396825][ T3701] loop0: rw=1, sector=2472, nr_sectors = 32 limit=256 [ 54.396891][ T3731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.431520][ T3731] netlink: 32 bytes leftover after parsing attributes in process `syz.4.62'. [ 54.535186][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 54.557698][ T3740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 55.380869][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.489441][ T3750] loop1: detected capacity change from 0 to 512 [ 56.551567][ T28] audit: type=1400 audit(1781259688.022:246): avc: denied { create } for pid=3744 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.622572][ T3750] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.66: corrupted inode contents [ 56.635253][ T3750] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 56.639152][ T3750] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.66: mark_inode_dirty error [ 56.649012][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 56.649055][ C0] EXT4-fs (loop1): initial error at time 1781259688: ext4_do_update_inode:5690: inode 16 [ 56.649499][ C0] EXT4-fs (loop1): last error at time 1781259688: ext4_do_update_inode:5690: inode 16 [ 56.688319][ T3750] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 56.690382][ T3750] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.66: corrupted inode contents [ 56.715684][ T3750] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 56.719931][ T3750] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.66: mark_inode_dirty error [ 56.747602][ T3750] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 56.755115][ T3750] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.66: corrupted inode contents [ 56.788100][ T3750] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 56.795684][ T3750] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 56.838390][ T3750] loop1: lost filesystem error report for type 5 error -117 [ 56.841251][ T28] audit: type=1400 audit(1781259688.022:247): avc: denied { ioctl } for pid=3744 comm="syz.1.66" path="socket:[5260]" dev="sockfs" ino=5260 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.937788][ T3750] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.66: corrupted inode contents [ 56.952156][ T3750] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 56.954159][ T3750] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.66: mark_inode_dirty error [ 56.975619][ T3750] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 56.977273][ T3750] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 56.996711][ T3750] loop1: lost filesystem error report for type 5 error -117 [ 57.001584][ T3750] EXT4-fs (loop1): 1 truncate cleaned up [ 57.025754][ T3750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.040846][ T3750] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.885709][ T36] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 58.010581][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 58.039950][ T3750] syz.1.66 (3750) used greatest stack depth: 8576 bytes left [ 58.107114][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.185078][ T3762] netlink: 76 bytes leftover after parsing attributes in process `syz.2.70'. [ 58.448845][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.542080][ T3769] loop4: detected capacity change from 0 to 512 [ 58.590691][ T3769] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 58.605772][ T30] bio_check_eod: 204 callbacks suppressed [ 58.605791][ T30] kworker/u8:1: attempt to access beyond end of device [ 58.605791][ T30] loop0: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 58.612420][ T3769] System zones: [ 58.627680][ T30] kworker/u8:1: attempt to access beyond end of device [ 58.627680][ T30] loop0: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 58.655112][ T28] audit: type=1400 audit(1781259690.494:248): avc: denied { ioctl } for pid=3771 comm="syz.1.72" path="socket:[5268]" dev="sockfs" ino=5268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 58.685792][ T3769] 0-2, 18-18, 34-34 [ 58.700781][ T3769] EXT4-fs (loop4): 1 orphan inode deleted [ 58.713145][ T3769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.736089][ T36] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 58.774640][ T3769] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.778521][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 58.796813][ T36] EXT4-fs (loop4): Remounting filesystem read-only [ 58.822564][ T3779] loop1: detected capacity change from 0 to 4096 [ 58.834943][ T28] audit: type=1400 audit(1781259690.672:249): avc: denied { ioctl } for pid=3768 comm="syz.4.68" path="socket:[5279]" dev="sockfs" ino=5279 ioctlcmd=0x2103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 58.882540][ T3769] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.900607][ T3779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.901907][ T28] audit: type=1400 audit(1781259690.672:250): avc: denied { mounton } for pid=3771 comm="syz.1.72" path="/file0" dev="autofs" ino=5280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 58.949037][ T3779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.047744][ T28] audit: type=1400 audit(1781259690.880:251): avc: denied { perfmon } for pid=3782 comm="syz.3.74" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.075285][ T3784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.74'. [ 59.349766][ T3789] loop4: detected capacity change from 0 to 512 [ 59.365008][ T28] audit: type=1400 audit(1781259691.177:252): avc: denied { bpf } for pid=3781 comm="syz.4.75" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.400865][ T3773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.72'. [ 59.447359][ T3789] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.75: corrupted inode contents [ 59.459279][ T3789] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 59.459861][ T3789] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.75: mark_inode_dirty error [ 59.469051][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 59.469091][ C0] EXT4-fs (loop4): initial error at time 1781259691: ext4_do_update_inode:5690: inode 16 [ 59.469160][ C0] EXT4-fs (loop4): last error at time 1781259691: ext4_do_update_inode:5690: inode 16 [ 59.506928][ T3789] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 59.511415][ T3789] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.75: corrupted inode contents [ 59.532365][ T3789] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 59.533669][ T3789] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.75: mark_inode_dirty error [ 59.554765][ T3789] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.75: corrupted inode contents [ 59.567599][ T3789] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 59.576377][ T3789] loop4: lost filesystem error report for type 5 error -117 [ 59.576758][ T3789] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.75: corrupted inode contents [ 59.597057][ T3789] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.75: mark_inode_dirty error [ 59.608582][ T3789] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 59.617699][ T3789] loop4: lost filesystem error report for type 5 error -117 [ 59.621882][ T3789] EXT4-fs (loop4): 1 truncate cleaned up [ 59.636984][ T3789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.650376][ T3789] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.688658][ T30] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 59.811085][ T30] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 60.033748][ T3795] loop3: detected capacity change from 0 to 512 [ 60.227663][ T3795] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 60.266432][ T3795] System zones: 0-2, 18-18, 34-34 [ 61.022834][ T3804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 61.060452][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.093154][ T3795] EXT4-fs (loop3): 1 orphan inode deleted [ 61.109026][ T30] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 61.128204][ T3795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.310648][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 61.329616][ T3795] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.350441][ T30] EXT4-fs (loop3): Remounting filesystem read-only [ 61.450314][ T3795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.538892][ T3818] FAULT_INJECTION: forcing a failure. [ 61.538892][ T3818] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.552567][ T28] audit: type=1400 audit(1781259693.356:253): avc: denied { listen } for pid=3817 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.579582][ T3812] loop2: detected capacity change from 0 to 4096 [ 61.587727][ T3820] netlink: 76 bytes leftover after parsing attributes in process `syz.4.82'. [ 61.619951][ T3812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.648830][ T3818] CPU: 0 UID: 0 PID: 3818 Comm: syz.3.83 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.648866][ T3818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 61.648935][ T3818] Call Trace: [ 61.648947][ T3818] [ 61.648957][ T3818] __dump_stack+0x1d/0x30 [ 61.648989][ T3818] dump_stack_lvl+0x95/0xd0 [ 61.649009][ T3818] dump_stack+0x15/0x1b [ 61.649027][ T3818] should_fail_ex+0x263/0x280 [ 61.649089][ T3818] should_fail+0xb/0x20 [ 61.649111][ T3818] should_fail_usercopy+0x1a/0x20 [ 61.649140][ T3818] _copy_to_user+0x20/0xa0 [ 61.649165][ T3818] simple_read_from_buffer+0xb5/0x130 [ 61.649228][ T3818] proc_fail_nth_read+0x10e/0x150 [ 61.649262][ T3818] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.649297][ T3818] vfs_read+0x1ab/0x7f0 [ 61.649324][ T3818] ? __rcu_read_unlock+0x4e/0x70 [ 61.649361][ T3818] ? __fget_files+0x184/0x1c0 [ 61.649461][ T3818] ? mutex_lock+0x57/0x90 [ 61.649563][ T3818] ksys_read+0xdc/0x1a0 [ 61.649601][ T3818] __x64_sys_read+0x40/0x50 [ 61.649694][ T3818] x64_sys_call+0x2886/0x3020 [ 61.649771][ T3818] do_syscall_64+0x12c/0x3b0 [ 61.649802][ T3818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.649823][ T3818] RIP: 0033:0x7f6ea103d68e [ 61.649843][ T3818] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.649885][ T3818] RSP: 002b:00007f6e9facefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.649911][ T3818] RAX: ffffffffffffffda RBX: 00007f6e9facf6c0 RCX: 00007f6ea103d68e [ 61.649926][ T3818] RDX: 000000000000000f RSI: 00007f6e9facf0a0 RDI: 0000000000000003 [ 61.649987][ T3818] RBP: 00007f6e9facf090 R08: 0000000000000000 R09: 0000000000000000 [ 61.650003][ T3818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.650019][ T3818] R13: 00007f6ea12f6038 R14: 00007f6ea12f5fa0 R15: 00007ffcd1e68af8 [ 61.650039][ T3818] [ 62.050722][ T28] audit: type=1400 audit(1781259693.862:254): avc: denied { map } for pid=3825 comm="syz.0.85" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.356344][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.371014][ T28] audit: type=1400 audit(1781259693.862:255): avc: denied { read write } for pid=3825 comm="syz.0.85" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.031298][ T28] audit: type=1400 audit(1781259694.179:256): avc: denied { name_bind } for pid=3825 comm="syz.0.85" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 63.080189][ T3826] netlink: 'syz.0.85': attribute type 27 has an invalid length. [ 63.094895][ T3826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.85'. [ 63.268970][ T28] audit: type=1400 audit(1781259695.072:257): avc: denied { block_suspend } for pid=3836 comm="syz.1.88" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.502326][ T3863] loop3: detected capacity change from 0 to 512 [ 63.662308][ T3868] loop0: detected capacity change from 0 to 512 [ 63.760633][ T3863] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 63.779240][ T3868] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.94: corrupted inode contents [ 63.791220][ T3868] fserror_report: 4 callbacks suppressed [ 63.791233][ T3868] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.799486][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 63.815109][ C0] EXT4-fs (loop0): initial error at time 1781259695: ext4_do_update_inode:5690: inode 16 [ 63.824975][ C0] EXT4-fs (loop0): last error at time 1781259695: ext4_do_update_inode:5690: inode 16 [ 63.838855][ T3868] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.94: mark_inode_dirty error [ 63.850109][ T3868] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.850739][ T3868] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.94: corrupted inode contents [ 63.871701][ T3868] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.872524][ T3868] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.94: mark_inode_dirty error [ 63.892913][ T3868] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.893902][ T3868] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.94: corrupted inode contents [ 63.914912][ T3868] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.917487][ T3868] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 63.935316][ T3868] loop0: lost filesystem error report for type 5 error -117 [ 63.936229][ T3868] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.94: corrupted inode contents [ 63.955596][ T3868] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.956973][ T3868] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.94: mark_inode_dirty error [ 63.977135][ T3868] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.977970][ T3868] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 63.996235][ T3868] loop0: lost filesystem error report for type 5 error -117 [ 63.998028][ T3868] EXT4-fs (loop0): 1 truncate cleaned up [ 64.012514][ T3868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.025389][ T3868] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.067743][ T147] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.149889][ T147] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 64.166882][ T3863] System zones: 0-2, 18-18, 34-34 [ 64.176536][ T3863] EXT4-fs (loop3): 1 orphan inode deleted [ 64.184293][ T3863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.405937][ T147] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.480546][ T147] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 64.494310][ T3863] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.553115][ T3883] loop4: detected capacity change from 0 to 128 [ 64.561586][ T147] EXT4-fs (loop3): Remounting filesystem read-only [ 64.593987][ T3879] netlink: 76 bytes leftover after parsing attributes in process `syz.1.100'. [ 64.610233][ T3883] EXT4-fs: Ignoring removed nobh option [ 64.632889][ T3863] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.666030][ T3883] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.679658][ T3885] loop2: detected capacity change from 0 to 1024 [ 64.706728][ T3885] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 64.719482][ T3883] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.732175][ T28] audit: type=1400 audit(1781259696.521:258): avc: denied { write } for pid=3882 comm="syz.4.101" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.874650][ T3898] loop3: detected capacity change from 0 to 512 [ 64.902331][ T28] audit: type=1400 audit(1781259696.690:259): avc: denied { read } for pid=3882 comm="syz.4.101" path="/16/mnt/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.930568][ T3883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 64.952521][ T3898] Quota error (device loop3): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 64.976364][ T3898] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 64.999455][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.010050][ T28] audit: type=1400 audit(1781259696.720:260): avc: denied { map } for pid=3882 comm="syz.4.101" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 65.034189][ T3898] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.106: Failed to acquire dquot type 1 [ 65.077930][ T3898] loop3: lost filesystem error report for type 5 error -117 [ 65.078449][ T3898] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.106: bg 0: block 495: padding at end of block bitmap is not set [ 65.085921][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 65.085938][ C0] EXT4-fs (loop3): initial error at time 1781259696: ext4_acquire_dquot:7034 [ 65.085973][ C0] EXT4-fs (loop3): last error at time 1781259696: ext4_acquire_dquot:7034 [ 65.142694][ T28] audit: type=1400 audit(1781259696.759:261): avc: denied { ioctl } for pid=3882 comm="syz.4.101" path="/16/mnt/file1" dev="loop4" ino=12 ioctlcmd=0x5387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.246502][ T3898] loop3: lost filesystem error report for type 5 error -117 [ 65.246760][ T3898] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 65.289622][ T28] audit: type=1400 audit(1781259697.077:262): avc: denied { write } for pid=3901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.325121][ T3898] loop3: lost filesystem error report for type 5 error -117 [ 65.325691][ T3898] EXT4-fs (loop3): 1 truncate cleaned up [ 65.369120][ T3898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.388713][ T28] audit: type=1400 audit(1781259697.157:263): avc: denied { write } for pid=3920 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.429396][ T3898] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.563834][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.595695][ T3885] loop2: detected capacity change from 0 to 1024 [ 65.618291][ T3939] loop4: detected capacity change from 0 to 256 [ 65.637114][ T3885] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 65.646420][ T3933] loop1: detected capacity change from 0 to 1024 [ 65.653399][ T3941] loop0: detected capacity change from 0 to 256 [ 65.692369][ T3933] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 65.712002][ T3939] FAT-fs (loop4): Directory bread(block 64) failed [ 65.727002][ T28] audit: type=1400 audit(1781259697.514:264): avc: denied { write } for pid=3925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.731915][ T3933] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 65.763163][ T3939] FAT-fs (loop4): Directory bread(block 65) failed [ 65.790513][ T3941] FAT-fs (loop0): Directory bread(block 64) failed [ 65.801761][ T3939] FAT-fs (loop4): Directory bread(block 66) failed [ 65.825432][ T3941] FAT-fs (loop0): Directory bread(block 65) failed [ 65.833502][ T3939] FAT-fs (loop4): Directory bread(block 67) failed [ 65.837999][ T3933] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: inode #32: comm syz.1.112: iget: special inode unallocated [ 65.850978][ T3941] FAT-fs (loop0): Directory bread(block 66) failed [ 65.859702][ T3939] FAT-fs (loop4): Directory bread(block 68) failed [ 65.866896][ T3939] FAT-fs (loop4): Directory bread(block 69) failed [ 65.874342][ T3941] FAT-fs (loop0): Directory bread(block 67) failed [ 65.881567][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.891398][ T3933] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 65.892767][ T28] audit: type=1400 audit(1781259697.663:265): avc: denied { write } for pid=3947 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.892924][ T3933] EXT4-fs (loop1): no journal found [ 65.905117][ T3939] FAT-fs (loop4): Directory bread(block 70) failed [ 65.923861][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 65.923885][ C1] EXT4-fs (loop1): initial error at time 1781259697: ext4_get_journal_inode:5896 [ 65.929363][ T3941] FAT-fs (loop0): Directory bread(block 68) failed [ 65.935673][ C1] : inode 32 [ 65.935705][ C1] EXT4-fs (loop1): last error at time 1781259697: ext4_get_journal_inode:5896 [ 65.951310][ T3941] FAT-fs (loop0): Directory bread(block 69) failed [ 65.957856][ C1] : inode 32 [ 65.988376][ T3939] FAT-fs (loop4): Directory bread(block 71) failed [ 65.995061][ T3939] FAT-fs (loop4): Directory bread(block 72) failed [ 66.002069][ T3941] FAT-fs (loop0): Directory bread(block 70) failed [ 66.009950][ T3939] FAT-fs (loop4): Directory bread(block 73) failed [ 66.016816][ T3941] FAT-fs (loop0): Directory bread(block 71) failed [ 66.030459][ T3941] FAT-fs (loop0): Directory bread(block 72) failed [ 66.039920][ T3939] syz.4.107: attempt to access beyond end of device [ 66.039920][ T3939] loop4: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 66.049657][ T3933] EXT4-fs (loop1): can't get journal size [ 66.055338][ T3941] FAT-fs (loop0): Directory bread(block 73) failed [ 66.065984][ T3950] netlink: 76 bytes leftover after parsing attributes in process `syz.2.115'. [ 66.075671][ T3933] EXT4-fs (loop1): filesystem is read-only [ 66.082706][ T3933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 66.123974][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.366440][ T3974] syz.0.113: attempt to access beyond end of device [ 66.366440][ T3974] loop0: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 66.381691][ T3974] syz.0.113: attempt to access beyond end of device [ 66.381691][ T3974] loop0: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 66.404381][ T3974] syz.0.113: attempt to access beyond end of device [ 66.404381][ T3974] loop0: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 66.462065][ T3979] loop2: detected capacity change from 0 to 512 [ 66.499915][ T3979] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 66.512065][ T3974] syz.0.113: attempt to access beyond end of device [ 66.512065][ T3974] loop0: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 66.529408][ T3979] System zones: 0-2, 18-18, 34-34 [ 66.548260][ T3979] EXT4-fs (loop2): 1 orphan inode deleted [ 66.558899][ T3979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.601909][ T3979] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.622090][ T3974] syz.0.113: attempt to access beyond end of device [ 66.622090][ T3974] loop0: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 66.686274][ T3974] syz.0.113: attempt to access beyond end of device [ 66.686274][ T3974] loop0: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 66.722181][ T3974] syz.0.113: attempt to access beyond end of device [ 66.722181][ T3974] loop0: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 66.756994][ T3974] syz.0.113: attempt to access beyond end of device [ 66.756994][ T3974] loop0: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 66.779556][ T147] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 66.795969][ T147] EXT4-fs (loop2): Remounting filesystem read-only [ 66.803695][ T3974] syz.0.113: attempt to access beyond end of device [ 66.803695][ T3974] loop0: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 66.829666][ T3979] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.895175][ T3990] loop2: detected capacity change from 0 to 256 [ 66.933748][ T3990] FAT-fs (loop2): Directory bread(block 64) failed [ 66.943882][ T3990] FAT-fs (loop2): Directory bread(block 65) failed [ 66.957994][ T3990] FAT-fs (loop2): Directory bread(block 66) failed [ 66.971998][ T3990] FAT-fs (loop2): Directory bread(block 67) failed [ 66.982211][ T3990] FAT-fs (loop2): Directory bread(block 68) failed [ 66.988840][ T3990] FAT-fs (loop2): Directory bread(block 69) failed [ 66.995734][ T3990] FAT-fs (loop2): Directory bread(block 70) failed [ 67.002464][ T3990] FAT-fs (loop2): Directory bread(block 71) failed [ 67.009110][ T3990] FAT-fs (loop2): Directory bread(block 72) failed [ 67.015723][ T3990] FAT-fs (loop2): Directory bread(block 73) failed [ 69.895110][ T4017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 69.949024][ T4019] loop1: detected capacity change from 0 to 256 [ 69.971738][ T4017] netlink: 64 bytes leftover after parsing attributes in process `syz.4.135'. [ 70.094322][ T4019] FAT-fs (loop1): Directory bread(block 64) failed [ 70.117720][ T4021] loop3: detected capacity change from 0 to 4096 [ 70.125970][ T4019] FAT-fs (loop1): Directory bread(block 65) failed [ 70.150061][ T4019] FAT-fs (loop1): Directory bread(block 66) failed [ 70.158842][ T4021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.176399][ T4019] FAT-fs (loop1): Directory bread(block 67) failed [ 70.190856][ T4019] FAT-fs (loop1): Directory bread(block 68) failed [ 70.197457][ T4019] FAT-fs (loop1): Directory bread(block 69) failed [ 70.204193][ T4019] FAT-fs (loop1): Directory bread(block 70) failed [ 70.214628][ T4019] FAT-fs (loop1): Directory bread(block 71) failed [ 70.252049][ T4019] FAT-fs (loop1): Directory bread(block 72) failed [ 70.277809][ T4019] FAT-fs (loop1): Directory bread(block 73) failed [ 70.293694][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.316471][ T4011] loop2: detected capacity change from 0 to 2048 [ 70.367947][ T3291] ================================================================== [ 70.376109][ T3291] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 70.383148][ T3291] [ 70.385507][ T3291] write to 0xffff88810035a3dc of 4 bytes by task 3293 on cpu 1: [ 70.393163][ T3291] shmem_mknod+0x143/0x170 [ 70.397635][ T3291] shmem_create+0x34/0x50 [ 70.402005][ T3291] path_openat+0xd75/0x2050 [ 70.406564][ T3291] do_file_open+0x16c/0x290 [ 70.411107][ T3291] do_sys_openat2+0x94/0x130 [ 70.415739][ T3291] __x64_sys_openat+0xf2/0x120 [ 70.420534][ T3291] x64_sys_call+0x1e39/0x3020 [ 70.425249][ T3291] do_syscall_64+0x12c/0x3b0 [ 70.429968][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.435893][ T3291] [ 70.438244][ T3291] read to 0xffff88810035a3dc of 4 bytes by task 3291 on cpu 0: [ 70.445899][ T3291] fill_mg_cmtime+0x5b/0x240 [ 70.450523][ T3291] generic_fillattr+0x24a/0x340 [ 70.455406][ T3291] shmem_getattr+0x181/0x200 [ 70.460047][ T3291] vfs_getattr_nosec+0x146/0x1e0 [ 70.465029][ T3291] vfs_getattr+0x48/0x60 [ 70.469295][ T3291] vfs_statx_path+0x28/0x140 [ 70.473925][ T3291] vfs_statx+0xc4/0x170 [ 70.478112][ T3291] vfs_fstatat+0x118/0x170 [ 70.482621][ T3291] __se_sys_newfstatat+0x55/0x3e0 [ 70.487680][ T3291] __x64_sys_newfstatat+0x55/0x70 [ 70.492920][ T3291] x64_sys_call+0x2c64/0x3020 [ 70.497635][ T3291] do_syscall_64+0x12c/0x3b0 [ 70.502277][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.508211][ T3291] [ 70.510567][ T3291] value changed: 0x05a72a1d -> 0x05ae8fdb [ 70.516318][ T3291] [ 70.518662][ T3291] Reported by Kernel Concurrency Sanitizer on: [ 70.524841][ T3291] CPU: 0 UID: 0 PID: 3291 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 70.533726][ T3291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 70.543809][ T3291] ================================================================== [ 70.579887][ T4011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.627787][ T4034] loop3: detected capacity change from 0 to 512 [ 70.651561][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.706125][ T4034] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 70.715861][ T4034] System zones: 0-2, 18-18, 34-34 [ 70.723768][ T4034] EXT4-fs (loop3): 1 orphan inode deleted [ 70.730281][ T4034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.745206][ T147] __quota_error: 2 callbacks suppressed [ 70.745225][ T147] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 70.768820][ T4034] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.782839][ T147] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 70.807879][ T147] EXT4-fs (loop3): Remounting filesystem read-only [ 70.842627][ T4034] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.130419][ T401] bio_check_eod: 486 callbacks suppressed [ 73.130444][ T401] kworker/u8:7: attempt to access beyond end of device [ 73.130444][ T401] loop1: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 73.150046][ T401] kworker/u8:7: attempt to access beyond end of device [ 73.150046][ T401] loop1: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 73.163609][ T401] kworker/u8:7: attempt to access beyond end of device [ 73.163609][ T401] loop1: rw=1, sector=19128, nr_sectors = 16 limit=256 [ 73.177296][ T401] kworker/u8:7: attempt to access beyond end of device [ 73.177296][ T401] loop1: rw=1, sector=19176, nr_sectors = 32 limit=256 [ 73.191107][ T401] kworker/u8:7: attempt to access beyond end of device [ 73.191107][ T401] loop1: rw=1, sector=19240, nr_sectors = 32 limit=256 [ 73.204866][ T401] kworker/u8:7: attempt to access beyond end of device [ 73.204866][ T401] loop1: rw=1, sector=19304, nr_sectors = 32 limit=256 [ 73.218586][ T401] kworker/u8:7: attempt to access beyond end of device [ 73.218586][ T401] loop1: rw=1, sector=19368, nr_sectors = 32 limit=256 [ 73.232380][ T401] kworker/u8:7: attempt to access beyond end of device [ 73.232380][ T401] loop1: rw=1, sector=19432, nr_sectors = 32 limit=256 [ 73.246095][ T401] kworker/u8:7: attempt to access beyond end of device [ 73.246095][ T401] loop1: rw=1, sector=19496, nr_sectors = 32 limit=256 [ 73.259793][ T401] kworker/u8:7: attempt to access beyond end of device [ 73.259793][ T401] loop1: rw=1, sector=19560, nr_sectors = 32 limit=256