last executing test programs: 10.965880672s ago: executing program 3 (id=801): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mmap(&(0x7f0000b46000/0x1000)=nil, 0x1000, 0x0, 0x50, r0, 0x66960000) 10.755057305s ago: executing program 3 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007c40)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}, 0x3}, {{&(0x7f0000000900)=@caif, 0x80, 0x0}, 0x7}], 0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b000600000008000100"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800082, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0x191, &(0x7f00000002c0)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x40047211, &(0x7f00000000c0)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f00000017c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1}}]}}, &(0x7f0000001f00)={0x0, 0x0, 0xf, &(0x7f0000001880)=ANY=[@ANYBLOB="050f0f00810a100300000000000000"], 0x1, [{0x0, 0x0}]}) 7.305226641s ago: executing program 3 (id=818): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x5]}, 0xfffffffffffffffe, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x4, 0x81, 0x4, 0x8}, {0x8, 0x8, 0x90, 0xfff}, {0x0, 0x98, 0xd, 0x9}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100"], 0x10b8}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', &(0x7f0000000400), 0x4010, &(0x7f0000000500)=ANY=[]) sendmsg$kcm(r5, 0x0, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 6.872131925s ago: executing program 3 (id=820): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80001) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc00) lseek(r0, 0x9, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r3, 0x414, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) setresuid(0x0, 0xee00, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1, 0x2, 0x2, 0x7, 0x0, 0xd, 0x1200, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x1006, 0x8000, 0x1, 0x0, 0x6, 0x1000, 0x8, 0x0, 0x600, 0x0, 0xf3d2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xe) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x9) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 6.669185439s ago: executing program 0 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x108022, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 5.837426293s ago: executing program 3 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x108022, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 4.760295794s ago: executing program 4 (id=831): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004780)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.643327454s ago: executing program 0 (id=832): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80001) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc00) lseek(r0, 0x9, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) setresuid(0x0, 0xee00, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1, 0x2, 0x2, 0x7, 0x0, 0xd, 0x1200, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x1006, 0x8000, 0x1, 0x0, 0x6, 0x1000, 0x8, 0x0, 0x600, 0x0, 0xf3d2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xe) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x9) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 3.88035199s ago: executing program 1 (id=835): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x5, 0x5, 0x6, 0x20], 0x7, 0x1}, {0xffffffffffffffff, [0x56, 0x4, 0x0, 0x5e, 0x1], 0x0, 0x1}}}}, {{@ip={@remote, @multicast1, 0xffffffff, 0xffffff00, 'pimreg\x00', 'vlan0\x00', {}, {0xff}, 0x5c, 0x2, 0x4}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xe, 0x2, 0x2, 0x3ff, 0x7, 0x0, 0x800]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x7fff}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) read$rfkill(r5, &(0x7f00000000c0), 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c180}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = signalfd4(r6, &(0x7f0000000000)={[0x3]}, 0x8, 0x80000) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000050}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000001180)=ANY=[@ANYBLOB="500000000308010200000000000000000300000405000300840000003400048008000540fffffff70800064000000004080003"], 0x50}, 0x1, 0x0, 0x0, 0x448c4}, 0x4000) 3.804272897s ago: executing program 0 (id=836): r0 = add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000880)={0xa, 0x4e24, 0x9, @local, 0x7}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = io_uring_setup(0x1169, &(0x7f0000000240)={0x0, 0x5b60, 0x1, 0x0, 0x3aa}) io_uring_register$IORING_UNREGISTER_NAPI(r5, 0x1c, &(0x7f0000000180), 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x96}) 3.527552059s ago: executing program 4 (id=837): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18400000000000000000000000c3a0f8ff8c370000bb953ad18c3166d697ccdb7c8dabdfda2439cd0953f97e"], &(0x7f0000000000)='GPL\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) r3 = epoll_create(0x3ff) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0xa0000000, 0x1b54c8}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000440)={0x2000000}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000080)=""/29, &(0x7f0000000000)=0x1d) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22420}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000d00)={[{@mode={'mode', 0x3d, 0x3}}, {@dmode={'dmode', 0x3d, 0x7}}, {@overriderock}, {@unhide}, {@check_strict}, {@map_off}, {@check_strict}, {@showassoc}]}, 0x1, 0xa5a, &(0x7f0000001d00)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0x881bfd) 3.526315858s ago: executing program 1 (id=847): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mmap(&(0x7f0000b46000/0x1000)=nil, 0x1000, 0x0, 0x50, r0, 0x66960000) 3.447448364s ago: executing program 1 (id=839): r0 = socket(0x200000000000011, 0x2, 0xd) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8993, 0x0) bind$packet(r0, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0xfaa8, 0x401, 0x5, 0x8, 0x101}) r2 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x106) pwritev2(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x7800, 0x0, 0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) readv(r1, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)=""/199, 0x45}], 0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x7) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000900)={0x1d, 0x0, 0x1}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x130, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = syz_io_uring_setup(0x10b4, &(0x7f0000000040)={0x0, 0x1c6, 0x400, 0x5, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x28, 0x0, 0x0) 3.014903579s ago: executing program 4 (id=840): fremovexattr(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$caif_stream(0x25, 0x1, 0x1) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2100}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r7 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) io_uring_enter(r3, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) 2.918353572s ago: executing program 0 (id=841): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1c000, 0x9, 0x1b) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) fchdir(r2) symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r3 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) fsmount(0xffffffffffffffff, 0x0, 0x7c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x20000800) unshare(0x2000100) mmap(&(0x7f0000b46000/0x1000)=nil, 0x1000, 0x0, 0x50, r0, 0x66960000) io_uring_enter(r3, 0x2000413f, 0x20adde, 0x2, 0x0, 0x0) 2.73373101s ago: executing program 3 (id=842): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x108022, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.731573359s ago: executing program 4 (id=843): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x66, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x7, 0x7fffffff}}}}]}, 0x44}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x4c8800, 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) writev(r5, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x1}], 0x2) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) lseek(0xffffffffffffffff, 0x3, 0x0) getdents(0xffffffffffffffff, 0x0, 0x58) 2.56567593s ago: executing program 2 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.5645903s ago: executing program 1 (id=845): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r3, 0x81}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r4, 0x6, 0x2, 0x40006, 0x1, 0x400}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) r5 = epoll_create(0x5) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x10}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f00000000c0)={0xa}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r7, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) socket(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) 2.487700747s ago: executing program 1 (id=846): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r2, 0x40000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x2, 0x245, &(0x7f00000007c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x7) 2.314579826s ago: executing program 4 (id=848): perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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") writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmsg(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/64, 0x40}, 0x20) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = fsmount(0xffffffffffffffff, 0x1, 0x4) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f0000000240)=0x1, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYRES64, @ANYBLOB="f093312a802025a330a747dcd88216d0cbe20f3f23ed3fd47bb1eddc5a29f4b3ae85fa5cffffc47eced3198379feb99d0d291b434835d8deaa9d5752593436d329975498e952b706e53d7c4d949631011d9a8c9061f1dc7bdaa6a3c6654ca83564453efe2cc2894bbeb12c58eca15f63f8f9a8c123184be391af1f45239c3a02a43d468869a1347a52e5f5988246a9e80b1ab2b32ac0b2d4168828fc8487f8cf754a598b2dfc3a8bb005ab01b91e503e949d7182d4323dcc70e46c30f35eb081661f133e32956a0f4218022cf42f4a7494e34566b3afa004d4560c9abba6de72c5", @ANYBLOB="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"], 0x25, 0x361, &(0x7f0000001680)="$eJzs3T1onHUYAPDnvCSXBGsyCEVdTjdBShNx0CmhRAhm0Mr5uXjY1I/cWcjhQTrkcotSnBQXQScX6aBjwU0cRNwcXK0gVXGxm9DgK+/de993NhkuVvz9huPh+f+f+z/vB33fBvLPK43YuTAbF2/evBHz87mYWTu3FrkYcBBjvTc3Pg8A3OH+TJL4I2m7/ewPFjuRZz8A/He1nv+vneolCscovnL3NFoCAKbsiP//f3ps9tLU2gIApmjk+f/QwPDQj/lnIn+SzQEAU/Hsiy89tb4Vcb5YnI+ovlsv1UvxRG98/WK8EZXYjrOxFIcR7ReF9ttC+vnk5tbG2WLql+UopRX1UkS1US+13xTW8636QqzEUixn9dnbRvLlA589t7m1sdKqL0bEQaO1flRz9dJsLGbr/7gY27EaS3HvUH36sbm1sVrMvqBU7dQ3Ipox3zmItP8zsRTfvxqXohIXIq3t9b+/UiyeS7YG6utXC615AAAAAAAAAAAAAAAAAAAAAAAwDWeKXcvd/W+SaqP+zvnhCd3xQmt/n/Zwtj9Qs70/UFLo7M5zJT+8P9Dg/jz10kzc9a8eOQAAAAAAAAAAAAAAAAAAANw5antzUa5Utndre5d3+oNGX+atbz//eiE6QzNZ6Zv5XlVkyYHv6Uzs++Z8dJdIuuVJfmBOFuQjOpMPylevdTvun1PoHsVIeRoURoZyWU/lSuXUgz9/PK7qrzQ4aGXyMXJaBoNctn7fUPWeNDEfEYeTqiYHq5OGsiWuJ0kyqXz/o26m01YtchEzcew2jhB8c+P1+x6tnX6slfkq2/Th4UeWnr/+4ae/7ZQr0Wy3UKnM7dYOk0lXJ7sWaSbtdXStfN/9k8vOc27MnTA+aPYyzd3aXjn/w+8v3P/+d0OT8yP3TxxEXE76M29PXuuL4cxcO8hFLHdOwj+1Ojvm5h8fvHxr4IzdrmphIHP6k7Xytf2ffj3qVe77R8JGHQAAAAAAAAAAAAAAAAAAcCJ6v/R7nKrHn5leRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw8np//78vaI5kjhLcasToUGF7tzZx8YUTPVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7H/g4AAP//oq5oHg==") syz_open_procfs(0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) 2.275029719s ago: executing program 2 (id=849): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r6, &(0x7f00000005c0)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x4}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) r8 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x3) fcntl$addseals(r8, 0x409, 0xe) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000002000000000000000400000000000000100000000000010020"], 0x24, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={@loopback, 0x36, r2}) sendto$inet6(r0, &(0x7f00000000c0)='X', 0x1, 0x60, &(0x7f000005ffe4)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendto$inet6(r0, &(0x7f0000000140)="aa", 0x1, 0x48000, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @loopback, 0x10001}, 0x1c) 2.115240001s ago: executing program 2 (id=850): r0 = socket(0x40000000015, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0x81, &(0x7f00000004c0)}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x10, 0x1fe, 0x6}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, 0x0, 0x800) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 2.065500692s ago: executing program 1 (id=851): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000480)={0x102100100, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140), {0xa}, &(0x7f0000000380)=""/254, 0xfe, &(0x7f00000001c0)=""/120, &(0x7f0000000240)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) ptrace$setregset(0x4205, r0, 0x201, &(0x7f00000002c0)={&(0x7f0000000580)="a44fda504cefaa7e18b1dc58a81693022adbdf8b6294c8796513d365b1dce6635500bbb188a51f746eeb777b8bf47ab44a44471799966cb4a77ac61caf0a6e3edcea0f616968a0b6c7e31a908dda3fd00b5472dedef0ad6551259c9002f6ce0f77edbea2d05e38ac1840ea0dd189e194b78cafe2648b54a8d938900e6e2eda5f2dda94985c95af19929e", 0x8a}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x503, &(0x7f0000000c00)="$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") listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x40000) 2.046802419s ago: executing program 0 (id=852): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1c000, 0x9, 0x1b) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) fchdir(r3) symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) fsmount(0xffffffffffffffff, 0x0, 0x7c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x20000800) unshare(0x2000100) mmap(&(0x7f0000b46000/0x1000)=nil, 0x1000, 0x0, 0x50, r0, 0x66960000) io_uring_enter(r4, 0x2000413f, 0x20adde, 0x2, 0x0, 0x0) 1.672893124s ago: executing program 2 (id=853): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_config_ext={0xe, 0x747f}, 0xa, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x804000, &(0x7f0000000b80)={[{@usrquota}, {@norecovery}], [{@seclabel}]}, 0x21, 0x4bd, &(0x7f0000000bc0)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x78df03, 0x1c3) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) process_madvise(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="63ed857eca471eecfe194c499ee662094f2be8ec10b44dca9fb54e5c108cb2edd4d808ec130af8efc1b3b75d34d3ddf1ca8f7b4f22756e2e76caa3e3f00c1e47fe7ead83c0a7e313c1e69a45dcaa59b42a55883a2b3d1c56a94189b8", 0x5c}, {&(0x7f0000000400)="529c047bfde9cd0f271712bac63e26cee8eb6bb6ad5acb88b76b864cf42139de03ce64b174c655067ddcfc3c5b9f7c730082c8ec9caf862306a1e41605b6b58339aa314f0848df509c9f8c329857cdc3cc3042432a6e5603612ada1c6eb2881e6324a62582064dce94db2013cd86d1651688d13815fd13a819f3d6a8c3885c676320ca857b513d3ea8ebae7c0199b10fdf63a189dae23d578b70490e841bea18ec02e9d162dffbde4730373558e66a54aabbf4bee7342aa087072672a2e1552bc65301910801", 0xc6}, {&(0x7f0000000100)="7c0210e3bee349ea8df5faca21b14a88f9b6cdda48766d67e529afa8f2f871e281b03afc124044", 0x27}], 0x3, 0x19, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a3, &(0x7f0000000080)) 1.092428572s ago: executing program 0 (id=854): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x108022, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 311.229975ms ago: executing program 4 (id=855): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16], 0xfe, 0x122e, &(0x7f0000001280)="$eJzs3E1rXFUYB/DHSdrExLyotVpBerAb3VySLNwoSJAUpANK2witINyaiQ65zoTcITAiRldu3fgB3IpLd4K4001c+BncZePShXqlM+lL7GjQau8Qfr/NPMy5f3jO3OHAGebcg5c+fW9rs8w28140Hno5GtsRk7+lSNGIWz6K51/87vtnrly7fmm12Vy7nNLF1avLL6SU5s9/8+YHXz77bW/2ja/mv56K/cW3Dn5e+Wn/7P65g9+vvtsuU7tMnW4v5elGt9vLbxSttNEut7KUXi9aedlK7U7Z2jkyvll0t7f7Ke9szM1s77TKMuWdftpq9VOvm3o7/ZS/k7c7KcuyNDcT3I/1L36pqiqiqk7F6aiqqno4ZqIRj8RczMdCLMaj8Vg8HmfiiTgbT8ZTcW5wVd19AwAAAAAAAAAAAAAAAAAAwMky6vz/7D3n/z+LGHX+/3zNzQMAAAAAAAAAAAAAAAAAAMAJceXa9Uurzeba5ZSmI4pPdtd314evw/HVzWhHEa1YioX4NQan/4eG9elori2lgcX4uNg7zO/trk8czS8PHidwT/7iq8215WE+Hc1Pxczd+ZVYiDOj8yt/yl8Y5KfjuQt35bNYiB/fjm4UsRE3s3fyHy6n9Mprzdv5H/aHc9+o8b4AAADAfylLt43cv2fZX40P88f9PnBzf710Z38eixGH+cl4erLeuRNR9t/fyouitVN7cauj4Tt7ETEmjf3rohERY9DG3xSnjr1mtobGPp+NuI/4xJEv0lh8zmNeTI8aOm7lmPhf1yUejMObPlV3HwAAAAAAAAAAAPwzD+IPhnXPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//3m/GvA==") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 260.825656ms ago: executing program 2 (id=856): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc091, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) migrate_pages(0xffffffffffffffff, 0xd8, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@sysvgroups}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0xffffffff, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x3, 0x6, 0xff, 0x0, 0x5}}) r2 = openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x14000) pwritev2(r2, &(0x7f0000000100)=[{0x0}], 0x1, 0x5405, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x482, &(0x7f0000000600)=0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000003}) io_submit(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpid() syz_io_uring_setup(0x10c2, 0x0, 0x0, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r4, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) io_setup(0x10000, &(0x7f00000014c0)) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f00000001c0), 0x0, 0x79f, &(0x7f0000001500)="$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") 0s ago: executing program 2 (id=857): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000780)=""/4097, 0x1001}, {&(0x7f0000000500)=""/176, 0xb0}], 0x2}, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) setuid(r6) kernel console output (not intermixed with test programs): ed up [ 99.212322][ T5110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.233799][ T5105] EXT4-fs (loop1): 1 truncate cleaned up [ 99.291400][ T5105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.318636][ T5119] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 99.359497][ T5119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.207'. [ 99.445064][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.520767][ T5124] loop3: detected capacity change from 0 to 128 [ 99.539090][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.551889][ T5125] loop4: detected capacity change from 0 to 512 [ 99.570326][ T5124] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.591264][ T5125] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 99.610223][ T5124] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.768433][ T28] audit: type=1400 audit(1772801796.737:283): avc: denied { mounton } for pid=5129 comm="syz.4.212" path="/proc/117/task" dev="proc" ino=7263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 99.820683][ T5133] netlink: 108 bytes leftover after parsing attributes in process `syz.0.213'. [ 100.058367][ T5138] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 100.094227][ T5141] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 100.118401][ T5141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.214'. [ 100.918265][ T28] audit: type=1400 audit(1772801797.407:284): avc: denied { firmware_load } for pid=5144 comm="syz.2.216" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 100.973124][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.986152][ T5151] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 101.020550][ T5151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.218'. [ 101.207411][ T28] audit: type=1400 audit(1772801798.177:285): avc: denied { read } for pid=5156 comm="syz.2.220" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 101.268077][ T5155] tipc: Failed to remove unknown binding: 66,0,0/0:2882478559/2882478561 [ 101.288356][ T28] audit: type=1400 audit(1772801798.177:286): avc: denied { open } for pid=5156 comm="syz.2.220" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 101.301446][ T5155] tipc: Failed to remove unknown binding: 66,0,0/0:2882478559/2882478560 [ 101.325191][ T5167] loop2: detected capacity change from 0 to 512 [ 101.342697][ T5165] loop1: detected capacity change from 0 to 2048 [ 101.352962][ T5165] ext3: Unknown parameter 'subj_role' [ 101.358752][ T28] audit: type=1400 audit(1772801798.217:287): avc: denied { bind } for pid=5154 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.381665][ T5167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.428319][ T5167] EXT4-fs (loop2): 1 truncate cleaned up [ 101.434724][ T5167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.657341][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.964521][ T5193] loop2: detected capacity change from 0 to 128 [ 103.408722][ T28] audit: type=1400 audit(1772801800.337:288): avc: denied { read } for pid=5195 comm="syz.3.232" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.438677][ T28] audit: type=1400 audit(1772801800.347:289): avc: denied { open } for pid=5195 comm="syz.3.232" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.010432][ T28] audit: type=1400 audit(1772801800.977:290): avc: denied { append } for pid=5188 comm="syz.1.230" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.229130][ T28] audit: type=1400 audit(1772801801.057:291): avc: denied { mounton } for pid=5209 comm="syz.4.237" path="/37/bus" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.229207][ T28] audit: type=1400 audit(1772801801.117:292): avc: denied { ioctl } for pid=5209 comm="syz.4.237" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.465254][ T28] audit: type=1400 audit(1772801802.437:293): avc: denied { create } for pid=5221 comm="syz.4.240" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.530352][ T28] audit: type=1400 audit(1772801802.437:294): avc: denied { write } for pid=5221 comm="syz.4.240" name="file0" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.618597][ T28] audit: type=1400 audit(1772801802.437:295): avc: denied { open } for pid=5221 comm="syz.4.240" path="/38/file0" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.678259][ T28] audit: type=1400 audit(1772801802.437:296): avc: denied { ioctl } for pid=5221 comm="syz.4.240" path="/38/file0" dev="tmpfs" ino=230 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 106.636360][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.043868][ T28] audit: type=1400 audit(1772801804.017:297): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.091125][ T5255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.250'. [ 107.237196][ T5248] loop2: detected capacity change from 0 to 128 [ 108.148099][ T5272] loop4: detected capacity change from 0 to 2048 [ 108.157449][ T5272] ext3: Unknown parameter 'subj_role' [ 108.351566][ T5282] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 108.399807][ T5282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.260'. [ 109.277617][ T5296] loop4: detected capacity change from 0 to 512 [ 110.721272][ T5310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.267'. [ 111.006551][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 111.006572][ T28] audit: type=1400 audit(1772801807.977:304): avc: denied { mount } for pid=5309 comm="syz.0.267" name="/" dev="configfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 111.067635][ T28] audit: type=1400 audit(1772801808.017:305): avc: denied { search } for pid=5309 comm="syz.0.267" name="/" dev="configfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.500856][ T5318] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 111.533098][ T5318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.271'. [ 111.750181][ T5328] process 'syz.4.273' launched '/dev/fd/6' with NULL argv: empty string added [ 111.843117][ T28] audit: type=1400 audit(1772801808.737:306): avc: denied { execute_no_trans } for pid=5322 comm="syz.4.273" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.037346][ T5342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.277'. [ 113.057296][ T5346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.278'. [ 113.526382][ T5346] loop1: detected capacity change from 0 to 1024 [ 113.549109][ T5346] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.641444][ T5346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.656065][ T5346] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.674196][ T28] audit: type=1400 audit(1772801810.647:307): avc: denied { add_name } for pid=5344 comm="syz.1.278" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.702421][ T5346] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.278: lblock 0 mapped to illegal pblock 0 (length 1) [ 113.743568][ T5363] syzkaller0: entered promiscuous mode [ 113.763633][ T5363] syzkaller0: entered allmulticast mode [ 113.778842][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.794267][ T5363] tipc: Started in network mode [ 113.808293][ T5363] tipc: Node identity c6e4372c3b8d, cluster identity 4711 [ 113.818785][ T5367] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 113.840752][ T5363] tipc: Enabled bearer , priority 0 [ 113.868034][ T5363] tipc: Resetting bearer [ 113.874713][ T5367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.285'. [ 113.875870][ T5362] tipc: Resetting bearer [ 113.889714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.948943][ T5362] tipc: Disabling bearer [ 115.059196][ T5379] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 115.128341][ T5380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.288'. [ 115.358271][ T28] audit: type=1400 audit(1772801812.277:308): avc: denied { write } for pid=5381 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.382276][ T5385] loop4: detected capacity change from 0 to 1024 [ 115.454619][ T28] audit: type=1400 audit(1772801812.427:309): avc: denied { name_bind } for pid=5387 comm="syz.1.292" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 115.480516][ T5385] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 115.488946][ T5385] System zones: 0-1, 3-8 [ 115.493948][ T5385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.506500][ T5385] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.570915][ T5390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.291'. [ 115.743045][ T5407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.296'. [ 115.788582][ T5411] loop1: detected capacity change from 0 to 2048 [ 115.826936][ T5411] ext3: Unknown parameter 'subj_role' [ 116.114688][ T5407] loop2: detected capacity change from 0 to 1024 [ 116.146517][ T5407] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.189411][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.177647][ T5407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.225080][ T5407] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.226489][ T5407] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.296: lblock 0 mapped to illegal pblock 0 (length 1) [ 118.942887][ T5437] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 118.975045][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 119.006906][ T5439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.305'. [ 119.055711][ T5437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.304'. [ 119.629545][ T5459] loop2: detected capacity change from 0 to 512 [ 119.657244][ T5459] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.689029][ T5459] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.311: bg 0: block 393: padding at end of block bitmap is not set [ 119.718326][ T5459] loop2: lost filesystem error report for type 5 error -117 [ 119.718495][ T5459] EXT4-fs (loop2): Remounting filesystem read-only [ 119.732591][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 119.732616][ C1] EXT4-fs (loop2): initial error at time 1772801816: ext4_validate_block_bitmap:441 [ 119.732639][ C1] EXT4-fs (loop2): last error at time 1772801816: ext4_validate_block_bitmap:441 [ 119.759110][ T5459] EXT4-fs (loop2): 2 truncates cleaned up [ 119.765768][ T5459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.895600][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 119.925047][ T5465] loop1: detected capacity change from 0 to 2048 [ 119.942634][ T28] audit: type=1400 audit(1772801816.907:310): avc: denied { setopt } for pid=5458 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.998724][ T5465] ext3: Unknown parameter 'subj_role' [ 120.210698][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.349564][ T5491] loop2: detected capacity change from 0 to 128 [ 122.390998][ T5493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.317'. [ 122.411243][ T5491] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.497205][ T5491] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.515335][ T5498] loop1: detected capacity change from 0 to 1024 [ 122.523303][ T5498] EXT4-fs: inline encryption not supported [ 122.537269][ T5498] EXT4-fs: Ignoring removed bh option [ 122.584119][ T5498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.616680][ T5503] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 122.627790][ T28] audit: type=1400 audit(1772801819.597:311): avc: denied { create } for pid=5497 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.653576][ T5498] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 122.718982][ T5498] Cannot find add_set index 0 as target [ 122.765646][ T5493] loop4: detected capacity change from 0 to 1024 [ 122.790840][ T28] audit: type=1400 audit(1772801819.627:312): avc: denied { setattr } for pid=5497 comm="syz.1.319" name="#18" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 122.829036][ T5503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.320'. [ 122.834356][ T5493] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.338887][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.404166][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.417563][ T5493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 123.442608][ T5493] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.644118][ T5493] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.317: lblock 0 mapped to illegal pblock 0 (length 1) [ 123.735136][ T5525] random: crng reseeded on system resumption [ 123.827912][ T28] audit: type=1400 audit(1772801820.707:313): avc: denied { write } for pid=5518 comm="syz.1.325" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.894375][ T5516] loop3: detected capacity change from 0 to 512 [ 124.067748][ T28] audit: type=1400 audit(1772801820.707:314): avc: denied { open } for pid=5518 comm="syz.1.325" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.149644][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 124.159010][ T5516] EXT4-fs (loop3): 1 truncate cleaned up [ 124.206430][ T5531] loop4: detected capacity change from 0 to 1024 [ 124.215595][ T5516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.223969][ T5531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.301161][ T28] audit: type=1400 audit(1772801821.247:315): avc: denied { remove_name } for pid=5515 comm="syz.3.324" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.439277][ T28] audit: type=1400 audit(1772801821.417:316): avc: denied { ioctl } for pid=5528 comm="syz.2.328" path="socket:[7838]" dev="sockfs" ino=7838 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.615405][ T28] audit: type=1400 audit(1772801821.547:317): avc: denied { mount } for pid=5530 comm="syz.4.327" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 125.317279][ T5495] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 125.360997][ T5516] tipc: Failed to remove unknown binding: 66,0,0/0:1202334037/1202334039 [ 125.625088][ T5541] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.327: Allocating blocks 497-513 which overlap fs metadata [ 125.641923][ T5541] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.327: Allocating blocks 497-513 which overlap fs metadata [ 125.656279][ T5541] EXT4-fs (loop4): pa ffff8881079d88c0: logic 48, phys. 177, len 21 [ 125.664604][ T5541] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 125.678199][ T5516] tipc: Failed to remove unknown binding: 66,0,0/0:1202334037/1202334038 [ 125.799684][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.511133][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.708732][ T28] audit: type=1400 audit(1772801824.447:318): avc: denied { create } for pid=5547 comm="syz.2.333" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.730565][ T28] audit: type=1400 audit(1772801824.447:319): avc: denied { map } for pid=5547 comm="syz.2.333" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.756458][ T28] audit: type=1400 audit(1772801824.447:320): avc: denied { read write } for pid=5547 comm="syz.2.333" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.852852][ T5556] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 127.918249][ T5557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.334'. [ 128.212464][ T5559] loop4: detected capacity change from 0 to 512 [ 128.258255][ T5559] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 128.392879][ T5559] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.332: bg 0: block 393: padding at end of block bitmap is not set [ 128.417204][ T5559] loop4: lost filesystem error report for type 5 error -117 [ 128.420181][ T5559] EXT4-fs (loop4): Remounting filesystem read-only [ 128.434387][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 128.434412][ C1] EXT4-fs (loop4): initial error at time 1772801825: ext4_validate_block_bitmap:441 [ 128.434441][ C1] EXT4-fs (loop4): last error at time 1772801825: ext4_validate_block_bitmap:441 [ 128.463799][ T5559] EXT4-fs (loop4): 2 truncates cleaned up [ 128.471344][ T5559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.624171][ T5581] netlink: 'syz.3.338': attribute type 17 has an invalid length. [ 128.653320][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 128.666917][ T5581] netlink: 'syz.3.338': attribute type 16 has an invalid length. [ 128.681952][ T28] audit: type=1400 audit(1772801825.587:321): avc: denied { sqpoll } for pid=5571 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 128.751997][ T5581] netlink: 152 bytes leftover after parsing attributes in process `syz.3.338'. [ 128.785681][ T28] audit: type=1400 audit(1772801825.597:322): avc: denied { setopt } for pid=5571 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.114534][ T28] audit: type=1400 audit(1772801826.087:323): avc: denied { create } for pid=5586 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 129.178309][ T5591] netlink: 15304 bytes leftover after parsing attributes in process `syz.0.340'. [ 130.500979][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.704428][ T5604] loop3: detected capacity change from 0 to 1024 [ 130.726711][ T5604] EXT4-fs: test_dummy_encryption option not supported [ 131.085761][ T28] audit: type=1400 audit(1772801828.057:324): avc: denied { nosuid_transition } for pid=5602 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 131.183350][ T28] audit: type=1400 audit(1772801828.057:325): avc: denied { transition } for pid=5602 comm="syz.3.353" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 131.480756][ T28] audit: type=1400 audit(1772801828.057:326): avc: denied { entrypoint } for pid=5602 comm="syz.3.353" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1129 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.475335][ T28] audit: type=1400 audit(1772801828.057:327): avc: denied { share } for pid=5602 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 135.844773][ T5645] loop3: detected capacity change from 0 to 512 [ 135.909579][ T5645] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.969693][ T5645] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.354: bg 0: block 393: padding at end of block bitmap is not set [ 136.002774][ T5645] loop3: lost filesystem error report for type 5 error -117 [ 136.007337][ T5645] EXT4-fs (loop3): Remounting filesystem read-only [ 136.014835][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 136.014858][ C0] EXT4-fs (loop3): initial error at time 1772801832: ext4_validate_block_bitmap:441 [ 136.014882][ C0] EXT4-fs (loop3): last error at time 1772801832: ext4_validate_block_bitmap:441 [ 136.047619][ T5645] EXT4-fs (loop3): 2 truncates cleaned up [ 136.053924][ T5645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.078427][ T5651] 9p: Bad value for 'rfdno' [ 136.118541][ T5662] loop4: detected capacity change from 0 to 128 [ 136.279922][ T5662] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.295640][ T5662] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.705676][ T5670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.739925][ T5645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 136.754226][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 136.754244][ T28] audit: type=1400 audit(1772801833.687:329): avc: denied { map } for pid=5663 comm="syz.2.360" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 136.939710][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.132555][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.148995][ T5686] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 139.282972][ T5686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.365'. [ 139.969601][ T5707] random: crng reseeded on system resumption [ 141.017065][ T5714] loop2: detected capacity change from 0 to 1024 [ 141.068067][ T5714] EXT4-fs: inline encryption not supported [ 141.152889][ T5714] EXT4-fs: Ignoring removed bh option [ 141.177383][ T5714] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 141.215159][ T5714] EXT4-fs (loop2): orphan cleanup on readonly fs [ 141.236761][ T5715] loop4: detected capacity change from 0 to 512 [ 141.246662][ T5714] EXT4-fs error (device loop2): ext4_quota_enable:7192: comm syz.2.372: inode #2304: comm syz.2.372: iget: illegal inode # [ 141.273474][ T5714] loop2: lost filesystem error report for type 5 error -117 [ 141.278205][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 141.292487][ C0] EXT4-fs (loop2): initial error at time 1772801838: ext4_quota_enable:7192 [ 141.301317][ C0] EXT4-fs (loop2): last error at time 1772801838: ext4_quota_enable:7192 [ 141.310469][ T5714] EXT4-fs (loop2): Remounting filesystem read-only [ 141.329560][ T5714] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 141.344984][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 141.354650][ T5726] netlink: 188 bytes leftover after parsing attributes in process `syz.3.377'. [ 141.367468][ T28] audit: type=1400 audit(1772801838.297:330): avc: denied { connect } for pid=5725 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.387622][ T5726] netlink: 32 bytes leftover after parsing attributes in process `syz.3.377'. [ 141.405129][ T5728] netlink: 172 bytes leftover after parsing attributes in process `syz.3.377'. [ 141.406485][ T5714] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 141.416816][ T5715] EXT4-fs (loop4): 1 truncate cleaned up [ 141.422251][ T5726] netlink: 'syz.3.377': attribute type 2 has an invalid length. [ 141.442407][ T5714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.530510][ T5715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.581353][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.642524][ T5715] tipc: Failed to remove unknown binding: 66,0,0/0:3238856519/3238856521 [ 141.651967][ T5715] tipc: Failed to remove unknown binding: 66,0,0/0:3238856519/3238856520 [ 141.710220][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.359608][ T28] audit: type=1400 audit(1772801839.337:331): avc: denied { bind } for pid=5738 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.391010][ T5741] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 142.395614][ T28] audit: type=1400 audit(1772801839.367:332): avc: denied { write } for pid=5738 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.426777][ T5727] vlan3: entered promiscuous mode [ 142.432330][ T5727] bridge0: entered promiscuous mode [ 142.451642][ T5741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.382'. [ 142.524495][ T5739] netlink: 'syz.0.381': attribute type 10 has an invalid length. [ 142.570030][ T5739] team0: Port device dummy0 added [ 142.611285][ T5739] netlink: 'syz.0.381': attribute type 10 has an invalid length. [ 142.690684][ T5739] team0: Port device dummy0 removed [ 142.736441][ T5739] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 143.528772][ T28] audit: type=1400 audit(1772801840.487:333): avc: denied { read } for pid=5754 comm="syz.3.387" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.580970][ T5755] netlink: 'syz.3.387': attribute type 21 has an invalid length. [ 143.607368][ T5755] netlink: 132 bytes leftover after parsing attributes in process `syz.3.387'. [ 144.000151][ T5763] loop2: detected capacity change from 0 to 512 [ 144.148096][ T5764] loop3: detected capacity change from 0 to 512 [ 144.209002][ T5763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.222112][ T5763] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.251161][ T5763] EXT4-fs error (device loop2): ext4_empty_dir:3075: inode #12: comm syz.2.388: invalid size [ 144.262375][ T5763] EXT4-fs (loop2): Remounting filesystem read-only [ 144.283317][ T28] audit: type=1400 audit(1772801841.227:334): avc: denied { rename } for pid=5760 comm="syz.2.388" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 144.349217][ T5764] vfat: Unknown parameter 'ÿÿ' [ 144.456076][ T28] audit: type=1400 audit(1772801841.227:335): avc: denied { rmdir } for pid=5760 comm="syz.2.388" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.588745][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.638475][ T2039] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 144.656616][ T2039] Quota error (device loop2): write_blk: dquota write failed [ 144.688325][ T2039] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 144.855415][ T28] audit: type=1400 audit(1772801841.827:336): avc: denied { write } for pid=5779 comm="syz.2.392" path="socket:[8719]" dev="sockfs" ino=8719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 145.395846][ T5791] loop3: detected capacity change from 0 to 1024 [ 145.463150][ T5791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.699095][ T5797] netlink: 80 bytes leftover after parsing attributes in process `syz.4.398'. [ 146.115539][ T5801] loop1: detected capacity change from 0 to 512 [ 147.146345][ T5798] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.396: Allocating blocks 497-513 which overlap fs metadata [ 147.162575][ T5798] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.396: Allocating blocks 497-513 which overlap fs metadata [ 147.176731][ T5798] EXT4-fs (loop3): pa ffff8881079d87e0: logic 48, phys. 177, len 21 [ 147.184788][ T5798] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 147.269050][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.012803][ T28] audit: type=1400 audit(1772801844.977:337): avc: denied { read } for pid=5809 comm="syz.3.401" path="socket:[8752]" dev="sockfs" ino=8752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.478317][ T28] audit: type=1400 audit(1772801845.447:338): avc: denied { read } for pid=5821 comm="syz.0.405" path="socket:[9592]" dev="sockfs" ino=9592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.577730][ T28] audit: type=1400 audit(1772801845.547:339): avc: denied { setattr } for pid=5815 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 148.766737][ T5829] loop3: detected capacity change from 0 to 1764 [ 149.116918][ T28] audit: type=1400 audit(1772801846.087:340): avc: denied { read } for pid=5834 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 149.391309][ T28] audit: type=1400 audit(1772801846.357:341): avc: denied { getopt } for pid=5846 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.537784][ T5847] loop3: detected capacity change from 0 to 8192 [ 149.599257][ T3305] loop3: p1 < > p2 p4 < p5 > [ 149.618325][ T3305] loop3: partition table partially beyond EOD, truncated [ 149.647678][ T3305] loop3: p1 start 134217728 is beyond EOD, truncated [ 149.668930][ T3305] loop3: p2 size 591360 extends beyond EOD, truncated [ 149.677791][ T28] audit: type=1400 audit(1772801846.647:342): avc: denied { create } for pid=5846 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 149.711337][ T28] audit: type=1400 audit(1772801846.647:343): avc: denied { bind } for pid=5846 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 149.747629][ T3305] loop3: p5 size 591360 extends beyond EOD, truncated [ 149.780209][ T5847] loop3: p1 < > p2 p4 < p5 > [ 149.785404][ T5847] loop3: partition table partially beyond EOD, truncated [ 149.807363][ T5847] loop3: p1 start 134217728 is beyond EOD, truncated [ 149.842219][ T5847] loop3: p2 size 591360 extends beyond EOD, truncated [ 149.873052][ T5847] loop3: p5 size 591360 extends beyond EOD, truncated [ 150.244896][ T5927] loop4: detected capacity change from 0 to 164 [ 150.410557][ T5933] loop3: detected capacity change from 0 to 136 [ 150.501657][ T5931] loop1: detected capacity change from 0 to 2048 [ 150.556239][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 150.566776][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 150.577908][ T5054] udevd[5054]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 150.594531][ T5931] ext3: Unknown parameter 'subj_role' [ 151.418750][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 151.469735][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 151.479891][ T5054] udevd[5054]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 151.513650][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 151.530838][ T5933] Attempt to read inode for relocated directory [ 151.582049][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 151.599700][ T5946] 9p: Bad value for 'wfdno' [ 151.626073][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 151.653409][ T5945] loop2: detected capacity change from 0 to 1024 [ 151.710805][ T5945] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.734031][ T5945] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.738035][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 151.755175][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 151.799434][ T5945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 151.807662][ T5945] System zones: 0-1, 3-36 [ 151.861211][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 151.863849][ T5945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.870318][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 151.919955][ T5950] loop4: detected capacity change from 0 to 8192 [ 152.008682][ T3305] loop4: p1 < > p2 p4 < p5 > [ 152.013452][ T3305] loop4: partition table partially beyond EOD, truncated [ 152.030922][ T3305] loop4: p1 start 134217728 is beyond EOD, truncated [ 152.037691][ T3305] loop4: p2 size 591360 extends beyond EOD, truncated [ 152.087836][ T3305] loop4: p5 size 591360 extends beyond EOD, truncated [ 152.111631][ T5950] loop4: p1 < > p2 p4 < p5 > [ 152.116379][ T5950] loop4: partition table partially beyond EOD, truncated [ 152.138318][ T5950] loop4: p1 start 134217728 is beyond EOD, truncated [ 152.173560][ T5950] loop4: p2 size 591360 extends beyond EOD, truncated [ 152.207886][ T28] audit: type=1400 audit(1772801849.177:344): avc: denied { ioctl } for pid=5938 comm="syz.2.418" path="socket:[8835]" dev="sockfs" ino=8835 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.244435][ T5950] loop4: p5 size 591360 extends beyond EOD, truncated [ 152.258700][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.420761][ T5970] loop2: detected capacity change from 0 to 8192 [ 152.479221][ T5970] loop2: p1 < > p2 p4 < p5 > [ 152.484716][ T5970] loop2: partition table partially beyond EOD, truncated [ 152.492577][ T5970] loop2: p1 start 134217728 is beyond EOD, truncated [ 152.518788][ T5970] loop2: p2 size 591360 extends beyond EOD, truncated [ 152.529328][ T5970] loop2: p5 size 591360 extends beyond EOD, truncated [ 152.564128][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 152.570524][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 152.581224][ T5054] udevd[5054]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 152.624468][ T3001] loop2: p1 < > p2 p4 < p5 > [ 152.629751][ T3001] loop2: partition table partially beyond EOD, truncated [ 152.648303][ T3001] loop2: p1 start 134217728 is beyond EOD, truncated [ 152.665204][ T3001] loop2: p2 size 591360 extends beyond EOD, truncated [ 152.686490][ T3001] loop2: p5 size 591360 extends beyond EOD, truncated [ 152.729794][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 154.215760][ T5999] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 154.382428][ T6000] loop2: detected capacity change from 0 to 512 [ 155.068236][ T6000] ext4: block size(65536) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 155.078799][ T6000] EXT4-fs (loop2): bad block size 65536 [ 155.082507][ T5998] loop1: detected capacity change from 0 to 512 [ 155.092574][ T6001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.434'. [ 156.470173][ T6009] loop2: detected capacity change from 0 to 4096 [ 156.567155][ T6013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.437'. [ 156.595293][ T6009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.643561][ T28] audit: type=1400 audit(1772801853.617:345): avc: denied { setattr } for pid=6006 comm="syz.2.435" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 156.956514][ T5998] EXT4-fs (loop1): 1 truncate cleaned up [ 156.996201][ T5998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.196373][ T5998] tipc: Failed to remove unknown binding: 66,0,0/0:2296759751/2296759753 [ 157.238486][ T5998] tipc: Failed to remove unknown binding: 66,0,0/0:2296759751/2296759752 [ 157.274688][ T6013] loop3: detected capacity change from 0 to 164 [ 157.339235][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.423416][ T6013] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 157.805946][ T6026] netlink: 188 bytes leftover after parsing attributes in process `syz.0.441'. [ 157.847735][ T6026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.441'. [ 157.885064][ T6026] netlink: 'syz.0.441': attribute type 2 has an invalid length. [ 157.959520][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.018517][ T6026] netlink: 172 bytes leftover after parsing attributes in process `syz.0.441'. [ 159.027128][ T6049] loop1: detected capacity change from 0 to 128 [ 159.044337][ T6051] loop3: detected capacity change from 0 to 256 [ 159.306203][ T6051] FAT-fs (loop3): Directory bread(block 64) failed [ 159.312967][ T6051] FAT-fs (loop3): Directory bread(block 65) failed [ 159.319579][ T6051] FAT-fs (loop3): Directory bread(block 66) failed [ 159.326207][ T6051] FAT-fs (loop3): Directory bread(block 67) failed [ 159.332838][ T6051] FAT-fs (loop3): Directory bread(block 68) failed [ 159.339576][ T6051] FAT-fs (loop3): Directory bread(block 69) failed [ 159.346332][ T6051] FAT-fs (loop3): Directory bread(block 70) failed [ 159.353113][ T6051] FAT-fs (loop3): Directory bread(block 71) failed [ 159.360121][ T6051] FAT-fs (loop3): Directory bread(block 72) failed [ 159.366799][ T6051] FAT-fs (loop3): Directory bread(block 73) failed [ 161.918332][ T28] audit: type=1400 audit(1772801858.557:346): avc: denied { ioctl } for pid=6044 comm="syz.3.445" path="socket:[9932]" dev="sockfs" ino=9932 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.682175][ T6068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.237331][ T28] audit: type=1400 audit(1772801860.207:347): avc: denied { read } for pid=6074 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 163.541346][ T6086] loop3: detected capacity change from 0 to 8192 [ 163.613205][ T6088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.456'. [ 163.938852][ T6086] loop3: p1 < > p2 p4 < p5 > [ 163.972432][ T6086] loop3: partition table partially beyond EOD, truncated [ 163.980848][ T6086] loop3: p1 start 134217728 is beyond EOD, truncated [ 163.987977][ T6086] loop3: p2 size 591360 extends beyond EOD, truncated [ 163.997110][ T6086] loop3: p5 size 591360 extends beyond EOD, truncated [ 164.017384][ T6093] loop1: detected capacity change from 0 to 512 [ 164.031850][ T6077] Set syz1 is full, maxelem 65536 reached [ 164.098702][ T6093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.140238][ T6093] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.264376][ T5054] udevd[5054]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 164.276320][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 164.378476][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 167.179172][ T28] audit: type=1400 audit(1772801862.477:348): avc: denied { read } for pid=6092 comm="syz.1.458" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 167.593492][ T6112] loop4: detected capacity change from 0 to 512 [ 167.618270][ T6112] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.654601][ T28] audit: type=1400 audit(1772801862.477:349): avc: denied { open } for pid=6092 comm="syz.1.458" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 167.685773][ T6112] EXT4-fs (loop4): 1 truncate cleaned up [ 167.702642][ T6112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.771028][ T28] audit: type=1400 audit(1772801864.747:350): avc: denied { setattr } for pid=6111 comm="syz.4.463" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.159091][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.159567][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.232573][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'. [ 169.527578][ T6135] loop2: detected capacity change from 0 to 8192 [ 169.591121][ T6135] loop2: p1 < > p2 p4 < p5 > [ 169.599367][ T6135] loop2: partition table partially beyond EOD, truncated [ 169.607380][ T6135] loop2: p1 start 134217728 is beyond EOD, truncated [ 169.614205][ T6135] loop2: p2 size 591360 extends beyond EOD, truncated [ 169.643883][ T6135] loop2: p5 size 591360 extends beyond EOD, truncated [ 169.926300][ T6148] netlink: 80 bytes leftover after parsing attributes in process `syz.2.473'. [ 170.025983][ T5054] udevd[5054]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 170.037423][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 170.055834][ T6150] netlink: 'syz.3.472': attribute type 10 has an invalid length. [ 170.068764][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 170.095057][ T6150] netlink: 40 bytes leftover after parsing attributes in process `syz.3.472'. [ 170.168755][ T6150] dummy0: entered promiscuous mode [ 170.178252][ T6150] dummy0: entered allmulticast mode [ 170.195333][ T6150] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 172.145695][ T6175] loop2: detected capacity change from 0 to 512 [ 172.174927][ T6176] loop1: detected capacity change from 0 to 164 [ 172.305370][ T6175] EXT4-fs error (device loop2): __ext4_fill_super:5563: inode #2: comm syz.2.478: iget: checksum invalid [ 172.318466][ T6175] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 172.326557][ T6175] EXT4-fs (loop2): get root inode failed [ 172.336587][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 172.336680][ C1] EXT4-fs (loop2): initial error at time 1772801869: __ext4_fill_super:5563: inode 2 [ 172.337259][ C1] EXT4-fs (loop2): last error at time 1772801869: __ext4_fill_super:5563: inode 2 [ 172.372494][ T6175] EXT4-fs (loop2): mount failed [ 173.109676][ T6182] loop2: detected capacity change from 0 to 1764 [ 173.117304][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.482'. [ 173.154998][ T6159] Set syz1 is full, maxelem 65536 reached [ 173.217028][ T6184] loop3: detected capacity change from 0 to 1024 [ 173.226663][ T6184] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.344826][ T6184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 173.395394][ T6189] loop1: detected capacity change from 0 to 8192 [ 173.415269][ T6184] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.433822][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 173.497383][ T6184] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.482: lblock 0 mapped to illegal pblock 0 (length 1) [ 173.519936][ T6199] netlink: 80 bytes leftover after parsing attributes in process `syz.4.487'. [ 173.558776][ T3305] loop1: p1 < > p2 p4 < p5 > [ 173.563737][ T3305] loop1: partition table partially beyond EOD, truncated [ 173.573346][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 173.582799][ T3305] loop1: p1 start 134217728 is beyond EOD, truncated [ 173.598778][ T3305] loop1: p2 size 591360 extends beyond EOD, truncated [ 173.610038][ T3305] loop1: p5 size 591360 extends beyond EOD, truncated [ 173.665014][ T6185] syz.0.483 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 173.691778][ T6189] loop1: p1 < > p2 p4 < p5 > [ 173.701585][ T6189] loop1: partition table partially beyond EOD, truncated [ 173.838391][ T6189] loop1: p1 start 134217728 is beyond EOD, truncated [ 173.857752][ T6185] CPU: 0 UID: 0 PID: 6185 Comm: syz.0.483 Tainted: G W syzkaller #0 PREEMPT(full) [ 173.857868][ T6185] Tainted: [W]=WARN [ 173.857875][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.857892][ T6185] Call Trace: [ 173.857900][ T6185] [ 173.857909][ T6185] __dump_stack+0x1d/0x30 [ 173.858016][ T6185] dump_stack_lvl+0x95/0xd0 [ 173.858041][ T6185] dump_stack+0x15/0x1b [ 173.858066][ T6185] dump_header+0x80/0x240 [ 173.858112][ T6185] oom_kill_process+0x295/0x350 [ 173.858206][ T6185] out_of_memory+0x97d/0xb80 [ 173.858234][ T6185] try_charge_memcg+0x62e/0xa10 [ 173.858273][ T6185] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 173.858313][ T6185] __swap_cache_prepare_and_add+0x386/0x530 [ 173.858411][ T6185] swap_cache_alloc_folio+0xa2/0x120 [ 173.858447][ T6185] swap_cluster_readahead+0x26e/0x3d0 [ 173.858504][ T6185] swapin_readahead+0xde/0x840 [ 173.858543][ T6185] ? _raw_spin_unlock+0x9/0x30 [ 173.858571][ T6185] ? swap_put_entries_cluster+0x385/0x3a0 [ 173.858648][ T6185] ? swap_put_entries_cluster+0x81/0x3a0 [ 173.858685][ T6185] ? __rcu_read_unlock+0x4e/0x70 [ 173.858708][ T6185] ? swap_cache_get_folio+0x26f/0x280 [ 173.858771][ T6185] do_swap_page+0x309/0x2210 [ 173.858878][ T6185] ? css_rstat_updated+0xbb/0x280 [ 173.858902][ T6185] ? __rcu_read_lock+0x36/0x50 [ 173.858926][ T6185] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 173.858959][ T6185] handle_mm_fault+0xb40/0x3020 [ 173.859043][ T6185] ? vma_start_read+0x1c7/0x2c0 [ 173.859079][ T6185] do_user_addr_fault+0x62f/0x1050 [ 173.859124][ T6185] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 173.859154][ T6185] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 173.859180][ T6185] ? trace_page_fault_user+0x1f/0xe0 [ 173.859225][ T6185] exc_page_fault+0x62/0xa0 [ 173.859335][ T6185] asm_exc_page_fault+0x26/0x30 [ 173.859393][ T6185] RIP: 0033:0x7fb5154978f8 [ 173.859416][ T6185] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 173.859438][ T6185] RSP: 002b:00007ffe885a5590 EFLAGS: 00010246 [ 173.859458][ T6185] RAX: 0000000000000000 RBX: 0000555569305500 RCX: 00007fb51549cfce [ 173.859471][ T6185] RDX: 00007ffe885a55e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.859483][ T6185] RBP: 00007fb515757da0 R08: 0000000000000000 R09: 0000000000000000 [ 173.859497][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002a7c8 [ 173.859551][ T6185] R13: 00007fb51575618c R14: 000000000002a577 R15: 00007fb515756180 [ 173.859570][ T6185] [ 173.918428][ T6189] loop1: p2 size 591360 extends beyond EOD, [ 174.068678][ T6185] memory: usage 63920kB, limit 307200kB, failcnt 86 [ 174.072672][ T6189] truncated [ 174.129211][ T6185] memory+swap: usage 69492kB, limit 9007199254740988kB, failcnt 0 [ 174.134756][ T6189] loop1: p5 size 591360 extends beyond EOD, truncated [ 174.168249][ T6185] kmem: usage 83028kB, limit 9007199254740988kB, failcnt 0 [ 174.206535][ T6185] Memory cgroup stats for /syz0: [ 174.206808][ T6185] cache 81920 [ 174.239462][ T6185] rss 8192 [ 174.240412][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 174.252836][ T6185] shmem 0 [ 174.254796][ T5054] udevd[5054]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 174.269679][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 174.274374][ T6185] mapped_file 81920 [ 174.288806][ T5054] udevd[5054]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 174.300164][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 174.308105][ T6185] dirty 0 [ 174.312857][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 174.323136][ T6185] writeback 0 [ 174.338037][ T6185] workingset_refault_anon 561 [ 174.344187][ T6185] workingset_refault_file 0 [ 174.357779][ T6185] swap 4657152 [ 174.361596][ T6185] swapcached 4665344 [ 174.365634][ T6185] pgpgin 145254 [ 174.378283][ T6185] pgpgout 145232 [ 174.388212][ T6185] pgfault 145913 [ 174.391897][ T6185] pgmajfault 75 [ 174.405577][ T6185] inactive_anon 8192 [ 174.409905][ T6185] active_anon 0 [ 174.413531][ T6185] inactive_file 81920 [ 174.421510][ T6209] loop1: detected capacity change from 0 to 2048 [ 174.438685][ T6209] ext3: Unknown parameter 'subj_role' [ 174.457254][ T6185] active_file 0 [ 174.471499][ T6185] unevictable 0 [ 174.475172][ T6185] hierarchical_memory_limit 314572800 [ 174.489552][ T6185] hierarchical_memsw_limit 9223372036854771712 [ 174.525535][ T6185] total_cache 81920 [ 174.529679][ T6185] total_rss 8192 [ 174.533253][ T6185] total_shmem 0 [ 174.546981][ T6185] total_mapped_file 81920 [ 174.551428][ T6185] total_dirty 0 [ 174.554917][ T6185] total_writeback 0 [ 174.566649][ T6185] total_workingset_refault_anon 561 [ 174.577749][ T6185] total_workingset_refault_file 0 [ 174.591600][ T6185] total_swap 4657152 [ 174.600214][ T6185] total_swapcached 4665344 [ 174.610753][ T6185] total_pgpgin 145254 [ 174.629166][ T6185] total_pgpgout 145232 [ 174.633392][ T6185] total_pgfault 145913 [ 174.637524][ T6185] total_pgmajfault 75 [ 174.641693][ T6185] total_inactive_anon 8192 [ 174.646133][ T6185] total_active_anon 0 [ 174.650900][ T6185] total_inactive_file 81920 [ 174.655434][ T6185] total_active_file 0 [ 174.659570][ T6185] total_unevictable 0 [ 174.663699][ T6185] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.483,pid=6185,uid=0 [ 174.678390][ T6185] Memory cgroup out of memory: Killed process 6185 (syz.0.483) total-vm:96340kB, anon-rss:1228kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 176.250734][ T6229] loop4: detected capacity change from 0 to 512 [ 177.079251][ T6228] loop1: detected capacity change from 0 to 2048 [ 177.152364][ T6229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.165542][ T6229] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.194565][ T6228] ext3: Unknown parameter 'subj_role' [ 177.217129][ T6229] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz.4.492: invalid size [ 177.227775][ T6229] EXT4-fs (loop4): Remounting filesystem read-only [ 177.690056][ T6241] loop3: detected capacity change from 0 to 164 [ 179.109454][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.128523][ T5914] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 179.153825][ T5914] Quota error (device loop4): write_blk: dquota write failed [ 179.626400][ T5914] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 180.088622][ T6251] netlink: 'syz.3.498': attribute type 10 has an invalid length. [ 180.707226][ T6258] netlink: 80 bytes leftover after parsing attributes in process `syz.3.502'. [ 180.784353][ T6252] loop4: detected capacity change from 0 to 8192 [ 180.889040][ T6264] loop2: detected capacity change from 0 to 1764 [ 180.950521][ T6252] loop4: p2 p3 p4[EZD] [ 180.963550][ T6252] loop4: p3 start 331781 is beyond EOD, truncated [ 180.998249][ T6252] loop4: p4 size 197376 extends beyond EOD, truncated [ 181.165911][ T6272] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 181.742062][ T6270] loop1: detected capacity change from 0 to 512 [ 181.782769][ T6270] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 183.922707][ T6270] EXT4-fs (loop1): 1 truncate cleaned up [ 183.987736][ T6270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.003661][ T6293] loop3: detected capacity change from 0 to 1024 [ 184.052452][ T6293] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 184.082386][ T6293] System zones: 0-1, 3-12 [ 184.126902][ T6293] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.279805][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.394898][ T28] audit: type=1326 audit(1772801881.367:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 184.441052][ T28] audit: type=1326 audit(1772801881.397:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 184.465830][ T28] audit: type=1326 audit(1772801881.397:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 184.490638][ T28] audit: type=1326 audit(1772801881.397:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 184.514926][ T28] audit: type=1326 audit(1772801881.397:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 184.539442][ T28] audit: type=1326 audit(1772801881.397:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 184.563792][ T28] audit: type=1326 audit(1772801881.397:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 184.588208][ T28] audit: type=1326 audit(1772801881.397:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 184.613437][ T28] audit: type=1326 audit(1772801881.397:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 184.638510][ T28] audit: type=1326 audit(1772801881.397:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 184.866457][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 184.905257][ T6308] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 184.947694][ T6308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.517'. [ 185.107878][ T6311] loop3: detected capacity change from 0 to 512 [ 185.653646][ T6319] loop4: detected capacity change from 0 to 1764 [ 185.664100][ T6311] EXT4-fs (loop3): 1 orphan inode deleted [ 185.752758][ T6311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.902870][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.972630][ T6325] loop3: detected capacity change from 0 to 2048 [ 185.979630][ T6325] ext3: Unknown parameter 'subj_role' [ 186.180372][ T6329] netlink: 80 bytes leftover after parsing attributes in process `syz.4.521'. [ 187.090152][ T6303] syz.2.514 (6303) used greatest stack depth: 7024 bytes left [ 187.169157][ T6345] loop2: detected capacity change from 0 to 2048 [ 187.178469][ T6347] loop4: detected capacity change from 0 to 512 [ 187.199269][ T6345] ext3: Unknown parameter 'subj_role' [ 187.213698][ T6338] loop3: detected capacity change from 0 to 512 [ 187.249440][ T6347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.268744][ T6338] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.279569][ T6347] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.307513][ T6338] EXT4-fs (loop3): 1 truncate cleaned up [ 187.315614][ T6338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.351969][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.371930][ T6347] Restarting kernel threads ... [ 187.379379][ T6347] Done restarting kernel threads. [ 187.388311][ T6355] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 187.403449][ T6355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 187.415065][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.476507][ T6361] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 187.493975][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.540'. [ 187.662535][ T6365] loop3: detected capacity change from 0 to 512 [ 187.674657][ T6365] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.726361][ T6365] EXT4-fs (loop3): 1 truncate cleaned up [ 187.734511][ T6365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.759307][ T6365] netlink: 'syz.3.531': attribute type 13 has an invalid length. [ 188.230947][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.096227][ T6376] autofs4:pid:6376:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b) [ 189.105604][ T6373] loop1: detected capacity change from 0 to 1024 [ 189.221845][ T6394] loop3: detected capacity change from 0 to 512 [ 189.230949][ T6373] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 189.260818][ T6394] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 189.265247][ T6373] System zones: 0-1, 3-36 [ 189.296877][ T6373] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.534: bad orphan inode 134217728 [ 189.310205][ T6373] loop1: lost filesystem error report for type 5 error -117 [ 189.318388][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 189.333603][ C0] EXT4-fs (loop1): initial error at time 1772801886: ext4_orphan_get:1417 [ 189.343238][ C0] EXT4-fs (loop1): last error at time 1772801886: ext4_orphan_get:1417 [ 189.355586][ T6373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.434892][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 189.434911][ T28] audit: type=1400 audit(1772801886.397:448): avc: denied { create } for pid=6391 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.470525][ T28] audit: type=1400 audit(1772801886.397:449): avc: denied { ioctl } for pid=6391 comm="syz.0.539" path="socket:[10499]" dev="sockfs" ino=10499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.525707][ T28] audit: type=1326 audit(1772801886.407:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f19bdcfce code=0x7ffc0000 [ 189.547641][ T6402] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 189.590275][ T28] audit: type=1326 audit(1772801886.407:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f4f19c1abd7 code=0x7ffc0000 [ 189.639999][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.542'. [ 189.646360][ T6389] loop2: detected capacity change from 0 to 512 [ 189.656821][ T28] audit: type=1326 audit(1772801886.407:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f19bdcfce code=0x7ffc0000 [ 189.705807][ T28] audit: type=1326 audit(1772801886.407:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c1c799 code=0x7ffc0000 [ 189.743537][ T6389] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.788211][ T28] audit: type=1326 audit(1772801886.407:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c1c799 code=0x7ffc0000 [ 189.800585][ T6389] EXT4-fs (loop2): 1 truncate cleaned up [ 189.815040][ T28] audit: type=1326 audit(1772801886.437:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f19c1c799 code=0x7ffc0000 [ 189.851520][ T28] audit: type=1326 audit(1772801886.507:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c1c799 code=0x7ffc0000 [ 189.887652][ T6389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.927045][ T28] audit: type=1326 audit(1772801886.517:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c1c799 code=0x7ffc0000 [ 189.971745][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.024903][ T6405] loop4: detected capacity change from 0 to 2048 [ 190.095730][ T6405] ext3: Unknown parameter 'subj_role' [ 190.209819][ T6414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.245586][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.272266][ T6408] loop1: detected capacity change from 0 to 128 [ 190.892717][ T6420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.546'. [ 191.097752][ T6423] netlink: 'syz.1.543': attribute type 10 has an invalid length. [ 191.201517][ T6424] netlink: 'syz.1.543': attribute type 10 has an invalid length. [ 191.309422][ T6408] 9p: Could not find request transport: xen [ 191.328849][ T6423] team0: Port device dummy0 added [ 191.346010][ T6424] team0: Port device dummy0 removed [ 191.353309][ T6424] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 191.471130][ T6426] SELinux: failed to load policy [ 191.483509][ T6426] loop3: detected capacity change from 0 to 512 [ 191.672391][ T6426] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 191.750723][ T6426] EXT4-fs (loop3): 1 truncate cleaned up [ 191.759223][ T6426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.016193][ T6426] program syz.3.547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.521499][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.820234][ T6455] loop3: detected capacity change from 0 to 2048 [ 192.889832][ T6455] ext3: Unknown parameter 'subj_role' [ 193.053368][ T6432] Set syz1 is full, maxelem 65536 reached [ 193.089893][ T6465] loop1: detected capacity change from 0 to 1024 [ 193.111985][ T6458] loop4: detected capacity change from 0 to 8192 [ 193.121503][ T6465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 193.134077][ T6465] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.158287][ T6458] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.241586][ T6458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.265124][ T6458] FAT-fs (loop4): Filesystem has been set read-only [ 193.328605][ T6458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.337483][ T6458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.369066][ T6472] loop2: detected capacity change from 0 to 2048 [ 193.705156][ T6472] ext3: Unknown parameter 'subj_role' [ 193.754613][ T6458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.838271][ T6458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.866670][ T6458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.886919][ T6458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.911686][ T6458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.928803][ T6458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.990947][ T6470] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.994591][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 194.102285][ T6480] loop1: detected capacity change from 0 to 128 [ 194.115661][ T6483] loop3: detected capacity change from 0 to 1024 [ 194.165263][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 195.165309][ T6494] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 195.427036][ T6498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'. [ 195.547102][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 195.547136][ T28] audit: type=1326 audit(1772801892.517:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 195.596196][ T28] audit: type=1326 audit(1772801892.517:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 195.638822][ T28] audit: type=1326 audit(1772801892.517:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 195.716678][ T6506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.568'. [ 195.768135][ T28] audit: type=1326 audit(1772801892.517:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 195.832028][ T28] audit: type=1326 audit(1772801892.517:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 195.878872][ T28] audit: type=1326 audit(1772801892.517:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 195.981350][ T6514] loop3: detected capacity change from 0 to 512 [ 195.991246][ T28] audit: type=1400 audit(1772801892.567:490): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 196.053641][ T6514] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.068628][ T28] audit: type=1326 audit(1772801892.607:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 196.092312][ T28] audit: type=1326 audit(1772801892.607:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd41da4c502 code=0x7ffc0000 [ 196.115810][ T28] audit: type=1326 audit(1772801892.607:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd41da4c597 code=0x7ffc0000 [ 196.511096][ T6514] EXT4-fs (loop3): 1 truncate cleaned up [ 196.602012][ T6514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.880138][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.320023][ T6526] loop2: detected capacity change from 0 to 2048 [ 198.349475][ T6526] ext3: Unknown parameter 'subj_role' [ 198.409075][ T6534] loop1: detected capacity change from 0 to 1764 [ 198.443473][ T6524] netlink: 'syz.4.573': attribute type 10 has an invalid length. [ 198.461780][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.4.573'. [ 198.471218][ T6524] dummy0: entered promiscuous mode [ 198.477693][ T6524] dummy0: entered allmulticast mode [ 198.484273][ T6524] bridge0: port 3(dummy0) entered blocking state [ 198.491129][ T6524] bridge0: port 3(dummy0) entered disabled state [ 198.779826][ T6559] loop1: detected capacity change from 0 to 2048 [ 198.798702][ T6559] ext3: Unknown parameter 'subj_role' [ 199.878085][ T6609] loop3: detected capacity change from 0 to 128 [ 199.952329][ T6609] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.009240][ T6609] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.077582][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 200.102914][ T6617] loop1: detected capacity change from 0 to 1024 [ 200.159399][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.192060][ T6617] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 200.320527][ T6632] loop2: detected capacity change from 0 to 164 [ 201.055530][ T6617] System zones: 0-1, 3-36 [ 202.053972][ T6617] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.579: bad orphan inode 134217728 [ 202.076417][ T6617] loop1: lost filesystem error report for type 5 error -117 [ 202.081151][ T6617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.028769][ T6640] loop3: detected capacity change from 0 to 2048 [ 203.043840][ T6640] ext3: Unknown parameter 'subj_role' [ 203.171309][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.183736][ T6638] autofs4:pid:6638:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b) [ 203.208056][ T6647] SET target dimension over the limit! [ 203.274420][ T6647] loop1: detected capacity change from 0 to 4096 [ 203.332021][ T6647] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.345001][ T6649] loop4: detected capacity change from 0 to 512 [ 203.821708][ T6647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.834657][ T6649] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 203.880174][ T6649] EXT4-fs (loop4): 1 truncate cleaned up [ 203.904782][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 203.904797][ T28] audit: type=1400 audit(1772801900.877:584): avc: denied { read } for pid=6646 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 203.951449][ T6649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.057768][ T6661] loop3: detected capacity change from 0 to 2048 [ 204.128135][ T6665] geneve2: entered promiscuous mode [ 204.242903][ T5898] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 204.315521][ T6667] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 204.333499][ T5898] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 204.395868][ T5898] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 204.431022][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.454426][ T6661] ext3: Unknown parameter 'subj_role' [ 204.483363][ T5898] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 204.514609][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'. [ 204.770675][ T28] audit: type=1326 audit(1772801901.737:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c1c799 code=0x7ffc0000 [ 204.896676][ T28] audit: type=1326 audit(1772801901.737:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c1c799 code=0x7ffc0000 [ 204.988390][ T28] audit: type=1326 audit(1772801901.737:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c1c799 code=0x7ffc0000 [ 205.220388][ T28] audit: type=1326 audit(1772801901.737:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c1c799 code=0x7ffc0000 [ 206.194211][ T28] audit: type=1326 audit(1772801901.737:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4f19c1c799 code=0x7ffc0000 [ 206.217849][ T28] audit: type=1326 audit(1772801901.737:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c1c799 code=0x7ffc0000 [ 206.417598][ T28] audit: type=1326 audit(1772801901.767:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c1c799 code=0x7ffc0000 [ 206.566466][ T28] audit: type=1326 audit(1772801901.767:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c1c799 code=0x7ffc0000 [ 206.783692][ T6676] loop2: detected capacity change from 0 to 8192 [ 206.800429][ T28] audit: type=1326 audit(1772801901.767:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f19c1c799 code=0x7ffc0000 [ 206.913140][ T6676] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.033518][ T6693] netlink: 64 bytes leftover after parsing attributes in process `syz.1.597'. [ 207.114199][ T6676] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 207.148551][ T6676] FAT-fs (loop2): Filesystem has been set read-only [ 207.168393][ T6695] lo speed is unknown, defaulting to 1000 [ 207.174453][ T6695] lo speed is unknown, defaulting to 1000 [ 207.182767][ T6676] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 207.203830][ T6695] lo speed is unknown, defaulting to 1000 [ 207.210149][ T6695] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 207.217771][ T6695] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 207.246507][ T6676] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 207.258102][ T6695] lo speed is unknown, defaulting to 1000 [ 207.299312][ T6695] lo speed is unknown, defaulting to 1000 [ 207.328214][ T6695] lo speed is unknown, defaulting to 1000 [ 207.359059][ T6695] lo speed is unknown, defaulting to 1000 [ 207.395847][ T6695] lo speed is unknown, defaulting to 1000 [ 207.660939][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.986811][ T6712] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 208.035676][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.602'. [ 208.393558][ T6710] loop4: detected capacity change from 0 to 512 [ 208.441439][ T6710] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 208.480365][ T6710] EXT4-fs (loop4): 1 truncate cleaned up [ 208.513597][ T6710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.669293][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.030894][ T6721] loop3: detected capacity change from 0 to 2048 [ 209.086968][ T6717] capability: warning: `syz.0.603' uses 32-bit capabilities (legacy support in use) [ 209.140868][ T6721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.223612][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 209.223639][ T28] audit: type=1400 audit(1772801906.197:659): avc: denied { map } for pid=6720 comm="syz.3.606" path="/137/file0/hugetlb.2MB.usage_in_bytes" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 209.259316][ T6721] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.606: bg 0: block 234: padding at end of block bitmap is not set [ 209.284698][ T6721] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 286 with error 28 [ 209.298518][ T6721] EXT4-fs (loop3): This should not happen!! Data will be lost [ 209.298518][ T6721] [ 209.309467][ T6721] EXT4-fs (loop3): Total free blocks count 0 [ 209.315871][ T6721] EXT4-fs (loop3): Free/Dirty block details [ 209.322578][ T6721] EXT4-fs (loop3): free_blocks=0 [ 209.327818][ T6721] EXT4-fs (loop3): dirty_blocks=288 [ 209.377164][ T6721] EXT4-fs (loop3): Block reservation details [ 209.384362][ T6721] EXT4-fs (loop3): i_reserved_data_blocks=18 [ 209.675305][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.830472][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.610'. [ 209.873104][ T28] audit: type=1400 audit(1772801906.847:660): avc: denied { getopt } for pid=6736 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.240204][ T6745] loop4: detected capacity change from 0 to 2048 [ 210.257316][ T6745] ext3: Unknown parameter 'subj_role' [ 210.494199][ T6751] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 210.514483][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.614'. [ 210.638476][ T6754] lo speed is unknown, defaulting to 1000 [ 210.646654][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.616'. [ 210.661660][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 210.703725][ T28] audit: type=1400 audit(1772801907.677:661): avc: denied { read write } for pid=6753 comm="syz.1.616" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 210.739246][ T6758] geneve2: entered promiscuous mode [ 210.773818][ T28] audit: type=1400 audit(1772801907.677:662): avc: denied { open } for pid=6753 comm="syz.1.616" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 210.848817][ T6765] loop2: detected capacity change from 0 to 2048 [ 210.892014][ T6765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.044430][ T6765] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.618: bg 0: block 234: padding at end of block bitmap is not set [ 211.071415][ T6765] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1256 with error 28 [ 211.113165][ T6771] loop3: detected capacity change from 0 to 8192 [ 211.148302][ T6765] EXT4-fs (loop2): This should not happen!! Data will be lost [ 211.148302][ T6765] [ 211.168492][ T6765] EXT4-fs (loop2): Total free blocks count 0 [ 211.174528][ T6765] EXT4-fs (loop2): Free/Dirty block details [ 211.251950][ T6765] EXT4-fs (loop2): free_blocks=0 [ 211.257041][ T6765] EXT4-fs (loop2): dirty_blocks=1264 [ 211.307829][ T6765] EXT4-fs (loop2): Block reservation details [ 211.329974][ T6765] EXT4-fs (loop2): i_reserved_data_blocks=79 [ 211.478238][ T28] audit: type=1400 audit(1772801908.357:663): avc: denied { write } for pid=6783 comm="syz.0.622" laddr=172.20.20.40 lport=255 faddr=172.20.20.40 fport=20064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.688624][ T28] audit: type=1326 audit(1772801908.587:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818d1fc799 code=0x7ffc0000 [ 211.782741][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.812261][ T28] audit: type=1326 audit(1772801908.587:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818d1fc799 code=0x7ffc0000 [ 211.837871][ T28] audit: type=1326 audit(1772801908.587:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818d1fc799 code=0x7ffc0000 [ 211.872777][ T6788] loop4: detected capacity change from 0 to 1024 [ 211.881575][ T6790] netlink: 188 bytes leftover after parsing attributes in process `syz.2.624'. [ 211.900438][ T28] audit: type=1326 audit(1772801908.587:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818d1fc799 code=0x7ffc0000 [ 211.911709][ T6788] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 211.925542][ T28] audit: type=1326 audit(1772801908.587:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f818d1fc799 code=0x7ffc0000 [ 211.949412][ T6790] netlink: 32 bytes leftover after parsing attributes in process `syz.2.624'. [ 211.972105][ T6788] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 211.982156][ T6788] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 211.993161][ T6788] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 212.002344][ T6788] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 212.022746][ T6790] netlink: 'syz.2.624': attribute type 2 has an invalid length. [ 212.099560][ T6795] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 212.140365][ T6795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.626'. [ 212.170105][ T6790] netlink: 172 bytes leftover after parsing attributes in process `syz.2.624'. [ 212.323382][ T6790] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.392923][ T6802] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 212.461831][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.629'. [ 212.913351][ T6790] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.971253][ T6809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.631'. [ 213.002736][ T6790] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.062700][ T6790] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.077600][ T6809] loop4: detected capacity change from 0 to 1024 [ 213.088513][ T6809] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.127392][ T6809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 213.148808][ T6809] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.164174][ T6809] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.631: lblock 0 mapped to illegal pblock 0 (length 1) [ 213.196615][ T5902] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.211462][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 213.221058][ T5902] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.238611][ T5902] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.247307][ T6816] bridge_slave_1: left allmulticast mode [ 213.254892][ T6816] bridge_slave_1: left promiscuous mode [ 213.270834][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.293721][ T6816] bridge_slave_0: left allmulticast mode [ 213.300278][ T6816] bridge_slave_0: left promiscuous mode [ 213.307730][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.408378][ T6822] loop3: detected capacity change from 0 to 256 [ 213.616353][ T4955] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.651156][ T6826] tipc: Enabled bearer , priority 10 [ 213.713942][ T6833] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 213.744422][ T6826] loop2: detected capacity change from 0 to 2048 [ 213.797923][ T6824] loop4: detected capacity change from 0 to 1024 [ 213.807691][ T3305] loop2: p1 p2 p3 [ 213.827069][ T6826] loop2: p1 p2 p3 [ 213.917170][ T6839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.935798][ T5054] udevd[5054]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 213.940396][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 213.958703][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 214.021228][ T6839] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.034465][ T6824] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 214.044245][ T6824] System zones: 0-1, 3-36 [ 214.059248][ T6824] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.636: bad orphan inode 134217728 [ 214.073751][ T6824] loop4: lost filesystem error report for type 5 error -117 [ 214.081550][ T6824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.153194][ T6839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.473418][ T6854] loop2: detected capacity change from 0 to 128 [ 214.768245][ T3409] tipc: Node number set to 1431033012 [ 214.792705][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.527362][ T6858] loop4: detected capacity change from 0 to 512 [ 215.670352][ T6858] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 215.705806][ T6858] EXT4-fs (loop4): 1 truncate cleaned up [ 215.750209][ T6858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.884954][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.971324][ T6874] netlink: 188 bytes leftover after parsing attributes in process `syz.4.648'. [ 215.992233][ T6877] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 216.010962][ T6874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.648'. [ 216.066253][ T6874] netlink: 'syz.4.648': attribute type 2 has an invalid length. [ 216.112149][ T6878] netlink: 172 bytes leftover after parsing attributes in process `syz.4.648'. [ 216.125970][ T6880] loop3: detected capacity change from 0 to 164 [ 216.216804][ T6880] rock: directory entry would overflow storage [ 216.245194][ T6880] rock: sig=0x5252, size=5, remaining=3 [ 216.279015][ T6882] lo speed is unknown, defaulting to 1000 [ 216.900868][ T6882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.652'. [ 216.910285][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'. [ 216.922458][ T6882] geneve0: entered promiscuous mode [ 217.530927][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 217.530943][ T28] audit: type=1326 audit(1772801914.507:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5154dc799 code=0x7ffc0000 [ 217.605116][ T28] audit: type=1326 audit(1772801914.537:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fb5154dc799 code=0x7ffc0000 [ 217.912108][ T28] audit: type=1400 audit(1772801914.557:766): avc: denied { mounton } for pid=6890 comm="syz.2.655" path="/124/bus" dev="tmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 218.137464][ T6895] loop4: detected capacity change from 0 to 4096 [ 218.547859][ T6903] loop3: detected capacity change from 0 to 128 [ 218.649082][ T6895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.786847][ T28] audit: type=1400 audit(1772801915.757:767): avc: denied { sqpoll } for pid=6894 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 219.104650][ T6911] loop3: detected capacity change from 0 to 512 [ 219.145575][ T6911] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 219.557696][ T6917] lo speed is unknown, defaulting to 1000 [ 220.191707][ T6924] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 220.444479][ T6922] loop3: detected capacity change from 0 to 512 [ 220.637334][ T6922] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 220.796624][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.821933][ T6922] EXT4-fs (loop3): 1 truncate cleaned up [ 220.856451][ T6939] netlink: 100 bytes leftover after parsing attributes in process `syz.4.667'. [ 220.890820][ T6922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.930566][ T6939] tipc: New replicast peer: 10.1.1.2 [ 220.941475][ T6939] tipc: Enabled bearer , priority 10 [ 220.998457][ T6942] loop4: detected capacity change from 0 to 2048 [ 221.010411][ T6942] ext3: Unknown parameter 'subj_role' [ 221.090825][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.125398][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.669'. [ 221.997744][ T6963] loop4: detected capacity change from 0 to 2048 [ 222.157608][ T6963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.349722][ T6963] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.674: bg 0: block 234: padding at end of block bitmap is not set [ 222.446305][ T3480] tipc: Node number set to 4251531052 [ 222.540981][ T6963] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 318 with error 117 [ 222.585291][ T6963] EXT4-fs (loop4): This should not happen!! Data will be lost [ 222.585291][ T6963] [ 222.993775][ T7930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7930 comm=syz.1.679 [ 223.255712][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.488447][ T9632] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 223.521370][ T9632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'. [ 225.550531][ T9687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.689'. [ 225.590462][ T9691] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 225.605195][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.691'. [ 225.723109][ T28] audit: type=1326 audit(1772801922.697:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 225.821273][ T28] audit: type=1326 audit(1772801922.697:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 225.845068][ T28] audit: type=1326 audit(1772801922.717:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 225.877573][ T28] audit: type=1326 audit(1772801922.717:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 226.178380][ T28] audit: type=1326 audit(1772801922.717:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 227.163389][ T28] audit: type=1326 audit(1772801922.737:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 227.187122][ T28] audit: type=1326 audit(1772801922.737:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 227.374220][ T28] audit: type=1326 audit(1772801922.737:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 228.176109][ T28] audit: type=1326 audit(1772801922.737:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 228.209168][ T28] audit: type=1326 audit(1772801922.737:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068474c799 code=0x7ffc0000 [ 228.795273][ T9716] loop4: detected capacity change from 0 to 128 [ 229.810167][ T9741] lo speed is unknown, defaulting to 1000 [ 230.542045][ T9758] loop3: detected capacity change from 0 to 128 [ 231.929425][ T9772] netlink: 80 bytes leftover after parsing attributes in process `syz.1.713'. [ 231.996425][ T9774] loop3: detected capacity change from 0 to 2048 [ 232.052111][ T9774] ext3: Unknown parameter 'subj_role' [ 232.067841][ T9776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.713'. [ 232.117034][ T9780] loop4: detected capacity change from 0 to 1024 [ 232.167996][ T9780] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 232.241458][ T9778] lo speed is unknown, defaulting to 1000 [ 232.264231][ T9780] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 232.325942][ T9780] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 232.426708][ T9780] EXT4-fs error (device loop4): ext4_get_journal_inode:5863: inode #5: comm syz.4.715: unexpected bad inode w/o EXT4_IGET_BAD [ 232.485571][ T9780] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 232.485747][ T9780] EXT4-fs (loop4): no journal found [ 232.495043][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 232.495059][ C0] EXT4-fs (loop4): initial error at time 1772801929: ext4_get_journal_inode:5863: inode 5 [ 232.495090][ C0] EXT4-fs (loop4): last error at time 1772801929: ext4_get_journal_inode:5863: inode 5 [ 232.607997][ T9780] EXT4-fs (loop4): can't get journal size [ 232.629711][ T9780] EXT4-fs (loop4): failed to initialize system zone (-117) [ 232.648315][ T9780] EXT4-fs (loop4): mount failed [ 232.751001][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 232.751035][ T28] audit: type=1400 audit(1772801929.727:810): avc: denied { create } for pid=9777 comm="syz.4.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 232.751420][ T9778] lo speed is unknown, defaulting to 1000 [ 232.805599][ T9780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.814495][ T9780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.826130][ T9780] loop4: detected capacity change from 0 to 512 [ 232.869487][ T9786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.717'. [ 232.980912][ T9768] Set syz1 is full, maxelem 65536 reached [ 232.988489][ T9780] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 233.000054][ T9780] System zones: 0-2, 18-18, 34-34 [ 233.057171][ T9780] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 233.071293][ T9786] loop3: detected capacity change from 0 to 1024 [ 233.079752][ T9780] EXT4-fs (loop4): Remounting filesystem read-only [ 233.088168][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 233.094673][ C1] EXT4-fs (loop4): initial error at time 1772801930: ext4_mb_generate_buddy:1315 [ 233.100260][ T9780] EXT4-fs (loop4): 1 truncate cleaned up [ 233.103915][ C1] EXT4-fs (loop4): last error at time 1772801930: ext4_mb_generate_buddy:1315 [ 233.114516][ T9786] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.125766][ T4812] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 233.158100][ T4812] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 233.169282][ T9780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.193306][ T4812] Quota error (device loop4): write_blk: dquota write failed [ 233.202942][ T4812] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 233.222021][ T9786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 233.235543][ T9780] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.238420][ T4812] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 233.258498][ T4812] Quota error (device loop4): write_blk: dquota write failed [ 233.259735][ T9786] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.266127][ T4812] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 233.266230][ T4812] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 233.266252][ T4812] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 233.266289][ T4812] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 233.266341][ T4812] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 233.381259][ T9786] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.717: lblock 0 mapped to illegal pblock 0 (length 1) [ 233.411723][ T9778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.715'. [ 233.428720][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 234.225132][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.499278][ T28] audit: type=1400 audit(1772801931.467:811): avc: denied { read } for pid=9809 comm="syz.0.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 234.591858][ T9810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9810 comm=syz.0.723 [ 235.882976][ T9833] loop4: detected capacity change from 0 to 164 [ 235.967683][ T9835] loop3: detected capacity change from 0 to 128 [ 236.709768][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 236.816139][ T9842] loop3: detected capacity change from 0 to 1024 [ 236.946959][ T9842] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 236.971193][ T9842] System zones: 0-1, 3-36 [ 236.991858][ T9842] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.729: bad orphan inode 134217728 [ 237.054550][ T9842] loop3: lost filesystem error report for type 5 error -117 [ 237.073097][ T9842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.344393][ T9868] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 237.479174][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.882070][ T9885] loop4: detected capacity change from 0 to 164 [ 239.676300][ T9897] loop4: detected capacity change from 0 to 2048 [ 239.683236][ T9897] ext3: Unknown parameter 'subj_role' [ 240.120268][ T9905] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 240.155637][ T9905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'. [ 241.678417][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 241.678435][ T28] audit: type=1400 audit(1772802194.646:846): avc: denied { connect } for pid=9916 comm="syz.2.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.123964][ T9912] lo speed is unknown, defaulting to 1000 [ 243.682613][ T9938] bridge0: port 3(dummy0) entered disabled state [ 243.718254][ T9938] bridge_slave_1: left allmulticast mode [ 243.728707][ T9938] bridge_slave_1: left promiscuous mode [ 243.744735][ T9938] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.783343][ T9938] bridge_slave_0: left allmulticast mode [ 243.850795][ T9938] bridge_slave_0: left promiscuous mode [ 243.856562][ T9938] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.979883][ T9943] loop3: detected capacity change from 0 to 512 [ 243.988882][ T9943] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 244.000985][ T9943] EXT4-fs (loop3): 1 truncate cleaned up [ 244.007151][ T9943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.570526][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 245.780648][ T9971] loop4: detected capacity change from 0 to 512 [ 245.790096][ T9971] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 245.826553][ T9973] lo speed is unknown, defaulting to 1000 [ 245.844058][ T9971] EXT4-fs (loop4): 1 truncate cleaned up [ 245.855095][ T9971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.978263][ T9977] lo speed is unknown, defaulting to 1000 [ 245.996441][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.111138][ T9973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.769'. [ 246.321877][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.756227][ T9982] loop4: detected capacity change from 0 to 2048 [ 246.764330][ T9982] ext3: Unknown parameter 'subj_role' [ 246.867769][ T28] audit: type=1326 audit(1772802199.836:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 246.898017][ T28] audit: type=1326 audit(1772802199.866:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 246.926810][ T28] audit: type=1326 audit(1772802199.866:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 246.950919][ T28] audit: type=1326 audit(1772802199.866:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 247.398670][ T28] audit: type=1326 audit(1772802199.866:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 247.423091][ T28] audit: type=1326 audit(1772802199.866:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 247.444658][ T9986] tipc: Failed to remove unknown binding: 66,0,0/0:152381361/152381362 [ 247.446786][ T28] audit: type=1326 audit(1772802199.866:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 247.446822][ T28] audit: type=1326 audit(1772802199.866:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd41da4c799 code=0x7ffc0000 [ 247.446852][ T28] audit: type=1326 audit(1772802199.876:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd41da4c502 code=0x7ffc0000 [ 247.531573][ T28] audit: type=1326 audit(1772802200.456:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd41da0cfce code=0x7ffc0000 [ 247.694652][ T9997] SET target dimension over the limit! [ 247.751783][ T9997] loop4: detected capacity change from 0 to 4096 [ 247.759110][ T9997] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 247.778487][ T9997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.851254][T10005] capability: warning: `syz.3.778' uses deprecated v2 capabilities in a way that may be insecure [ 247.866310][T10006] netlink: 40 bytes leftover after parsing attributes in process `syz.4.776'. [ 247.926822][T10006] netlink: 260 bytes leftover after parsing attributes in process `syz.4.776'. [ 248.729285][T10022] loop3: detected capacity change from 0 to 1024 [ 248.750001][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 248.764654][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.879463][T10027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.786'. [ 249.145427][T10035] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.783'. [ 249.155814][T10030] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.783'. [ 249.166045][T10034] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.783'. [ 249.261912][T10022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.253486][T10040] loop4: detected capacity change from 0 to 512 [ 250.662460][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.679638][T10040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.709775][T10040] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.743086][T10040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.805797][T10040] xt_hashlimit: size too large, truncated to 1048576 [ 250.840789][T10052] loop3: detected capacity change from 0 to 2048 [ 250.858633][T10059] –: renamed from veth0_to_batadv [ 250.867884][T10052] ext3: Unknown parameter 'subj_role' [ 251.735377][T10072] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 251.777060][T10072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.796'. [ 251.976493][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 251.976539][ T28] audit: type=1326 audit(1772802460.939:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f068470cfce code=0x7ffc0000 [ 252.038880][ T28] audit: type=1326 audit(1772802461.009:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f068474c5c7 code=0x7ffc0000 [ 252.075600][T10070] loop4: detected capacity change from 0 to 1024 [ 252.093680][ T28] audit: type=1326 audit(1772802461.039:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f068470cfce code=0x7ffc0000 [ 252.130031][ T28] audit: type=1326 audit(1772802461.039:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f068474c42b code=0x7ffc0000 [ 252.183066][T10070] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 252.197496][T10070] System zones: 0-1, 3-36 [ 252.210998][T10070] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.795: bad orphan inode 134217728 [ 252.232729][ T28] audit: type=1326 audit(1772802461.059:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f068470cfce code=0x7ffc0000 [ 252.276435][T10070] loop4: lost filesystem error report for type 5 error -117 [ 252.283540][T10070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.293132][ T28] audit: type=1326 audit(1772802461.059:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f068470cfce code=0x7ffc0000 [ 252.327762][ T28] audit: type=1326 audit(1772802461.089:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f068474b607 code=0x7ffc0000 [ 252.351205][ T28] audit: type=1326 audit(1772802461.089:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f068474da0a code=0x7ffc0000 [ 252.384915][ T28] audit: type=1326 audit(1772802461.351:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f068470cfce code=0x7ffc0000 [ 252.435317][ T28] audit: type=1326 audit(1772802461.351:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f068474abd7 code=0x7ffc0000 [ 252.792075][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.961007][T10095] netlink: 20 bytes leftover after parsing attributes in process `syz.2.803'. [ 253.490460][T10091] loop4: detected capacity change from 0 to 512 [ 253.821598][T10091] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 254.928677][T10093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.804'. [ 254.979006][T10091] EXT4-fs (loop4): 1 truncate cleaned up [ 255.015100][T10105] netlink: 'syz.3.804': attribute type 12 has an invalid length. [ 255.060335][T10091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.107745][T10111] loop3: detected capacity change from 0 to 256 [ 255.300752][T10093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.351537][T10093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.362929][T10113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.808'. [ 255.405559][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.446282][T10118] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 255.462884][T10118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.809'. [ 255.545225][T10119] netlink: 220 bytes leftover after parsing attributes in process `syz.0.811'. [ 255.556375][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 255.566746][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 255.587268][T10121] netlink: 'syz.1.812': attribute type 1 has an invalid length. [ 255.632885][T10121] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.657744][T10124] loop4: detected capacity change from 0 to 8192 [ 255.703386][T10125] netlink: 44 bytes leftover after parsing attributes in process `syz.0.814'. [ 255.713502][T10125] netlink: 43 bytes leftover after parsing attributes in process `syz.0.814'. [ 255.724213][T10125] netlink: 'syz.0.814': attribute type 5 has an invalid length. [ 255.734680][ T3305] loop4: p1 < > p2 p4 < p5 > [ 255.739597][ T3305] loop4: partition table partially beyond EOD, truncated [ 255.767324][ T3305] loop4: p1 start 134217728 is beyond EOD, truncated [ 255.777264][ T3305] loop4: p2 size 591360 extends beyond EOD, truncated [ 255.819927][ T3305] loop4: p5 size 591360 extends beyond EOD, truncated [ 255.830429][T10124] loop4: p1 < > p2 p4 < p5 > [ 255.835223][T10124] loop4: partition table partially beyond EOD, truncated [ 255.845422][T10124] loop4: p1 start 134217728 is beyond EOD, truncated [ 255.852851][T10124] loop4: p2 size 591360 extends beyond EOD, truncated [ 255.861614][T10124] loop4: p5 size 591360 extends beyond EOD, truncated [ 256.441343][T10139] lo speed is unknown, defaulting to 1000 [ 256.566246][T10144] loop3: detected capacity change from 0 to 128 [ 256.659841][T10143] 9pnet_virtio: no channels available for device syz [ 256.673569][T10143] netlink: 'syz.3.818': attribute type 10 has an invalid length. [ 256.793205][T10143] dummy0: left promiscuous mode [ 256.798172][T10143] dummy0: left allmulticast mode [ 256.812335][T10143] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 257.143576][T10156] __nla_validate_parse: 1 callbacks suppressed [ 257.143600][T10156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.821'. [ 257.301324][T10164] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 257.320519][T10152] loop3: detected capacity change from 0 to 512 [ 257.352391][T10164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.825'. [ 257.379258][T10152] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 257.443643][T10152] EXT4-fs (loop3): 1 truncate cleaned up [ 257.524832][T10152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.895418][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.548333][T10181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.829'. [ 258.702370][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 258.702389][ T28] audit: type=1400 audit(1772802723.714:918): avc: denied { write } for pid=10183 comm="syz.4.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 259.865748][T10196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.835'. [ 259.991425][T10201] xt_hashlimit: size too large, truncated to 1048576 [ 260.043226][T10202] –: renamed from veth0_to_batadv [ 260.218813][T10206] 9p: Bad value for 'rfdno' [ 260.385034][T10214] loop4: detected capacity change from 0 to 8192 [ 260.392846][T10214] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.485998][ T28] audit: type=1400 audit(1772802725.509:919): avc: denied { create } for pid=10204 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 260.668916][T10209] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 260.678618][T10209] FAT-fs (loop4): Filesystem has been set read-only [ 260.686237][T10209] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 260.695163][T10209] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 260.753603][ T28] audit: type=1400 audit(1772802725.781:920): avc: denied { mount } for pid=10217 comm="syz.4.840" name="/" dev="hugetlbfs" ino=14433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 260.777654][ T28] audit: type=1400 audit(1772802725.801:921): avc: denied { create } for pid=10217 comm="syz.4.840" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 261.055354][T10225] netlink: 20 bytes leftover after parsing attributes in process `syz.4.843'. [ 261.137062][T10225] loop4: detected capacity change from 0 to 1024 [ 261.151763][T10225] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.197935][ T28] audit: type=1400 audit(1772802726.234:922): avc: denied { write } for pid=10231 comm="syz.1.845" lport=36474 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 261.237904][ T28] audit: type=1400 audit(1772802726.265:923): avc: denied { getopt } for pid=10231 comm="syz.1.845" lport=36474 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 261.328507][T10225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 261.342643][T10225] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.363245][T10225] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.843: lblock 0 mapped to illegal pblock 0 (length 1) [ 261.457026][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 261.508034][T10249] loop4: detected capacity change from 0 to 512 [ 261.556111][T10249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.380709][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.598601][T10276] loop4: detected capacity change from 0 to 8192 [ 263.964700][T10282] ================================================================== [ 263.972844][T10282] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 263.980342][T10282] [ 263.982692][T10282] read-write to 0xffff88811a5b76b8 of 8 bytes by interrupt on cpu 0: [ 263.990790][T10282] __xa_clear_mark+0xf5/0x1e0 [ 263.995504][T10282] __folio_end_writeback+0xf4/0x360 [ 264.000746][T10282] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 264.007021][T10282] folio_end_writeback+0x1c/0x70 [ 264.011993][T10282] mpage_write_end_io+0x270/0x630 [ 264.017068][T10282] bio_endio+0x38a/0x420 [ 264.021467][T10282] blk_update_request+0x338/0x740 [ 264.026551][T10282] blk_mq_end_request+0x26/0x50 [ 264.031790][T10282] lo_complete_rq+0x98/0x140 [ 264.036432][T10282] blk_done_softirq+0x77/0xb0 [ 264.041152][T10282] handle_softirqs+0xb9/0x2a0 [ 264.045970][T10282] __irq_exit_rcu+0x39/0xc0 [ 264.050603][T10282] sysvec_call_function_single+0x6b/0x80 [ 264.056635][T10282] asm_sysvec_call_function_single+0x1a/0x20 [ 264.062844][T10282] finish_task_switch+0x86/0x280 [ 264.067988][T10282] __schedule+0x93c/0xd40 [ 264.072360][T10282] preempt_schedule_irq+0x2d/0x50 [ 264.077509][T10282] raw_irqentry_exit_cond_resched+0x4b/0x60 [ 264.083440][T10282] irqentry_exit+0x91/0x520 [ 264.087991][T10282] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 264.093575][T10282] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 264.099267][T10282] __unix_dgram_recvmsg+0x3a7/0x860 [ 264.104514][T10282] unix_dgram_recvmsg+0x81/0x90 [ 264.109394][T10282] sock_recvmsg_nosec+0xc2/0xf0 [ 264.114279][T10282] ____sys_recvmsg+0x26f/0x280 [ 264.119165][T10282] ___sys_recvmsg+0x11f/0x3b0 [ 264.123884][T10282] do_recvmmsg+0x1ef/0x560 [ 264.128432][T10282] __x64_sys_recvmmsg+0xe5/0x170 [ 264.133501][T10282] x64_sys_call+0x80f/0x3020 [ 264.138144][T10282] do_syscall_64+0x12c/0x370 [ 264.142775][T10282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.148700][T10282] [ 264.151053][T10282] read to 0xffff88811a5b76b8 of 8 bytes by task 10282 on cpu 1: [ 264.158718][T10282] xas_find_marked+0x213/0x620 [ 264.163515][T10282] filemap_get_folios_tag+0xfa/0x510 [ 264.168850][T10282] filemap_write_and_wait_range+0x1f5/0x370 [ 264.174875][T10282] direct_write_fallback+0x73/0x100 [ 264.180112][T10282] __generic_file_write_iter+0xfd/0x120 [ 264.185790][T10282] generic_file_write_iter+0x8d/0x310 [ 264.191194][T10282] do_iter_readv_writev+0x4fd/0x5a0 [ 264.196429][T10282] vfs_writev+0x2e1/0x900 [ 264.200796][T10282] __se_sys_pwritev2+0xfc/0x1c0 [ 264.205854][T10282] __x64_sys_pwritev2+0x67/0x80 [ 264.210742][T10282] x64_sys_call+0xe07/0x3020 [ 264.215372][T10282] do_syscall_64+0x12c/0x370 [ 264.219997][T10282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.225923][T10282] [ 264.228357][T10282] value changed: 0xffffe00000000000 -> 0xe000000000000000 [ 264.235924][T10282] [ 264.238276][T10282] Reported by Kernel Concurrency Sanitizer on: [ 264.244485][T10282] CPU: 1 UID: 0 PID: 10282 Comm: syz.4.855 Tainted: G W syzkaller #0 PREEMPT(full) [ 264.255678][T10282] Tainted: [W]=WARN [ 264.259511][T10282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.269688][T10282] ==================================================================