last executing test programs: 2m38.045448366s ago: executing program 2 (id=591): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=@base={0x9, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x4000def}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x7300, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r4 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x4c00, 0x3) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000340)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x6, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r5, 0xfff, 0x10}, 0xc) recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 2m37.869926451s ago: executing program 2 (id=593): socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_create(0x200) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x10}, @timestamp], 0x2) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 2m37.806808543s ago: executing program 2 (id=595): socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000f000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2d, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r0 = syz_open_dev$loop(&(0x7f0000000380), 0xffff, 0x2) ioctl$FITHAW(r0, 0xc0045878) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x1ac, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x4, 0xfffe, 0x0, 0x4000, 0x0, 0x2009}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x1000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$usbmon(&(0x7f0000000180), 0xfffffffffffffc00, 0x600) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'ip6gretap0\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x30, 0x7, 0x7f, {0xd, @usr_ip6_spec={@loopback, @mcast1, 0x8, 0x3, 0x2}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x6, [0x9, 0x6]}, @esp_ip4_spec={@empty, @dev={0xac, 0x14, 0x14, 0x12}, 0x3, 0x9}, {0x0, @remote, 0x200, 0x9, [0x0, 0x4]}, 0x4}}}) r3 = socket(0x2, 0x3, 0xff) r4 = socket$netlink(0x10, 0x3, 0x0) flistxattr(r4, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$netlink(r3, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f00000048c0)=[{0x0, 0x1c}, {&(0x7f0000000700)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x4000000}, 0x44880) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x60, 0x80000200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 2m37.648057528s ago: executing program 2 (id=596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x880, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0xb, 0x21f, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r3, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000ed03010000000000000000000009000a14000000f90301fc2c857626d03410ac050c3c12"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc010) fcntl$getflags(r2, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x18, &(0x7f0000000e80)=ANY=[@ANYBLOB="18020000aff9ffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70559a50080af000800000085000000a5ecffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002240)=ANY=[@ANYBLOB="580000001000ffff28bd5d00f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c0000200002801400020020"], 0x58}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x5, 0x0, 0x0, 0x0, 0x7, 0x1f0559, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xa, 0x8}, 0x6025, 0x8, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x8, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x46290, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x3, 0x7f}, 0x120, 0x10000, 0x33f8, 0x7, 0xb, 0x20007, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r6, 0x2) syz_clone(0x41000300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r7, 0x0, 0x0, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x14, r9, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) lseek(r7, 0x0, 0x4) 2m37.319844918s ago: executing program 2 (id=602): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x6b, 0xfc, 0x2, 0x28, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x1, 0xffff, 0x80000001}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0xffff, 0x0, 0x7ffd, 0x80000, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1b, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000001440)='\xe4\xceZ\x00FbY~m\xf7\xb1\xe5\xc5d\xf3\x8eH=sd\x88K\xe1\x1f\x1cyDU\xeb[ \xe1\x110\xe5\x80W\x9f\xc8!7\xef\xe5Z\xdd\xe3t\xf0ht\xd8\xf5\xed\xe5x }\xb2\xf1\xaeZ>\xe4\x8dH\xd3\xb21\xcd\xbc\xf1\x16+\x96', 0x0, r4) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noacl']) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) close(r6) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kexec_load(0xfffffffffffffffc, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xc, 0xe, &(0x7f0000001580)=ANY=[@ANYRESDEC=r5, @ANYRES32=r0, @ANYBLOB="aa5a63563b2437ae3c1f8b1d74cf7ba276c6b82342c97857a2bf46be01400e9fe46f3ab4fdcc0e9bb233c2e506482ed1b85ecf42fd92f226ddc0d193ddf2668756dcc42ab26a0549d2f0889e7a450b2b9941800336011512867ae0266a7c95903be506c6c8f37fe813aff9871dc6cd940fcd84c3557070cbb2a4e62bc4280b78e2e1e4920d055eba6216ed7f32e553a1cc2ce2108c9e9f42e8f6c109f264bcfebb57606e7c2668f7ce0d03f8fa8e15d9", @ANYRES32=r4, @ANYRES32=r5, @ANYRESHEX=0x0, @ANYBLOB="cbb50c9e1e0542cb6943741e627e8d74163ed1413b32ef4ecc02d8a91a887cb8ebc6204323a806c4fd5d8dd5c44d5da26e118809339fb21c3bba600ec4141eaa61fc29883337ad80285246d3", @ANYBLOB="e8f3a73b6312e01d6ef2edeeb98ffb8320b693347c2d5792e7d8a32c78a9e8389240593faabc6a3659efe2b71f02943097cafc9a0caa071cb6cbf1588f91eae57e82e8566dc1dac290314a4026d5651a60c7b531ae2d09a467", @ANYRES16=r1], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r8, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_setup(0x115a, &(0x7f0000000440)={0x0, 0x4ef1, 0x8000, 0x2, 0x80}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) timer_gettime(r9, &(0x7f00000001c0)) 2m36.401365817s ago: executing program 2 (id=606): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x118}, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x2}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000140)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) syz_emit_ethernet(0x12d, &(0x7f0000000a00)={@broadcast, @random="42e17dbe6edb", @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xf3, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x84, 0x4, '\x00', [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}], {0x0, 0x4e24, 0xc3, 0x0, @opaque="17c394c66e227dc4c16a08c29a0f7fb4a3433a3330680d65707c6a5eec9069d24d22ec803296dfd89c9d85c836ddfe35310a834859226739f02ed5d1eed177127f56d66a5e70aa8f988d163c330fde304bc5867206805c4f38e2e734a51219ef7e57c406aacd9f91d9983637190afbdc7556d2c555365f49cb028cdba0c1e870ff3e90ee14b40f1ebfe3bd1097aa3aa2b0c5499e82c548b15df278bc0112c5540cf31b604cf4ed50ce2148af9c0ed6616c9cc2ed6ba4028ec85dac"}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000004c0)="9745010000002000010000ac0a3324491fbb00000098894633120b5585f0b902cd17f323", 0x24}], 0x1}, 0x400c804) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$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") getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbf8}, 0x14}, 0x1, 0x2b1e}, 0x2004c000) 2m36.267717331s ago: executing program 32 (id=606): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x118}, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x2}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000140)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) syz_emit_ethernet(0x12d, &(0x7f0000000a00)={@broadcast, @random="42e17dbe6edb", @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xf3, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x84, 0x4, '\x00', [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}], {0x0, 0x4e24, 0xc3, 0x0, @opaque="17c394c66e227dc4c16a08c29a0f7fb4a3433a3330680d65707c6a5eec9069d24d22ec803296dfd89c9d85c836ddfe35310a834859226739f02ed5d1eed177127f56d66a5e70aa8f988d163c330fde304bc5867206805c4f38e2e734a51219ef7e57c406aacd9f91d9983637190afbdc7556d2c555365f49cb028cdba0c1e870ff3e90ee14b40f1ebfe3bd1097aa3aa2b0c5499e82c548b15df278bc0112c5540cf31b604cf4ed50ce2148af9c0ed6616c9cc2ed6ba4028ec85dac"}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000004c0)="9745010000002000010000ac0a3324491fbb00000098894633120b5585f0b902cd17f323", 0x24}], 0x1}, 0x400c804) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$eJzs3VFrHF0ZAOB3Jrvfl7T53FS90IJtsZW0aDdJY9vgRasg3hWUel9jsg0hm2xJNm0Tiqb4AwQRFbzRK28Ef4Ag/QkiFOy9qCiirV4oVEd2d7bGZDdJ6W6WL/s8cLpzZmbnfc+mc3bOzLATwNC6EBGXIyLLsuxKRJTy+WleYqdVGuu9evlkoVGSyLK7f00iyee1t/V+/no6f9toXv9msj/uxtb2yny1WlnP61P11eR1lm1fXV6dX6osVdZmZ2duzN2cuz433ZN2TkTErS//8Qff/dlXbv3qc49+d+/Pl7/VamDL7nb0UqvpxTefRUMhItb7EWxACs0WtlwfcC4AAByscbz/0Yj4dERciVKMNI/mjmC035kBAAAAvZLdHo/XSev6HwAAAHAypRExHklazu/3HY80LZdb9/B+PE6l1dpG/bNZ6c35gokopveXq5Xp/N6BiSgmjfpMfo9tu35tT302Is5ExPdLY816eaFWXRzomQ8AAAAYHqf3jP//UWqN/wEAAIATZmLQCQAAAAB9Z/wPAAAAJ5/xPwAAAJxoX71zp1Gy9vOvFx9uba7UHl5drGyslFc3F0aitv6gvFSrLTV/s2/1sO1Va7UHn4+1zcdT9cpGfWpja/veam1zrX5v2RMDAQAAYFDOnH/2IomInS+MpRGRJbuWFSOykd0rF44/P6B/0rdZ+Q/9ywM4fiODTgAYGIf0MLyKg04AGLjD+oGuN+/8uve5AAAA/TH5yWcvonX9v1ka3suXJYNMDOi7/Pp/Yl+H4eP6Pwwv1/9geBUPOgIwKIATLz3Crv7u1/+z7K2SAgAAem68WZK0nI8DxiNNy+WID5qPBSgm95erlemI+EhE/LZUfL9Rn2m+M3F6AAAAAAAAAAAAAAAAAAAAAAAAAACOKMuSyLoYy58O1m05AAAA8OEQkf4pyZ//NVm6NL73/MB7yT9LzdeIePTjuz98PF+vr8805v/tzfz6j/L5147//AUAAACwX3uc3h7HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAvvXr5ZKFdjjPuX74UERO74ieRxy/EaPN1NIoRcervSRR2vS+JiJEexN95GhGf6NT+pJFWTORZ7I2fRsTYgOOf7kF8GGbPGv3PFzvtf2lcaL523v8KeXlX+/q/XfHb/d9Il/7vg04bTPfPOvv8F1Nd4z+NOFvo3P+04ydd4l88Yhu/8fXt7W7Lsp9GTHb8/kn+L9ZUUngwtbG1fXV5dX6pslRZm52duTF3c+763PTU/eVqJf+3Y4zvfeqX/zmo/aciRrv1vwe1/9IR2//v549ffqw1WdyzqBg/ybLLFzt//7Y+/7i9N377u+8z+Z+7UZ9sT++0pnc79/PfnDvfJbexpxGLXT7/Q/7+Hf6ndXbla9/5/VHXBQD6b2Nre2W+Wq2sd5xoHVscvI4JE4dNjMUxBp2Pg9ZpH8QeQz7fzkMdY9v/lfVsgwPslAAAgL7430H/oDMBAAAAAAAAAAAAAAAAAACA4XXYz4BFD35ObG/MncE0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgQP8NAAD//1g3xo8=") getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbf8}, 0x14}, 0x1, 0x2b1e}, 0x2004c000) 2m4.50242132s ago: executing program 0 (id=794): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x9) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) unshare(0x2c040480) r1 = open(&(0x7f0000000300)='./cgroup\x00', 0x8000, 0x196) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000288a84d0081006600089e0000001c00e4000008119078ac141421e00000010100000000000000"], 0x32) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x1, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, &(0x7f0000004d40)={0x0, 0x0, 0x30, 0x0, 0x9, 0x8, 0x5f76, 0x3, 0xfffffffc}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x25, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$packet(0x11, 0x1, 0x300) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000200)="413c9e6acbcc", 0x6}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xa2cc, @local, 0xf}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000080)}], 0x1}}], 0x2, 0x4000844) shutdown(r5, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x5, 0x2}, 0x90) 2m3.608973548s ago: executing program 0 (id=800): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty=0xffffff97}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000008"], 0x50}}], 0x3ffffffffffff40, 0x800) 2m3.525958821s ago: executing program 0 (id=802): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x6, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, 0x0}) syz_pidfd_open(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000180)={0x6, 0x71}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x28040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x40002002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890b, &(0x7f0000000100)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="c5c8f37ff78b701363ebc8188223bd2d4b124b9a96f3c42c03"], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0xb) 2m3.432627373s ago: executing program 0 (id=806): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x34004000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010100}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000740)=""/207) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000}, 0x94) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000014c0)={{r3}, "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"}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x3, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, &(0x7f0000000340)="b31e3ed36736609d97abfd5cd3c39f73538071233d458d6b3324060b2c7476a6bd4f218d4081153ef23b7d0638ea228d532e4c3ec417b719122ccfdc658df0950b5d3a2fd67fa2", 0xfffffffffffffd93, 0x9, 0x0, 0x3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x2700, r5, &(0x7f0000000440)="0501d5596c63ed855877ff4b105b2cd051fbd675c8e8c1eb1ce3ff9f4f60f0bc995ea3216b3b6e6882e5426b52290e9a4bebab7bad605cb5289884409f45c7a4101dab5795f6b33dd97b4028c9c6ebd7e255b52644a4ce028535d252b3844bb80d870f5f4d34a695104b7fd4cdbd18c9a6881d07bef87de5586dd3acd58437ed1a2e28f7073d5cc65d7a15874ac130b979bd7145cd012bdd0fd3451dbbb30ed9f5a5706d242f4b2db573fc21ee389a6c10957d11a009ec931f5bdb8b0c269a82c2a6e112f9", 0xc5, 0x5}]) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) 2m3.138633202s ago: executing program 0 (id=810): socket$netlink(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x8, 0x1000, 0x1, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000000005d69bf92e3ee9981b14738fb54aa046b0230a3e79902f889a5103efde5a85f", @ANYRESHEX=r0, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 2m2.827815722s ago: executing program 0 (id=816): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x6, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, 0x0}) syz_pidfd_open(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000180)={0x6, 0x71}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x28040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x40002002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890b, &(0x7f0000000100)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="c5c8f37ff78b701363ebc8188223bd2d4b124b9a96f3c42c03"], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0xb) 2m2.827529502s ago: executing program 33 (id=816): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x6, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, 0x0}) syz_pidfd_open(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000180)={0x6, 0x71}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x28040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x40002002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890b, &(0x7f0000000100)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="c5c8f37ff78b701363ebc8188223bd2d4b124b9a96f3c42c03"], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0xb) 4.150878132s ago: executing program 4 (id=1815): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30040ee, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") 4.096621564s ago: executing program 6 (id=1817): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_setup(0xd9d, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'ip6gretap0\x00'}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3ff, 0x7ffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$tipc(r0, 0x0, 0x24040083) socket$kcm(0x2, 0x200000000000001, 0x106) 2.869676432s ago: executing program 6 (id=1824): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, 0x0, 0x0) 2.840641003s ago: executing program 5 (id=1825): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) timer_settime(0x0, 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x200000000000017d, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000054f237cb000000000040"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x100, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="68020000000501040000000000000000050000065402010003"], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) recvmsg$kcm(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x40002000) 2.729809496s ago: executing program 6 (id=1826): clock_nanosleep(0x3, 0x0, &(0x7f0000000040), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000002c0)='./file1\x00', 0x2480444, &(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYBLOB="5e2606a1d171520e16b7c9e4ec15e25d80b3daf85d96f421cebf37e5c5da8c32071ed8def0ffb25e45954c8bf2f87fa14a4a8cfae085a775dbf46d9a85cd7d7d89becbe82a1ce55a28c1fe119b7ebd102f6df8d258130a01b9e06af6e43d07889be9ceebce3f3d6d88edbb9c4c8fd27912d334656e4ba6209033b5ba66d5a844af3b983dc6", @ANYRES32, @ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYBLOB="a23b938eabd9436fab39ce57cea13a51c01bc66294352ad6bef3146e17bc31a3747487afeec021ffa241286224d8d7f7acaeb35caad3706b002845f7c1845411ea21248adb20921e0b92a930f3d70e26d279b8ee4a98ff473a41141674200dea402768967bc703cfef6f354f6770c8c9fde0d34d2072bd7ddcd262fbf1bbbf36045c00000000000000"], 0x1, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x8, 0x3}, 0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) alarm(0x3) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x888) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2.632985489s ago: executing program 5 (id=1827): r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x2c, r3, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}]}, 0x2c}}, 0x48814) r5 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf25010000000c0008004575e34ddbf5791b04000000000000000c000800b807000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x20004000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0xffffffffffffffe3, &(0x7f0000000380)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x40000000015, 0x805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r9}, 0xc) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt(r7, 0x114, 0x271f, 0x0, &(0x7f00000000c0)) 2.331626139s ago: executing program 4 (id=1828): r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) symlink(0x0, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x2c, 0x0, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}]}, 0x2c}}, 0x48814) r5 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf25010000000c0008004575e34ddbf5791b04000000000000000c000800b807000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x20004000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0xffffffffffffffe3, &(0x7f0000000380)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x40000000015, 0x805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r9}, 0xc) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt(r7, 0x114, 0x271f, 0x0, &(0x7f00000000c0)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x35}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x27}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '@'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 2.321294269s ago: executing program 5 (id=1829): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0xc0a82, 0x21) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() r1 = getpid() syz_pidfd_open(r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x68f5, &(0x7f0000000280)={0x0, 0xd86d, 0x80, 0x1, 0x1cd}, 0x0, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000450a0f"], 0xfce) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES16=r2], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) write$tcp_mem(r0, &(0x7f00000003c0)={0x8001, 0x20, 0x6, 0x20, 0x6}, 0x48) 2.250947811s ago: executing program 4 (id=1832): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x118}, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x2}) sendto$packet(r0, &(0x7f0000000240)="09000000e7001400000000803500df8000000088a8000800274e88a800000000", 0x70, 0x4044800, &(0x7f00000000c0)={0x11, 0x88a8, r2, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x48}}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000140)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) syz_emit_ethernet(0x122, &(0x7f0000000a00)={@broadcast, @random="42e17dbe6edb", @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xe8, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x84, 0x4, '\x00', [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}], {0x0, 0x4e24, 0xb8, 0x0, @opaque="17c394c66e227dc4c16a08c29a0f7fb4a3433a3330680d65707c6a5eec9069d24d22ec803296dfd89c9d85c836ddfe35310a834859226739f02ed5d1eed177127f56d66a5e70aa8f988d163c330fde304bc5867206805c4f38e2e734a51219ef7e57c406aacd9f91d9983637190afbdc7556d2c555365f49cb028cdba0c1e870ff3e90ee14b40f1ebfe3bd1097aa3aa2b0c5499e82c548b15df278bc0112c5540cf31b604cf4ed50ce2148af9c0ed661"}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000004c0)="9745010000002000010000ac0a3324491fbb00000098894633120b5585f0b902cd17f323", 0x24}], 0x1}, 0x400c804) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$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") getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbf8}, 0x14}, 0x1, 0x2b1e}, 0x2004c000) 2.211233372s ago: executing program 4 (id=1834): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000000000000000000a000000040003803c00028014000300fc0000000000000000003bd4c190000014000400fe8000000000000000000000000000120c000280050001100600000004000180000000000000000000"], 0x58}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setopts(0x4200, r1, 0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r4, 0x0, 0x0, 0x6400, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 1.62820413s ago: executing program 6 (id=1840): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x400}, 0x2, 0x0, 0xdc96, 0x0, 0x2, 0x21, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(r0, &(0x7f00000000c0)='net/raw6\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x1461b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x4, 0x202, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext={0x5, 0x80000004dc6}, 0x0, 0xfffffffffffffffc, 0x10000, 0x9, 0x10000000006f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0400032400f45a8e8e001a639f22b1c19532e08397970f9b2de44f956db858000000000000a662d32e060000000c9409e90b020c0c2f9ea8f67e1ab0e8f23cc2637c81b23f1d552c9a31e0e30000003d19039f304be215dfc6d170800181eaad70a6d6b0827111a3a7ccddc1726d976e9a0000000000000058e83e5fc1e2a80d558fcd9ceb0fe37804ce63c5f73abb8966e4e68a026661eb5f5bc9bc79657f96cb61783b99abbc4a3536c3564b93d93051bd56e4577790eefe89cb585f", @ANYRES16=r5, @ANYBLOB="230025bd7000fcdbdf251200000008000800001c0000180001801400020076657468315f6d616376746170000000"], 0x34}, 0x1, 0x0, 0x0, 0x4440}, 0x24048014) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.338158179s ago: executing program 5 (id=1844): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_setup(0xd9d, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'ip6gretap0\x00'}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3ff, 0x7ffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$tipc(r0, 0x0, 0x24040083) socket$kcm(0x2, 0x200000000000001, 0x106) 1.269948991s ago: executing program 1 (id=1845): syz_io_uring_setup(0x2175, &(0x7f0000000100)={0x0, 0x5128, 0x20000, 0x0, 0x2ea}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x80001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(r0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="fe1fdb"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000240)={[{@errors_remount}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$packet(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), 0xffffffffffffffff) 1.174955944s ago: executing program 3 (id=1847): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x8, 0xfffffffd, 0x100}}, @TCA_CT_MARK={0x8, 0x10, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@journal_async_commit}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='devices.list\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) write$binfmt_script(r3, &(0x7f0000000140), 0xfcb8) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x448002, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r4, @ANYBLOB="020026bd7000fddbdf253e00000008000300", @ANYRES32=r5, @ANYBLOB="0c0099004000000012000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0xc0) syz_read_part_table(0x5e8, &(0x7f0000000600)="$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") 1.129946056s ago: executing program 4 (id=1848): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x105006, &(0x7f00000002c0)={[{@quota}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0x858c}}, {@acl}, {@debug}]}, 0x3, 0x43e, &(0x7f0000000d80)="$eJzs3MtvG0UYAPBv10lKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZvYjp3m4cQB/37SJjPesWc+z449u5NNAD1rOPuRROyLiN8jYrCWbSwwXPt1e/Hq1N+LV6eSqFTe+iuplru1eHWqKFo8b2+eGUkj0s+SONKi3rnLV85Plsszl/L82PyF98fmLl959tyFybMzZ2cuTpw6dfLE+AvPTzzXkTizNt06/NHs0UOvvXP9janT19/9+dukiL8pjg4ZXm3nE5VKh6vrrv116aSviw1hXUoRkXVXf3X8D0YpljtvMF79tKuNA7ZUpVKp7G2/e6EC/I8l0e0WAN1RfNFn57/Ftk1Tjx3h5ku1E6As7tv5VtvTF2lepr/p/Lb5EslmDEfE6YV/vsq22JrrEAAADb7P5j/PtJr/pXF/Xbm787WhoYi4JyIORMS9EXEwIu6LqJZ9ICIeXGf9zYskK+c/6Y0NBbZG2fzvxXxtq3H+V8z+YqiU5/ZX4+9PzpwrzxzP35OR6N+V5cdXqeOHV377ot2++vlftmX1F3PBvB03+nY1Pmd6cn5yMzHXu/lJxOG+VvEnSysB2WT3UEQc3mAd55765mi7fXeOfxUdWGeqfB3xZK3/F6Ip/kKy+vrk2F1Rnjk+VhwVK/3y67U329W/qfg7IOv/PS2P/6X4h5L69dq59ddx7Y/PW5zTDCylNnL8DyRvN7zKh5Pz85fGIwaS12uNrn98Yvm5Rb4on8U/cqz1+D8Qy+/EkYjIDuKHIuLhiHgk77tHI+KxiDi2Svw/vfz4e+327YT+n15X/y8nBqL5kdaJ0vkfv2uodGg98Wf9f7KaGskfWcvn31ratbGjGQAAAP570ojYF0k6upRO09HR2t/LH4w9aXl2bv7pM7MfXJyu3SMwFP1pcaVrsO566Hh+Wl/kJ5ryJ/Lrxl+Wdlfzo1Oz5eluBw89bm+b8Z/5s9Tt1gFbzv1a0LuMf+hdxj/0LuMfeleL8b+7G+0Atl+r7/+Pu9AOYPs1jX/LftBDnP9D7zL+oXcZ/9CT5nbHnW+Sl5BYkYh0RzRDopYo/l1Rx16wyx9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHfJvAAAA//9Fd+ND") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7800fddbdf2503000000050037000000000008", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x8085}, 0x24000840) 641.241371ms ago: executing program 6 (id=1850): clock_nanosleep(0x3, 0x0, &(0x7f0000000040), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000002c0)='./file1\x00', 0x2480444, &(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYBLOB="5e2606a1d171520e16b7c9e4ec15e25d80b3daf85d96f421cebf37e5c5da8c32071ed8def0ffb25e45954c8bf2f87fa14a4a8cfae085a775dbf46d9a85cd7d7d89becbe82a1ce55a28c1fe119b7ebd102f6df8d258130a01b9e06af6e43d07889be9ceebce3f3d6d88edbb9c4c8fd27912d334656e4ba6209033b5ba66d5a844af3b983dc6", @ANYRES32, @ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYBLOB="a23b938eabd9436fab39ce57cea13a51c01bc66294352ad6bef3146e17bc31a3747487afeec021ffa241286224d8d7f7acaeb35caad3706b002845f7c1845411ea21248adb20921e0b92a930f3d70e26d279b8ee4a98ff473a41141674200dea402768967bc703cfef6f354f6770c8c9fde0d34d2072bd7ddcd262fbf1bbbf36045c00000000000000"], 0x1, 0x267, &(0x7f0000000740)="$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") alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x8, 0x3}, 0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) alarm(0x3) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x888) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 623.067611ms ago: executing program 3 (id=1851): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x33, 0x39, 0x62, 0x64, 0x39, 0x64, 0x33, 0x32, 0x35, 0x64, 0x63, 0x33, 0x61, 0x39, 0x34, 0x30]}, &(0x7f0000000ec0)={0x0, "36bfeafaba2e0def8634718fbb96c28f51c321ff7374dd18bfd9defbc7d5b35c88f66c311837b1f617e383b8cf09c4a40affa73a8f18befd54f02d5007d453a5", 0x24}, 0x48, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r1, 0xa018) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8015) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @opaque="dff98c8d6b02f029f30930cc593d79e1"}}}}}, 0x0) 622.751031ms ago: executing program 5 (id=1852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c00040067636d28"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 523.527554ms ago: executing program 5 (id=1853): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) r2 = socket(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x401, @empty, 0x1}}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x180, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) listxattr(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000400}, 0x2) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x9, 0x31, 0xffffffffffffffff, 0xf983e000) unshare(0x2c020400) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xfffff001, 0x3}, &(0x7f0000000040)=0xc) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)=""/166) ioctl$VT_RESIZE(r1, 0x5609, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x8, 0x41}) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) 483.521405ms ago: executing program 3 (id=1854): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) (async) r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280), 0x82, 0x48f, &(0x7f0000000380)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQijU0JpYQqAagxsTQ6JrdWniX+DOjVFXJiaudG9IiLIBjYsx9869Mp12mKFOZwrzPMnQc+acO+ecnnvuPfccpgH0rOHsnyRia0T8EhE7qtHlGYarP65dOTv155WzU0lUKq/+nuT5rl45O1VmLY/bUkRG0oj0g6QoZLn5xTMnJmdnZ04X8bGFk2+PzS+eeeL4ycljM8dmTk0cOnTwwPjTT0082ZZ2Zu26uufc3N7dL75+8aWpIxff+v6rrL5bi/TadqzJ4Mq3hrOG/1HJ1ac9HP//T8VtNNtqwkl/FyvCTemLiKy7BrLxX6lUztek7YgX3m9y+JZ1rh6wjrJ706ZV3i/ui0uVhpIbpgK3giS6XQOgO8r7ffb8W746OP3ousvPVh+AsnZfK17VlP5IizwDdc+37TQcEUeW/vose0U71iEAAJr4aOrTw/H4avO/NO6pybe92EMZiog7IuLOiLgrInZGxN0Red57I2JXK4XWbBDUbw2tnP+kl9beuuay+d8zxd7W8vlfOfuLob4iti1v/0By9PjszP7idzISA5uy+PgNyvjm+Z8+bpRWO//LXln55VywqMel/roFuunJhcl8UtoGl9+L2NMff1cqlbr2J1H2UhIRuyNiz8199PYycPzRL/c2ytS8/Ss+7ro27DNVvoh4pNr/S1HX/lKycn9ycNv1/cmx/8XszP6x8qxY6YcfL7zSqPzW278+sv7fvPz8L1I+XywCQ2/W7tfOR4Ody60Ny7jw64cNn2nWev4PJq/l16Ny2/XdyYWF0+MRg8nhPL7s/Ynrx5bxMn/W/pF9WUrZ/vLINL/GRdH/90XE3mK/7P6IeKCo+4MR8VBE7GvY+ojvnmucthH6f7qm/5OoP/93nav+LPt/8aYDfSe+/bpR+a31/8E8NFK8k1//mmi1gmv/zQEAAMCtI81XbpJ09N9wmo6OVv9j787YnM7OzS88dnTunVPT1RWeoRhIy5WuHTXroePJUvGJ1fhEsVZcph8o1o0/6Ys8Pjo1Nzvd5bZDr9vSYPxnfuvrdu2AdbfaPtrEKl9oA24/9eM/XR49/3InKwN0lO9rQ+9qMv7TTtUD6Dz3f+hdq43/83VxewFwe3L/h95l/EPvMv6hd9WN/774uVs1ATpoDV/nFxCYXzwT6YaoRkuB1v8exHoH3tgY1Wgh0O0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8EwAA//9gP+wr") (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x7, 0x1, ',\'\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048800}, 0x44014) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003"], 0xa8}}, 0x0) (async, rerun: 64) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008844) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x10, 0x81, 0x8000101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x1b, 0xa, 0xff, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x48c5}, 0x24008004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4004090) socket$kcm(0x29, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xec}}, 0x0) (async, rerun: 64) ioctl$OCFS2_IOC_GROUP_ADD(r9, 0x40186f02, &(0x7f0000000840)={0x7fe0, 0x33, 0xeccd, 0x4}) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008040) (async) socket$key(0xf, 0x3, 0x2) 431.212257ms ago: executing program 1 (id=1855): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0xe, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x1, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) r4 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, &(0x7f0000000000)=[r4], 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8995, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0xc844) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800, 0x8000, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x48}}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20004015) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000980)=ANY=[@ANYBLOB='rodir,nonumtail=0,shortname=lower,shortname=winnt,iocharset=default,utf8=0,codepage=1250,shortname=lower,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d6c1016b0e66b09388a775918fca870916f7765722c696f636861727365743d63703835352c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c726f6d69722c"], 0x1, 0x27b, &(0x7f0000000640)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x44, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000140), 0x1003, r5, 0x0, 0x2000000}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r5}, 0x38) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c0001000000050009000100000008000a00", @ANYRES32=r6], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 297.849571ms ago: executing program 3 (id=1856): r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) symlink(0x0, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x2c, 0x0, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}]}, 0x2c}}, 0x48814) r5 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf25010000000c0008004575e34ddbf5791b04000000000000000c000800b807000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x20004000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0xffffffffffffffe3, &(0x7f0000000380)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x40000000015, 0x805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r9}, 0xc) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt(r7, 0x114, 0x271f, 0x0, &(0x7f00000000c0)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x35}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x27}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '@'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 219.004743ms ago: executing program 3 (id=1857): r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) r2 = socket(0xa, 0x3, 0x3a) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/895, @ANYRES8, @ANYBLOB="3314f54e5fd2edf68f060b6dc46e6726b43f6ee9ddde462c40e60f24007b2bab9e62e0cb8f8765d8cbe7f5463bcb92c74efb73ef0f526fe4056777ed73b012c79f7de0f43b0840ffd77dc59c2f080b4e37bbf7b0a7c58486ec28cc997fb50b582ce980b04cde0666cb1514340a36a20c20bc6ec73af2f34d53b12df083d642b8e66055ff69d88264abb6d6922fb288698e8bb5728002858a45c8"], 0x1, 0x2b1, &(0x7f0000000100)="$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") getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x4, 0x400, 0x0, 0x7ff, 0x800}, &(0x7f0000000500)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000600)={r3, @in6={{0xa, 0x4e23, 0x401, @empty, 0x1}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x180, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) listxattr(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000003c0)='M', 0x1}], 0x2, 0x0, 0x0, 0x4000400}, 0x2) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x9, 0x31, 0xffffffffffffffff, 0xf983e000) unshare(0x2c020400) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xfffff001, 0x3}, &(0x7f0000000040)=0xc) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)=""/166) ioctl$VT_RESIZE(r1, 0x5609, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x8, 0x41}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}}, 0x800) 158.192525ms ago: executing program 3 (id=1858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xbe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0x0, 0x0, 0x20002f7}) socket$inet(0x2, 0x80001, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x7c168, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x0, 0x8005, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffefffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x13}}, {@nodioread_nolock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x21}}, {@nodelalloc}, {@nogrpid}, {@orlov}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x33, 0x36, 0x31, 0x31, 0x35, 0x36], 0x2d, [0x37, 0x61, 0x37, 0x61], 0x2d, [0x36, 0x34, 0x60, 0x37], 0x2d, [0x37, 0x36, 0x63, 0x63], 0x2d, [0x3a, 0x34, 0x36, 0x62, 0x38, 0x37, 0x62, 0x34]}}}]}, 0x4, 0xbb6, &(0x7f0000002380)="$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") r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) r5 = syz_open_dev$loop(0x0, 0x2, 0x2000) ioctl$BLKFINISHZONE(r5, 0x40101288, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f00000001c0)={r7, 0x4}, 0x8) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000480)={{[0xffffffff, 0x1, 0x3, 0x1]}, 0x0, 0x2, 0xea, 0x0, 0x0}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e2c00004e0bc2053287de12f74cabad930000b900000000000000"]) unshare(0x6020400) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) 105.470567ms ago: executing program 1 (id=1859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008000) 104.987217ms ago: executing program 1 (id=1860): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7800fddbdf2503000000050037000000000008", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x8085}, 0x24000840) 33.974019ms ago: executing program 1 (id=1861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYRES16=r0], 0xc4}}, 0x40) 0s ago: executing program 1 (id=1862): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) capset(&(0x7f0000a31000)={0x20080522, r3}, &(0x7f0000000080)={0xfffffffc, 0x4, 0xffffffff, 0x695, 0x1, 0xe}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00'}) (async) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) (async) capset(&(0x7f0000a31000)={0x20080522, r3}, &(0x7f0000000080)={0xfffffffc, 0x4, 0xffffffff, 0x695, 0x1, 0xe}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) open_by_handle_at(r4, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) (async) kernel console output (not intermixed with test programs): ink_rdma_socket permissive=1 [ 192.351139][ T7484] lo speed is unknown, defaulting to 1000 [ 192.358049][ T7484] lo speed is unknown, defaulting to 1000 [ 192.364130][ T7484] lo speed is unknown, defaulting to 1000 [ 192.411611][ T7484] infiniband lyz2: set active [ 192.416391][ T3079] lo speed is unknown, defaulting to 1000 [ 192.422230][ T7484] infiniband lyz2: added lo [ 192.439262][ T7484] RDS/IB: lyz2: added [ 192.444655][ T7484] smc: adding ib device lyz2 with port count 1 [ 192.451203][ T7484] smc: ib device lyz2 port 1 has no pnetid [ 192.457562][ T3079] lo speed is unknown, defaulting to 1000 [ 192.464077][ T7484] lo speed is unknown, defaulting to 1000 [ 192.499166][ T7484] lo speed is unknown, defaulting to 1000 [ 192.621854][ T7484] lo speed is unknown, defaulting to 1000 [ 192.736386][ T7484] lo speed is unknown, defaulting to 1000 [ 192.856391][ T7484] lo speed is unknown, defaulting to 1000 [ 193.073137][ T7511] loop5: detected capacity change from 0 to 512 [ 193.696313][ T7557] __nla_validate_parse: 11 callbacks suppressed [ 193.696333][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 194.025262][ T7580] loop5: detected capacity change from 0 to 1764 [ 194.249849][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1106'. [ 194.981896][ T7585] loop1: detected capacity change from 0 to 512 [ 195.099881][ T7585] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 195.140577][ T7585] EXT4-fs (loop1): orphan cleanup on readonly fs [ 195.166124][ T7585] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 195.212597][ T7585] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 195.233450][ T7585] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #16: comm syz.1.1108: corrupted xattr block 31: invalid header [ 195.267477][ T7585] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 195.268323][ T7585] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 195.277640][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 195.277676][ C1] EXT4-fs (loop1): initial error at time 1779120094: ext4_xattr_delete_inode:2972: inode 16 [ 195.277740][ C1] EXT4-fs (loop1): last error at time 1779120094: ext4_xattr_delete_inode:2972: inode 16 [ 195.347971][ T7587] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1109'. [ 195.393779][ T7585] EXT4-fs (loop1): 1 orphan inode deleted [ 195.413748][ T7585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.452665][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.707365][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 195.782962][ T28] audit: type=1400 audit(1779120095.244:954): avc: denied { write } for pid=7606 comm="syz.3.1117" path="socket:[20213]" dev="sockfs" ino=20213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.044748][ T7603] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1115'. [ 196.988398][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'. [ 197.379779][ T7626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.412311][ T7632] loop6: detected capacity change from 0 to 512 [ 197.505346][ T7632] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 197.547947][ T7632] EXT4-fs (loop6): orphan cleanup on readonly fs [ 197.568310][ T7632] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 197.599845][ T7632] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 197.621553][ T7632] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #16: comm syz.6.1124: corrupted xattr block 31: invalid header [ 197.638201][ T7632] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 197.639962][ T7632] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 197.649297][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 197.649331][ C1] EXT4-fs (loop6): initial error at time 1779120097: ext4_xattr_delete_inode:2972: inode 16 [ 197.649431][ C1] EXT4-fs (loop6): last error at time 1779120097: ext4_xattr_delete_inode:2972: inode 16 [ 197.699788][ T7632] EXT4-fs (loop6): 1 orphan inode deleted [ 197.714727][ T7632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.767384][ T6597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.876178][ T28] audit: type=1400 audit(1779120097.334:955): avc: denied { connect } for pid=7640 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.009873][ T7653] tipc: Enabling of bearer rejected, failed to enable media [ 198.021583][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 198.095674][ T7637] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1128'. [ 200.153659][ T7689] batadv_slave_0: Caught tx_queue_len zero misconfig [ 200.162689][ T28] audit: type=1400 audit(1779120099.624:956): avc: denied { getopt } for pid=7688 comm="syz.3.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 200.186618][ T7686] loop6: detected capacity change from 0 to 512 [ 200.300112][ T7686] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.1138: corrupted inode contents [ 200.312724][ T7686] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 200.313765][ T7686] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #16: comm syz.6.1138: mark_inode_dirty error [ 200.323551][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 200.323619][ C1] EXT4-fs (loop6): initial error at time 1779120099: ext4_do_update_inode:5690: inode 16 [ 200.323754][ C1] EXT4-fs (loop6): last error at time 1779120099: ext4_do_update_inode:5690: inode 16 [ 200.362633][ T7686] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 200.364205][ T7686] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.1138: corrupted inode contents [ 200.386249][ T7686] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 200.389904][ T7686] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.1138: mark_inode_dirty error [ 200.411888][ T7686] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 200.413857][ T7686] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.1138: corrupted inode contents [ 200.435685][ T7686] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 200.436515][ T7686] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 200.455080][ T7686] loop6: lost filesystem error report for type 5 error -117 [ 200.456286][ T7686] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.1138: corrupted inode contents [ 200.476204][ T7686] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 200.477196][ T7686] EXT4-fs error (device loop6): ext4_truncate:4690: inode #16: comm syz.6.1138: mark_inode_dirty error [ 200.498436][ T7686] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 200.502346][ T7686] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 200.521431][ T7686] loop6: lost filesystem error report for type 5 error -117 [ 200.524660][ T7686] EXT4-fs (loop6): 1 truncate cleaned up [ 200.545561][ T7686] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.559769][ T7686] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.705236][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'. [ 200.759693][ T49] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 200.896756][ T49] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 200.932165][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 200.967296][ T7690] loop5: detected capacity change from 0 to 4096 [ 201.012616][ T7690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.686517][ T28] audit: type=1400 audit(1779120101.144:957): avc: denied { write } for pid=7678 comm="syz.5.1140" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.710707][ T28] audit: type=1400 audit(1779120101.174:958): avc: denied { ioctl } for pid=7704 comm="syz.4.1146" path="socket:[20752]" dev="sockfs" ino=20752 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 201.742853][ T28] audit: type=1400 audit(1779120101.174:959): avc: denied { setopt } for pid=7704 comm="syz.4.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 201.781476][ T6597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.833606][ T28] audit: type=1400 audit(1779120101.284:960): avc: denied { write } for pid=7678 comm="syz.5.1140" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.067752][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.819507][ T7723] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1151'. [ 202.978680][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 203.092439][ T7760] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 203.207694][ T7766] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 203.209869][ T7767] loop1: detected capacity change from 0 to 512 [ 203.257950][ T7767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.280620][ T7771] FAULT_INJECTION: forcing a failure. [ 203.280620][ T7771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.294144][ T7771] CPU: 1 UID: 0 PID: 7771 Comm: syz.6.1162 Not tainted syzkaller #0 PREEMPT(full) [ 203.294316][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.294375][ T7771] Call Trace: [ 203.294388][ T7771] [ 203.294397][ T7771] __dump_stack+0x1d/0x30 [ 203.294435][ T7771] dump_stack_lvl+0x95/0xd0 [ 203.294458][ T7771] dump_stack+0x15/0x1b [ 203.294542][ T7771] should_fail_ex+0x263/0x280 [ 203.294642][ T7771] should_fail+0xb/0x20 [ 203.294702][ T7771] should_fail_usercopy+0x1a/0x20 [ 203.294741][ T7771] fpu__restore_sig+0x12b/0xa60 [ 203.294772][ T7771] ? x86_task_fpu+0x36/0x60 [ 203.294797][ T7771] ? should_fail_ex+0xd9/0x280 [ 203.294856][ T7771] __ia32_sys_rt_sigreturn+0x29e/0x350 [ 203.294909][ T7771] x64_sys_call+0x2823/0x3020 [ 203.294980][ T7771] do_syscall_64+0x12c/0x3b0 [ 203.295061][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.295126][ T7771] RIP: 0033:0x7fe16eddce57 [ 203.295148][ T7771] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 203.295168][ T7771] RSP: 002b:00007fe16d837028 EFLAGS: 00000246 [ 203.295255][ T7771] RAX: 000000000000002d RBX: 00007fe16f055fa0 RCX: 00007fe16eddce59 [ 203.295271][ T7771] RDX: 0000000000000ff9 RSI: 00002000000022c0 RDI: 0000000000000003 [ 203.295286][ T7771] RBP: 00007fe16d837090 R08: 0000000000000000 R09: 0000000000000000 [ 203.295304][ T7771] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 203.295319][ T7771] R13: 00007fe16f056038 R14: 00007fe16f055fa0 R15: 00007fff5d5089e8 [ 203.295340][ T7771] [ 203.324445][ T7767] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.487231][ T7773] tipc: Started in network mode [ 203.494747][ T7773] tipc: Node identity f661a1c59a75, cluster identity 4711 [ 203.508707][ T7773] tipc: Enabled bearer , priority 0 [ 203.538620][ T28] audit: type=1400 audit(1779120103.004:961): avc: denied { write } for pid=7765 comm="syz.1.1160" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.600554][ T28] audit: type=1400 audit(1779120103.024:962): avc: denied { lock } for pid=7765 comm="syz.1.1160" path="/225/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 203.651276][ T7773] syzkaller0: entered promiscuous mode [ 203.666595][ T28] audit: type=1400 audit(1779120103.094:963): avc: denied { write } for pid=7765 comm="syz.1.1160" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.688970][ T7773] syzkaller0: entered allmulticast mode [ 203.696854][ T7773] tipc: Resetting bearer [ 203.815259][ T7789] loop5: detected capacity change from 0 to 512 [ 203.821546][ T7791] xt_hashlimit: size too large, truncated to 1048576 [ 203.860239][ T7789] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 203.881378][ T7789] EXT4-fs (loop5): orphan cleanup on readonly fs [ 203.900529][ T7789] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 203.941360][ T7789] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 203.960699][ T7789] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #16: comm syz.5.1168: corrupted xattr block 31: invalid header [ 203.988665][ T7789] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 203.989210][ T7789] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 203.998516][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 203.998554][ C0] EXT4-fs (loop5): initial error at time 1779120103: ext4_xattr_delete_inode:2972: inode 16 [ 203.998645][ C0] EXT4-fs (loop5): last error at time 1779120103: ext4_xattr_delete_inode:2972: inode 16 [ 204.034917][ T7789] EXT4-fs (loop5): 1 orphan inode deleted [ 204.042123][ T7789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 204.075899][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.093780][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.136906][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1171'. [ 204.216166][ T7772] tipc: Resetting bearer [ 204.345716][ T7772] tipc: Disabling bearer [ 204.554731][ T7810] loop5: detected capacity change from 0 to 512 [ 204.703668][ T7810] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1173: corrupted inode contents [ 204.716121][ T7810] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 204.717294][ T7810] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.1173: mark_inode_dirty error [ 204.738746][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 204.738934][ C1] EXT4-fs (loop5): initial error at time 1779120104: ext4_do_update_inode:5690: inode 16 [ 204.739136][ C1] EXT4-fs (loop5): last error at time 1779120104: ext4_do_update_inode:5690: inode 16 [ 204.766147][ T7810] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 204.770955][ T7810] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1173: corrupted inode contents [ 204.797681][ T7810] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1173: mark_inode_dirty error [ 204.811116][ T7810] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1173: corrupted inode contents [ 204.824684][ T7810] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 204.833685][ T7810] loop5: lost filesystem error report for type 5 error -117 [ 204.835115][ T7810] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1173: corrupted inode contents [ 204.856192][ T7810] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.1173: mark_inode_dirty error [ 204.868478][ T7810] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 204.877819][ T7810] loop5: lost filesystem error report for type 5 error -117 [ 204.886493][ T7810] EXT4-fs (loop5): 1 truncate cleaned up [ 204.908286][ T7810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.922224][ T7810] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.330761][ T4458] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 205.370435][ T7799] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1170'. [ 205.387963][ T4458] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 1 [ 205.487861][ T7828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1181'. [ 205.595236][ T7830] netlink: 'syz.6.1180': attribute type 9 has an invalid length. [ 205.830063][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1183'. [ 206.167107][ T28] audit: type=1400 audit(1779120105.624:964): avc: denied { write } for pid=7843 comm="syz.1.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.230416][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.637078][ T7855] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1188'. [ 207.934175][ T7867] hub 8-0:1.0: USB hub found [ 207.939199][ T7867] hub 8-0:1.0: 8 ports detected [ 207.953549][ T28] audit: type=1400 audit(1779120107.364:965): avc: denied { write } for pid=7864 comm="syz.6.1193" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 207.986450][ T7867] FAULT_INJECTION: forcing a failure. [ 207.986450][ T7867] name failslab, interval 1, probability 0, space 0, times 0 [ 207.999231][ T7867] CPU: 1 UID: 0 PID: 7867 Comm: syz.6.1193 Not tainted syzkaller #0 PREEMPT(full) [ 207.999281][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.999346][ T7867] Call Trace: [ 207.999352][ T7867] [ 207.999359][ T7867] __dump_stack+0x1d/0x30 [ 207.999382][ T7867] dump_stack_lvl+0x95/0xd0 [ 207.999467][ T7867] dump_stack+0x15/0x1b [ 207.999487][ T7867] should_fail_ex+0x263/0x280 [ 207.999546][ T7867] should_failslab+0x8c/0xb0 [ 207.999577][ T7867] __kmalloc_node_noprof+0xc8/0x550 [ 207.999610][ T7867] ? alloc_slab_obj_exts+0x8e/0x110 [ 207.999641][ T7867] alloc_slab_obj_exts+0x8e/0x110 [ 207.999747][ T7867] __memcg_slab_post_alloc_hook+0x43d/0x7d0 [ 207.999776][ T7867] __kvmalloc_node_noprof+0x41c/0x640 [ 207.999795][ T7867] ? traverse+0xa2/0x3a0 [ 207.999896][ T7867] traverse+0xa2/0x3a0 [ 207.999921][ T7867] ? merge_sched_in+0x5d4/0xbb0 [ 208.000000][ T7867] seq_read_iter+0x85f/0x940 [ 208.000078][ T7867] ? rb_next+0x5c/0x80 [ 208.000101][ T7867] ? _parse_integer_limit+0x170/0x190 [ 208.000177][ T7867] seq_read+0x279/0x2c0 [ 208.000206][ T7867] ? __pfx_seq_read+0x10/0x10 [ 208.000279][ T7867] proc_reg_read+0x128/0x1c0 [ 208.000311][ T7867] ? __pfx_proc_reg_read+0x10/0x10 [ 208.000421][ T7867] vfs_readv+0x432/0x6e0 [ 208.000447][ T7867] __x64_sys_preadv+0xfd/0x1c0 [ 208.000479][ T7867] x64_sys_call+0x2915/0x3020 [ 208.000503][ T7867] do_syscall_64+0x12c/0x3b0 [ 208.000568][ T7867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.000694][ T7867] RIP: 0033:0x7fe16eddce59 [ 208.000709][ T7867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.000729][ T7867] RSP: 002b:00007fe16d7f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 208.000748][ T7867] RAX: ffffffffffffffda RBX: 00007fe16f056180 RCX: 00007fe16eddce59 [ 208.000815][ T7867] RDX: 0000000000000001 RSI: 00002000000014c0 RDI: 000000000000000e [ 208.000847][ T7867] RBP: 00007fe16d7f5090 R08: 0000000000000000 R09: 0000000000000000 [ 208.000892][ T7867] R10: 0000000000000182 R11: 0000000000000246 R12: 0000000000000001 [ 208.000920][ T7867] R13: 00007fe16f056218 R14: 00007fe16f056180 R15: 00007fff5d5089e8 [ 208.000941][ T7867] [ 208.268758][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1195'. [ 208.282282][ T7873] FAULT_INJECTION: forcing a failure. [ 208.282282][ T7873] name failslab, interval 1, probability 0, space 0, times 0 [ 208.299782][ T7873] CPU: 0 UID: 0 PID: 7873 Comm: syz.1.1194 Not tainted syzkaller #0 PREEMPT(full) [ 208.299806][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.299818][ T7873] Call Trace: [ 208.299823][ T7873] [ 208.299830][ T7873] __dump_stack+0x1d/0x30 [ 208.299854][ T7873] dump_stack_lvl+0x95/0xd0 [ 208.299935][ T7873] dump_stack+0x15/0x1b [ 208.300005][ T7873] should_fail_ex+0x263/0x280 [ 208.300040][ T7873] should_failslab+0x8c/0xb0 [ 208.300070][ T7873] kmem_cache_alloc_noprof+0x66/0x3f0 [ 208.300127][ T7873] ? io_submit_one+0xcf/0x1350 [ 208.300161][ T7873] io_submit_one+0xcf/0x1350 [ 208.300276][ T7873] __se_sys_io_submit+0xfb/0x280 [ 208.300308][ T7873] __x64_sys_io_submit+0x43/0x50 [ 208.300331][ T7873] x64_sys_call+0x19d5/0x3020 [ 208.300357][ T7873] do_syscall_64+0x12c/0x3b0 [ 208.300411][ T7873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.300435][ T7873] RIP: 0033:0x7f3ca11ace59 [ 208.300448][ T7873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.300466][ T7873] RSP: 002b:00007f3c9fc07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 208.300486][ T7873] RAX: ffffffffffffffda RBX: 00007f3ca1425fa0 RCX: 00007f3ca11ace59 [ 208.300503][ T7873] RDX: 0000200000004540 RSI: 0000000000000001 RDI: 00007f3ca1f5e000 [ 208.300574][ T7873] RBP: 00007f3c9fc07090 R08: 0000000000000000 R09: 0000000000000000 [ 208.300590][ T7873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.300604][ T7873] R13: 00007f3ca1426038 R14: 00007f3ca1425fa0 R15: 00007ffe28948fa8 [ 208.300623][ T7873] [ 208.301098][ T7869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1195'. [ 208.455693][ T28] audit: type=1400 audit(1779120107.904:966): avc: denied { bind } for pid=7880 comm="syz.3.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.495126][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1197'. [ 209.161709][ T7893] loop1: detected capacity change from 0 to 512 [ 209.491127][ T28] audit: type=1400 audit(1779120108.194:967): avc: denied { setopt } for pid=7880 comm="syz.3.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.819470][ T7893] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1199: corrupted inode contents [ 209.833540][ T7893] fserror_report: 5 callbacks suppressed [ 209.833692][ T7893] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 209.857499][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 209.873127][ C1] EXT4-fs (loop1): initial error at time 1779120109: ext4_do_update_inode:5690: inode 16 [ 209.882977][ C1] EXT4-fs (loop1): last error at time 1779120109: ext4_do_update_inode:5690: inode 16 [ 209.981014][ T7893] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.1199: mark_inode_dirty error [ 209.993011][ T7893] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 209.994991][ T7893] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1199: corrupted inode contents [ 210.017068][ T7893] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 210.018049][ T7893] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1199: mark_inode_dirty error [ 210.039456][ T7893] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 210.040335][ T7893] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1199: corrupted inode contents [ 210.062395][ T7893] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 210.063068][ T7893] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 210.081469][ T7893] loop1: lost filesystem error report for type 5 error -117 [ 210.083030][ T7893] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1199: corrupted inode contents [ 210.103331][ T7893] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 210.106831][ T7893] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.1199: mark_inode_dirty error [ 210.127362][ T7893] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 210.128325][ T7893] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 210.147094][ T7893] loop1: lost filesystem error report for type 5 error -117 [ 210.149767][ T7893] EXT4-fs (loop1): 1 truncate cleaned up [ 210.168796][ T7893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.182537][ T7893] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.381361][ T28] audit: type=1400 audit(1779120109.844:968): avc: denied { map } for pid=7903 comm="syz.6.1203" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 210.409094][ T7905] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 210.466398][ T7905] vhci_hcd vhci_hcd.2: invalid port number 96 [ 210.472546][ T7905] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 210.497690][ T49] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 210.528293][ T49] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 210.576377][ T28] audit: type=1400 audit(1779120110.034:969): avc: denied { bind } for pid=7903 comm="syz.6.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 210.649984][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.197955][ T7923] loop1: detected capacity change from 0 to 512 [ 211.347047][ T7923] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1206: corrupted inode contents [ 211.359667][ T7923] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 211.360762][ T7923] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.1206: mark_inode_dirty error [ 211.370417][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 211.370448][ C0] EXT4-fs (loop1): initial error at time 1779120110: ext4_do_update_inode:5690: inode 16 [ 211.370756][ C0] EXT4-fs (loop1): last error at time 1779120110: ext4_do_update_inode:5690: inode 16 [ 211.409669][ T7923] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 211.413987][ T7923] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1206: corrupted inode contents [ 211.435869][ T7923] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 211.436995][ T7923] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1206: mark_inode_dirty error [ 211.459218][ T7923] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1206: corrupted inode contents [ 211.472533][ T7923] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 211.482165][ T7923] loop1: lost filesystem error report for type 5 error -117 [ 211.483612][ T7923] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1206: corrupted inode contents [ 211.504862][ T7923] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.1206: mark_inode_dirty error [ 211.521232][ T7923] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 211.530729][ T7923] loop1: lost filesystem error report for type 5 error -117 [ 211.535665][ T7923] EXT4-fs (loop1): 1 truncate cleaned up [ 211.558001][ T7923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.572132][ T7923] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.638950][ T4452] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 211.734660][ T4452] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 1 [ 212.196972][ T7934] netlink: 'syz.6.1208': attribute type 9 has an invalid length. [ 212.226780][ T28] audit: type=1400 audit(1779120111.684:970): avc: denied { write } for pid=7933 comm="syz.3.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 212.267584][ T28] audit: type=1400 audit(1779120111.714:971): avc: denied { read } for pid=7933 comm="syz.3.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 212.537976][ T7940] loop5: detected capacity change from 0 to 4096 [ 212.551117][ T7940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.706542][ T28] audit: type=1400 audit(1779120112.034:972): avc: denied { write } for pid=7939 comm="syz.5.1212" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.819718][ T28] audit: type=1400 audit(1779120112.164:973): avc: denied { write } for pid=7939 comm="syz.5.1212" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.843018][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.897685][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.122343][ T7961] loop5: detected capacity change from 0 to 512 [ 213.135243][ T7961] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 213.146697][ T7961] EXT4-fs (loop5): orphan cleanup on readonly fs [ 213.155368][ T7961] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 213.170979][ T7961] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 213.178517][ T7961] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #16: comm syz.5.1219: corrupted xattr block 31: invalid header [ 213.192535][ T7961] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 213.201674][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 213.201727][ C0] EXT4-fs (loop5): initial error at time 1779120112: ext4_xattr_delete_inode:2972: inode 16 [ 213.201858][ C0] EXT4-fs (loop5): last error at time 1779120112: ext4_xattr_delete_inode:2972: inode 16 [ 213.228887][ T7961] EXT4-fs (loop5): 1 orphan inode deleted [ 213.235781][ T7961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.279086][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.422504][ T7971] IPVS: persistence engine module ip_vs_pe_€ not found [ 213.507719][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 213.613781][ T7976] loop5: detected capacity change from 0 to 512 [ 213.670924][ T28] audit: type=1326 audit(1779120113.094:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7974 comm="syz.3.1224" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abc62ce59 code=0x7fc00000 [ 213.801976][ T7976] EXT4-fs (loop5): 1 truncate cleaned up [ 213.808689][ T7976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.903034][ T7980] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1223: bg 0: block 465: padding at end of block bitmap is not set [ 213.917807][ T7980] EXT4-fs (loop5): Remounting filesystem read-only [ 214.357008][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.637669][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 214.637696][ T28] audit: type=1400 audit(1779120114.054:980): avc: denied { write } for pid=7992 comm="syz.4.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.730003][ T8006] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1232'. [ 214.756624][ T28] audit: type=1400 audit(1779120114.214:981): avc: denied { watch watch_reads } for pid=8005 comm="syz.5.1232" path="/108" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 218.007607][ T28] audit: type=1400 audit(1779120117.394:982): avc: denied { create } for pid=8036 comm="syz.3.1243" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.050049][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1246'. [ 218.087105][ T8045] loop1: detected capacity change from 0 to 256 [ 219.137519][ T28] audit: type=1400 audit(1779120117.404:983): avc: denied { write } for pid=8036 comm="syz.3.1243" name="file0" dev="tmpfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.160141][ T28] audit: type=1400 audit(1779120117.404:984): avc: denied { open } for pid=8036 comm="syz.3.1243" path="/257/file0" dev="tmpfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.183324][ T28] audit: type=1400 audit(1779120117.594:985): avc: denied { unlink } for pid=3303 comm="syz-executor" name="file0" dev="tmpfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.498461][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'. [ 219.537771][ T8063] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1249'. [ 219.604582][ T8066] FAULT_INJECTION: forcing a failure. [ 219.604582][ T8066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.635253][ T8066] CPU: 0 UID: 0 PID: 8066 Comm: syz.5.1253 Not tainted syzkaller #0 PREEMPT(full) [ 219.635365][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.635381][ T8066] Call Trace: [ 219.635388][ T8066] [ 219.635396][ T8066] __dump_stack+0x1d/0x30 [ 219.635468][ T8066] dump_stack_lvl+0x95/0xd0 [ 219.635491][ T8066] dump_stack+0x15/0x1b [ 219.635514][ T8066] should_fail_ex+0x263/0x280 [ 219.635548][ T8066] should_fail+0xb/0x20 [ 219.635658][ T8066] should_fail_usercopy+0x1a/0x20 [ 219.635693][ T8066] _copy_from_iter+0x21c/0xea0 [ 219.635735][ T8066] ? kmem_cache_alloc_node_noprof+0x20a/0x450 [ 219.635770][ T8066] ? __alloc_skb+0x362/0x690 [ 219.635838][ T8066] ? __alloc_skb+0x4f6/0x690 [ 219.635866][ T8066] skb_copy_datagram_from_iter+0xb2/0x480 [ 219.635956][ T8066] ? __netdev_alloc_frag_align+0x94/0xe0 [ 219.636068][ T8066] tun_get_user+0x93e/0x27e0 [ 219.636110][ T8066] ? ref_tracker_alloc+0x1eb/0x2f0 [ 219.636147][ T8066] tun_chr_write_iter+0x15e/0x210 [ 219.636214][ T8066] do_iter_readv_writev+0x4fd/0x5a0 [ 219.636253][ T8066] vfs_writev+0x2e1/0x900 [ 219.636286][ T8066] do_writev+0xe9/0x210 [ 219.636307][ T8066] __x64_sys_writev+0x45/0x50 [ 219.636365][ T8066] x64_sys_call+0x1c0c/0x3020 [ 219.636393][ T8066] do_syscall_64+0x12c/0x3b0 [ 219.636445][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.636467][ T8066] RIP: 0033:0x7fe8391fce59 [ 219.636515][ T8066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.636536][ T8066] RSP: 002b:00007fe837c4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 219.636561][ T8066] RAX: ffffffffffffffda RBX: 00007fe839475fa0 RCX: 00007fe8391fce59 [ 219.636578][ T8066] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000003 [ 219.636594][ T8066] RBP: 00007fe837c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.636610][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.636697][ T8066] R13: 00007fe839476038 R14: 00007fe839475fa0 R15: 00007ffd287ac7d8 [ 219.636727][ T8066] [ 219.868099][ T28] audit: type=1400 audit(1779120119.334:986): avc: denied { connect } for pid=8067 comm="syz.6.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 220.035717][ T28] audit: type=1400 audit(1779120119.494:987): avc: denied { getopt } for pid=8078 comm="syz.5.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 220.067282][ T28] audit: type=1326 audit(1779120119.524:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.1.1260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca11ace59 code=0x7ffc0000 [ 220.109038][ T28] audit: type=1326 audit(1779120119.524:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.1.1260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca11ace59 code=0x7ffc0000 [ 220.161183][ T8084] loop5: detected capacity change from 0 to 512 [ 220.168427][ T28] audit: type=1326 audit(1779120119.554:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.1.1260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca11ace59 code=0x7ffc0000 [ 220.236156][ T28] audit: type=1326 audit(1779120119.554:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.1.1260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca11ace59 code=0x7ffc0000 [ 220.265889][ T28] audit: type=1326 audit(1779120119.554:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.1.1260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ca116d68e code=0x7ffc0000 [ 220.280168][ T8086] audit: audit_backlog=65 > audit_backlog_limit=64 [ 220.296367][ T28] audit: type=1326 audit(1779120119.554:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.1.1260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ca116d68e code=0x7ffc0000 [ 220.312344][ T8086] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 220.362774][ T8090] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 220.479377][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1268'. [ 220.492346][ T8104] loop6: detected capacity change from 0 to 128 [ 220.520253][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1265'. [ 220.625550][ T8108] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1269'. [ 220.653671][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'. [ 220.892395][ T8113] loop5: detected capacity change from 0 to 512 [ 220.903305][ T8113] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 220.911919][ T8113] EXT4-fs (loop5): orphan cleanup on readonly fs [ 220.920444][ T8113] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 220.935457][ T8113] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 220.942766][ T8113] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #16: comm syz.5.1271: corrupted xattr block 31: invalid header [ 220.956891][ T8113] fserror_report: 5 callbacks suppressed [ 220.956916][ T8113] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 220.963649][ T8113] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 220.972939][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 220.972973][ C1] EXT4-fs (loop5): initial error at time 1779120120: ext4_xattr_delete_inode:2972: inode 16 [ 220.973069][ C1] EXT4-fs (loop5): last error at time 1779120120: ext4_xattr_delete_inode:2972: inode 16 [ 221.009148][ T8113] EXT4-fs (loop5): 1 orphan inode deleted [ 221.015897][ T8113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.041650][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.292098][ T8119] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 221.355022][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'. [ 221.952733][ T8142] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1282'. [ 222.292274][ T8151] loop1: detected capacity change from 0 to 128 [ 222.330904][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'. [ 222.477668][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 222.556199][ T8156] lo speed is unknown, defaulting to 1000 [ 223.373236][ T8204] loop1: detected capacity change from 0 to 128 [ 223.426601][ T8205] FAULT_INJECTION: forcing a failure. [ 223.426601][ T8205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.439733][ T8205] CPU: 1 UID: 0 PID: 8205 Comm: syz.5.1307 Not tainted syzkaller #0 PREEMPT(full) [ 223.439765][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.439780][ T8205] Call Trace: [ 223.439788][ T8205] [ 223.439797][ T8205] __dump_stack+0x1d/0x30 [ 223.439828][ T8205] dump_stack_lvl+0x95/0xd0 [ 223.439850][ T8205] dump_stack+0x15/0x1b [ 223.439874][ T8205] should_fail_ex+0x263/0x280 [ 223.439978][ T8205] should_fail+0xb/0x20 [ 223.440066][ T8205] should_fail_usercopy+0x1a/0x20 [ 223.440095][ T8205] _copy_from_user+0x1c/0xb0 [ 223.440179][ T8205] proc_ioctl_default+0x43/0xa0 [ 223.440237][ T8205] usbdev_ioctl+0xe8d/0x1750 [ 223.440334][ T8205] ? __pfx_usbdev_ioctl+0x10/0x10 [ 223.440358][ T8205] __se_sys_ioctl+0xce/0x140 [ 223.440461][ T8205] __x64_sys_ioctl+0x43/0x50 [ 223.440503][ T8205] x64_sys_call+0x1563/0x3020 [ 223.440547][ T8205] do_syscall_64+0x12c/0x3b0 [ 223.440580][ T8205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.440602][ T8205] RIP: 0033:0x7fe8391fce59 [ 223.440691][ T8205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.440711][ T8205] RSP: 002b:00007fe837c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.440731][ T8205] RAX: ffffffffffffffda RBX: 00007fe839476180 RCX: 00007fe8391fce59 [ 223.440809][ T8205] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 000000000000000c [ 223.440823][ T8205] RBP: 00007fe837c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 223.440836][ T8205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.440870][ T8205] R13: 00007fe839476218 R14: 00007fe839476180 R15: 00007ffd287ac7d8 [ 223.440967][ T8205] [ 223.898842][ T8210] hub 8-0:1.0: USB hub found [ 223.903747][ T8210] hub 8-0:1.0: 8 ports detected [ 224.416289][ T8228] program syz.1.1317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.497244][ T8232] loop1: detected capacity change from 0 to 1024 [ 224.518501][ T8232] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 224.526717][ T8232] System zones: 0-1, 3-8 [ 224.532098][ T8232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 224.544360][ T8232] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.592599][ T8237] __nla_validate_parse: 5 callbacks suppressed [ 224.592635][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1320'. [ 224.718625][ T49] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 224.749750][ T49] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 224.762375][ T49] EXT4-fs (loop1): This should not happen!! Data will be lost [ 224.762375][ T49] [ 224.772599][ T3301] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 224.784401][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 224.802199][ T8250] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 224.872259][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.879540][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.013104][ T8256] bond1: left allmulticast mode [ 225.019619][ T8256] ip6gretap1: left allmulticast mode [ 225.030490][ T8256] bond1: left promiscuous mode [ 225.044761][ T8256] ip6gretap1: left promiscuous mode [ 225.062464][ T254] lo speed is unknown, defaulting to 1000 [ 225.068612][ T4452] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.079891][ T254] lyz2: Port: 1 Link DOWN [ 225.087605][ T4452] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.100652][ T4452] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.119116][ T254] lo speed is unknown, defaulting to 1000 [ 225.119125][ T4452] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.135688][ T8262] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1332'. [ 225.229630][ T8260] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1331'. [ 225.767005][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1344'. [ 225.789088][ T8291] tipc: Enabled bearer , priority 0 [ 225.820097][ T8291] syzkaller0: entered promiscuous mode [ 225.825746][ T8291] syzkaller0: entered allmulticast mode [ 225.832903][ T8291] tipc: Resetting bearer [ 225.858098][ T8290] tipc: Resetting bearer [ 225.874806][ T8290] tipc: Disabling bearer [ 225.890162][ T28] kauditd_printk_skb: 737 callbacks suppressed [ 225.890176][ T28] audit: type=1326 audit(1779120125.354:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.6.1344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16eddce59 code=0x7fc00000 [ 225.943458][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1345'. [ 226.029413][ T8298] can0: slcan on ttyS3. [ 226.061427][ T28] audit: type=1326 audit(1779120125.524:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8295 comm="syz.5.1345" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8391fce59 code=0x7fc00000 [ 226.097631][ T8298] can0 (unregistered): slcan off ttyS3. [ 226.137308][ T28] audit: type=1400 audit(1779120125.594:1732): avc: denied { write } for pid=8301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.198886][ T28] audit: type=1400 audit(1779120125.664:1733): avc: denied { write } for pid=8318 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.285118][ T28] audit: type=1400 audit(1779120125.744:1734): avc: denied { getopt } for pid=8329 comm="syz.4.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 226.340052][ T8328] SET target dimension over the limit! [ 226.392713][ T28] audit: type=1400 audit(1779120125.854:1735): avc: denied { write } for pid=8325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.417436][ T8335] loop1: detected capacity change from 0 to 2048 [ 226.425931][ T8347] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1353'. [ 226.489099][ T8335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.567983][ T8335] EXT4-fs error (device loop1): ext4_ext_precache:648: inode #2: comm syz.1.1347: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 226.586186][ T28] audit: type=1400 audit(1779120126.044:1736): avc: denied { write } for pid=8351 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.610240][ T28] audit: type=1326 audit(1779120126.044:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.6.1344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe16eddce59 code=0x7fc00000 [ 226.727666][ T8353] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1355'. [ 226.820561][ T28] audit: type=1326 audit(1779120126.234:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8295 comm="syz.5.1345" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe8391fce59 code=0x7fc00000 [ 227.023665][ T28] audit: type=1326 audit(1779120126.234:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8295 comm="syz.5.1345" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8391fce59 code=0x7fc00000 [ 227.084891][ T8356] tipc: Enabled bearer , priority 0 [ 227.214337][ T8364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1358'. [ 227.234881][ T8356] syzkaller0: entered promiscuous mode [ 227.245605][ T8356] syzkaller0: entered allmulticast mode [ 227.259777][ T8356] tipc: Resetting bearer [ 227.267678][ T4454] tipc: Resetting bearer [ 227.323794][ T8355] tipc: Resetting bearer [ 227.345328][ T8355] tipc: Disabling bearer [ 227.469253][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1361'. [ 227.837663][ T8364] lo speed is unknown, defaulting to 1000 [ 227.894667][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.014186][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 228.104962][ T8389] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 228.105571][ T8387] loop6: detected capacity change from 0 to 512 [ 228.169116][ T8387] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 228.332831][ T8387] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.1367: corrupted xattr entries [ 228.360865][ T8387] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 228.362962][ T8387] EXT4-fs (loop6): 1 truncate cleaned up [ 228.372271][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 228.372292][ C0] EXT4-fs (loop6): initial error at time 1779120127: xattr_find_entry:337: inode 15 [ 228.372316][ C0] EXT4-fs (loop6): last error at time 1779120127: xattr_find_entry:337: inode 15 [ 228.415081][ T8387] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.705596][ T8407] tipc: Enabled bearer , priority 0 [ 228.793361][ T8407] syzkaller0: entered promiscuous mode [ 228.799578][ T8407] syzkaller0: entered allmulticast mode [ 228.807357][ T8407] tipc: Resetting bearer [ 228.948939][ T6597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.958232][ T8416] bond0: (slave bond_slave_0): Releasing backup interface [ 228.983207][ T8417] program syz.1.1374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.029179][ T8419] netlink: zone id is out of range [ 229.040003][ T8419] netlink: zone id is out of range [ 229.048658][ T8419] netlink: zone id is out of range [ 229.058025][ T8419] netlink: zone id is out of range [ 229.071650][ T8416] bond0: (slave bond_slave_1): Releasing backup interface [ 229.125628][ T8419] netlink: set zone limit has 8 unknown bytes [ 229.142167][ T8416] team0: Port device team_slave_0 removed [ 229.189861][ T8416] team0: Port device team_slave_1 removed [ 229.199086][ T8416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.207800][ T8416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.257149][ T8416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.278302][ T8416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.294240][ T8416] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 229.330049][ T4449] tipc: Resetting bearer [ 229.612560][ T8404] tipc: Resetting bearer [ 229.632305][ T8404] tipc: Disabling bearer [ 230.837939][ T8451] __nla_validate_parse: 4 callbacks suppressed [ 230.837959][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1383'. [ 230.905078][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1384'. [ 231.360342][ T8462] lo speed is unknown, defaulting to 1000 [ 231.688049][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 231.688065][ T28] audit: type=1326 audit(1779120131.154:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.5.1383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8391fce59 code=0x7fc00000 [ 232.059834][ T8470] tipc: Enabled bearer , priority 0 [ 232.185510][ T8470] syzkaller0: entered promiscuous mode [ 232.204754][ T8470] syzkaller0: entered allmulticast mode [ 232.227407][ T8470] tipc: Resetting bearer [ 232.233969][ T8473] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 232.351489][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1395'. [ 232.418713][ T8488] loop5: detected capacity change from 0 to 1024 [ 232.440626][ T8488] EXT4-fs: Ignoring removed nobh option [ 232.460320][ T8488] EXT4-fs: Ignoring removed i_version option [ 232.473487][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1398'. [ 232.499438][ T8494] loop6: detected capacity change from 0 to 1024 [ 232.508468][ T8488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.520852][ T8494] EXT4-fs: Ignoring removed orlov option [ 232.541553][ T8494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.562712][ T28] audit: type=1400 audit(1779120132.024:1786): avc: denied { watch watch_reads } for pid=8492 comm="syz.6.1399" path="/124/file1" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.590239][ T6597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.599879][ T28] audit: type=1400 audit(1779120132.024:1787): avc: denied { write } for pid=8492 comm="syz.6.1399" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.623771][ T28] audit: type=1400 audit(1779120132.024:1788): avc: denied { setattr } for pid=8492 comm="syz.6.1399" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.672452][ T8488] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 232.689339][ T28] audit: type=1400 audit(1779120132.024:1789): avc: denied { write } for pid=8492 comm="syz.6.1399" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.714664][ T8488] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 232.726951][ T28] audit: type=1400 audit(1779120132.024:1790): avc: denied { write } for pid=8492 comm="syz.6.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 232.747416][ T8488] EXT4-fs (loop5): This should not happen!! Data will be lost [ 232.747416][ T8488] [ 232.757553][ T8488] EXT4-fs (loop5): Total free blocks count 0 [ 232.765744][ T8488] EXT4-fs (loop5): Free/Dirty block details [ 232.771925][ T28] audit: type=1400 audit(1779120132.094:1791): avc: denied { write } for pid=8487 comm="syz.5.1396" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.779060][ T8488] EXT4-fs (loop5): free_blocks=20480 [ 232.800143][ T8488] EXT4-fs (loop5): dirty_blocks=16 [ 232.805446][ T8488] EXT4-fs (loop5): Block reservation details [ 232.811700][ T8488] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 232.834131][ T5732] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 232.846669][ T8468] tipc: Resetting bearer [ 232.852852][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.874919][ T8468] tipc: Disabling bearer [ 232.928811][ T28] audit: type=1400 audit(1779120132.384:1792): avc: denied { create } for pid=8507 comm="syz.3.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 232.957075][ T8512] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 233.028420][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1407'. [ 233.333136][ T8540] tipc: Enabling of bearer rejected, failed to enable media [ 233.411382][ T8543] loop1: detected capacity change from 0 to 128 [ 233.806746][ T28] audit: type=1326 audit(1779120133.264:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.4.1398" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 233.833255][ T8541] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1411'. [ 234.290721][ T28] audit: type=1400 audit(1779120133.754:1794): avc: denied { create } for pid=8561 comm="syz.6.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 234.382863][ T8538] loop5: detected capacity change from 0 to 2048 [ 234.410223][ T8538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.422847][ T8538] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.435719][ T8538] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1413: bg 0: block 345: padding at end of block bitmap is not set [ 234.450287][ T8538] EXT4-fs (loop5): Remounting filesystem read-only [ 234.669687][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.765875][ T8575] loop5: detected capacity change from 0 to 764 [ 234.857276][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'. [ 235.449967][ T8594] ip6gre0: Caught tx_queue_len zero misconfig [ 235.460076][ T8594] netlink: 'syz.3.1431': attribute type 5 has an invalid length. [ 235.518097][ T8594] ip6tnl2: entered promiscuous mode [ 235.529800][ T8594] ip6tnl2: entered allmulticast mode [ 235.922644][ T8614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1438'. [ 235.941144][ T8606] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1434'. [ 236.353323][ T8622] loop5: detected capacity change from 0 to 512 [ 236.413056][ T8622] EXT4-fs (loop5): 1 truncate cleaned up [ 236.419996][ T8622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.498970][ T8624] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1440: bg 0: block 465: padding at end of block bitmap is not set [ 236.513614][ T8624] EXT4-fs (loop5): Remounting filesystem read-only [ 237.271806][ T8562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.361842][ T8627] loop6: detected capacity change from 0 to 512 [ 237.380778][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1444'. [ 237.395933][ T8627] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 237.398321][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.420664][ T8627] EXT4-fs (loop6): orphan cleanup on readonly fs [ 237.453198][ T8627] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 237.500279][ T8627] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 237.517126][ T8627] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #16: comm syz.6.1441: corrupted xattr block 31: invalid header [ 237.549988][ T8627] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 237.550422][ T8627] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 237.559729][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 237.559778][ C0] EXT4-fs (loop6): initial error at time 1779120137: ext4_xattr_delete_inode:2972: inode 16 [ 237.559862][ C0] EXT4-fs (loop6): last error at time 1779120137: ext4_xattr_delete_inode:2972: inode 16 [ 237.620864][ T8627] EXT4-fs (loop6): 1 orphan inode deleted [ 237.628597][ T8627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 237.669841][ T8647] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1450'. [ 237.680293][ T8647] netlink: zone id is out of range [ 237.685723][ T8647] netlink: zone id is out of range [ 237.691093][ T8647] netlink: zone id is out of range [ 237.692705][ T6597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.698486][ T8647] netlink: zone id is out of range [ 237.709556][ T8629] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1443'. [ 237.731069][ T8652] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.1451'. [ 237.740497][ T8652] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1451'. [ 237.745347][ T8653] Cannot find del_set index 0 as target [ 237.800028][ T8647] netlink: set zone limit has 8 unknown bytes [ 237.841271][ T8662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1455'. [ 237.992564][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 238.002595][ T8669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1457'. [ 238.073766][ T28] kauditd_printk_skb: 215 callbacks suppressed [ 238.073800][ T28] audit: type=1400 audit(1779120137.534:2010): avc: denied { create } for pid=8663 comm="syz.6.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 238.100379][ T28] audit: type=1400 audit(1779120137.564:2011): avc: denied { setopt } for pid=8663 comm="syz.6.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 238.292069][ T8682] loop6: detected capacity change from 0 to 512 [ 238.304527][ T8682] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 238.314911][ T8682] EXT4-fs (loop6): orphan cleanup on readonly fs [ 238.323657][ T8682] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 238.338804][ T8682] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 238.346053][ T8682] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #16: comm syz.6.1462: corrupted xattr block 31: invalid header [ 238.360060][ T8682] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 238.360476][ T8682] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 238.369749][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 238.369798][ C1] EXT4-fs (loop6): initial error at time 1779120137: ext4_xattr_delete_inode:2972: inode 16 [ 238.369896][ C1] EXT4-fs (loop6): last error at time 1779120137: ext4_xattr_delete_inode:2972: inode 16 [ 238.406617][ T8682] EXT4-fs (loop6): 1 orphan inode deleted [ 238.413294][ T8682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 238.437344][ T6597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.018953][ T28] audit: type=1400 audit(1779120139.474:2012): avc: denied { setopt } for pid=8720 comm="syz.6.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.071962][ T28] audit: type=1400 audit(1779120139.484:2013): avc: denied { getopt } for pid=8720 comm="syz.6.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.117245][ T28] audit: type=1400 audit(1779120139.484:2014): avc: denied { read } for pid=8720 comm="syz.6.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.233946][ T28] audit: type=1400 audit(1779120139.694:2015): avc: denied { bind } for pid=8727 comm="syz.4.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.627700][ T28] audit: type=1400 audit(1779120140.064:2016): avc: denied { relabelto } for pid=8731 comm="syz.4.1478" name="bus" dev="tmpfs" ino=1719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 240.627840][ T28] audit: type=1400 audit(1779120140.064:2017): avc: denied { associate } for pid=8731 comm="syz.4.1478" name="bus" dev="tmpfs" ino=1719 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 241.369173][ T8742] loop6: detected capacity change from 0 to 4096 [ 241.391290][ T8742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.404716][ T28] audit: type=1400 audit(1779120140.864:2018): avc: denied { write } for pid=8738 comm="syz.6.1480" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.449479][ T8745] __nla_validate_parse: 5 callbacks suppressed [ 241.449498][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1482'. [ 241.468331][ T28] audit: type=1400 audit(1779120140.894:2019): avc: denied { write } for pid=8738 comm="syz.6.1480" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.871328][ T8750] netlink: 'syz.4.1481': attribute type 1 has an invalid length. [ 241.891378][ T8750] netlink: 'syz.4.1481': attribute type 2 has an invalid length. [ 241.918407][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 242.115557][ T8756] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1484'. [ 242.285074][ T8761] loop5: detected capacity change from 0 to 128 [ 242.339177][ T8761] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.402319][ T8761] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 242.470284][ T5732] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.696354][ T6597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.106141][ T8771] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 243.154774][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'. [ 243.192386][ T8787] loop6: detected capacity change from 0 to 128 [ 243.443805][ T8798] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 243.453676][ T8798] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 244.167806][ T8810] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.1500'. [ 244.194491][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1500'. [ 244.360045][ T8815] loop6: detected capacity change from 0 to 128 [ 244.399451][ T8815] netlink: 340 bytes leftover after parsing attributes in process `syz.6.1501'. [ 245.144308][ T8819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1503'. [ 245.282413][ T8817] loop5: detected capacity change from 0 to 512 [ 245.535869][ T8817] EXT4-fs (loop5): 1 truncate cleaned up [ 245.542627][ T8817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.563059][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 245.563154][ T28] audit: type=1400 audit(1779120145.024:2026): avc: denied { write } for pid=8813 comm="syz.5.1502" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.652279][ T8832] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1502: bg 0: block 465: padding at end of block bitmap is not set [ 245.666778][ T28] audit: type=1400 audit(1779120145.024:2027): avc: denied { write } for pid=8813 comm="syz.5.1502" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.675027][ T8832] EXT4-fs (loop5): Remounting filesystem read-only [ 246.000503][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.054841][ T8839] loop5: detected capacity change from 0 to 512 [ 246.069834][ T8839] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 246.092424][ T8839] EXT4-fs (loop5): 1 truncate cleaned up [ 246.102921][ T8839] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.126743][ T28] audit: type=1326 audit(1779120145.584:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8838 comm="syz.5.1507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8391fce59 code=0x0 [ 246.235016][ T28] audit: type=1400 audit(1779120145.694:2029): avc: denied { write } for pid=8838 comm="syz.5.1507" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.399876][ T8837] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1508'. [ 246.442326][ T8850] loop6: detected capacity change from 0 to 512 [ 246.474348][ T8850] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 246.488217][ T8850] EXT4-fs (loop6): orphan cleanup on readonly fs [ 246.496951][ T8850] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 246.518171][ T8850] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 246.541663][ T8850] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #16: comm syz.6.1512: corrupted xattr block 31: invalid header [ 246.561685][ T8850] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 246.567530][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 246.583154][ C1] EXT4-fs (loop6): initial error at time 1779120146: ext4_xattr_delete_inode:2972: inode 16 [ 246.593304][ C1] EXT4-fs (loop6): last error at time 1779120146: ext4_xattr_delete_inode:2972: inode 16 [ 246.597048][ T8850] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 246.633433][ T8850] EXT4-fs (loop6): 1 orphan inode deleted [ 246.644796][ T8855] tipc: Enabled bearer , priority 0 [ 246.652927][ T8850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 246.696158][ T6597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.764807][ T8855] syzkaller0: entered promiscuous mode [ 246.774813][ T8855] syzkaller0: entered allmulticast mode [ 246.783976][ T8855] tipc: Resetting bearer [ 246.810381][ T8861] tipc: Enabled bearer , priority 0 [ 246.860181][ T8861] syzkaller0: entered promiscuous mode [ 246.865733][ T8861] syzkaller0: entered allmulticast mode [ 246.873234][ T8861] tipc: Resetting bearer [ 246.892230][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.440143][ T8854] tipc: Resetting bearer [ 247.455161][ T8854] tipc: Disabling bearer [ 247.487245][ T8873] lo speed is unknown, defaulting to 1000 [ 247.594353][ T8873] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1519'. [ 247.603980][ T8873] veth0_to_bond: entered promiscuous mode [ 247.612069][ T8860] tipc: Resetting bearer [ 247.632989][ T8860] tipc: Disabling bearer [ 247.685815][ T8884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1522'. [ 247.748137][ T8886] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1523'. [ 247.945675][ T8894] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1526'. [ 247.948319][ T8896] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1527'. [ 247.955561][ T8894] netlink: zone id is out of range [ 248.001813][ T8894] netlink: zone id is out of range [ 248.002179][ T8894] netlink: zone id is out of range [ 248.002821][ T8894] netlink: zone id is out of range [ 248.534868][ T28] audit: type=1400 audit(1779120147.994:2030): avc: denied { map } for pid=8900 comm="syz.3.1528" path="socket:[24251]" dev="sockfs" ino=24251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.534911][ T28] audit: type=1400 audit(1779120147.994:2031): avc: denied { read } for pid=8900 comm="syz.3.1528" path="socket:[24251]" dev="sockfs" ino=24251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.537241][ T8894] netlink: set zone limit has 8 unknown bytes [ 248.737348][ T8912] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1531'. [ 249.013768][ T8920] netlink: 340 bytes leftover after parsing attributes in process `syz.6.1534'. [ 249.520191][ T28] audit: type=1400 audit(1779120148.984:2032): avc: denied { ioctl } for pid=8923 comm="syz.6.1535" path="socket:[25093]" dev="sockfs" ino=25093 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.593248][ T8926] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1536'. [ 249.612496][ T8928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1537'. [ 249.626169][ T8926] loop6: detected capacity change from 0 to 512 [ 249.713584][ T8926] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 249.747926][ T8933] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1538'. [ 249.778831][ T8926] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.1536: corrupted xattr entries [ 249.830387][ T8926] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 249.832269][ T8926] EXT4-fs (loop6): 1 truncate cleaned up [ 249.841475][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 249.841498][ C1] EXT4-fs (loop6): initial error at time 1779120149: xattr_find_entry:337: inode 15 [ 249.841543][ C1] EXT4-fs (loop6): last error at time 1779120149: xattr_find_entry:337: inode 15 [ 249.995339][ T8926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.460050][ T6597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.884361][ T8984] loop5: detected capacity change from 0 to 128 [ 252.125315][ T8986] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 252.314930][ T8990] tipc: Enabled bearer , priority 0 [ 252.409175][ T8988] syzkaller0: entered promiscuous mode [ 252.409224][ T8988] syzkaller0: entered allmulticast mode [ 252.412210][ T8988] tipc: Resetting bearer [ 252.472034][ T8987] tipc: Resetting bearer [ 252.565661][ T8987] tipc: Disabling bearer [ 252.635305][ T9005] x_tables: duplicate underflow at hook 2 [ 252.645913][ T9006] x_tables: duplicate underflow at hook 2 [ 252.760959][ T9020] __nla_validate_parse: 11 callbacks suppressed [ 252.761031][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1570'. [ 252.816411][ T9023] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1571'. [ 252.848908][ T9023] loop5: detected capacity change from 0 to 512 [ 252.859730][ T9023] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.885564][ T9023] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.1571: corrupted xattr entries [ 252.902862][ T9023] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 252.904032][ T9023] EXT4-fs (loop5): 1 truncate cleaned up [ 252.913383][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 252.913407][ C1] EXT4-fs (loop5): initial error at time 1779120152: xattr_find_entry:337: inode 15 [ 252.913449][ C1] EXT4-fs (loop5): last error at time 1779120152: xattr_find_entry:337: inode 15 [ 252.917618][ T28] audit: type=1326 audit(1779120152.364:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.4.1570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 252.920140][ T9023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.945166][ T28] audit: type=1326 audit(1779120152.364:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.4.1570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 253.007917][ T28] audit: type=1326 audit(1779120152.384:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.4.1570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 253.033712][ T28] audit: type=1326 audit(1779120152.384:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.4.1570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 253.059457][ T28] audit: type=1326 audit(1779120152.384:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.4.1570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 253.069360][ T9029] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1572'. [ 253.085536][ T28] audit: type=1326 audit(1779120152.384:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.4.1570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 253.120211][ T28] audit: type=1326 audit(1779120152.384:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.4.1570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 253.145918][ T28] audit: type=1326 audit(1779120152.384:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.4.1570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 253.171610][ T28] audit: type=1326 audit(1779120152.384:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.4.1570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 253.209119][ T28] audit: type=1326 audit(1779120152.384:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.4.1570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 253.257322][ T9034] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1573'. [ 253.268443][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1574'. [ 253.284843][ T9036] tipc: Enabling of bearer rejected, failed to enable media [ 253.613330][ T3398] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 253.616401][ T9047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=9047 comm=syz.1.1579 [ 253.624265][ T3398] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 253.642254][ T3398] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 253.649971][ T3398] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 253.657675][ T3398] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 253.665281][ T3398] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 253.672949][ T3398] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 253.686649][ T3398] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 253.694170][ T3398] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 253.695996][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.704599][ T3398] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 253.728946][ T3398] hid-generic 00A0:0006:0003.000B: hidraw0: HID v0.05 Device [syz0] on syz0 [ 253.742031][ T9049] loop5: detected capacity change from 0 to 512 [ 253.784326][ T9050] fido_id[9050]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 253.936055][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1584'. [ 254.800842][ T9063] loop1: detected capacity change from 0 to 512 [ 254.962820][ T9063] EXT4-fs (loop1): 1 truncate cleaned up [ 254.969796][ T9063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.049476][ T9063] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1583: bg 0: block 465: padding at end of block bitmap is not set [ 255.064834][ T9063] EXT4-fs (loop1): Remounting filesystem read-only [ 255.107264][ T9070] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1586'. [ 255.308086][ T9082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1590'. [ 255.363795][ T9083] macvlan8: entered promiscuous mode [ 255.397320][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.679712][ T9099] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 255.942069][ T9104] tipc: Enabled bearer , priority 0 [ 255.962256][ T9104] syzkaller0: entered promiscuous mode [ 255.968014][ T9104] syzkaller0: entered allmulticast mode [ 255.974588][ T9104] tipc: Resetting bearer [ 256.017093][ T9106] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1598'. [ 256.047952][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1599'. [ 256.396497][ T9130] loop1: detected capacity change from 0 to 512 [ 256.922349][ T9103] tipc: Resetting bearer [ 256.972008][ T9140] loop1: detected capacity change from 0 to 512 [ 256.984144][ T9103] tipc: Disabling bearer [ 257.003411][ T9140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 257.028743][ T9141] loop5: detected capacity change from 0 to 512 [ 257.046071][ T9140] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.058322][ T9141] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 257.232552][ T9141] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.1612: corrupted xattr entries [ 257.265910][ T9141] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 257.266842][ T9141] EXT4-fs (loop5): 1 truncate cleaned up [ 257.276093][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 257.276115][ C0] EXT4-fs (loop5): initial error at time 1779120156: xattr_find_entry:337: inode 15 [ 257.276152][ C0] EXT4-fs (loop5): last error at time 1779120156: xattr_find_entry:337: inode 15 [ 257.344078][ T9151] capability: warning: `syz.1.1611' uses deprecated v2 capabilities in a way that may be insecure [ 257.693491][ T9141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.770789][ T9161] 9p: Bad value for 'rfdno' [ 257.778948][ T9158] x_tables: unsorted underflow at hook 3 [ 257.822185][ T9166] __nla_validate_parse: 6 callbacks suppressed [ 257.822306][ T9166] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1620'. [ 257.921999][ T9172] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 258.053922][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 258.084052][ T9182] tipc: New replicast peer: 0.0.0.0 [ 258.092170][ T9182] tipc: Enabled bearer , priority 10 [ 258.105343][ T9175] tipc: Enabled bearer , priority 0 [ 258.113834][ T9182] tipc: New replicast peer: 224.0.0.1 [ 258.175231][ T9175] syzkaller0: entered promiscuous mode [ 258.194965][ T9175] syzkaller0: entered allmulticast mode [ 258.208617][ T9175] tipc: Resetting bearer [ 258.218378][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 258.218402][ T28] audit: type=1400 audit(1779120157.684:2169): avc: denied { create } for pid=9184 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 258.273928][ T28] audit: type=1400 audit(1779120157.714:2170): avc: denied { sys_admin } for pid=9184 comm="syz.1.1627" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 258.324363][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1629'. [ 258.490895][ T28] audit: type=1326 audit(1779120157.954:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.1.1629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca11ace59 code=0x7fc00000 [ 258.516686][ T28] audit: type=1326 audit(1779120157.954:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.1.1629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3ca11ace59 code=0x7fc00000 [ 258.783923][ T9174] tipc: Resetting bearer [ 258.807996][ T9174] tipc: Disabling bearer [ 258.832239][ T28] audit: type=1400 audit(1779120158.294:2173): avc: denied { listen } for pid=9192 comm="syz.3.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 258.855994][ T28] audit: type=1400 audit(1779120158.314:2174): avc: denied { connect } for pid=9192 comm="syz.3.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 258.877364][ T28] audit: type=1400 audit(1779120158.314:2175): avc: denied { write } for pid=9192 comm="syz.3.1630" path="socket:[25886]" dev="sockfs" ino=25886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 258.901245][ T28] audit: type=1400 audit(1779120158.314:2176): avc: denied { accept } for pid=9192 comm="syz.3.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 258.959159][ T28] audit: type=1326 audit(1779120158.414:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.1.1629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca11ace59 code=0x7fc00000 [ 258.995034][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.022400][ T9196] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1632'. [ 259.117538][ T254] tipc: Node number set to 2631587317 [ 259.486356][ T9218] loop5: detected capacity change from 0 to 4096 [ 259.498343][ T9218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.532679][ T28] audit: type=1400 audit(1779120158.974:2178): avc: denied { write } for pid=9215 comm="syz.5.1639" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.713600][ T9225] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1642'. [ 259.901472][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1643'. [ 260.045946][ T9232] tipc: Enabled bearer , priority 0 [ 260.076163][ T9232] syzkaller0: entered promiscuous mode [ 260.082202][ T9232] syzkaller0: entered allmulticast mode [ 260.090347][ T9232] tipc: Resetting bearer [ 260.109763][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.123663][ T49] tipc: Resetting bearer [ 260.173273][ T9236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1647'. [ 260.225542][ T9246] loop5: detected capacity change from 0 to 1024 [ 260.597754][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1654'. [ 260.878299][ T9231] tipc: Resetting bearer [ 260.890372][ T9231] tipc: Disabling bearer [ 260.964482][ T9281] netlink: 'syz.6.1659': attribute type 1 has an invalid length. [ 260.978173][ T9281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.991187][ T9281] bond1: entered promiscuous mode [ 261.017858][ T9281] bond1: (slave dummy0): making interface the new active one [ 261.025493][ T9281] dummy0: entered promiscuous mode [ 261.036323][ T9281] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 261.080339][ T9281] bond1: left promiscuous mode [ 261.085165][ T9281] dummy0: left promiscuous mode [ 261.523663][ T9297] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.1662'. [ 261.553664][ T9297] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1662'. [ 261.732785][ T9304] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1665'. [ 262.353564][ T9315] tipc: Enabling of bearer rejected, failed to enable media [ 262.788353][ T9323] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 263.111899][ T9328] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1674'. [ 263.147369][ T9330] loop5: detected capacity change from 0 to 128 [ 263.161850][ T9330] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.178531][ T9330] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.217759][ T5732] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.319188][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1680'. [ 263.444543][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 263.444560][ T28] audit: type=1400 audit(1779120162.904:2197): avc: denied { name_connect } for pid=9346 comm="syz.5.1682" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 263.489373][ T9352] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.1683'. [ 263.506981][ T9352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1683'. [ 264.299149][ T9361] loop5: detected capacity change from 0 to 256 [ 264.675760][ T9363] tipc: Enabling of bearer rejected, failed to enable media [ 265.057289][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1691'. [ 265.265747][ T28] audit: type=1400 audit(1779120164.724:2198): avc: denied { read } for pid=9369 comm="syz.1.1690" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 265.304830][ T28] audit: type=1400 audit(1779120164.724:2199): avc: denied { open } for pid=9369 comm="syz.1.1690" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 265.340440][ T9384] smc: net device lo applied user defined pnetid SYZ2 [ 265.353862][ T9384] smc: net device lo erased user defined pnetid SYZ2 [ 265.376585][ T9384] 9p: Bad value for 'rfdno' [ 265.448868][ T9380] loop1: detected capacity change from 0 to 2048 [ 265.484539][ T9389] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1695'. [ 265.547106][ T9387] loop6: detected capacity change from 0 to 4096 [ 265.648259][ T9387] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.662369][ T28] audit: type=1400 audit(1779120165.134:2200): avc: denied { write } for pid=9385 comm="syz.6.1686" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.188737][ T28] audit: type=1400 audit(1779120165.474:2201): avc: denied { write } for pid=9385 comm="syz.6.1686" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.214465][ T6597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.417788][ T9406] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.1698'. [ 266.460502][ T9406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1698'. [ 266.563477][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1702'. [ 267.602375][ T9422] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 267.614779][ T9422] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 267.666201][ T9422] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 267.728383][ T9426] xt_ecn: cannot match TCP bits for non-tcp packets [ 267.737431][ T9426] tmpfs: Bad value for 'mpol' [ 267.743483][ T28] audit: type=1400 audit(1779120167.194:2202): avc: denied { accept } for pid=9414 comm="syz.5.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 267.979487][ T9427] loop6: detected capacity change from 0 to 4096 [ 267.989634][ T9427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.003413][ T28] audit: type=1400 audit(1779120167.474:2203): avc: denied { write } for pid=9415 comm="syz.6.1699" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.118033][ T9432] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1706'. [ 268.130793][ T28] audit: type=1400 audit(1779120167.534:2204): avc: denied { write } for pid=9415 comm="syz.6.1699" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.161052][ T9432] netlink: zone id is out of range [ 268.174558][ T9432] netlink: zone id is out of range [ 268.182891][ T28] audit: type=1326 audit(1779120167.554:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9424 comm="syz.3.1705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abc62ce59 code=0x7fc00000 [ 268.224081][ T9432] netlink: zone id is out of range [ 268.238314][ T28] audit: type=1326 audit(1779120167.554:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9424 comm="syz.3.1705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5abc62ce59 code=0x7fc00000 [ 268.264185][ T9432] netlink: zone id is out of range [ 268.294978][ T9432] netlink: set zone limit has 8 unknown bytes [ 268.303093][ T9435] tipc: Enabling of bearer rejected, failed to enable media [ 268.327616][ T6597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.430749][ T9439] loop6: detected capacity change from 0 to 1764 [ 268.450994][ T9439] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 268.461934][ T9439] bond2 (unregistering): Released all slaves [ 268.496438][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1708'. [ 268.571791][ T28] audit: type=1326 audit(1779120167.994:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9424 comm="syz.3.1705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abc62ce59 code=0x7fc00000 [ 268.636799][ T9446] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 268.815123][ T9452] FAULT_INJECTION: forcing a failure. [ 268.815123][ T9452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.840091][ T9452] CPU: 0 UID: 0 PID: 9452 Comm: syz.5.1711 Not tainted syzkaller #0 PREEMPT(full) [ 268.840127][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 268.840236][ T9452] Call Trace: [ 268.840244][ T9452] [ 268.840251][ T9452] __dump_stack+0x1d/0x30 [ 268.840276][ T9452] dump_stack_lvl+0x95/0xd0 [ 268.840297][ T9452] dump_stack+0x15/0x1b [ 268.840322][ T9452] should_fail_ex+0x263/0x280 [ 268.840396][ T9452] should_fail+0xb/0x20 [ 268.840502][ T9452] should_fail_usercopy+0x1a/0x20 [ 268.840542][ T9452] _copy_from_user+0x1c/0xb0 [ 268.840645][ T9452] ___sys_sendmsg+0xc1/0x1e0 [ 268.840694][ T9452] __x64_sys_sendmsg+0xd4/0x160 [ 268.840731][ T9452] x64_sys_call+0x194c/0x3020 [ 268.840880][ T9452] do_syscall_64+0x12c/0x3b0 [ 268.840913][ T9452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.840940][ T9452] RIP: 0033:0x7fe8391fce59 [ 268.840961][ T9452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.841065][ T9452] RSP: 002b:00007fe837c4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.841085][ T9452] RAX: ffffffffffffffda RBX: 00007fe839475fa0 RCX: 00007fe8391fce59 [ 268.841130][ T9452] RDX: 0000000000008000 RSI: 0000200000000340 RDI: 0000000000000003 [ 268.841142][ T9452] RBP: 00007fe837c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 268.841201][ T9452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.841218][ T9452] R13: 00007fe839476038 R14: 00007fe839475fa0 R15: 00007ffd287ac7d8 [ 268.841239][ T9452] [ 269.166461][ T28] audit: type=1400 audit(1779120168.624:2208): avc: denied { getopt } for pid=9459 comm="syz.4.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 269.200811][ T49] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.234786][ T49] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.254086][ T49] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.278017][ T49] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.376801][ T9466] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.1716'. [ 269.387887][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1716'. [ 269.465319][ T9467] loop5: detected capacity change from 0 to 512 [ 269.557938][ T9467] EXT4-fs (loop5): 1 truncate cleaned up [ 269.565324][ T9467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.587228][ T28] audit: type=1400 audit(1779120169.044:2209): avc: denied { write } for pid=9461 comm="syz.5.1715" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.763147][ T28] audit: type=1400 audit(1779120169.044:2210): avc: denied { write } for pid=9461 comm="syz.5.1715" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.240174][ T28] audit: type=1400 audit(1779120169.704:2211): avc: denied { read } for pid=9470 comm="syz.3.1717" lport=58488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 270.294851][ T9475] netlink: 'syz.3.1717': attribute type 21 has an invalid length. [ 270.414408][ T28] audit: type=1326 audit(1779120169.874:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.4.1719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 270.442868][ T28] audit: type=1326 audit(1779120169.904:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.4.1719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 270.497084][ T28] audit: type=1326 audit(1779120169.904:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.4.1719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 270.572492][ T28] audit: type=1326 audit(1779120169.904:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.4.1719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 270.648849][ T28] audit: type=1326 audit(1779120169.904:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.4.1719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c63ce59 code=0x7fc00000 [ 270.977535][ T9332] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 271.024402][ T9332] EXT4-fs (loop5): Remounting filesystem read-only [ 271.298316][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.441314][ T9487] loop5: detected capacity change from 0 to 512 [ 271.474994][ T9487] EXT4-fs: Ignoring removed bh option [ 271.576124][ T9487] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 271.593018][ T9487] EXT4-fs (loop5): 1 truncate cleaned up [ 271.612187][ T9491] tipc: Enabled bearer , priority 0 [ 271.641411][ T9487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.714721][ T9491] syzkaller0: entered promiscuous mode [ 271.720568][ T9491] syzkaller0: entered allmulticast mode [ 271.728391][ T9491] tipc: Resetting bearer [ 271.758779][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.175817][ T9512] netlink: 2076 bytes leftover after parsing attributes in process `syz.6.1729'. [ 272.348213][ T9490] tipc: Resetting bearer [ 272.368360][ T9490] tipc: Disabling bearer [ 272.918525][ T9526] loop5: detected capacity change from 0 to 764 [ 274.868138][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.705798][ T9562] netlink: 2076 bytes leftover after parsing attributes in process `syz.1.1745'. [ 276.518162][ T9573] loop1: detected capacity change from 0 to 512 [ 276.536383][ T9573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.549303][ T9573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 276.559491][ T9573] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.569871][ T9573] EXT4-fs (loop1): inodes count not valid: 2 vs 32 [ 276.749147][ T9575] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1752'. [ 276.886562][ T9586] loop6: detected capacity change from 0 to 4096 [ 276.920085][ T9586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.933831][ T28] kauditd_printk_skb: 2901 callbacks suppressed [ 276.933847][ T28] audit: type=1400 audit(1779120176.404:5118): avc: denied { write } for pid=9579 comm="syz.6.1754" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 276.988521][ T9591] loop1: detected capacity change from 0 to 764 [ 277.020408][ T9591] Symlink component flag not implemented [ 277.027241][ T9591] Symlink component flag not implemented [ 277.163818][ T9591] lo speed is unknown, defaulting to 1000 [ 277.192701][ T28] audit: type=1400 audit(2000000000.060:5119): avc: denied { write } for pid=9579 comm="syz.6.1754" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.272605][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1760'. [ 277.646801][ T6597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.674608][ T9601] bond2: entered allmulticast mode [ 277.712460][ T9610] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1762'. [ 277.823922][ T9618] netlink: 2076 bytes leftover after parsing attributes in process `syz.3.1763'. [ 278.086899][ T9620] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1766'. [ 278.222613][ T9623] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1767'. [ 278.246211][ T28] audit: type=1400 audit(2000000001.140:5120): avc: denied { execute } for pid=9626 comm="syz.5.1768" path="/217/file1" dev="tmpfs" ino=1188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 278.329878][ T9632] macvlan9: entered promiscuous mode [ 278.647174][ T9637] loop5: detected capacity change from 0 to 512 [ 278.675168][ T9637] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1771: corrupted inode contents [ 278.687137][ T9637] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 278.697521][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 278.713118][ C1] EXT4-fs (loop5): initial error at time 2000000001: ext4_do_update_inode:5690: inode 16 [ 278.723015][ C1] EXT4-fs (loop5): last error at time 2000000001: ext4_do_update_inode:5690: inode 16 [ 278.751766][ T9637] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.1771: mark_inode_dirty error [ 278.763310][ T9637] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 278.770733][ T9637] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1771: corrupted inode contents [ 278.791850][ T9637] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 278.792860][ T9637] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1771: mark_inode_dirty error [ 278.813274][ T9637] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 278.815958][ T9637] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1771: corrupted inode contents [ 278.837099][ T9637] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 278.837792][ T9637] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 278.855581][ T9637] loop5: lost filesystem error report for type 5 error -117 [ 278.856217][ T9637] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1771: corrupted inode contents [ 278.875431][ T9637] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 278.892788][ T9637] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.1771: mark_inode_dirty error [ 278.913066][ T9637] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 278.914315][ T9637] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 278.932392][ T9637] loop5: lost filesystem error report for type 5 error -117 [ 278.934780][ T9637] EXT4-fs (loop5): 1 truncate cleaned up [ 278.949502][ T9637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.962367][ T9637] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.280100][ T4458] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 279.299831][ T4458] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 1 [ 279.374241][ T9647] loop6: detected capacity change from 0 to 4096 [ 279.399783][ T9647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.553869][ T28] audit: type=1400 audit(2000000002.310:5121): avc: denied { write } for pid=9642 comm="syz.6.1772" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 279.583199][ T9649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1774'. [ 280.159031][ T6597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.200926][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1778'. [ 280.278452][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.326927][ T28] audit: type=1400 audit(2000000003.220:5122): avc: denied { create } for pid=9660 comm="syz.1.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 280.358302][ T28] audit: type=1400 audit(2000000003.250:5123): avc: denied { write } for pid=9660 comm="syz.1.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 280.379481][ T9661] netlink: 'syz.1.1780': attribute type 1 has an invalid length. [ 280.390073][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 280.830175][ T9683] __nla_validate_parse: 2 callbacks suppressed [ 280.830240][ T9683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1788'. [ 280.971809][ T9689] loop1: detected capacity change from 0 to 512 [ 280.984758][ T9689] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 280.994379][ T9689] EXT4-fs (loop1): orphan cleanup on readonly fs [ 281.003332][ T9689] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 281.019375][ T9689] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 281.029887][ T9689] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #16: comm syz.1.1791: corrupted xattr block 31: invalid header [ 281.044649][ T9689] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 281.045837][ T9689] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 281.055183][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 281.055225][ C1] EXT4-fs (loop1): initial error at time 2000000003: ext4_xattr_delete_inode:2972: inode 16 [ 281.055357][ C1] EXT4-fs (loop1): last error at time 2000000003: ext4_xattr_delete_inode:2972: inode 16 [ 281.144586][ T9694] loop5: detected capacity change from 0 to 512 [ 281.188813][ T9689] EXT4-fs (loop1): 1 orphan inode deleted [ 281.227424][ T9689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 281.235723][ T9694] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1789: corrupted inode contents [ 281.260185][ T9694] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 281.260943][ T9694] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.1789: mark_inode_dirty error [ 281.270210][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 281.270227][ C1] EXT4-fs (loop5): initial error at time 2000000004: ext4_do_update_inode:5690: inode 16 [ 281.270266][ C1] EXT4-fs (loop5): last error at time 2000000004: ext4_do_update_inode:5690: inode 16 [ 281.307498][ T9694] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 281.314810][ T9694] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1789: corrupted inode contents [ 281.336713][ T9694] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1789: mark_inode_dirty error [ 281.348480][ T9694] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1789: corrupted inode contents [ 281.360962][ T9694] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 281.369632][ T9694] loop5: lost filesystem error report for type 5 error -117 [ 281.370038][ T9694] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1789: corrupted inode contents [ 281.389687][ T9694] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.1789: mark_inode_dirty error [ 281.401312][ T9694] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 281.410363][ T9694] loop5: lost filesystem error report for type 5 error -117 [ 281.411420][ T9694] EXT4-fs (loop5): 1 truncate cleaned up [ 281.426456][ T9694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.439123][ T9694] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.598536][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.027776][ T4458] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 282.048353][ T4458] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 1 [ 282.315117][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1794'. [ 282.820522][ T5732] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.035791][ T9723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1800'. [ 283.080171][ T9726] netlink: 'syz.5.1799': attribute type 2 has an invalid length. [ 283.114655][ T28] audit: type=1400 audit(2000000006.010:5124): avc: denied { create } for pid=9720 comm="syz.5.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 283.136235][ T9730] loop1: detected capacity change from 0 to 256 [ 283.380393][ T9742] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.1806'. [ 283.389723][ T9742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1806'. [ 283.465686][ T9749] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1809'. [ 283.871584][ T28] audit: type=1400 audit(2000000006.770:5125): avc: denied { setattr } for pid=9757 comm="syz.6.1812" name="PACKET" dev="sockfs" ino=27885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 284.099394][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1814'. [ 284.306661][ T9773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1816'. [ 285.212526][ T28] audit: type=1326 audit(2000000008.110:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.3.1819" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5abc62ce59 code=0x0 [ 285.340495][ T28] audit: type=1326 audit(2000000008.220:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9786 comm="syz.5.1821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8391fce59 code=0x7ffc0000 [ 285.438993][ T28] audit: type=1326 audit(2000000008.230:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9786 comm="syz.5.1821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8391fce59 code=0x7ffc0000 [ 285.552888][ T28] audit: type=1326 audit(2000000008.230:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9786 comm="syz.5.1821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8391fce59 code=0x7ffc0000 [ 285.621526][ T28] audit: type=1326 audit(2000000008.230:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9786 comm="syz.5.1821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8391fce59 code=0x7ffc0000 [ 285.647373][ T28] audit: type=1326 audit(2000000008.230:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9786 comm="syz.5.1821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8391fce59 code=0x7ffc0000 [ 285.678821][ T9799] loop6: detected capacity change from 0 to 256 [ 285.755820][ T28] audit: type=1326 audit(2000000008.240:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9786 comm="syz.5.1821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8391bd68e code=0x7ffc0000 [ 285.791367][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1827'. [ 286.064007][ T9807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1828'. [ 286.086509][ T9811] netlink: 'syz.3.1830': attribute type 21 has an invalid length. [ 286.205649][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1836'. [ 286.691424][ T9837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1839'. [ 286.798860][ T9843] FAULT_INJECTION: forcing a failure. [ 286.798860][ T9843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.812161][ T9843] CPU: 0 UID: 0 PID: 9843 Comm: syz.1.1842 Not tainted syzkaller #0 PREEMPT(full) [ 286.812188][ T9843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.812202][ T9843] Call Trace: [ 286.812210][ T9843] [ 286.812217][ T9843] __dump_stack+0x1d/0x30 [ 286.812366][ T9843] dump_stack_lvl+0x95/0xd0 [ 286.812385][ T9843] dump_stack+0x15/0x1b [ 286.812402][ T9843] should_fail_ex+0x263/0x280 [ 286.812433][ T9843] should_fail+0xb/0x20 [ 286.812457][ T9843] should_fail_usercopy+0x1a/0x20 [ 286.812487][ T9843] _copy_from_user+0x1c/0xb0 [ 286.812552][ T9843] copy_from_sockptr+0x5e/0x90 [ 286.812727][ T9843] do_ipv6_setsockopt+0x1435/0x2130 [ 286.812753][ T9843] ? kstrtoull+0x111/0x140 [ 286.812778][ T9843] ? __rcu_read_unlock+0x4e/0x70 [ 286.812800][ T9843] ? avc_has_perm_noaudit+0xab/0x130 [ 286.812829][ T9843] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 286.812917][ T9843] ipv6_setsockopt+0x59/0x130 [ 286.812942][ T9843] tcp_setsockopt+0x98/0xb0 [ 286.812977][ T9843] sock_common_setsockopt+0x69/0x80 [ 286.813028][ T9843] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 286.813058][ T9843] __sys_setsockopt+0x184/0x200 [ 286.813080][ T9843] __x64_sys_setsockopt+0x64/0x80 [ 286.813161][ T9843] x64_sys_call+0x2327/0x3020 [ 286.813192][ T9843] do_syscall_64+0x12c/0x3b0 [ 286.813247][ T9843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.813288][ T9843] RIP: 0033:0x7f3ca11ace59 [ 286.813319][ T9843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.813335][ T9843] RSP: 002b:00007f3c9fc07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 286.813359][ T9843] RAX: ffffffffffffffda RBX: 00007f3ca1425fa0 RCX: 00007f3ca11ace59 [ 286.813485][ T9843] RDX: 000000000000001c RSI: 0000000000000029 RDI: 0000000000000003 [ 286.813502][ T9843] RBP: 00007f3c9fc07090 R08: 0000000000000014 R09: 0000000000000000 [ 286.813518][ T9843] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 286.813533][ T9843] R13: 00007f3ca1426038 R14: 00007f3ca1425fa0 R15: 00007ffe28948fa8 [ 286.813557][ T9843] [ 287.041128][ T9845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1843'. [ 287.440310][ T9867] loop1: detected capacity change from 0 to 512 [ 287.453251][ T9867] EXT4-fs (loop1): 1 truncate cleaned up [ 287.459662][ T9867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.511500][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 287.511520][ T28] audit: type=1400 audit(2000000010.370:5150): avc: denied { write } for pid=9848 comm="syz.1.1845" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.547100][ T9851] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1845: bg 0: block 465: padding at end of block bitmap is not set [ 287.563448][ T9851] EXT4-fs (loop1): Remounting filesystem read-only [ 287.570083][ T9851] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 287.583155][ T28] audit: type=1400 audit(2000000010.480:5151): avc: denied { read } for pid=2963 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 287.605507][ T28] audit: type=1400 audit(2000000010.480:5152): avc: denied { search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.627439][ T28] audit: type=1400 audit(2000000010.480:5153): avc: denied { write search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.649851][ T28] audit: type=1400 audit(2000000010.480:5154): avc: denied { add_name } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.674297][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1849'. [ 287.707196][ T28] audit: type=1400 audit(2000000010.480:5155): avc: denied { create } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.766546][ T28] audit: type=1400 audit(2000000010.480:5156): avc: denied { append open } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.789974][ T9880] loop6: detected capacity change from 0 to 256 [ 287.849907][ T28] audit: type=1400 audit(2000000010.480:5157): avc: denied { getattr } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.952750][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.035220][ T9892] loop1: detected capacity change from 0 to 256 [ 288.051600][ T9892] vfat: Bad value for 'shortname' [ 288.081888][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1856'. [ 288.149190][ T9896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.202623][ T9901] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 288.259626][ T9903] netlink: 'syz.3.1858': attribute type 21 has an invalid length. [ 288.287283][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'. [ 288.398795][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'. [ 288.450445][ T9914] ================================================================== [ 288.458584][ T9914] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace [ 288.465423][ T9914] [ 288.467770][ T9914] write to 0xffff888104e45700 of 8 bytes by task 9911 on cpu 0: [ 288.475426][ T9914] mas_wmb_replace+0x234/0x1760 [ 288.480325][ T9914] mas_wr_store_entry+0x54ff/0x5ad0 [ 288.485561][ T9914] mas_store_prealloc+0x43e/0x690 [ 288.490625][ T9914] vma_complete+0x3c7/0x850 [ 288.495163][ T9914] __split_vma+0x5db/0x640 [ 288.499628][ T9914] vma_modify+0xbee/0xca0 [ 288.504001][ T9914] vma_modify_flags+0x182/0x210 [ 288.508890][ T9914] mprotect_fixup+0x3a2/0x680 [ 288.513605][ T9914] do_mprotect_pkey+0x6ae/0x960 [ 288.518499][ T9914] __x64_sys_mprotect+0x48/0x60 [ 288.523387][ T9914] x64_sys_call+0x2768/0x3020 [ 288.528115][ T9914] do_syscall_64+0x12c/0x3b0 [ 288.532747][ T9914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.538670][ T9914] [ 288.541016][ T9914] read to 0xffff888104e45700 of 8 bytes by task 9914 on cpu 1: [ 288.548585][ T9914] mas_walk+0x176/0x370 [ 288.552793][ T9914] lock_vma_under_rcu+0xc9/0x210 [ 288.557784][ T9914] do_user_addr_fault+0x232/0x1050 [ 288.562959][ T9914] exc_page_fault+0x62/0xa0 [ 288.567497][ T9914] asm_exc_page_fault+0x26/0x30 [ 288.572366][ T9914] [ 288.574713][ T9914] value changed: 0xffff8881050f3d01 -> 0xffff888104e45700 [ 288.581848][ T9914] [ 288.584190][ T9914] Reported by Kernel Concurrency Sanitizer on: [ 288.590358][ T9914] CPU: 1 UID: 0 PID: 9914 Comm: syz.1.1862 Not tainted syzkaller #0 PREEMPT(full) [ 288.599666][ T9914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.609749][ T9914] ================================================================== [ 289.682975][ T9903] netlink: 'syz.3.1858': attribute type 3 has an invalid length. [ 289.691055][ T9903] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1858'. [ 289.704992][ T28] audit: type=1400 audit(2000000012.600:5158): avc: denied { name_bind } for pid=9902 comm="syz.3.1858" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 289.706545][ T9903] tmpfs: Unknown parameter 'n' [ 290.227756][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!