last executing test programs: 6m19.554433773s ago: executing program 1 (id=1247): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x502, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2f, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x100, @val=0x80}}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x511, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x4, 0x4, 0x9}, 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x100000b, 0x13, r0, 0xd46f4000) 6m18.679296441s ago: executing program 1 (id=1261): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000190c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5, 0x700}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841) (fail_nth: 3) 6m18.235953756s ago: executing program 1 (id=1262): setpriority(0x2, 0x0, 0x7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x2000000000000158, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xd8bf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xc}, 0x94) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x25, 0x80000000000c}, 0x101, 0x0, 0x802, 0x0, 0x4, 0x8001, 0xfffd}, 0x0, 0xf, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000c00) 6m18.183143907s ago: executing program 1 (id=1264): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00\x00', 0x3}], 0x1}, 0x80054) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) mount$bpf(0x200000002010, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2082, 0x0) 6m18.100521s ago: executing program 1 (id=1265): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcd}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x22}, 0x94) 6m17.871833768s ago: executing program 1 (id=1267): r0 = socket$l2tp6(0xa, 0x2, 0x73) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x20000001}, 0x995d, 0x6, 0x1, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @local, 0x83, 0x4}, 0x20) 6m17.855702449s ago: executing program 32 (id=1267): r0 = socket$l2tp6(0xa, 0x2, 0x73) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x20000001}, 0x995d, 0x6, 0x1, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @local, 0x83, 0x4}, 0x20) 3m58.675749433s ago: executing program 2 (id=2387): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(0xffffffffffffffff) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7fff, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) futex(0x0, 0x7, 0x2, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r6, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES8=r6], 0x30}, 0x4004000) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x259, 0x0) sendmmsg$unix(r5, &(0x7f0000009440)=[{{0x0, 0xffa4, &(0x7f00000015c0)=[{&(0x7f0000000140)='f', 0x1}], 0x1, &(0x7f0000000100)=[@rights={{0x18, 0x1, 0x1, [r4, r4]}}], 0x18, 0x40}}], 0x1, 0x4) 3m57.496045381s ago: executing program 2 (id=2409): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) (fail_nth: 2) 3m57.400331204s ago: executing program 2 (id=2411): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', 0x0}) r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0x0, 0x1e8, 0xf8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0x0, 0xff, 0x0, 0xff000000], 'pimreg1\x00', 'wg1\x00', {}, {0xff}, 0x1d, 0x5, 0x1, 0x10}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x3f, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {0xff}, {0xff}}, 0x0, 0xf0, 0x120, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8, 0x6, 0x5ea, 0x2}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) connect$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000100)='{&\x00', 0x40601, &(0x7f0000000140)={@align=0x40, {0x3, 0x2, 0x401}}, 0xad4b, &(0x7f0000000180)={@_ha_fsid}, 0x0}) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00001001000000f0ffffff0400000034000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32], 0x50) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 3m57.339684377s ago: executing program 2 (id=2413): bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xa}, @void, @val={0xc, 0x99, {0x7, 0x4b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x400) mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x28020500) close(0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000061000007b8af8ff00000000bfa200000000000007020000f8ffffffdfc0000008000000b70400000080000000000000df8500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000e30722875f9db989edacf6dfcd300000bc59252a201d6f2e08f447442d51735aa4d0c60f53af50d53e9700a9586ca2899c4ba57d042877fbe449ac711b251e81080000000000000060b57ef7ff605132fe6038b694"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000000)={0x4, 0x6, 0x1, 0x4}) r10 = socket$kcm(0xa, 0x2, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ptrace(0x10, 0x0) ptrace$cont(0x21, 0x0, 0x80000001, 0x4) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) splice(r1, 0x0, r2, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 3m56.744088396s ago: executing program 2 (id=2421): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x2003, r0, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendto$inet(r1, &(0x7f0000000240)='k', 0x1, 0xc0400c0, 0x0, 0x0) sendto(r1, &(0x7f0000001e00)="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", 0x349, 0x2000c010, 0x0, 0x0) 3m56.263954952s ago: executing program 2 (id=2425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x105, &(0x7f0000000400)=""/261, 0xb6df4c32c1d5c814}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r2, &(0x7f0000000000), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0xb, @any, 0x0, 0x1}, 0xe) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x8100, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) creat(&(0x7f00000001c0)='./file1\x00', 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c0002800800054000000003080002400020000208000140000000010900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{&(0x7f00000000c0)="f39d9cc08b98ffa7e9908d8d1124054a1d99b7faa1fe5b545c78015e1557c6dd3bff4274c7e23620345610d95d5fee36338c738ad9ebe0cc811fe60f9f317dbaaaa120e5065bd705636b9d7136b8ff79d58e11e555cb199232ae4e226e3cfd40b8a2156f22af69f0f9f373ea9687e6d9d4790e9702ab80061ae09b92cb47833c4f88d8b8c5de4c22b915017abe7c73e0fc39cf0766c61f42baf3d2e0dd3bf74a9d46e19494bce245e6a40165c977726ec56dfeeda562e3bd9c3a3f0a72", 0xbd, 0x2}, {&(0x7f0000000240)="bdf73abab6aba67549bf2ed7140305005cd1b854ed673a7a14e7ea41d0f12f7f379c00b41eef98602c37e1f8cb14a1ffb19327d2fcd2ce54e2a8a8eb358e15b28d5706d195b1bf58e961d25e2254bc", 0x4f, 0x2}, {&(0x7f00000002c0)="93c47083b0c82f7159536d767a6fe08ae5bc1675996e6f7e46727060b4955f006982021e322e09ceae06ced71504", 0x2e, 0x3}, {&(0x7f0000000300)="5e224e9d7bc527e62f30e41311220e5215faa866c7279334e4f41c3e25ee43d050df68b527c8593c3a7406573afa58689d8ccede0d6c02af5278966a5b0b7015b16d6aa62e43ff2095a89874336d30c41f977ab5bdff7d4e9f90c3da1f41", 0x5e, 0x1}, {&(0x7f0000000440)="a24d8826869642c9f3ba528948b9863a39f1c03c14eefb72a61b853e9dcdb8c1a92518493cfc8036998bf7550f054f0ff370bd03cda1198c07dd11f5e73e67c997ed7e92bd8ae4eca12ebfadb05170764872dc1839f2718fa4ceff01959c06a548a72b9d65e1b4751456d6adcf1103d714e86a8c7396fd7e296a3a8a4d6188c4a9b5be7e913c07fad36d41bced22d31dc17a4b988f9daf884dc2d3e610e97597dd35b040aceb704753e7995edfe0d02f3f676e", 0xb3, 0x2}, {&(0x7f0000000500)="d6a9abd7535e5a4453aaad3e57eb5a55cdc71360e623bc1a3e783cbe4c98b80e229558d46e70", 0x26, 0x2}, {&(0x7f0000000040)="0dea74b2067e1b7e9e6586e68dd462f576a193bd", 0x14, 0x3}]}, 0x7}, 0x1) 3m56.222779643s ago: executing program 33 (id=2425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x105, &(0x7f0000000400)=""/261, 0xb6df4c32c1d5c814}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r2, &(0x7f0000000000), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0xb, @any, 0x0, 0x1}, 0xe) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x8100, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) creat(&(0x7f00000001c0)='./file1\x00', 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c0002800800054000000003080002400020000208000140000000010900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{&(0x7f00000000c0)="f39d9cc08b98ffa7e9908d8d1124054a1d99b7faa1fe5b545c78015e1557c6dd3bff4274c7e23620345610d95d5fee36338c738ad9ebe0cc811fe60f9f317dbaaaa120e5065bd705636b9d7136b8ff79d58e11e555cb199232ae4e226e3cfd40b8a2156f22af69f0f9f373ea9687e6d9d4790e9702ab80061ae09b92cb47833c4f88d8b8c5de4c22b915017abe7c73e0fc39cf0766c61f42baf3d2e0dd3bf74a9d46e19494bce245e6a40165c977726ec56dfeeda562e3bd9c3a3f0a72", 0xbd, 0x2}, {&(0x7f0000000240)="bdf73abab6aba67549bf2ed7140305005cd1b854ed673a7a14e7ea41d0f12f7f379c00b41eef98602c37e1f8cb14a1ffb19327d2fcd2ce54e2a8a8eb358e15b28d5706d195b1bf58e961d25e2254bc", 0x4f, 0x2}, {&(0x7f00000002c0)="93c47083b0c82f7159536d767a6fe08ae5bc1675996e6f7e46727060b4955f006982021e322e09ceae06ced71504", 0x2e, 0x3}, {&(0x7f0000000300)="5e224e9d7bc527e62f30e41311220e5215faa866c7279334e4f41c3e25ee43d050df68b527c8593c3a7406573afa58689d8ccede0d6c02af5278966a5b0b7015b16d6aa62e43ff2095a89874336d30c41f977ab5bdff7d4e9f90c3da1f41", 0x5e, 0x1}, {&(0x7f0000000440)="a24d8826869642c9f3ba528948b9863a39f1c03c14eefb72a61b853e9dcdb8c1a92518493cfc8036998bf7550f054f0ff370bd03cda1198c07dd11f5e73e67c997ed7e92bd8ae4eca12ebfadb05170764872dc1839f2718fa4ceff01959c06a548a72b9d65e1b4751456d6adcf1103d714e86a8c7396fd7e296a3a8a4d6188c4a9b5be7e913c07fad36d41bced22d31dc17a4b988f9daf884dc2d3e610e97597dd35b040aceb704753e7995edfe0d02f3f676e", 0xb3, 0x2}, {&(0x7f0000000500)="d6a9abd7535e5a4453aaad3e57eb5a55cdc71360e623bc1a3e783cbe4c98b80e229558d46e70", 0x26, 0x2}, {&(0x7f0000000040)="0dea74b2067e1b7e9e6586e68dd462f576a193bd", 0x14, 0x3}]}, 0x7}, 0x1) 2m52.304962923s ago: executing program 5 (id=3032): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x8, 0x21, 0x3, 0xf, {{0x21, 0x4, 0x3, 0x4, 0x84, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x7, 0x7d, [@empty]}, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x17, [@dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010100]}, @generic={0x7, 0xc, "2ebf7cef83bb3752d09b"}, @timestamp_prespec={0x44, 0x24, 0xba, 0x3, 0x0, [{@loopback, 0xf}, {@remote, 0x2}, {@local, 0x1}, {@loopback, 0x9}]}, @rr={0x7, 0xb, 0x4f, [@loopback, @rand_addr=0x64010102]}, @lsrr={0x83, 0x1b, 0xe1, [@broadcast, @broadcast, @remote, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x44}, @local]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000120010002dbd7000fedbdf251f8109064e234e2002000000020000000600000080000000ff01000006000000ff7f000003000000", @ANYRES32=r1, @ANYBLOB="05000000ff0f00000b00000040000000e80001000ce8d0847fe074bffb572eef73c230bb2fb5e269f6c0401b01ac2dc151fa2944286f9f076ca701678adf74eb0ba72ae4d8d406dc18f01754dfcb6027ec8a6e85e608a08bb0147c60e9a24b29e231dabdc32611dc48aad06be1989293d563898b96d7c0a51581dc219d1a629719f0237d8cd592c0e05a4cf55a5b989bd304f5dc42a1b0db2a3f0d45647daf4a3b1433d67765e42f494b18abae7e34af5cca17835c8f7be48ca1027f0d5c93d7d005f4e04729c809fa9b446161132dd2928edf5cc1f45a44ec88cfecdf5b9eaae6fc5d59905248afc315e7c51300176ca74ec5a2dc61fa6d"], 0x134}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) 2m52.220293346s ago: executing program 5 (id=3033): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) open(0x0, 0x0, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x107e, 0x1, @perf_config_ext={0x4b, 0x4168}, 0x10c8e8, 0x0, 0x0, 0x3, 0x800, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000002c0)={0x8}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_open_dev$usbfs(&(0x7f00000000c0), 0x4, 0x8480) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000200)={[{@grpquota}]}, 0x9, 0xbac, &(0x7f00000017c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x0, 0xffffffffffffffff}}, './file0\x00'}) getgroups(0x0, &(0x7f0000000400)) r6 = getegid() setresgid(r5, r6, r6) fallocate(r1, 0x63, 0x0, 0x8001000f3) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) r7 = perf_event_open(0x0, 0x0, 0xb, r0, 0x9) r8 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r8, &(0x7f00000000c0), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x200000000, 0x20, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, r7, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3e8, 0x1, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x4004) socket(0x80000000000000a, 0x2, 0x0) 2m51.915837726s ago: executing program 5 (id=3038): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "b84c13d764315c96", "f8faaec9024e068ca57654b6e23fc4e5", "b91011c8", "ac3d7dd7d672f461"}, 0x28) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r5, r4, &(0x7f00000001c0)=0x1, 0x8) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000140)) truncate(0x0, 0x4b9b3ae1) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000073, 0x0, 0x0) 2m51.79660772s ago: executing program 5 (id=3039): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x689}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x6df9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0xa00000, &(0x7f0000000ec0)=ANY=[], 0x1, 0x1b2, &(0x7f0000000300)="$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") capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x10, 0x89, 0xffffffff}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1, 0x3}}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc040ff0b, &(0x7f0000000180)) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e2b, 0xc, @mcast2, 0x40008f}, 0x1c) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@dax_always}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x8ffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x1002, 0x7, 0x7, 0x9, 0x5, 0x3, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x27, 0x80805, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 2m51.620350045s ago: executing program 5 (id=3040): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40d0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@errors_remount}, {@lazytime}, {@grpjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@minixdf}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cb00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002fc0)={0x10, 0x22, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000001c0)={0x9, 0xfffffffffffffffd, 0x1, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x24000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x8080) 2m51.445655581s ago: executing program 5 (id=3042): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x1800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000000c0)=0x4, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x0, 0x20c, 0x6, 0x7fffffffffffffff, 0x20000001000, 0x7, 0xfffffffd}) socket$inet(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 2m51.394398853s ago: executing program 34 (id=3042): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x1800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000000c0)=0x4, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x0, 0x20c, 0x6, 0x7fffffffffffffff, 0x20000001000, 0x7, 0xfffffffd}) socket$inet(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 2m23.517474181s ago: executing program 7 (id=3234): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, 0x0, 0xb4440) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000090000000400000002000006040000000300000000000000050000000000000000000061"], &(0x7f0000003680)=""/4096, 0x3d, 0x1000, 0x1}, 0x28) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) 2m20.478764002s ago: executing program 7 (id=3267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0xd5fc, 0x21fffc, 0x1000, 0x0, 0x2, 0x5}) setxattr$incfs_size(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="c7850a010000800000000017"]) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x119, 0x487, 0x0, &(0x7f0000000480)=0xffffffffffffffa5) 2m20.340298456s ago: executing program 7 (id=3269): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x8, 0x0, 0x0, 0x9, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0xb410}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r2 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f00000012c0)=""/242, &(0x7f00000013c0)=0xf2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x204, 0x8200, 0x914, 0xfffffffd, 0x0}, &(0x7f0000000040)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000a01040000000000000000010080030900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000014000000060a0104000000000000000001000000140000001100010000000000000000000700000a00"/136], 0x88}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e24, 0x11, @private0, 0x4}}, 0x0, 0x6246, 0x9, 0x9, 0x72, 0x4887, 0x9}, 0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) syz_open_procfs(0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'team_slave_0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 2m20.309753148s ago: executing program 7 (id=3271): perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2000000004b, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0x100b08, 0x6, 0x0, 0x9, 0x8, 0x20001, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@nombcache}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@nombcache}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x163041, 0x0) write$P9_ROPEN(r0, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x80, 0x2, 0x7}, 0x6}}, 0x18) ioperm(0x6c2, 0x3, 0x8) ioctl$FIONCLEX(r0, 0x5450) (async) ioctl$FIONCLEX(r0, 0x5450) syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x3, "03"}]}}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80, 0x1000}}}}}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) (async) pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000010000000200020000000900010073797a3000000000090003"], 0x2c}}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000010000000200020000000900010073797a3000000000090003"], 0x2c}}, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, &(0x7f00000001c0)) 2m20.188918161s ago: executing program 7 (id=3272): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x19d01, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3825d045, 0x81}, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003e00)=[{{&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000000000000070000004404f8f000000000a4936a09c81002205293db07876e561a48f3c1c44c97751d7a6968224e441190b12dacedec35563628c9989c6b4b7915af0cc303c532d945c2f9179f4bad27371fc75a6b0b92d7217ba4f566cd9d50875164561415e41ab5beb18f24471fe3ba29c199021b85fa4b82d938a27095cf869575df2473298fef9fe7d8ec0ddc0e63d700000000000000"], 0x18}}], 0x1, 0x240080e4) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000300)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYRES16=r1, @ANYRESDEC, @ANYRES8=r1], 0x0, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x8402, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8001, 0xf7f}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) bind$can_raw(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) mq_timedsend(r3, 0x0, 0xec00, 0xd, 0x0) 2m19.430054486s ago: executing program 7 (id=3284): r0 = eventfd2(0x9da2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000240)=r0, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000680)=""/167, 0xa7, 0x8) io_uring_enter(r1, 0x904, 0x28b9, 0x2, &(0x7f0000000200)={[0x1]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc08f, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000300)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x40, 0x74, 0x20, 0x4a56e}, {0x6, 0x2, 0x10}, {0x0, 0x5, 0xd, 0x7}]}, 0x10) sendmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="c8b014a7", 0x4}], 0x1}}], 0x1, 0x40048) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 2m19.405484777s ago: executing program 35 (id=3284): r0 = eventfd2(0x9da2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000240)=r0, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000680)=""/167, 0xa7, 0x8) io_uring_enter(r1, 0x904, 0x28b9, 0x2, &(0x7f0000000200)={[0x1]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc08f, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000300)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x40, 0x74, 0x20, 0x4a56e}, {0x6, 0x2, 0x10}, {0x0, 0x5, 0xd, 0x7}]}, 0x10) sendmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="c8b014a7", 0x4}], 0x1}}], 0x1, 0x40048) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 6.590619853s ago: executing program 0 (id=4548): syz_open_dev$usbfs(0x0, 0xb, 0x101301) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x0, 0x6a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000, &(0x7f0000000100), 0x2, 0x52c, &(0x7f0000000440)="$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") r1 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000000)=""/103) 6.38854491s ago: executing program 0 (id=4551): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) rename(&(0x7f0000000180)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 6.36383113s ago: executing program 0 (id=4552): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x8, 0x0, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x400) (async) r3 = dup(r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x9, 0x29, 0x0, r3}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) fsmount(r3, 0x1, 0xfa) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) inotify_rm_watch(r3, r2) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) 6.292191663s ago: executing program 0 (id=4553): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x5c, r2, 0x1, 0xffffffff, 0x0, {0x37}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2000000}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xfcb3ae1e0968818a}, 0x8006) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x20008800) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r7) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r6, 0x0, r8, 0x0, 0x10d00, 0xf) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) rename(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000003000000000000000000000018490000fdffffff000000000000000018010000786c6c2500000000002020207b1a050000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000800)='syzkaller\x00'}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 6.116422329s ago: executing program 0 (id=4554): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0xa9, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x802, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r6 = syz_open_pts(r5, 0x80) r7 = dup3(r6, r5, 0x80000) read(r7, &(0x7f0000000100)=""/213, 0xd5) read$watch_queue(r7, &(0x7f0000001d40)=""/4095, 0xfdef) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x19404, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1a, &(0x7f0000000340)=@raw=[@generic={0x2, 0x8, 0x7, 0x5, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x493}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000440)='GPL\x00', 0x40, 0x28, &(0x7f0000000480)=""/40, 0x41100, 0x40, '\x00', r2, 0x25, r3, 0x8, &(0x7f00000008c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0xb, 0x7, 0x80000001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000980)=[r4, r7, r8], &(0x7f00000009c0)=[{0x2, 0x1, 0x0, 0x5}, {0x1, 0x5, 0xd, 0x3}, {0x4, 0x4, 0x9, 0x1}]}, 0x94) 6.095080219s ago: executing program 0 (id=4556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001000010400000000bf000000000000008392bb10bbba8c24d19fcbea6ef460fcc76a84bb9bf27260d41b1e49c8ad28981af1dd990506ca2e3bbecae7e64b1526a7df71ed9a03c870c2e82d371a5ab5c4ae300198c173d55a2354724b236fc80b7d7d352427a9025791661f8ca5", @ANYRES32=0x0, @ANYBLOB="a1800000000000001800128008000100736974000c000280050009003b000000"], 0x38}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000100)='./bus\x00', 0x120441, &(0x7f0000000c80)={[], [{@obj_user={'obj_user', 0x3d, '*'}}, {@subj_role={'subj_role', 0x3d, '\xbd\x11q\xd2\x01\xa1\xb1\x8d\x8f\x18\x1a\xe8-\xfb62\xf4\xd8\xa8D\x14\xb6j\xea\xd8\xa0,\x8c]\xb4*\xfb\xb9\xcd\x14=\t\x99\a\xe1x\xf2\xa6\x87\x91/\x05G\xed\xa1E\xe0\xdb\x03d\xe0u\xbaE\x00'/77}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, ':\',$)],#\xf7,'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@pcr={'pcr', 0x3d, 0x1}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsname={'fsname', 0x3d, ':\xe5%'}}]}, 0x1, 0x457, &(0x7f0000001780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x94) r7 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r7, &(0x7f0000f62000/0x1000)=nil, 0x7000) r8 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x1180c2a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@dax_never}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@dax}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@noblock_validity}]}, 0x2, 0x47e, &(0x7f0000000640)="$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") fchmodat(r8, &(0x7f0000000300)='.\x00', 0xfffffffd) mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) 5.118082921s ago: executing program 3 (id=4562): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x2, 0x5, 0x3fd, 0x0, 0xb2, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x0, 0x4, 0x54, 0x0, 0x6}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040000) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xffff7ffc, @loopback}, 0x1c) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000700)={0x7fff, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x6, 0x4) r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) open_by_handle_at(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="10000000f1000000980000000000000000000040"], 0x400040) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1004, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0xffffffffffffc, 0x9}, 0x102270, 0xfffd, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000820000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 1.84454687s ago: executing program 3 (id=4570): mknodat(0xffffffffffffffff, 0x0, 0x400, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000ffff000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.844229799s ago: executing program 8 (id=4571): socket$nl_route(0x10, 0x3, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$unix(r1, &(0x7f0000009440)=[{{0x0, 0xffa4, &(0x7f00000015c0)=[{&(0x7f0000000140)='f', 0x1}], 0x1, &(0x7f0000000100)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18, 0x40}}], 0x1, 0x4) 1.84353381s ago: executing program 3 (id=4572): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x1000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) open(&(0x7f0000000280)='.\x00', 0x80, 0x122) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) copy_file_range(r3, 0x0, r3, &(0x7f00000004c0)=0x100, 0x9, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x81ffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x2, 0xfff2}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1.760229102s ago: executing program 8 (id=4574): syz_open_dev$usbfs(0x0, 0xb, 0x101301) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x0, 0x6a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000, &(0x7f0000000100), 0x2, 0x52c, &(0x7f0000000440)="$eJzs3U9sI1cZAPBvJsnau802W+gBUKFLKSxotXbibVdVL5RThVAlRA8cOGxD4kRR7PUqdkoTVih75I5EJU5w4swBiQNST9yRQIIbl3JAKrAqapCQMPJ4nDp/nFhbx17i308azZ834++9WPPe6LMyL4CpdT0i9iLiUkS8FREL+fEkX+K17tI576NHD1b2Hz1YSaLdfvMfSVbeORZ913Q8lX9mMSK+83rE95MjQf8Q0dzZ3Vyu1apb+aFyq36/3NzZvbVRX16vrlfvVSp3lu4svnL75crI2vp8/VcfXI6I3/7m8+//fu9rP+xUaz4v62/HKHWbPncQp2M2Ir51HsEmYCZvz6XHufixLmKU0oj4VES8kN3/CzGTfZuHHf6avj7G2gEA56HdXoj2Qv8+AHDRpVkOLElLeS5gPtK0VOrm8J6NK2mt0WzdXGts31vt5squxVy6tlGrLua5wmsxl6xtzFaXsu3efq1aObJ/OyKeiYifFC4naxvfjYhGbXWSDz4AMMWeOjL+/6vQHf8BgAuu+PFmYZL1AADGpzjpCgAAY2f8B4DpY/wHgOlj/AeA6WP8B4DpY/wHgKny7Tfe6Czt/fz916tv72xvNt6+tVptbpbq2yullcbW/dJ6o7Feq5ZWGvWzPq/WaNxfeim23ym3qs1Wubmze7fe2L7Xupu91/tudW4srQIATvPM8+/9OYmIvVcvZ0v0ve9/7qzUwHPjqCFwXtJJVwCYmJlJVwCYmOOzfQHTQj4eptd/2+129M3dGxEPD7b6XgY6MA/47lBhUvOGwpPnxmdPz/8DF5f8P0yvx8v/e5aHi0D+H6ZXu52Y8x8ApowcP5CcUd7/+/9iu29nuN//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EKaz5YkLeVzgc9HmpZKEVcj4lrMJWsbtepiRDwdEX8qfHhwnXmDAOD/Wfq3JJ//68bCi/NHSy8V/l3I1hHxg5+9+dN3llutraWIS8k/D4633s2PVyZRfwDgLL1xujeO93z06MFKbxlnfT74Rndy0U7c/XzplszGbLYuZrmGKx8m+X5X53llZgTx9x5GxGdOan+S5Uau5TOfHo3fiX11rPHTQ/HTrKy77vwtPj2CusC0ea/T/7x20v2XxvVsffL9X8x6qE+u1//tH+v/0oP+b2ZA/3d92Bgv/e6bxw62F7plDyM+Nxux3/vwvv6nFz8ZEP/FIeP/5bkvvDCorP3ziBtxUvuTQ7HKrfr9cnNn99ZGfXm9ul69V6ncWbqz+MrtlyvlLEdd7mWqj/v7qzefHhS/0/4rA+IXz2j/l4ds/y/+89b3vnhK/K9+6eTv/9lT4nfGxK8MGX/5yq+Lg8o68VcHtH/96uD4nWM3h4z//l93V4c8FQAYg+bO7uZyrVbd+uQbxVPPSUcRYnO5NhOnn/Oj/ClldO3KN/64cLyo8Msfv3725YVRVuM8NmJQ0cyTUsMLs1EY4pzLT0RVJ90zAeft45t+0jUBAAAAAAAAAAAAAAAGGce/E026jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxc/wsAAP//wh7SbQ==") r1 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000000)=""/103) 1.634619226s ago: executing program 8 (id=4578): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000700)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x30c}}, {@nomblk_io_submit}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@data_err_abort}]}, 0xff, 0x44d, &(0x7f0000000d80)="$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") r2 = creat(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0xff01, r2, 0x0, 0x0, 0x4000002000, 0x0, 0x0, r2}]) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="0100758a0000fedbdf250a000000040001808ee9a5693f"], 0x18}}, 0x10) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r4) syz_pidfd_open(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008c000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800009db703000000f8ffff850000000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000401d, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x103000, 0xfffffffffffffffc, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000140)='tracefs\x00', 0x800000, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) sync_file_range(r5, 0x4, 0x9aa, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 1.594330587s ago: executing program 3 (id=4580): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0x1, 0x2eb, &(0x7f0000000680)="$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") getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000840)=""/4127, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x2, 0x4, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc881, 0xc000, 0x0, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r2, 0x71e7, 0x7721, 0x33, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000380)={0x8, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="80e236c257fcdd8e8f98b1387e5c0a3400b69f", @ANYRESOCT=r0, @ANYBLOB="010000000000000000000d00000005000700090000000600080000000000050017000000000006000a00ffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x200000c4) 1.549890709s ago: executing program 6 (id=4581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 1.53906438s ago: executing program 3 (id=4582): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast2, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) 1.384506634s ago: executing program 3 (id=4583): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) set_mempolicy(0x3, 0x0, 0x5) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x4a7) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x3, 0x4}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfd', @ANYRESHEX=r7]) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 1.163543972s ago: executing program 8 (id=4584): socket$nl_route(0x10, 0x3, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$unix(r1, &(0x7f0000009440)=[{{0x0, 0xffa4, &(0x7f00000015c0)=[{&(0x7f0000000140)='f', 0x1}], 0x1, &(0x7f0000000100)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18, 0x40}}], 0x1, 0x4) 1.106724233s ago: executing program 8 (id=4585): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r4, r3}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0xa7}}}}}}, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) statx(r5, &(0x7f00000001c0)='./file0\x00', 0x100, 0x7ff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)=@expire={0x18c, 0x18, 0x10, 0x70bd2b, 0x25dfdbfe, {{{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x4e23, 0xaf29, 0x4e24, 0xd, 0xa, 0x80, 0x80, 0x2c, r3, r6}, {@in=@remote, 0x4d2}, @in6=@mcast2, {0x4, 0x7f, 0x0, 0x1, 0xfffffffffffffe01, 0xd2bf, 0xdf59, 0x8000000000000000}, {0x0, 0x80000001, 0x1, 0x72}, {0x1, 0x0, 0x5}, 0x70bd2b, 0x3501, 0x2, 0x4, 0x40, 0x8}, 0x5}, [@address_filter={0x28, 0x1a, {@in6=@remote, @in=@multicast1, 0x2, 0x9, 0xd}}, @sec_ctx={0x57, 0x8, {0x53, 0x8, 0x0, 0x1, 0x4b, "50068966495749d85eb800bebaa56dd93cab443a8e4056eb348fac1605020c18b25fa7ae5e4980ea98acd9783a691cbc69b9a67186368ffc3c15ed5d397c60ef1afbecb706ebc39729f57d"}}, @srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x18c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.034182106s ago: executing program 8 (id=4586): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x168, 0x30, 0xffff, 0x0, 0x0, {}, [{0x154, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xe4, 0x2, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x4, 0x80eb412d19906718, 0x100, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x6, 0x3, 0x5b, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12f5, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0xef, 0x20000000, 0x0, 0x1ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1bdd, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd, 0x7, 0x3, 0x7, 0xead}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9d90, 0x6, 0x0, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d1d, 0xfffffffffffffff7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x6b2, 0x5, 0x2, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x168}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) alarm(0xfd48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000004, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x6c190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x6, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r7, 0xd) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x48, 0x0, 0x0, 0x85, 0x9, 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xa976a000) close(0xffffffffffffffff) 743.173996ms ago: executing program 4 (id=4587): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 693.424797ms ago: executing program 4 (id=4588): syz_open_dev$usbfs(0x0, 0xb, 0x101301) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x0, 0x6a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008050}, 0x4000010) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000, &(0x7f0000000100), 0x2, 0x52c, &(0x7f0000000440)="$eJzs3U9sI1cZAPBvJsnau802W+gBUKFLKSxotXbibVdVL5RThVAlRA8cOGxD4kRR7PUqdkoTVih75I5EJU5w4swBiQNST9yRQIIbl3JAKrAqapCQMPJ4nDp/nFhbx17i308azZ834++9WPPe6LMyL4CpdT0i9iLiUkS8FREL+fEkX+K17tI576NHD1b2Hz1YSaLdfvMfSVbeORZ913Q8lX9mMSK+83rE95MjQf8Q0dzZ3Vyu1apb+aFyq36/3NzZvbVRX16vrlfvVSp3lu4svnL75crI2vp8/VcfXI6I3/7m8+//fu9rP+xUaz4v62/HKHWbPncQp2M2Ir51HsEmYCZvz6XHufixLmKU0oj4VES8kN3/CzGTfZuHHf6avj7G2gEA56HdXoj2Qv8+AHDRpVkOLElLeS5gPtK0VOrm8J6NK2mt0WzdXGts31vt5squxVy6tlGrLua5wmsxl6xtzFaXsu3efq1aObJ/OyKeiYifFC4naxvfjYhGbXWSDz4AMMWeOjL+/6vQHf8BgAuu+PFmYZL1AADGpzjpCgAAY2f8B4DpY/wHgOlj/AeA6WP8B4DpY/wHgKny7Tfe6Czt/fz916tv72xvNt6+tVptbpbq2yullcbW/dJ6o7Feq5ZWGvWzPq/WaNxfeim23ym3qs1Wubmze7fe2L7Xupu91/tudW4srQIATvPM8+/9OYmIvVcvZ0v0ve9/7qzUwHPjqCFwXtJJVwCYmJlJVwCYmOOzfQHTQj4eptd/2+129M3dGxEPD7b6XgY6MA/47lBhUvOGwpPnxmdPz/8DF5f8P0yvx8v/e5aHi0D+H6ZXu52Y8x8ApowcP5CcUd7/+/9iu29nuN//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EKaz5YkLeVzgc9HmpZKEVcj4lrMJWsbtepiRDwdEX8qfHhwnXmDAOD/Wfq3JJ//68bCi/NHSy8V/l3I1hHxg5+9+dN3llutraWIS8k/D4633s2PVyZRfwDgLL1xujeO93z06MFKbxlnfT74Rndy0U7c/XzplszGbLYuZrmGKx8m+X5X53llZgTx9x5GxGdOan+S5Uau5TOfHo3fiX11rPHTQ/HTrKy77vwtPj2CusC0ea/T/7x20v2XxvVsffL9X8x6qE+u1//tH+v/0oP+b2ZA/3d92Bgv/e6bxw62F7plDyM+Nxux3/vwvv6nFz8ZEP/FIeP/5bkvvDCorP3ziBtxUvuTQ7HKrfr9cnNn99ZGfXm9ul69V6ncWbqz+MrtlyvlLEdd7mWqj/v7qzefHhS/0/4rA+IXz2j/l4ds/y/+89b3vnhK/K9+6eTv/9lT4nfGxK8MGX/5yq+Lg8o68VcHtH/96uD4nWM3h4z//l93V4c8FQAYg+bO7uZyrVbd+uQbxVPPSUcRYnO5NhOnn/Oj/ClldO3KN/64cLyo8Msfv3725YVRVuM8NmJQ0cyTUsMLs1EY4pzLT0RVJ90zAeft45t+0jUBAAAAAAAAAAAAAAAGGce/E026jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxc/wsAAP//wh7SbQ==") r1 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000000)=""/103) 507.515633ms ago: executing program 4 (id=4589): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0xa9, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x802, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r6 = syz_open_pts(r5, 0x80) r7 = dup3(r6, r5, 0x80000) read(r7, &(0x7f0000000100)=""/213, 0xd5) read$watch_queue(r7, &(0x7f0000001d40)=""/4095, 0xfdef) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x19404, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1a, &(0x7f0000000340)=@raw=[@generic={0x2, 0x8, 0x7, 0x5, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x493}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000440)='GPL\x00', 0x40, 0x28, &(0x7f0000000480)=""/40, 0x41100, 0x40, '\x00', r2, 0x25, r3, 0x8, &(0x7f00000008c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0xb, 0x7, 0x80000001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000980)=[r4, r7, r8], &(0x7f00000009c0)=[{0x2, 0x1, 0x0, 0x5}, {0x1, 0x5, 0xd, 0x3}, {0x4, 0x4, 0x9, 0x1}]}, 0x94) 502.364203ms ago: executing program 4 (id=4590): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x1000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) open(&(0x7f0000000280)='.\x00', 0x80, 0x122) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) copy_file_range(r3, 0x0, r3, &(0x7f00000004c0)=0x100, 0x9, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x81ffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x2, 0xfff2}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 428.672416ms ago: executing program 6 (id=4591): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1700000054009155090893b31b71a54a07"], 0xfe33) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socket$inet6(0xa, 0x805, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) symlinkat(&(0x7f0000000580)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') setfsgid(0x0) socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001100)={{{@in6=@private2, @in6=@private0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000001200)=0xe8) getegid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr, 0x1ff}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x102, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1048b, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d020000000000000600"/94], 0xffffffffffffffff, 0x3e, 0xb1, 0xa}, 0x1b) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000001080)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x168, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x24000000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x77}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x394}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_NAT_SRC={0x50, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x0]}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x8, 0xffff, 0x4, 0xa, 0xc9, 0x32, 0x1]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x72}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x168}, 0x1, 0x0, 0x0, 0x8004000}, 0x40) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x0) recvmmsg(r2, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000eb71123300000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a00000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r4, &(0x7f0000002240)=""/131, 0x83, 0xe5d7) 208.767443ms ago: executing program 6 (id=4592): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2012, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setuid(0xee00) getrandom(&(0x7f0000000180)=""/263, 0x107, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xffffffffffffff91, 0x0}, &(0x7f0000000240)=0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = memfd_secret(0x0) r1 = io_uring_setup(0x380, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9, 0x0, r0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 132.785906ms ago: executing program 6 (id=4593): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast2, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) 111.443356ms ago: executing program 6 (id=4594): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) keyctl$set_reqkey_keyring(0xe, 0x5) socket$inet_smc(0x2b, 0x1, 0x0) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0), 0x0, 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x12009, @mcast2, 0x5}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x19, 0x70bd2c, 0x2d5fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0xe1c}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266f77d82e}, 0x8040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x27) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 110.431596ms ago: executing program 4 (id=4595): socket$nl_route(0x10, 0x3, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$unix(r1, &(0x7f0000009440)=[{{0x0, 0xffa4, &(0x7f00000015c0)=[{&(0x7f0000000140)='f', 0x1}], 0x1, &(0x7f0000000100)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18, 0x40}}], 0x1, 0x4) 26.541299ms ago: executing program 6 (id=4596): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 0s ago: executing program 4 (id=4597): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) pause() bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) kernel console output (not intermixed with test programs): 1659][T17802] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 472.490724][T17802] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 472.505009][T17802] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 472.517913][T17802] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 472.526086][T17802] System zones: 0-2, 18-18, 34-35 [ 472.531943][T17802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.545858][T17802] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 472.555492][T17805] EXT4-fs: Ignoring removed orlov option [ 472.562044][T17805] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 472.575222][T17805] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 472.583503][T17805] EXT4-fs (loop6): orphan cleanup on readonly fs [ 472.590779][T17805] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.3849: Invalid inode table block 0 in block_group 0 [ 472.605332][T17805] loop6: lost filesystem error report for type 5 error -117 [ 472.605632][T17805] EXT4-fs (loop6): Remounting filesystem read-only [ 472.613039][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 472.613081][ C1] EXT4-fs (loop6): initial error at time 2000524432: __ext4_get_inode_loc:4885 [ 472.613121][ C1] EXT4-fs (loop6): last error at time 2000524432: __ext4_get_inode_loc:4885 [ 472.646778][T17805] EXT4-fs (loop6): 1 truncate cleaned up [ 472.654669][T17805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 472.685363][T14234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.716083][T17805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.742908][T17817] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 472.763263][T17817] EXT4-fs (loop4): 1 truncate cleaned up [ 472.768047][T17819] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 472.769182][T17817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.803663][T17819] EXT4-fs (loop6): 1 truncate cleaned up [ 472.811402][T14234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.812421][T17819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.928456][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.984933][T17838] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 473.029621][T17841] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 473.029621][T17841] [ 473.049065][T17841] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 473.645983][T17854] set_capacity_and_notify: 9 callbacks suppressed [ 473.646002][T17854] loop8: detected capacity change from 0 to 512 [ 473.661605][T17854] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 473.676206][T17854] EXT4-fs (loop8): 1 truncate cleaned up [ 473.683839][T17854] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.705491][T15607] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.768635][T17861] loop8: detected capacity change from 0 to 512 [ 473.899270][T17873] loop4: detected capacity change from 0 to 1024 [ 473.916437][T17873] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 473.916437][T17873] [ 473.965297][T17873] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 474.118266][T17882] loop8: detected capacity change from 0 to 4096 [ 474.131875][T17882] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.162618][T15607] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.201765][T17885] loop8: detected capacity change from 0 to 512 [ 474.218701][T17885] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 474.231072][T17885] EXT4-fs (loop8): 1 truncate cleaned up [ 474.237510][T17885] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.261957][T15607] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.336603][ T2215] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.345656][ T2215] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.354770][ T2215] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.364017][ T2215] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.932673][T17918] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 475.661783][T17932] loop8: detected capacity change from 0 to 256 [ 475.677117][T17932] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 475.695830][T17932] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 475.703836][T17932] FAT-fs (loop8): Filesystem has been set read-only [ 475.710655][T17932] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 475.813841][T17935] loop4: detected capacity change from 0 to 1024 [ 475.824541][T17935] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 475.824541][T17935] [ 476.055013][T17939] loop6: detected capacity change from 0 to 512 [ 476.109518][T17939] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 476.156115][T17939] EXT4-fs (loop6): 1 truncate cleaned up [ 476.170675][T17939] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.189816][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 476.189838][ T28] audit: type=1400 audit(2000524435.786:7133): avc: denied { write } for pid=17938 comm="syz.6.3895" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 476.453967][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.467391][T17943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3896'. [ 476.547875][ T28] audit: type=1107 audit(2000524436.146:7134): pid=17944 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='’¢\ú°b¿' [ 476.606580][T17935] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 476.781823][T17953] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 477.395014][T17931] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 477.402948][T17931] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 477.581292][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3903'. [ 477.591602][T17965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.599766][T17965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.619508][T17965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.637797][T17965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.658832][ T28] audit: type=1400 audit(2000524437.256:7135): avc: denied { listen } for pid=17966 comm="syz.8.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 477.659066][T17967] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3904'. [ 477.682313][T17965] batman_adv: batadv0: Interface deactivated: geneve2 [ 477.698488][T17965] batman_adv: batadv0: Removing interface: geneve2 [ 477.707253][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3904'. [ 477.715920][ T28] audit: type=1326 audit(2000524437.306:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.0.3905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91823cce59 code=0x7ffc0000 [ 477.716423][T17977] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3904'. [ 477.750622][T17977] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3904'. [ 477.762690][ T28] audit: type=1326 audit(2000524437.306:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.0.3905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91823cce59 code=0x7ffc0000 [ 477.820367][ T28] audit: type=1326 audit(2000524437.306:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.0.3905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91823cce59 code=0x7ffc0000 [ 477.847643][ T28] audit: type=1326 audit(2000524437.306:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.0.3905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91823cce59 code=0x7ffc0000 [ 477.875461][ T28] audit: type=1326 audit(2000524437.306:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.0.3905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f91823cce59 code=0x7ffc0000 [ 477.901610][T17977] 8021q: VLANs not supported on ip6_vti0 [ 477.908211][ T28] audit: type=1326 audit(2000524437.306:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.0.3905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91823cce59 code=0x7ffc0000 [ 477.952704][T17973] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.967628][T17973] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.985032][ T28] audit: type=1326 audit(2000524437.306:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.0.3905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91823cce59 code=0x7ffc0000 [ 478.049693][T17973] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.069023][T17973] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.147254][T17973] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.168442][T17973] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.175256][T17985] loop8: detected capacity change from 0 to 512 [ 478.204080][T17985] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 478.215136][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3908'. [ 478.226177][T17985] EXT4-fs (loop8): 1 truncate cleaned up [ 478.241801][T17985] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.314632][T17991] loop4: detected capacity change from 0 to 512 [ 478.334906][T17973] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.363549][T15607] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.373073][T17973] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.442110][T17997] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 478.593699][ T1849] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.603513][ T1849] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.612516][ T1849] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.622307][ T1673] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 478.660097][ T1849] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.678133][ T1849] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.721048][ T1849] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.744976][ T1849] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.763619][ T1849] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.780716][T18010] set_capacity_and_notify: 2 callbacks suppressed [ 478.780743][T18010] loop4: detected capacity change from 0 to 512 [ 478.805378][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3919'. [ 478.820760][T18014] loop6: detected capacity change from 0 to 512 [ 478.878806][T18014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.986773][T18020] loop4: detected capacity change from 0 to 1024 [ 479.021330][T18020] EXT4-fs: Ignoring removed orlov option [ 479.055918][T18020] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 479.089264][T18027] FAULT_INJECTION: forcing a failure. [ 479.089264][T18027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.102787][T18020] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 479.111862][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.121043][T18027] CPU: 0 UID: 0 PID: 18027 Comm: syz.8.3925 Not tainted syzkaller #0 PREEMPT(lazy) [ 479.121070][T18027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 479.121083][T18027] Call Trace: [ 479.121088][T18027] [ 479.121095][T18027] __dump_stack+0x1d/0x30 [ 479.121115][T18027] dump_stack_lvl+0x95/0xd0 [ 479.121252][T18027] dump_stack+0x15/0x1b [ 479.121288][T18027] should_fail_ex+0x263/0x280 [ 479.121309][T18027] should_fail+0xb/0x20 [ 479.121328][T18027] should_fail_usercopy+0x1a/0x20 [ 479.121351][T18027] _copy_to_user+0x20/0xa0 [ 479.121418][T18027] simple_read_from_buffer+0xb5/0x130 [ 479.121450][T18027] proc_fail_nth_read+0x10e/0x150 [ 479.121519][T18027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.121547][T18027] vfs_read+0x1ab/0x7f0 [ 479.121668][T18027] ? __rcu_read_unlock+0x4e/0x70 [ 479.121685][T18027] ? __fget_files+0x184/0x1c0 [ 479.121701][T18027] ? mutex_lock+0x57/0x90 [ 479.121721][T18027] ksys_read+0xdc/0x1a0 [ 479.121750][T18027] __x64_sys_read+0x40/0x50 [ 479.121827][T18027] x64_sys_call+0x2886/0x3020 [ 479.121849][T18027] do_syscall_64+0x12c/0x3b0 [ 479.121880][T18027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.121969][T18027] RIP: 0033:0x7f0cf836d68e [ 479.121983][T18027] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 479.122080][T18027] RSP: 002b:00007f0cf6dfefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 479.122097][T18027] RAX: ffffffffffffffda RBX: 00007f0cf6dff6c0 RCX: 00007f0cf836d68e [ 479.122111][T18027] RDX: 000000000000000f RSI: 00007f0cf6dff0a0 RDI: 0000000000000004 [ 479.122202][T18027] RBP: 00007f0cf6dff090 R08: 0000000000000000 R09: 0000000000000000 [ 479.122242][T18027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.122253][T18027] R13: 00007f0cf8626038 R14: 00007f0cf8625fa0 R15: 00007ffc0a512c98 [ 479.122296][T18027] [ 479.322064][T18020] EXT4-fs (loop4): orphan cleanup on readonly fs [ 479.344676][T18020] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.3922: Invalid inode table block 0 in block_group 0 [ 479.359644][T18020] loop4: lost filesystem error report for type 5 error -117 [ 479.359906][T18020] EXT4-fs (loop4): Remounting filesystem read-only [ 479.367258][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 479.367293][ C0] EXT4-fs (loop4): initial error at time 2000524438: __ext4_get_inode_loc:4885 [ 479.367333][ C0] EXT4-fs (loop4): last error at time 2000524438: __ext4_get_inode_loc:4885 [ 479.403364][T18020] EXT4-fs (loop4): 1 truncate cleaned up [ 479.427480][T18020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 479.497897][T18030] Cannot find del_set index 4 as target [ 479.564817][T18020] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.688336][T18047] loop4: detected capacity change from 0 to 1024 [ 479.706181][T18047] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 479.706181][T18047] [ 479.723941][T18047] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 479.795214][T18057] loop6: detected capacity change from 0 to 512 [ 479.827672][T18057] EXT4-fs: Ignoring removed nomblk_io_submit option [ 479.879009][T18057] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 480.038923][T18072] loop6: detected capacity change from 0 to 1024 [ 480.048401][T18072] EXT4-fs: Ignoring removed orlov option [ 480.061187][T18072] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 480.063299][T18073] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 480.080333][T18072] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 480.090198][T18072] EXT4-fs (loop6): orphan cleanup on readonly fs [ 480.098125][T18072] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.3939: Invalid inode table block 0 in block_group 0 [ 480.111190][T18072] loop6: lost filesystem error report for type 5 error -117 [ 480.112257][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 480.112410][T18072] EXT4-fs (loop6): Remounting filesystem read-only [ 480.119550][ C0] EXT4-fs (loop6): initial error at time 2000524439: __ext4_get_inode_loc:4885 [ 480.119577][ C0] EXT4-fs (loop6): last error at time 2000524439: __ext4_get_inode_loc:4885 [ 480.128506][T18072] EXT4-fs (loop6): 1 truncate cleaned up [ 480.132751][ C0] [ 480.159205][T18072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 480.230938][T18072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.441341][T18086] loop6: detected capacity change from 0 to 512 [ 480.460946][T18086] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 480.486178][T18086] EXT4-fs (loop6): 1 truncate cleaned up [ 480.495537][T18086] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.583866][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.777195][T18099] loop4: detected capacity change from 0 to 4096 [ 480.790748][T18099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.963329][T18107] loop6: detected capacity change from 0 to 256 [ 480.984244][T18107] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 480.997598][T18107] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 481.005627][T18107] FAT-fs (loop6): Filesystem has been set read-only [ 481.012291][T18107] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 481.211000][T14234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.371437][T18116] loop4: detected capacity change from 0 to 1024 [ 482.378992][T18116] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 482.378992][T18116] [ 482.436427][T18116] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 482.582240][T18102] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 482.590320][T18102] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 482.778344][ T28] kauditd_printk_skb: 293 callbacks suppressed [ 482.778360][ T28] audit: type=1107 audit(2000524442.376:7432): pid=18123 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='’¢\ú°b¿' [ 482.962419][T18128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.964899][T18129] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 483.084447][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.207150][T18136] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 483.277038][T18136] EXT4-fs (loop4): 1 truncate cleaned up [ 483.310475][T18136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.366383][ T28] audit: type=1400 audit(2000524442.956:7433): avc: denied { write } for pid=18134 comm="syz.4.3958" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.382161][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3963'. [ 483.426051][T14234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.750559][T18181] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 483.766629][T18177] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 483.789551][T18177] EXT4-fs (loop6): 1 truncate cleaned up [ 483.796306][T18177] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.812366][ T28] audit: type=1400 audit(2000524443.406:7434): avc: denied { write } for pid=18176 comm="syz.6.3974" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.841598][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.000795][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3976'. [ 484.202548][ T28] audit: type=1107 audit(2000524443.806:7435): pid=18196 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='’¢\ú°b¿' [ 485.603111][T18207] set_capacity_and_notify: 3 callbacks suppressed [ 485.603138][T18207] loop4: detected capacity change from 0 to 512 [ 486.962452][T18216] loop4: detected capacity change from 0 to 512 [ 486.985053][T18216] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 487.447742][T18227] loop8: detected capacity change from 0 to 1024 [ 487.458972][T18227] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 487.458972][T18227] [ 487.478304][T18216] EXT4-fs (loop4): 1 truncate cleaned up [ 487.487056][T18216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.511406][ T28] audit: type=1400 audit(2000524447.106:7436): avc: denied { write } for pid=18215 comm="syz.4.3985" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 487.536715][ T28] audit: type=1326 audit(2000524447.136:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18228 comm="syz.6.3988" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea380fce59 code=0x0 [ 487.568898][T18227] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 487.587074][T14234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.755952][T18249] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 488.479377][T18268] loop8: detected capacity change from 0 to 1024 [ 488.498117][T18268] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 488.498117][T18268] [ 488.536234][T18266] loop6: detected capacity change from 0 to 512 [ 488.570702][T18268] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 488.596118][T18266] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 488.692136][T18266] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 488.756765][T18266] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3999: bg 0: block 248: padding at end of block bitmap is not set [ 488.793005][T18272] loop4: detected capacity change from 0 to 512 [ 488.816598][T18266] loop6: lost filesystem error report for type 5 error -117 [ 488.820201][T18266] Quota error (device loop6): write_blk: dquota write failed [ 488.827820][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 488.827879][ C1] EXT4-fs (loop6): last error at time 2000524448: ext4_validate_block_bitmap:441 [ 488.881205][T18272] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 488.929259][T18272] EXT4-fs (loop4): 1 truncate cleaned up [ 488.984442][T18272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.052909][T18266] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 489.097100][ T28] audit: type=1400 audit(2000524448.686:7438): avc: denied { write } for pid=18271 comm="syz.4.4002" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.109274][T18266] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3999: Failed to acquire dquot type 1 [ 489.180632][T18266] loop6: lost filesystem error report for type 5 error -28 [ 489.187909][T14234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.205423][T18266] EXT4-fs (loop6): 1 truncate cleaned up [ 489.229805][T18266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 489.354007][ T28] audit: type=1400 audit(2000524448.956:7439): avc: denied { write } for pid=18264 comm="syz.6.3999" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.359373][T18283] loop4: detected capacity change from 0 to 512 [ 489.474100][ T28] audit: type=1400 audit(2000524449.076:7440): avc: denied { write } for pid=18264 comm="syz.6.3999" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.483019][T18283] EXT4-fs: Ignoring removed nomblk_io_submit option [ 489.620716][ T28] audit: type=1326 audit(2000524449.216:7441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18288 comm="syz.8.4007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0cf83ace59 code=0x0 [ 489.752230][T18283] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 489.927071][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 489.991703][T18296] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 490.042140][ T114] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 490.051984][ T114] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 490.100037][ T114] loop6: lost filesystem error report for type 5 error -117 [ 490.284307][T18308] loop4: detected capacity change from 0 to 4096 [ 490.538159][T18311] loop8: detected capacity change from 0 to 512 [ 490.548879][T18311] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 490.567306][T18311] EXT4-fs (loop8): 1 truncate cleaned up [ 490.640037][ T28] audit: type=1400 audit(2000524450.176:7442): avc: denied { write } for pid=18310 comm="syz.8.4013" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.191019][T18322] loop8: detected capacity change from 0 to 512 [ 491.206259][T18322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 491.219318][T18323] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 491.335033][T18318] loop6: detected capacity change from 0 to 512 [ 491.350463][T18322] EXT4-fs (loop8): failed to open journal device unknown-block(0,0) -6 [ 491.359285][T18318] EXT4-fs: Ignoring removed nomblk_io_submit option [ 491.397744][T18318] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 492.025437][T11585] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 492.046883][T11585] CPU: 1 UID: 0 PID: 11585 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 492.046928][T11585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.046941][T11585] Call Trace: [ 492.046948][T11585] [ 492.046957][T11585] __dump_stack+0x1d/0x30 [ 492.046981][T11585] dump_stack_lvl+0x95/0xd0 [ 492.047015][T11585] dump_stack+0x15/0x1b [ 492.047109][T11585] dump_header+0x80/0x240 [ 492.047136][T11585] oom_kill_process+0x295/0x350 [ 492.047165][T11585] out_of_memory+0x97d/0xb80 [ 492.047245][T11585] try_charge_memcg+0x62f/0xa10 [ 492.047275][T11585] charge_memcg+0x6d/0x120 [ 492.047297][T11585] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 492.047359][T11585] __swap_cache_prepare_and_add+0x69/0x4a0 [ 492.047405][T11585] ? alloc_pages_mpol+0x217/0x260 [ 492.047428][T11585] ? xas_load+0x413/0x430 [ 492.047454][T11585] swap_cache_alloc_folio+0xa2/0x120 [ 492.047647][T11585] swap_cluster_readahead+0x25f/0x3c0 [ 492.047676][T11585] swapin_readahead+0xde/0x840 [ 492.047698][T11585] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 492.047731][T11585] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 492.047757][T11585] ? __rcu_read_unlock+0x4e/0x70 [ 492.047778][T11585] ? swap_cache_get_folio+0x1e0/0x1f0 [ 492.047802][T11585] do_swap_page+0x31e/0x2180 [ 492.047833][T11585] ? __schedule+0x951/0xd40 [ 492.047854][T11585] ? __rcu_read_lock+0x36/0x50 [ 492.047874][T11585] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 492.047970][T11585] handle_mm_fault+0xb30/0x2e70 [ 492.047996][T11585] ? vma_start_read+0x1c7/0x2c0 [ 492.048030][T11585] do_user_addr_fault+0x62f/0x1050 [ 492.048078][T11585] ? trace_page_fault_user+0x1f/0xa0 [ 492.048103][T11585] exc_page_fault+0x62/0xa0 [ 492.048134][T11585] asm_exc_page_fault+0x26/0x30 [ 492.048202][T11585] RIP: 0033:0x7fea380b7fd7 [ 492.048234][T11585] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 492.048248][T11585] RSP: 002b:00007ffd624c9780 EFLAGS: 00010202 [ 492.048296][T11585] RAX: 0000000000000000 RBX: 0000555563c61500 RCX: 00007fea380b7fd7 [ 492.048311][T11585] RDX: 00007ffd624c97c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.048324][T11585] RBP: 00007ffd624c982c R08: 0000000000000000 R09: 0000000000000000 [ 492.048337][T11585] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 492.048350][T11585] R13: 00000000000927c0 R14: 0000000000077f72 R15: 00007ffd624c9880 [ 492.048396][T11585] [ 492.050231][T11585] memory: usage 307200kB, limit 307200kB, failcnt 792 [ 492.312401][T11585] memory+swap: usage 307860kB, limit 9007199254740988kB, failcnt 0 [ 492.321282][T11585] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 492.328937][T11585] Memory cgroup stats for /syz6: [ 492.329172][T11585] cache 0 [ 492.338532][T11585] rss 0 [ 492.341359][T11585] shmem 0 [ 492.345234][T11585] mapped_file 0 [ 492.348722][T11585] dirty 0 [ 492.351721][T11585] writeback 4096 [ 492.355485][T11585] workingset_refault_anon 192 [ 492.360187][T11585] workingset_refault_file 0 [ 492.365528][T11585] swap 675840 [ 492.368880][T11585] swapcached 1880064 [ 492.388301][T11585] pgpgin 149764 [ 492.391862][T11585] pgpgout 149762 [ 492.395707][T11585] pgfault 173482 [ 492.399358][T11585] pgmajfault 140 [ 492.404037][T11585] inactive_anon 8192 [ 492.408108][T11585] active_anon 0 [ 492.411907][T11585] inactive_file 0 [ 492.416159][T11585] active_file 0 [ 492.419809][T11585] unevictable 0 [ 492.423764][T11585] hierarchical_memory_limit 314572800 [ 492.429346][T11585] hierarchical_memsw_limit 9223372036854771712 [ 492.449321][T11585] total_cache 0 [ 492.453075][T11585] total_rss 0 [ 492.456509][T11585] total_shmem 0 [ 492.460042][T11585] total_mapped_file 0 [ 492.473931][T11585] total_dirty 0 [ 492.477629][T11585] total_writeback 4096 [ 492.484029][T18356] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 492.490569][T11585] total_workingset_refault_anon 192 [ 492.513320][T11585] total_workingset_refault_file 0 [ 492.523592][T11585] total_swap 675840 [ 492.532165][T11585] total_swapcached 1880064 [ 492.543036][T11585] total_pgpgin 149764 [ 492.551650][T11585] total_pgpgout 149762 [ 492.562114][T11585] total_pgfault 173482 [ 492.569795][T11585] total_pgmajfault 140 [ 492.573866][T11585] total_inactive_anon 8192 [ 492.578358][T11585] total_active_anon 0 [ 492.582322][T11585] total_inactive_file 0 [ 492.586545][T11585] total_active_file 0 [ 492.590515][T11585] total_unevictable 0 [ 492.594491][T11585] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4019,pid=18337,uid=0 [ 492.609197][T11585] Memory cgroup out of memory: Killed process 18337 (syz.6.4019) total-vm:96216kB, anon-rss:1228kB, file-rss:22396kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 492.942287][ T28] audit: type=1326 audit(2000524452.436:7443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.6.4025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 493.138492][ T28] audit: type=1326 audit(2000524452.436:7444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.6.4025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 494.073588][ T28] audit: type=1326 audit(2000524452.436:7445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.6.4025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 494.866031][ T28] audit: type=1326 audit(2000524452.436:7446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.6.4025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 494.939817][ T28] audit: type=1326 audit(2000524452.446:7447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.6.4025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 495.002122][ T28] audit: type=1326 audit(2000524452.446:7448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.6.4025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 495.090911][ T28] audit: type=1326 audit(2000524452.446:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.6.4025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 495.129999][ T28] audit: type=1326 audit(2000524452.446:7450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.6.4025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 495.161288][ T28] audit: type=1326 audit(2000524452.466:7451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.6.4025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 495.196365][T18392] loop8: detected capacity change from 0 to 512 [ 495.210043][T18392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 495.283609][T18392] EXT4-fs (loop8): failed to open journal device unknown-block(0,0) -6 [ 495.378885][T18387] loop6: detected capacity change from 0 to 4096 [ 495.412105][T18384] loop4: detected capacity change from 0 to 512 [ 495.435949][T18384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 495.468609][T18386] syz.0.4036 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 495.491041][T18386] CPU: 0 UID: 0 PID: 18386 Comm: syz.0.4036 Not tainted syzkaller #0 PREEMPT(lazy) [ 495.491149][T18386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.491162][T18386] Call Trace: [ 495.491230][T18386] [ 495.491238][T18386] __dump_stack+0x1d/0x30 [ 495.491317][T18386] dump_stack_lvl+0x95/0xd0 [ 495.491350][T18386] dump_stack+0x15/0x1b [ 495.491368][T18386] dump_header+0x80/0x240 [ 495.491391][T18386] oom_kill_process+0x295/0x350 [ 495.491420][T18386] out_of_memory+0x97d/0xb80 [ 495.491444][T18386] try_charge_memcg+0x62f/0xa10 [ 495.491622][T18386] ? __rcu_read_unlock+0x33/0x70 [ 495.491650][T18386] charge_memcg+0x6d/0x120 [ 495.491671][T18386] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 495.491725][T18386] __swap_cache_prepare_and_add+0x69/0x4a0 [ 495.491747][T18386] ? alloc_pages_mpol+0x217/0x260 [ 495.491765][T18386] ? xas_load+0x413/0x430 [ 495.491807][T18386] swap_cache_alloc_folio+0xa2/0x120 [ 495.491883][T18386] swap_cluster_readahead+0x25f/0x3c0 [ 495.491907][T18386] swapin_readahead+0xde/0x840 [ 495.491930][T18386] ? _raw_spin_unlock+0x9/0x30 [ 495.491945][T18386] ? __rcu_read_unlock+0x4e/0x70 [ 495.492039][T18386] ? swap_cache_get_folio+0x1e0/0x1f0 [ 495.492093][T18386] do_swap_page+0x31e/0x2180 [ 495.492188][T18386] ? __css_rstat_updated+0xbb/0x280 [ 495.492210][T18386] ? __rcu_read_lock+0x36/0x50 [ 495.492230][T18386] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 495.492316][T18386] handle_mm_fault+0xb30/0x2e70 [ 495.492341][T18386] ? vma_start_read+0x1c7/0x2c0 [ 495.492429][T18386] do_user_addr_fault+0x62f/0x1050 [ 495.492456][T18386] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 495.492557][T18386] ? trace_page_fault_user+0x1f/0xa0 [ 495.492585][T18386] exc_page_fault+0x62/0xa0 [ 495.492615][T18386] asm_exc_page_fault+0x26/0x30 [ 495.492708][T18386] RIP: 0033:0x7f918229a7e1 [ 495.492724][T18386] Code: ff e8 23 80 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 69 3d be ae ed 00 e8 03 00 00 48 8d 1d bf b7 3a 00 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f [ 495.492742][T18386] RSP: 002b:00007ffd33f24400 EFLAGS: 00010206 [ 495.492808][T18386] RAX: 0000000000078d4c RBX: 00007f9182645fa0 RCX: 00000000000789b0 [ 495.492822][T18386] RDX: 000000000000039c RSI: 00007ffd33f243e0 RDI: 00000000000003e8 [ 495.492836][T18386] RBP: 00007f9182647da0 R08: 00000000371ff516 R09: 3fffffffffffffff [ 495.492858][T18386] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000078f4a [ 495.492872][T18386] R13: 00007f918264609c R14: 0000000000078c82 R15: 00007f9182646090 [ 495.492888][T18386] [ 495.775402][T18386] memory: usage 307200kB, limit 307200kB, failcnt 4303 [ 495.782945][T18386] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 495.790906][T18386] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 495.799540][T18386] Memory cgroup stats for /syz0: [ 495.799781][T18386] cache 0 [ 495.808224][T18386] rss 0 [ 495.811492][T18386] shmem 0 [ 495.814528][T18386] mapped_file 0 [ 495.818200][T18386] dirty 0 [ 495.821443][T18386] writeback 4096 [ 495.826077][T18386] workingset_refault_anon 789 [ 495.831965][T18386] workingset_refault_file 10018 [ 495.837399][T18386] swap 192512 [ 495.841466][T18386] swapcached 19972096 [ 495.846074][T18386] pgpgin 375572 [ 495.850450][T18386] pgpgout 375571 [ 495.853284][T18409] loop8: detected capacity change from 0 to 1024 [ 495.855552][T18386] pgfault 412708 [ 495.864608][T18386] pgmajfault 563 [ 495.869176][T18386] inactive_anon 4096 [ 495.877212][T18386] active_anon 0 [ 495.880701][T18386] inactive_file 0 [ 495.885028][T18386] active_file 0 [ 495.888574][T18386] unevictable 0 [ 495.892527][T18386] hierarchical_memory_limit 314572800 [ 495.897901][T18386] hierarchical_memsw_limit 9223372036854771712 [ 495.932264][T18386] total_cache 0 [ 495.936461][T18386] total_rss 0 [ 495.939749][T18386] total_shmem 0 [ 495.944035][T18386] total_mapped_file 0 [ 495.948121][T18386] total_dirty 0 [ 495.951677][T18386] total_writeback 4096 [ 495.955895][T18386] total_workingset_refault_anon 789 [ 495.961337][T18384] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 495.961816][T18386] total_workingset_refault_file 10018 [ 496.001790][T18409] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 496.001790][T18409] [ 496.024189][T18386] total_swap 192512 [ 496.028501][T18386] total_swapcached 19972096 [ 496.033763][T18386] total_pgpgin 375572 [ 496.037805][T18386] total_pgpgout 375571 [ 496.041897][T18386] total_pgfault 412708 [ 496.046988][T18386] total_pgmajfault 563 [ 496.051276][T18386] total_inactive_anon 4096 [ 496.055900][T18386] total_active_anon 0 [ 496.060399][T18386] total_inactive_file 0 [ 496.064942][T18386] total_active_file 0 [ 496.069004][T18386] total_unevictable 0 [ 496.073826][T18386] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4036,pid=18386,uid=0 [ 496.140982][T18386] Memory cgroup out of memory: Killed process 18386 (syz.0.4036) total-vm:94168kB, anon-rss:1236kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 497.021496][T18409] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 497.081639][T18431] loop6: detected capacity change from 0 to 512 [ 497.090494][T18431] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 497.107686][T18431] EXT4-fs (loop6): 1 truncate cleaned up [ 497.114366][T18431] EXT4-fs mount: 6 callbacks suppressed [ 497.114383][T18431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.133195][ T28] audit: type=1400 audit(2000524456.706:7452): avc: denied { write } for pid=18430 comm="syz.6.4049" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 497.395011][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.447755][T18436] netlink: 'syz.4.4052': attribute type 1 has an invalid length. [ 497.536250][ T28] audit: type=1400 audit(2000524457.136:7453): avc: denied { read write } for pid=15607 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 497.571509][T18446] loop6: detected capacity change from 0 to 512 [ 497.585891][T18446] EXT4-fs: Ignoring removed nomblk_io_submit option [ 497.632686][ T28] audit: type=1400 audit(2000524457.136:7454): avc: denied { open } for pid=15607 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 497.684315][T18446] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 497.786480][T18454] loop4: detected capacity change from 0 to 1024 [ 497.801924][T18454] EXT4-fs: Ignoring removed orlov option [ 497.828743][T18454] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 497.840655][T18454] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 497.850268][T18454] EXT4-fs (loop4): orphan cleanup on readonly fs [ 497.860383][T18454] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.4056: Invalid inode table block 0 in block_group 0 [ 497.874706][T18454] loop4: lost filesystem error report for type 5 error -117 [ 497.874896][T18454] EXT4-fs (loop4): Remounting filesystem read-only [ 497.882603][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 497.882672][ C0] EXT4-fs (loop4): initial error at time 2000524457: __ext4_get_inode_loc:4885 [ 497.882700][ C0] EXT4-fs (loop4): last error at time 2000524457: __ext4_get_inode_loc:4885 [ 497.915231][T18454] EXT4-fs (loop4): 1 truncate cleaned up [ 497.923206][T18454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 497.971295][T18464] loop6: detected capacity change from 0 to 512 [ 497.983058][T18462] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 498.004283][T18464] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.4059: iget: bad i_size value: 38620345925642 [ 498.017742][T18464] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 498.021151][T18464] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4059: couldn't read orphan inode 15 (err -117) [ 498.030353][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 498.030368][ C1] EXT4-fs (loop6): initial error at time 2000524457: ext4_orphan_get:1397: inode 15 [ 498.030392][ C1] EXT4-fs (loop6): last error at time 2000524457: ext4_orphan_get:1397: inode 15 [ 498.070629][T18464] loop6: lost filesystem error report for type 5 error -117 [ 498.071296][T18464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.072596][T18454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.084692][T18464] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4059: bg 0: block 5: invalid block bitmap [ 498.114735][T18464] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 498.127931][T18464] EXT4-fs (loop6): This should not happen!! Data will be lost [ 498.127931][T18464] [ 498.138953][T18464] EXT4-fs (loop6): Total free blocks count 0 [ 498.146696][T18464] EXT4-fs (loop6): Free/Dirty block details [ 498.152909][T18464] EXT4-fs (loop6): free_blocks=0 [ 498.158032][T18464] EXT4-fs (loop6): dirty_blocks=1 [ 498.170176][T18464] EXT4-fs (loop6): Block reservation details [ 498.177619][T18464] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 498.252757][T18447] syz.8.4055 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 498.268165][T18447] CPU: 1 UID: 0 PID: 18447 Comm: syz.8.4055 Not tainted syzkaller #0 PREEMPT(lazy) [ 498.268226][T18447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.268284][T18447] Call Trace: [ 498.268291][T18447] [ 498.268299][T18447] __dump_stack+0x1d/0x30 [ 498.268321][T18447] dump_stack_lvl+0x95/0xd0 [ 498.268353][T18447] dump_stack+0x15/0x1b [ 498.268370][T18447] dump_header+0x80/0x240 [ 498.268391][T18447] oom_kill_process+0x295/0x350 [ 498.268427][T18447] out_of_memory+0x97d/0xb80 [ 498.268467][T18447] try_charge_memcg+0x62f/0xa10 [ 498.268504][T18447] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 498.268534][T18447] __alloc_frozen_pages_noprof+0x18a/0x350 [ 498.268601][T18447] alloc_pages_mpol+0xb3/0x260 [ 498.268629][T18447] alloc_pages_noprof+0x8f/0x140 [ 498.268709][T18447] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 498.268740][T18447] __kvmalloc_node_noprof+0x3d4/0x640 [ 498.268813][T18447] ? futex_hash_allocate+0x190/0x9a0 [ 498.268896][T18447] ? futex_hash_allocate+0x190/0x9a0 [ 498.268946][T18447] futex_hash_allocate+0x190/0x9a0 [ 498.269056][T18447] ? cap_task_prctl+0x13f/0x6b0 [ 498.269094][T18447] futex_hash_prctl+0xd8/0xf0 [ 498.269128][T18447] __se_sys_prctl+0x4f4/0x1400 [ 498.269159][T18447] __x64_sys_prctl+0x67/0x80 [ 498.269184][T18447] x64_sys_call+0x2533/0x3020 [ 498.269287][T18447] do_syscall_64+0x12c/0x3b0 [ 498.269317][T18447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.269338][T18447] RIP: 0033:0x7f0cf83ace59 [ 498.269354][T18447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.269378][T18447] RSP: 002b:00007f0cf6dff028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 498.269400][T18447] RAX: ffffffffffffffda RBX: 00007f0cf8625fa0 RCX: 00007f0cf83ace59 [ 498.269481][T18447] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 498.269497][T18447] RBP: 00007f0cf8442d6f R08: 0000000000000000 R09: 0000000000000000 [ 498.269592][T18447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.269604][T18447] R13: 00007f0cf8626038 R14: 00007f0cf8625fa0 R15: 00007ffc0a512c98 [ 498.269626][T18447] [ 498.269677][T18447] memory: usage 307200kB, limit 307200kB, failcnt 169 [ 498.498924][T18447] memory+swap: usage 109936kB, limit 9007199254740988kB, failcnt 0 [ 498.508089][T18447] kmem: usage 109520kB, limit 9007199254740988kB, failcnt 0 [ 498.515644][T18447] Memory cgroup stats for /syz8: [ 498.515898][T18447] cache 0 [ 498.523911][T18447] rss 114688 [ 498.527108][T18447] shmem 0 [ 498.530028][T18447] mapped_file 0 [ 498.533480][T18447] dirty 0 [ 498.536514][T18447] writeback 0 [ 498.539836][T18447] workingset_refault_anon 82 [ 498.544505][T18447] workingset_refault_file 0 [ 498.549072][T18447] swap 77824 [ 498.552271][T18447] swapcached 577536 [ 498.558676][T18447] pgpgin 66512 [ 498.562083][T18447] pgpgout 66480 [ 498.565592][T18447] pgfault 87150 [ 498.569079][T18447] pgmajfault 49 [ 498.572663][T18447] inactive_anon 0 [ 498.576295][T18447] active_anon 131072 [ 498.580242][T18447] inactive_file 0 [ 498.583871][T18447] active_file 0 [ 498.587370][T18447] unevictable 0 [ 498.590872][T18447] hierarchical_memory_limit 314572800 [ 498.596232][T18447] hierarchical_memsw_limit 9223372036854771712 [ 498.602424][T18447] total_cache 0 [ 498.605931][T18447] total_rss 114688 [ 498.609764][T18447] total_shmem 0 [ 498.614878][T18447] total_mapped_file 0 [ 498.619218][T18447] total_dirty 0 [ 498.623498][T18447] total_writeback 0 [ 498.627364][T18447] total_workingset_refault_anon 82 [ 498.633540][T18447] total_workingset_refault_file 0 [ 498.638992][T18447] total_swap 77824 [ 498.643199][T18447] total_swapcached 577536 [ 498.647795][T18447] total_pgpgin 66512 [ 498.651737][T18447] total_pgpgout 66480 [ 498.656332][T18447] total_pgfault 87150 [ 498.660405][T18447] total_pgmajfault 49 [ 498.660477][T18447] total_inactive_anon 0 [ 498.660486][T18447] total_active_anon 131072 [ 498.660493][T18447] total_inactive_file 0 [ 498.660528][T18447] total_active_file 0 [ 498.660577][T18447] total_unevictable 0 [ 498.660587][T18447] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4055,pid=18445,uid=0 [ 498.702355][T18447] Memory cgroup out of memory: Killed process 18447 (syz.8.4055) total-vm:94168kB, anon-rss:1340kB, file-rss:22364kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 498.813871][T11585] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 498.839545][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.861991][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4064'. [ 498.882288][T18483] loop8: detected capacity change from 0 to 512 [ 498.920656][T18483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 498.947417][T18483] ext4 filesystem being mounted at /152/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.992132][T18480] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 499.099766][T18491] loop6: detected capacity change from 0 to 512 [ 499.109924][T18491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 499.124099][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 499.124114][ T28] audit: type=1400 audit(2000524458.726:7537): avc: denied { create } for pid=18492 comm="syz.8.4068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 499.148009][T18491] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 499.183700][T18495] loop4: detected capacity change from 0 to 512 [ 499.186243][ T28] audit: type=1400 audit(2000524458.756:7538): avc: denied { write } for pid=18492 comm="syz.8.4068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 499.206609][T18495] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 499.257917][ T28] audit: type=1400 audit(2000524458.756:7539): avc: denied { create } for pid=18492 comm="syz.8.4068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 499.260882][T18495] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 499.300392][ T28] audit: type=1400 audit(2000524458.756:7540): avc: denied { connect } for pid=18492 comm="syz.8.4068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 499.305446][T18495] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4069: bg 0: block 248: padding at end of block bitmap is not set [ 499.338441][T18495] loop4: lost filesystem error report for type 5 error -117 [ 499.340114][T18495] Quota error (device loop4): write_blk: dquota write failed [ 499.347937][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 499.348004][ C1] EXT4-fs (loop4): last error at time 2000524458: ext4_validate_block_bitmap:441 [ 499.378471][T18495] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 499.389400][T18495] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.4069: Failed to acquire dquot type 1 [ 499.402247][T18495] loop4: lost filesystem error report for type 5 error -28 [ 499.407586][T18495] EXT4-fs (loop4): 1 truncate cleaned up [ 499.408661][ T28] audit: type=1400 audit(2000524459.006:7541): avc: denied { write } for pid=18502 comm="syz.8.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 499.423758][T18495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 499.481743][ T28] audit: type=1400 audit(2000524459.066:7542): avc: denied { allowed } for pid=18502 comm="syz.8.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 499.518323][ T28] audit: type=1400 audit(2000524459.076:7543): avc: denied { create } for pid=18502 comm="syz.8.4070" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 499.546560][ T28] audit: type=1400 audit(2000524459.076:7544): avc: denied { map } for pid=18502 comm="syz.8.4070" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=55418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 499.616723][T18513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4075'. [ 499.654441][T18513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4075'. [ 499.709762][T18523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4077'. [ 499.752822][T14234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 499.773010][ T1673] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 499.784833][ T1673] loop4: lost filesystem error report for type 5 error -117 [ 499.867401][T18508] syz.8.4073 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 499.898073][T18508] CPU: 1 UID: 0 PID: 18508 Comm: syz.8.4073 Not tainted syzkaller #0 PREEMPT(lazy) [ 499.898105][T18508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 499.898118][T18508] Call Trace: [ 499.898125][T18508] [ 499.898133][T18508] __dump_stack+0x1d/0x30 [ 499.898158][T18508] dump_stack_lvl+0x95/0xd0 [ 499.898179][T18508] dump_stack+0x15/0x1b [ 499.898323][T18508] dump_header+0x80/0x240 [ 499.898346][T18508] oom_kill_process+0x295/0x350 [ 499.898376][T18508] out_of_memory+0x97d/0xb80 [ 499.898463][T18508] try_charge_memcg+0x62f/0xa10 [ 499.898503][T18508] ? radix_tree_lookup+0xfa/0x140 [ 499.898532][T18508] charge_memcg+0x6d/0x120 [ 499.898637][T18508] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 499.898661][T18508] __swap_cache_prepare_and_add+0x69/0x4a0 [ 499.898720][T18508] ? alloc_pages_mpol+0x217/0x260 [ 499.898745][T18508] swap_cache_alloc_folio+0xa2/0x120 [ 499.898771][T18508] swap_cluster_readahead+0x25f/0x3c0 [ 499.898868][T18508] swapin_readahead+0xde/0x840 [ 499.898888][T18508] ? tick_program_event+0x79/0xc0 [ 499.898978][T18508] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 499.898999][T18508] ? __rcu_read_unlock+0x4e/0x70 [ 499.899016][T18508] ? swap_cache_get_folio+0x1e0/0x1f0 [ 499.899038][T18508] do_swap_page+0x31e/0x2180 [ 499.899115][T18508] ? __schedule+0x951/0xd40 [ 499.899195][T18508] ? __rcu_read_lock+0x36/0x50 [ 499.899212][T18508] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 499.899230][T18508] handle_mm_fault+0xb30/0x2e70 [ 499.899253][T18508] ? vma_start_read+0x1c7/0x2c0 [ 499.899286][T18508] do_user_addr_fault+0x62f/0x1050 [ 499.899310][T18508] ? trace_page_fault_user+0x1f/0xa0 [ 499.899333][T18508] exc_page_fault+0x62/0xa0 [ 499.899415][T18508] asm_exc_page_fault+0x26/0x30 [ 499.899437][T18508] RIP: 0033:0x7f0cf827a80c [ 499.899451][T18508] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 499.899468][T18508] RSP: 002b:00007ffc0a512e00 EFLAGS: 00010202 [ 499.899561][T18508] RAX: 0000000000000000 RBX: 00007f0cf8626090 RCX: 000055555856b808 [ 499.899594][T18508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 499.899604][T18508] RBP: 00007f0cf8627da0 R08: 0000000000000000 R09: 0000000000000000 [ 499.899615][T18508] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000007a0a2 [ 499.899625][T18508] R13: 00007f0cf862609c R14: 0000000000079dd5 R15: 00007f0cf8626090 [ 499.899667][T18508] [ 499.901072][T18508] memory: usage 307200kB, limit 307200kB, failcnt 337 [ 500.162004][T18508] memory+swap: usage 55552kB, limit 9007199254740988kB, failcnt 0 [ 500.170048][T18508] kmem: usage 54828kB, limit 9007199254740988kB, failcnt 0 [ 500.177287][T18508] Memory cgroup stats for /syz8: [ 500.177532][T18508] cache 0 [ 500.185425][T18508] rss 0 [ 500.188230][T18508] shmem 0 [ 500.191167][T18508] mapped_file 0 [ 500.201447][T18508] dirty 0 [ 500.204466][T18508] writeback 4096 [ 500.208002][T18508] workingset_refault_anon 123 [ 500.212900][T18508] workingset_refault_file 0 [ 500.217560][T18508] swap 450560 [ 500.220908][T18508] swapcached 1241088 [ 500.225596][T18508] pgpgin 70216 [ 500.229330][T18508] pgpgout 70211 [ 500.240356][T18532] loop4: detected capacity change from 0 to 512 [ 500.242579][T18508] pgfault 91070 [ 500.257263][T18508] pgmajfault 62 [ 500.261286][T18508] inactive_anon 4096 [ 500.267295][T18508] active_anon 16384 [ 500.271319][T18532] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 500.293478][T18508] inactive_file 0 [ 500.297474][T18508] active_file 0 [ 500.301059][T18508] unevictable 0 [ 500.305055][T18508] hierarchical_memory_limit 314572800 [ 500.312469][T18508] hierarchical_memsw_limit 9223372036854771712 [ 500.320767][T18508] total_cache 0 [ 500.324714][T18508] total_rss 0 [ 500.329178][T18508] total_shmem 0 [ 500.335209][T18532] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 500.357521][T18508] total_mapped_file 0 [ 500.361656][T18508] total_dirty 0 [ 500.366429][T18508] total_writeback 4096 [ 500.369892][T18532] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4080: bg 0: block 248: padding at end of block bitmap is not set [ 500.370623][T18508] total_workingset_refault_anon 123 [ 500.370635][T18508] total_workingset_refault_file 0 [ 500.370644][T18508] total_swap 450560 [ 500.370653][T18508] total_swapcached 1241088 [ 500.370661][T18508] total_pgpgin 70216 [ 500.370670][T18508] total_pgpgout 70211 [ 500.370713][T18508] total_pgfault 91070 [ 500.370719][T18508] total_pgmajfault 62 [ 500.370728][T18508] total_inactive_anon 4096 [ 500.370734][T18508] total_active_anon 16384 [ 500.370741][T18508] total_inactive_file 0 [ 500.370747][T18508] total_active_file 0 [ 500.370754][T18508] total_unevictable 0 [ 500.370762][T18508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8 [ 500.387462][T18532] loop4: lost filesystem error report for type 5 error -117 [ 500.391432][T18508] ,task_memcg= [ 500.397718][T18532] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.4080: Failed to acquire dquot type 1 [ 500.399536][T18508] /syz8 [ 500.404217][T18532] loop4: lost filesystem error report for type 5 error -28 [ 500.408380][T18508] ,task=syz.8.4073,pid=18508,uid=0 [ 500.412541][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 500.417527][T18508] Memory cgroup out of memory: Killed process 18508 (syz.8.4073) total-vm:94168kB, anon-rss:1228kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 500.420011][ C0] EXT4-fs (loop4): last error at time 2000524459: ext4_validate_block_bitmap:441 [ 500.475838][T18532] EXT4-fs (loop4): 1 truncate cleaned up [ 500.476204][ C0] [ 500.545336][T18532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 500.657348][T18550] loop6: detected capacity change from 0 to 512 [ 500.835696][T14234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 500.845498][ T114] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 500.858427][ T114] loop4: lost filesystem error report for type 5 error -117 [ 500.921770][T18560] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4089'. [ 500.987171][T18562] loop6: detected capacity change from 0 to 512 [ 501.176886][T18569] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 501.176886][T18569] [ 501.969789][T18569] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 502.080340][T18580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4096'. [ 502.806285][T18604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4103'. [ 502.935893][T18617] set_capacity_and_notify: 1 callbacks suppressed [ 502.935967][T18617] loop4: detected capacity change from 0 to 1024 [ 502.957274][T18617] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 502.957274][T18617] [ 503.051207][T18625] loop6: detected capacity change from 0 to 512 [ 503.069849][T18625] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 503.090606][T18625] EXT4-fs (loop6): 1 truncate cleaned up [ 503.099388][T18625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.127572][T18630] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 503.137527][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.480245][T18644] loop6: detected capacity change from 0 to 512 [ 503.551940][T18644] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.4116: corrupted inode contents [ 503.563996][T18644] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 503.564484][T18644] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #16: comm syz.6.4116: mark_inode_dirty error [ 503.585367][T18644] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 503.585872][T18644] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.4116: corrupted inode contents [ 503.607183][T18644] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 503.607677][T18644] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.4116: mark_inode_dirty error [ 503.628282][T18644] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 503.628894][T18644] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.4116: corrupted inode contents [ 503.649970][ C1] EXT4-fs (loop6): error count since last fsck: 4 [ 503.650020][ C1] EXT4-fs (loop6): initial error at time 2000524463: ext4_do_update_inode:5690: inode 16 [ 503.650190][ C1] EXT4-fs (loop6): last error at time 2000524463: __ext4_ext_dirty:207: inode 16 [ 503.681616][T18644] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 503.691274][T18644] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 503.709537][T18644] loop6: lost filesystem error report for type 5 error -117 [ 503.710753][T18644] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.4116: corrupted inode contents [ 503.734635][T18644] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 503.736307][T18644] EXT4-fs error (device loop6): ext4_truncate:4690: inode #16: comm syz.6.4116: mark_inode_dirty error [ 503.761868][T18644] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 503.763943][T18644] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 503.786861][T18644] loop6: lost filesystem error report for type 5 error -117 [ 503.790742][T18644] EXT4-fs (loop6): 1 truncate cleaned up [ 503.813351][T18644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.827111][T18644] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.286763][ T39] __quota_error: 45 callbacks suppressed [ 504.286840][ T39] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 504.320210][ T39] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 504.441037][T18662] loop4: detected capacity change from 0 to 512 [ 504.582356][T18662] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 504.650049][T18662] EXT4-fs (loop4): 1 truncate cleaned up [ 504.656296][T18662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.692494][ T28] audit: type=1400 audit(2000524464.276:7586): avc: denied { create } for pid=18674 comm="syz.0.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 504.771968][T14234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.841528][ T28] audit: type=1400 audit(2000524464.326:7587): avc: denied { write } for pid=18656 comm="syz.4.4123" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 504.938319][ T28] audit: type=1400 audit(2000524464.496:7588): avc: denied { bind } for pid=18680 comm="syz.4.4132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 505.011983][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.080594][T18691] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 505.098357][T18692] loop6: detected capacity change from 0 to 1024 [ 505.107045][T18692] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 505.107045][T18692] [ 505.787174][ T28] audit: type=1400 audit(2000524465.386:7589): avc: denied { write } for pid=18707 comm="syz.4.4141" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 505.845745][T18708] loop4: detected capacity change from 0 to 2048 [ 505.894091][T18708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.917147][T18714] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4143'. [ 505.940000][T18708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4141'. [ 505.991340][T14234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.196443][T18733] loop4: detected capacity change from 0 to 512 [ 506.243908][T18733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 506.352095][T18733] ext4 filesystem being mounted at /189/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.369698][T18740] loop6: detected capacity change from 0 to 1024 [ 506.378823][T18740] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 506.378823][T18740] [ 506.409245][T18726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 506.420327][T18740] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 507.001391][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4154'. [ 507.016997][T18752] loop4: detected capacity change from 0 to 1024 [ 507.027864][T18752] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 507.027864][T18752] [ 507.136708][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4159'. [ 507.191408][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4162'. [ 507.205154][ T28] audit: type=1400 audit(2000524466.786:7590): avc: denied { nlmsg_write } for pid=18769 comm="syz.6.4162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 507.234652][T18770] SET target dimension over the limit! [ 507.365569][T18781] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 507.593148][T18791] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4169'. [ 507.682269][ T28] audit: type=1400 audit(2000524467.276:7591): avc: denied { remount } for pid=18794 comm="syz.8.4171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 507.782491][T18800] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 507.836160][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4174'. [ 508.046718][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4176'. [ 508.060606][T18808] Cannot find add_set index 0 as target [ 508.211387][T18816] loop6: detected capacity change from 0 to 512 [ 508.219285][T18816] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 508.233539][T18816] EXT4-fs (loop6): 1 truncate cleaned up [ 508.239666][T18816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.287703][ T28] audit: type=1400 audit(2000524467.886:7592): avc: denied { read write } for pid=18809 comm="syz.4.4177" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 508.314080][ T28] audit: type=1400 audit(2000524467.886:7593): avc: denied { open } for pid=18809 comm="syz.4.4177" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 508.340337][ T28] audit: type=1400 audit(2000524467.916:7594): avc: denied { write } for pid=18813 comm="syz.6.4179" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 508.380806][T18828] loop4: detected capacity change from 0 to 256 [ 508.425666][T18828] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 508.450586][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.516624][T18825] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 508.532526][T18825] FAT-fs (loop4): Filesystem has been set read-only [ 508.555712][T18825] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 508.873335][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4188'. [ 510.271876][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 510.271891][ T28] audit: type=1400 audit(2000524469.866:7598): avc: denied { write } for pid=18859 comm="syz.0.4193" path="socket:[55949]" dev="sockfs" ino=55949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 510.483234][T18866] loop6: detected capacity change from 0 to 512 [ 510.504874][T18866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 510.532417][T18866] ext4 filesystem being mounted at /395/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.621596][T18866] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 510.861014][ T28] audit: type=1400 audit(2000524470.456:7599): avc: denied { read write } for pid=18878 comm="syz.6.4199" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 510.910404][ T28] audit: type=1400 audit(2000524470.456:7600): avc: denied { open } for pid=18878 comm="syz.6.4199" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 510.987280][T18823] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 510.995830][T18823] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 511.124125][ T28] audit: type=1400 audit(2000524470.726:7601): avc: denied { unmount } for pid=14234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 511.186231][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4205'. [ 511.187947][ T28] audit: type=1400 audit(2000524470.786:7602): avc: denied { ioctl } for pid=18897 comm="syz.0.4205" path="socket:[55069]" dev="sockfs" ino=55069 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 511.254272][T18900] loop6: detected capacity change from 0 to 512 [ 511.264501][T18901] loop4: detected capacity change from 0 to 512 [ 511.272696][T18900] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 511.274689][T18901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 511.306679][T18900] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 511.316567][T18901] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 511.337878][T18900] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4206: bg 0: block 248: padding at end of block bitmap is not set [ 511.352803][T18900] loop6: lost filesystem error report for type 5 error -117 [ 511.353944][T18900] Quota error (device loop6): write_blk: dquota write failed [ 511.369314][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 511.369343][ C0] EXT4-fs (loop6): last error at time 2000524470: ext4_validate_block_bitmap:441 [ 511.388659][T18900] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 511.399892][T18900] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.4206: Failed to acquire dquot type 1 [ 511.411542][T18900] loop6: lost filesystem error report for type 5 error -28 [ 511.415051][T18900] EXT4-fs (loop6): 1 truncate cleaned up [ 511.433029][T18900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 511.453604][ T28] audit: type=1400 audit(2000524471.046:7603): avc: denied { write } for pid=18899 comm="syz.6.4206" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 511.489639][ T28] audit: type=1400 audit(2000524471.086:7604): avc: denied { write } for pid=18899 comm="syz.6.4206" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 511.522093][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 511.531297][ T2215] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 511.540330][ T2215] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:14: Failed to release dquot type 1 [ 511.551929][ T2215] loop6: lost filesystem error report for type 5 error -117 [ 511.658829][T18913] loop4: detected capacity change from 0 to 512 [ 512.468973][T18930] loop4: detected capacity change from 0 to 512 [ 512.543675][T18930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 512.556935][T18930] ext4 filesystem being mounted at /197/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.686255][T18930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 512.713907][T18942] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4216'. [ 512.960316][T18947] 9p: Bad value for 'port' [ 513.483811][T18962] loop6: detected capacity change from 0 to 1024 [ 513.490713][T18962] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 513.490713][T18962] [ 513.544622][T18961] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4224'. [ 514.462002][T18984] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4230'. [ 514.493166][T18986] loop6: detected capacity change from 0 to 512 [ 514.514604][T18986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 514.527793][T18986] ext4 filesystem being mounted at /401/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.998543][T18994] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.008659][T18994] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.031220][T18978] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 515.166381][T18994] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.230705][T18994] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.273085][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 515.273099][ T28] audit: type=1326 audit(2000524474.876:7704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.0.4232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918238d68e code=0x7ffc0000 [ 515.313755][ T28] audit: type=1326 audit(2000524474.906:7705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.0.4232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918238d68e code=0x7ffc0000 [ 515.346732][T18994] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.359903][T18994] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.383775][ T28] audit: type=1326 audit(2000524474.906:7706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.0.4232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918238d68e code=0x7ffc0000 [ 515.436157][T18994] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.447120][ T28] audit: type=1326 audit(2000524474.906:7707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.0.4232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918238d68e code=0x7ffc0000 [ 515.481332][T18994] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.532073][ T28] audit: type=1326 audit(2000524474.916:7708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.0.4232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918238d68e code=0x7ffc0000 [ 515.573542][ T1673] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.594630][ T1673] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.621059][ T1673] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.655304][ T1673] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.665467][T19011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4239'. [ 515.677946][T19009] audit: audit_backlog=65 > audit_backlog_limit=64 [ 515.686032][ T28] audit: type=1326 audit(2000524474.946:7709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.0.4232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918238d68e code=0x7ffc0000 [ 515.723428][T19009] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 515.731900][ T1673] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.740465][T19009] audit: backlog limit exceeded [ 515.745641][ T1673] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.754262][ T1673] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.777016][ T28] audit: type=1326 audit(2000524474.946:7710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.0.4232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f918238d68e code=0x7ffc0000 [ 515.803618][ T1673] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.909570][T19024] loop6: detected capacity change from 0 to 512 [ 515.938540][T19024] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 515.959137][T19024] EXT4-fs (loop6): 1 truncate cleaned up [ 515.969460][T19024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.985551][T19025] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 516.773386][T19042] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4247'. [ 516.784897][T19042] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4247'. [ 516.796581][T19042] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4247'. [ 518.902750][T19016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.991242][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.068371][T19066] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 520.620051][T19077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 520.629520][T19077] bridge0: port 3(batadv0) entered blocking state [ 520.636000][T19077] bridge0: port 3(batadv0) entered forwarding state [ 520.643614][T19077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.990934][T19082] loop6: detected capacity change from 0 to 512 [ 521.017278][T19082] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 521.044595][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 521.044607][ T28] audit: type=1107 audit(2000524480.645:7783): pid=19089 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='’¢\ú°b¿' [ 521.105510][T19082] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 521.144483][T19082] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4260: bg 0: block 248: padding at end of block bitmap is not set [ 521.176604][T19082] loop6: lost filesystem error report for type 5 error -117 [ 521.178926][T19082] Quota error (device loop6): write_blk: dquota write failed [ 521.186409][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 521.186516][ C0] EXT4-fs (loop6): last error at time 2000524480: ext4_validate_block_bitmap:441 [ 521.210106][T19082] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 521.223436][T19082] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.4260: Failed to acquire dquot type 1 [ 521.234941][T19082] loop6: lost filesystem error report for type 5 error -28 [ 521.246099][T19082] EXT4-fs (loop6): 1 truncate cleaned up [ 521.271096][T19082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 521.293368][ T28] audit: type=1400 audit(2000524480.885:7784): avc: denied { write } for pid=19081 comm="syz.6.4260" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 521.353517][ T28] audit: type=1400 audit(2000524480.955:7785): avc: denied { write } for pid=19081 comm="syz.6.4260" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 521.385167][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 521.396073][ T1673] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 521.405255][ T1673] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 521.416942][ T1673] loop6: lost filesystem error report for type 5 error -117 [ 521.459687][T19120] loop4: detected capacity change from 0 to 512 [ 521.487852][T19120] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 521.504255][T19120] EXT4-fs (loop4): 1 truncate cleaned up [ 521.518838][T19120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.532225][ T28] audit: type=1400 audit(2000524481.135:7786): avc: denied { write } for pid=19105 comm="syz.4.4266" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 521.656468][T19124] loop6: detected capacity change from 0 to 512 [ 521.674384][T19124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 521.731399][T19124] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 521.959351][T19129] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4270'. [ 522.811428][ T28] audit: type=1400 audit(2000524482.405:7787): avc: denied { read } for pid=19148 comm="syz.3.4278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 523.130361][T19159] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 523.217890][T19163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4284'. [ 523.238291][T19163] Cannot find add_set index 0 as target [ 523.385339][ T28] audit: type=1400 audit(2000524482.985:7788): avc: denied { unmount } for pid=19170 comm="syz.3.4288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 524.416813][T19106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.455767][T14234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.595738][T19192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4296'. [ 524.649196][T19192] SET target dimension over the limit! [ 524.811375][ T28] audit: type=1400 audit(2000524484.405:7789): avc: denied { create } for pid=19207 comm="syz.8.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 524.976025][T19216] loop4: detected capacity change from 0 to 512 [ 525.006682][T19216] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 525.054612][T19216] EXT4-fs (loop4): 1 truncate cleaned up [ 525.072246][T19216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.226967][T19233] loop6: detected capacity change from 0 to 1024 [ 525.237736][T19233] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 525.237736][T19233] [ 525.255299][T19233] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 525.306534][T19239] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4314'. [ 525.400788][T19239] ªªªªªª: renamed from dummy0 (while UP) [ 527.664955][T19289] loop6: detected capacity change from 0 to 512 [ 527.671566][T19289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 527.695642][T19289] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 527.857536][T19210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.878732][T14234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.965012][T19296] loop4: detected capacity change from 0 to 4096 [ 527.979371][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 527.979385][ T28] audit: type=1400 audit(2000524487.575:7794): avc: denied { sqpoll } for pid=19299 comm="syz.0.4329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 528.016967][T19296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.065076][T14234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.075044][T19304] loop6: detected capacity change from 0 to 512 [ 528.138606][ T28] audit: type=1107 audit(2000524487.735:7795): pid=19310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='’¢\ú°b' [ 528.513141][ T28] audit: type=1400 audit(2000524488.095:7796): avc: denied { name_bind } for pid=19329 comm="syz.8.4340" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 528.545879][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4339'. [ 528.816730][ T28] audit: type=1107 audit(2000524488.415:7797): pid=19346 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='’¢\ú°b' [ 529.152422][ T28] audit: type=1400 audit(2000524488.745:7798): avc: denied { create } for pid=19356 comm="syz.8.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 529.200144][T19359] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4347'. [ 529.224662][T19359] loop6: detected capacity change from 0 to 512 [ 529.244032][ T28] audit: type=1400 audit(2000524488.835:7799): avc: denied { create } for pid=19356 comm="syz.8.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 529.276090][ T28] audit: type=1400 audit(2000524488.835:7800): avc: denied { write } for pid=19356 comm="syz.8.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 529.297384][ T28] audit: type=1400 audit(2000524488.865:7801): avc: denied { write } for pid=19356 comm="syz.8.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 529.298811][T19359] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 529.360388][ T28] audit: type=1400 audit(2000524488.865:7802): avc: denied { read } for pid=19356 comm="syz.8.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 529.381352][ T28] audit: type=1400 audit(2000524488.945:7803): avc: denied { setopt } for pid=19356 comm="syz.8.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 529.449871][T19370] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4351'. [ 529.614253][T19389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 529.715036][T19399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4362'. [ 529.818634][T19411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4366'. [ 530.301644][T19425] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4371'. [ 530.561264][T19429] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4373'. [ 531.228814][T19436] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4375'. [ 531.828383][T19440] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4377'. [ 532.141268][T19443] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4378'. [ 532.871424][T19440] gretap0: left promiscuous mode [ 533.048206][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 533.048220][ T28] audit: type=1326 audit(2000524492.645:7829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19446 comm="syz.6.4380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 533.086089][ T28] audit: type=1326 audit(2000524492.645:7830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19446 comm="syz.6.4380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 533.124341][ T28] audit: type=1326 audit(2000524492.645:7831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19446 comm="syz.6.4380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 533.168614][ T28] audit: type=1326 audit(2000524492.645:7832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19446 comm="syz.6.4380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 533.274655][ T28] audit: type=1326 audit(2000524492.645:7833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19446 comm="syz.6.4380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 533.306991][ T28] audit: type=1326 audit(2000524492.645:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19446 comm="syz.6.4380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 533.317136][T19458] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 533.317136][T19458] Please contact the netfilter-devel mailing list or update your nftables rules. [ 533.351505][ T28] audit: type=1326 audit(2000524492.645:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19446 comm="syz.6.4380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 533.379145][ T28] audit: type=1326 audit(2000524492.755:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19446 comm="syz.6.4380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fea380fce59 code=0x7ffc0000 [ 533.550154][ T114] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.599814][ T114] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.658968][ T114] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.720524][ T114] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.894392][T19476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=19476 comm=syz.8.4389 [ 534.192695][ T28] audit: type=1107 audit(2000524493.735:7837): pid=19482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='’¢\ú°b¿' [ 534.292171][ T28] audit: type=1326 audit(2000524493.885:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19485 comm="syz.0.4393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91823cce59 code=0x7ffc0000 [ 534.480089][T19494] __nla_validate_parse: 2 callbacks suppressed [ 534.480155][T19494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4395'. [ 534.778588][T19465] Set syz1 is full, maxelem 65536 reached [ 534.846135][T19514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4403'. [ 534.955883][T19520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4406'. [ 535.031804][T19526] loop6: detected capacity change from 0 to 1024 [ 535.054533][T19526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.079259][T19526] EXT4-fs (loop6): shut down requested (1) [ 535.088536][T19526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 535.097350][T19526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 535.106939][T19526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 535.116246][T19526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 535.125027][T19526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 535.133794][T19526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 535.144082][T19526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=13 [ 535.153108][T19526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=14 [ 535.162059][T19526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 535.171126][T19526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 535.179924][T19526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 535.192118][T19526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=13 [ 535.202341][T19526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 535.212298][T19526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=14 [ 535.240146][T11585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.390417][T19542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4413'. [ 535.408434][T19545] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4415'. [ 535.456407][T19551] FAULT_INJECTION: forcing a failure. [ 535.456407][T19551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.465417][T19550] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4417'. [ 535.469468][T19551] CPU: 1 UID: 0 PID: 19551 Comm: syz.6.4416 Not tainted syzkaller #0 PREEMPT(lazy) [ 535.469549][T19551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 535.469562][T19551] Call Trace: [ 535.469568][T19551] [ 535.469576][T19551] __dump_stack+0x1d/0x30 [ 535.469601][T19551] dump_stack_lvl+0x95/0xd0 [ 535.469696][T19551] dump_stack+0x15/0x1b [ 535.469715][T19551] should_fail_ex+0x263/0x280 [ 535.469735][T19551] should_fail+0xb/0x20 [ 535.469749][T19551] should_fail_usercopy+0x1a/0x20 [ 535.469772][T19551] _copy_to_user+0x20/0xa0 [ 535.469834][T19551] simple_read_from_buffer+0xb5/0x130 [ 535.469865][T19551] proc_fail_nth_read+0x10e/0x150 [ 535.469922][T19551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.469951][T19551] vfs_read+0x1ab/0x7f0 [ 535.469983][T19551] ? __rcu_read_unlock+0x4e/0x70 [ 535.470003][T19551] ? __fget_files+0x184/0x1c0 [ 535.470047][T19551] ? mutex_lock+0x57/0x90 [ 535.470107][T19551] ksys_read+0xdc/0x1a0 [ 535.470208][T19551] __x64_sys_read+0x40/0x50 [ 535.470241][T19551] x64_sys_call+0x2886/0x3020 [ 535.470264][T19551] do_syscall_64+0x12c/0x3b0 [ 535.470292][T19551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.470342][T19551] RIP: 0033:0x7fea380bd68e [ 535.470393][T19551] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 535.470409][T19551] RSP: 002b:00007fea36b4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 535.470430][T19551] RAX: ffffffffffffffda RBX: 00007fea36b4f6c0 RCX: 00007fea380bd68e [ 535.470445][T19551] RDX: 000000000000000f RSI: 00007fea36b4f0a0 RDI: 0000000000000004 [ 535.470458][T19551] RBP: 00007fea36b4f090 R08: 0000000000000000 R09: 0000000000000000 [ 535.470496][T19551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.470540][T19551] R13: 00007fea38376038 R14: 00007fea38375fa0 R15: 00007ffd624c9488 [ 535.470559][T19551] [ 535.758269][T19560] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4420'. [ 535.768300][T19560] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4420'. [ 535.829561][T19560] netlink: 67 bytes leftover after parsing attributes in process `syz.8.4420'. [ 536.436764][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4427'. [ 537.601760][T19635] loop6: detected capacity change from 0 to 1764 [ 537.609352][T19635] iso9660: Unknown parameter 'uef8' [ 538.158349][ T28] kauditd_printk_skb: 172 callbacks suppressed [ 538.158372][ T28] audit: type=1326 audit(2000524497.755:8011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.8.4448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cf836d68e code=0x7ffc0000 [ 538.354255][ T28] audit: type=1326 audit(2000524497.955:8012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.8.4448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cf836d68e code=0x7ffc0000 [ 538.381621][ T28] audit: type=1326 audit(2000524497.975:8013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.8.4448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cf836d68e code=0x7ffc0000 [ 538.411351][ T28] audit: type=1326 audit(2000524498.005:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.8.4448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cf836d68e code=0x7ffc0000 [ 538.438192][ T28] audit: type=1326 audit(2000524498.035:8015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.8.4448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cf836d68e code=0x7ffc0000 [ 538.468864][ T28] audit: type=1326 audit(2000524498.065:8016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.8.4448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cf836d68e code=0x7ffc0000 [ 538.496085][ T28] audit: type=1326 audit(2000524498.095:8017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.8.4448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cf836d68e code=0x7ffc0000 [ 538.523641][ T28] audit: type=1326 audit(2000524498.125:8018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.8.4448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cf836d68e code=0x7ffc0000 [ 538.550924][ T28] audit: type=1326 audit(2000524498.145:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.8.4448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cf836d68e code=0x7ffc0000 [ 538.580467][ T28] audit: type=1326 audit(2000524498.175:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.8.4448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cf836d68e code=0x7ffc0000 [ 540.027452][T19663] __nla_validate_parse: 8 callbacks suppressed [ 540.027466][T19663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4453'. [ 540.186653][T19672] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4455'. [ 540.250582][T19675] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4456'. [ 540.406198][T19680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4457'. [ 540.592249][T19682] netlink: 'syz.4.4458': attribute type 5 has an invalid length. [ 540.607879][T19682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4458'. [ 540.810481][T19689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4461'. [ 540.921584][T19700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4466'. [ 541.022950][T19705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4468'. [ 541.630472][T19723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4472'. [ 542.111613][T19740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4477'. [ 543.193488][ T28] kauditd_printk_skb: 156 callbacks suppressed [ 543.193602][ T28] audit: type=1400 audit(2000524502.795:8177): avc: denied { create } for pid=19815 comm="syz.0.4507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 543.452518][T19834] 9p: Bad value for 'rfdno' [ 543.569838][T19843] loop6: detected capacity change from 0 to 128 [ 543.584443][T19843] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 543.629215][T19843] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #2: comm syz.6.4517: corrupted xattr block 5: invalid header [ 543.643978][T19843] SELinux: (dev loop6, type ext4) getxattr errno 117 [ 543.664681][T19843] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 543.691567][T19832] syz.8.4514 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 543.705488][T19832] CPU: 1 UID: 0 PID: 19832 Comm: syz.8.4514 Not tainted syzkaller #0 PREEMPT(lazy) [ 543.705519][T19832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.705534][T19832] Call Trace: [ 543.705543][T19832] [ 543.705553][T19832] __dump_stack+0x1d/0x30 [ 543.705576][T19832] dump_stack_lvl+0x95/0xd0 [ 543.705594][T19832] dump_stack+0x15/0x1b [ 543.705616][T19832] dump_header+0x80/0x240 [ 543.705636][T19832] oom_kill_process+0x295/0x350 [ 543.705781][T19832] out_of_memory+0x97d/0xb80 [ 543.705842][T19832] try_charge_memcg+0x62f/0xa10 [ 543.705881][T19832] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 543.705908][T19832] __alloc_frozen_pages_noprof+0x18a/0x350 [ 543.705995][T19832] alloc_pages_mpol+0xb3/0x260 [ 543.706068][T19832] alloc_pages_noprof+0x8f/0x140 [ 543.706151][T19832] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 543.706186][T19832] __kvmalloc_node_noprof+0x3d4/0x640 [ 543.706213][T19832] ? futex_hash_allocate+0x190/0x9a0 [ 543.706282][T19832] ? futex_hash_allocate+0x190/0x9a0 [ 543.706312][T19832] futex_hash_allocate+0x190/0x9a0 [ 543.706343][T19832] ? cap_task_prctl+0x13f/0x6b0 [ 543.706401][T19832] futex_hash_prctl+0xd8/0xf0 [ 543.706497][T19832] __se_sys_prctl+0x4f4/0x1400 [ 543.706524][T19832] __x64_sys_prctl+0x67/0x80 [ 543.706551][T19832] x64_sys_call+0x2533/0x3020 [ 543.706635][T19832] do_syscall_64+0x12c/0x3b0 [ 543.706711][T19832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.706807][T19832] RIP: 0033:0x7f0cf83ace59 [ 543.706844][T19832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.706864][T19832] RSP: 002b:00007f0cf6dff028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 543.706886][T19832] RAX: ffffffffffffffda RBX: 00007f0cf8625fa0 RCX: 00007f0cf83ace59 [ 543.706899][T19832] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 543.707016][T19832] RBP: 00007f0cf8442d6f R08: 0000000000000000 R09: 0000000000000000 [ 543.707031][T19832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.707046][T19832] R13: 00007f0cf8626038 R14: 00007f0cf8625fa0 R15: 00007ffc0a512c98 [ 543.707067][T19832] [ 543.707075][T19832] memory: usage 307200kB, limit 307200kB, failcnt 395 [ 543.862440][T19843] bond0: option arp_all_targets: invalid value (909834999) [ 543.961482][T19832] memory+swap: usage 222708kB, limit 9007199254740988kB, failcnt 0 [ 543.969926][T19832] kmem: usage 220092kB, limit 9007199254740988kB, failcnt 0 [ 543.978817][T19843] bond0 (unregistering): Released all slaves [ 543.985269][T19832] Memory cgroup stats for /syz8: [ 543.985485][T19832] cache 0 [ 544.025025][T19832] rss 0 [ 544.034006][T19832] shmem 0 [ 544.042602][T19832] mapped_file 0 [ 544.050606][T19832] dirty 0 [ 544.058863][T19832] writeback 0 [ 544.080451][T19832] workingset_refault_anon 138 [ 544.106379][T19832] workingset_refault_file 0 [ 544.112599][T19832] swap 536576 [ 544.136938][T19868] loop6: detected capacity change from 0 to 512 [ 544.146514][T19832] swapcached 1601536 [ 544.155277][T19832] pgpgin 113620 [ 544.168747][T19832] pgpgout 113620 [ 544.175237][T19832] pgfault 143335 [ 544.182920][T19832] pgmajfault 71 [ 544.192790][T19832] inactive_anon 0 [ 544.199356][T19832] active_anon 0 [ 544.214625][T19832] inactive_file 0 [ 544.218329][T19832] active_file 0 [ 544.226379][T19832] unevictable 0 [ 544.229912][T19832] hierarchical_memory_limit 314572800 [ 544.235450][T19832] hierarchical_memsw_limit 9223372036854771712 [ 544.241607][T19832] total_cache 0 [ 544.245143][T19832] total_rss 0 [ 544.248419][T19832] total_shmem 0 [ 544.251899][T19832] total_mapped_file 0 [ 544.255961][T19832] total_dirty 0 [ 544.259411][T19832] total_writeback 0 [ 544.263399][T19832] total_workingset_refault_anon 138 [ 544.268246][T19868] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 544.268584][T19832] total_workingset_refault_file 0 [ 544.268629][T19832] total_swap 536576 [ 544.268637][T19832] total_swapcached 1601536 [ 544.268645][T19832] total_pgpgin 113620 [ 544.296433][T19832] total_pgpgout 113620 [ 544.304269][T19832] total_pgfault 143335 [ 544.308815][T19832] total_pgmajfault 71 [ 544.313829][T19832] total_inactive_anon 0 [ 544.317997][T19832] total_active_anon 0 [ 544.321972][T19832] total_inactive_file 0 [ 544.327579][T19832] total_active_file 0 [ 544.331665][T19832] total_unevictable 0 [ 544.336279][T19832] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4514,pid=19831,uid=0 [ 544.351781][ T28] audit: type=1400 audit(2000524503.945:8178): avc: denied { create } for pid=19874 comm="syz.0.4528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 544.365077][T19832] Memory cgroup out of memory: Killed process 19831 (syz.8.4514) total-vm:94168kB, anon-rss:1228kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 544.396973][ T28] audit: type=1400 audit(2000524503.945:8179): avc: denied { write } for pid=19874 comm="syz.0.4528" path="socket:[58806]" dev="sockfs" ino=58806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 544.432503][ T28] audit: type=1400 audit(2000524504.025:8180): avc: denied { setopt } for pid=19874 comm="syz.0.4528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 544.581233][T19891] loop6: detected capacity change from 0 to 512 [ 544.607309][T19896] sctp: [Deprecated]: syz.8.4535 (pid 19896) Use of int in maxseg socket option. [ 544.607309][T19896] Use struct sctp_assoc_value instead [ 544.625744][T19891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 544.638862][T19891] ext4 filesystem being mounted at /434/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.903731][ T28] audit: type=1400 audit(2000524504.395:8181): avc: denied { kexec_image_load } for pid=19877 comm="syz.4.4529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 545.026599][ T28] audit: type=1400 audit(2000524504.625:8182): avc: denied { execute } for pid=19907 comm="syz.0.4537" path="/293/cpuacct.usage_sys" dev="tmpfs" ino=1563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 545.086101][T19881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 546.145666][T19920] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 546.244742][T19926] 9p: Bad value for 'rfdno' [ 546.497686][ T28] audit: type=1400 audit(2000524506.095:8183): avc: denied { create } for pid=19937 comm="syz.0.4547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 546.592731][ T28] audit: type=1400 audit(2000524506.115:8184): avc: denied { setopt } for pid=19937 comm="syz.0.4547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 546.780468][ T28] audit: type=1400 audit(2000524506.375:8185): avc: denied { setopt } for pid=19950 comm="syz.0.4552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 546.834527][T19954] 9p: Bad value for 'rfdno' [ 546.863624][T19956] lo: entered allmulticast mode [ 547.049469][T19963] __nla_validate_parse: 6 callbacks suppressed [ 547.049485][T19963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4556'. [ 547.313682][T19944] syz.3.4550 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 547.330242][T19944] CPU: 1 UID: 0 PID: 19944 Comm: syz.3.4550 Not tainted syzkaller #0 PREEMPT(lazy) [ 547.330269][T19944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 547.330308][T19944] Call Trace: [ 547.330315][T19944] [ 547.330379][T19944] __dump_stack+0x1d/0x30 [ 547.330399][T19944] dump_stack_lvl+0x95/0xd0 [ 547.330415][T19944] dump_stack+0x15/0x1b [ 547.330487][T19944] dump_header+0x80/0x240 [ 547.330504][T19944] oom_kill_process+0x295/0x350 [ 547.330549][T19944] out_of_memory+0x97d/0xb80 [ 547.330577][T19944] try_charge_memcg+0x62f/0xa10 [ 547.330600][T19944] ? radix_tree_lookup+0xfa/0x140 [ 547.330629][T19944] charge_memcg+0x6d/0x120 [ 547.330664][T19944] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 547.330691][T19944] __swap_cache_prepare_and_add+0x69/0x4a0 [ 547.330715][T19944] ? alloc_pages_mpol+0x217/0x260 [ 547.330741][T19944] swap_cache_alloc_folio+0xa2/0x120 [ 547.330843][T19944] swap_cluster_readahead+0x25f/0x3c0 [ 547.330869][T19944] swapin_readahead+0xde/0x840 [ 547.330945][T19944] ? _raw_spin_unlock+0x9/0x30 [ 547.330964][T19944] ? swap_put_entries_cluster+0x46c/0x490 [ 547.331048][T19944] ? __rcu_read_unlock+0x4e/0x70 [ 547.331067][T19944] ? swap_cache_get_folio+0x1e0/0x1f0 [ 547.331089][T19944] do_swap_page+0x31e/0x2180 [ 547.331114][T19944] ? __css_rstat_updated+0xbb/0x280 [ 547.331172][T19944] ? __rcu_read_lock+0x36/0x50 [ 547.331263][T19944] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 547.331286][T19944] handle_mm_fault+0xb30/0x2e70 [ 547.331389][T19944] ? vma_start_read+0x1c7/0x2c0 [ 547.331419][T19944] do_user_addr_fault+0x62f/0x1050 [ 547.331447][T19944] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 547.331472][T19944] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 547.331515][T19944] ? trace_page_fault_user+0x1f/0xa0 [ 547.331539][T19944] exc_page_fault+0x62/0xa0 [ 547.331559][T19944] asm_exc_page_fault+0x26/0x30 [ 547.331618][T19944] RIP: 0033:0x7f18d22d7f83 [ 547.331698][T19944] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d 2e 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 547.331713][T19944] RSP: 002b:00007ffe44da3790 EFLAGS: 00010246 [ 547.331727][T19944] RAX: 0000000000000000 RBX: 000055555efaa500 RCX: 0000000000000000 [ 547.331792][T19944] RDX: 00007ffe44da37d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.331803][T19944] RBP: 00007f18d2597da0 R08: 0000000000000000 R09: 0000000000000000 [ 547.331876][T19944] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000858a7 [ 547.331888][T19944] R13: 00007f18d259618c R14: 0000000000085635 R15: 00007f18d2596180 [ 547.331904][T19944] [ 547.592313][T19944] memory: usage 307200kB, limit 307200kB, failcnt 7994 [ 547.606302][T19944] memory+swap: usage 377320kB, limit 9007199254740988kB, failcnt 0 [ 547.616214][T19944] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 547.625232][T19944] Memory cgroup stats for /syz3: [ 547.625501][T19944] cache 0 [ 547.633654][T19944] rss 0 [ 547.636408][T19944] shmem 0 [ 547.639370][T19944] mapped_file 0 [ 547.643390][T19944] dirty 0 [ 547.646317][T19944] writeback 8192 [ 547.649940][T19944] workingset_refault_anon 807 [ 547.664834][T19944] workingset_refault_file 12169 [ 547.671371][T19944] swap 71802880 [ 547.684193][T19944] swapcached 140283904 [ 547.688281][T19944] pgpgin 531361 [ 547.691768][T19944] pgpgout 531356 [ 547.695364][T19944] pgfault 543143 [ 547.698898][T19944] pgmajfault 499 [ 547.702520][T19944] inactive_anon 20480 [ 547.725604][T19944] active_anon 0 [ 547.737081][T19944] inactive_file 0 [ 547.740984][T19944] active_file 0 [ 547.764703][T19944] unevictable 0 [ 547.768201][T19944] hierarchical_memory_limit 314572800 [ 547.773749][T19944] hierarchical_memsw_limit 9223372036854771712 [ 547.779922][T19944] total_cache 0 [ 547.795622][T19944] total_rss 0 [ 547.798992][T19944] total_shmem 0 [ 547.802448][T19944] total_mapped_file 0 [ 547.807090][T19944] total_dirty 0 [ 547.810534][T19944] total_writeback 8192 [ 547.832658][T19944] total_workingset_refault_anon 807 [ 547.837873][T19944] total_workingset_refault_file 12169 [ 547.845358][T19944] total_swap 71802880 [ 547.861189][T19944] total_swapcached 140283904 [ 547.865972][T19944] total_pgpgin 531361 [ 547.870012][T19944] total_pgpgout 531356 [ 547.874645][T19944] total_pgfault 543143 [ 547.892747][T19944] total_pgmajfault 499 [ 547.898271][T19944] total_inactive_anon 20480 [ 547.922756][T19944] total_active_anon 0 [ 547.927060][T19944] total_inactive_file 0 [ 547.931232][T19944] total_active_file 0 [ 547.935857][T19944] total_unevictable 0 [ 547.943504][T19944] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4550,pid=19944,uid=0 [ 547.958529][T19944] Memory cgroup out of memory: Killed process 19944 (syz.3.4550) total-vm:96348kB, anon-rss:1232kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 548.157589][T19985] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4564'. [ 550.052856][T19995] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4565'. [ 550.157463][T19999] 9p: Bad value for 'rfdno' [ 551.323123][ T28] audit: type=1400 audit(2000524510.925:8186): avc: denied { create } for pid=20012 comm="syz.4.4573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 551.427481][T20020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4572'. [ 551.440466][T20023] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4576'. [ 551.836343][T20043] 9p: Bad value for 'rfdno' [ 552.072243][ T28] audit: type=1400 audit(2000524511.665:8187): avc: denied { accept } for pid=20048 comm="syz.8.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 552.403999][T20056] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4587'. [ 552.564135][T20040] syz.3.4583 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 552.578090][T20040] CPU: 1 UID: 0 PID: 20040 Comm: syz.3.4583 Not tainted syzkaller #0 PREEMPT(lazy) [ 552.578170][T20040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 552.578184][T20040] Call Trace: [ 552.578193][T20040] [ 552.578203][T20040] __dump_stack+0x1d/0x30 [ 552.578229][T20040] dump_stack_lvl+0x95/0xd0 [ 552.578312][T20040] dump_stack+0x15/0x1b [ 552.578329][T20040] dump_header+0x80/0x240 [ 552.578353][T20040] oom_kill_process+0x295/0x350 [ 552.578388][T20040] out_of_memory+0x97d/0xb80 [ 552.578495][T20040] try_charge_memcg+0x62f/0xa10 [ 552.578527][T20040] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 552.578593][T20040] __alloc_frozen_pages_noprof+0x18a/0x350 [ 552.578620][T20040] alloc_pages_mpol+0xb3/0x260 [ 552.578700][T20040] alloc_pages_noprof+0x8f/0x140 [ 552.578724][T20040] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 552.578757][T20040] __kvmalloc_node_noprof+0x3d4/0x640 [ 552.578801][T20040] ? futex_hash_allocate+0x190/0x9a0 [ 552.578835][T20040] ? futex_hash_allocate+0x190/0x9a0 [ 552.578867][T20040] futex_hash_allocate+0x190/0x9a0 [ 552.578916][T20040] ? cap_task_prctl+0x13f/0x6b0 [ 552.578943][T20040] futex_hash_prctl+0xd8/0xf0 [ 552.578978][T20040] __se_sys_prctl+0x4f4/0x1400 [ 552.579059][T20040] __x64_sys_prctl+0x67/0x80 [ 552.579083][T20040] x64_sys_call+0x2533/0x3020 [ 552.579106][T20040] do_syscall_64+0x12c/0x3b0 [ 552.579267][T20040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.579289][T20040] RIP: 0033:0x7f18d231ce59 [ 552.579365][T20040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.579381][T20040] RSP: 002b:00007f18d0d6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 552.579426][T20040] RAX: ffffffffffffffda RBX: 00007f18d2595fa0 RCX: 00007f18d231ce59 [ 552.579443][T20040] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 552.579459][T20040] RBP: 00007f18d23b2d6f R08: 0000000000000000 R09: 0000000000000000 [ 552.579475][T20040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.579542][T20040] R13: 00007f18d2596038 R14: 00007f18d2595fa0 R15: 00007ffe44da3698 [ 552.579561][T20040] [ 552.579570][T20040] memory: usage 307200kB, limit 307200kB, failcnt 8177 [ 552.654980][ T28] audit: type=1400 audit(2000524512.255:8188): avc: denied { mount } for pid=20052 comm="syz.8.4586" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 552.682302][T20040] memory+swap: usage 377340kB, limit 9007199254740988kB, failcnt 0 [ 552.769080][T20069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=20069 comm=syz.6.4591 [ 552.780279][T20040] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 552.861989][T20040] Memory cgroup stats for /syz3: [ 552.862338][T20040] cache 0 [ 552.877741][T20040] rss 0 [ 552.880616][T20040] shmem 0 [ 552.885799][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4590'. [ 552.891740][T20040] mapped_file 0 [ 552.898283][T20040] dirty 0 [ 552.901282][T20040] writeback 0 [ 552.904750][T20040] workingset_refault_anon 839 [ 552.909527][T20040] workingset_refault_file 12681 [ 552.915265][T20040] swap 71823360 [ 552.918725][T20040] swapcached 140521472 [ 552.923062][T20040] pgpgin 536559 [ 552.926684][T20040] pgpgout 536559 [ 552.930476][T20040] pgfault 549442 [ 552.936730][T20040] pgmajfault 526 [ 552.943139][T20040] inactive_anon 0 [ 552.947088][T20040] active_anon 0 [ 552.950558][T20040] inactive_file 0 [ 552.955116][T20040] active_file 0 [ 552.958742][T20040] unevictable 0 [ 552.962222][T20040] hierarchical_memory_limit 314572800 [ 552.970330][T20040] hierarchical_memsw_limit 9223372036854771712 [ 552.976651][T20040] total_cache 0 [ 552.980229][T20040] total_rss 0 [ 552.984442][T20040] total_shmem 0 [ 552.988084][T20040] total_mapped_file 0 [ 553.020632][T20040] total_dirty 0 [ 553.031035][T20040] total_writeback 0 [ 553.036982][ T28] audit: type=1400 audit(2000524512.635:8189): avc: denied { bind } for pid=20077 comm="syz.6.4594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 553.039443][T20040] total_workingset_refault_anon 839 [ 553.067581][ T28] audit: type=1400 audit(2000524512.635:8190): avc: denied { name_bind } for pid=20077 comm="syz.6.4594" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 553.107104][T20040] total_workingset_refault_file 12681 [ 553.114680][T20040] total_swap 71823360 [ 553.118837][ T28] audit: type=1400 audit(2000524512.635:8191): avc: denied { node_bind } for pid=20077 comm="syz.6.4594" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 553.142353][T20040] total_swapcached 140521472 [ 553.148417][T20040] total_pgpgin 536559 [ 553.152483][T20040] total_pgpgout 536559 [ 553.156693][T20040] total_pgfault 549442 [ 553.164176][T20040] total_pgmajfault 526 [ 553.168465][ T28] audit: type=1400 audit(2000524512.635:8192): avc: denied { connect } for pid=20077 comm="syz.6.4594" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 553.190676][T20040] total_inactive_anon 0 [ 553.195067][T20040] total_active_anon 0 [ 553.199128][T20040] total_inactive_file 0 [ 553.203518][T20040] total_active_file 0 [ 553.207795][T20040] total_unevictable 0 [ 553.211908][T20040] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4583,pid=20039,uid=0 [ 553.227947][T20040] Memory cgroup out of memory: Killed process 20039 (syz.3.4583) total-vm:94300kB, anon-rss:1232kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 553.262738][T20041] ================================================================== [ 553.271278][T20041] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 553.281622][T20041] [ 553.283940][T20041] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 0: [ 553.292079][T20041] tick_do_update_jiffies64+0x113/0x1c0 [ 553.297634][T20041] tick_nohz_handler+0x8d/0x3d0 [ 553.302488][T20041] __hrtimer_run_queues+0x276/0x4f0 [ 553.307687][T20041] hrtimer_interrupt+0x261/0x850 [ 553.312798][T20041] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 553.318864][T20041] sysvec_apic_timer_interrupt+0x6f/0x80 [ 553.324495][T20041] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 553.330593][T20041] mt_find+0x5c0/0xa10 [ 553.334672][T20041] find_vma+0x6c/0xa0 [ 553.338657][T20041] lock_mm_and_find_vma+0x62/0x3d0 [ 553.344294][T20041] do_user_addr_fault+0x277/0x1050 [ 553.349675][T20041] exc_page_fault+0x62/0xa0 [ 553.354179][T20041] asm_exc_page_fault+0x26/0x30 [ 553.359209][T20041] rep_movs_alternative+0x30/0x90 [ 553.364317][T20041] _copy_from_user+0x6f/0xb0 [ 553.369167][T20041] ___sys_recvmsg+0xaa/0x3b0 [ 553.373758][T20041] do_recvmmsg+0x1ef/0x560 [ 553.378196][T20041] __x64_sys_recvmmsg+0xe5/0x170 [ 553.383144][T20041] x64_sys_call+0x80f/0x3020 [ 553.387833][T20041] do_syscall_64+0x12c/0x3b0 [ 553.392520][T20041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.398412][T20041] [ 553.400730][T20041] read to 0xffffffff86c07a00 of 8 bytes by task 20041 on cpu 1: [ 553.408440][T20041] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 553.414868][T20041] count_shadow_nodes+0x6a/0x250 [ 553.419800][T20041] do_shrink_slab+0x63/0x660 [ 553.424479][T20041] shrink_slab+0x545/0x8f0 [ 553.429522][T20041] shrink_node+0x6d4/0x20a0 [ 553.434031][T20041] do_try_to_free_pages+0x408/0xc90 [ 553.439234][T20041] try_to_free_mem_cgroup_pages+0x201/0x420 [ 553.445649][T20041] try_charge_memcg+0x373/0xa10 [ 553.450764][T20041] charge_memcg+0x6d/0x120 [ 553.455187][T20041] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 553.461433][T20041] __swap_cache_prepare_and_add+0x69/0x4a0 [ 553.467244][T20041] swap_cache_alloc_folio+0xa2/0x120 [ 553.472555][T20041] swap_cluster_readahead+0x35c/0x3c0 [ 553.477948][T20041] swapin_readahead+0xde/0x840 [ 553.482702][T20041] do_swap_page+0x31e/0x2180 [ 553.487279][T20041] handle_mm_fault+0xb30/0x2e70 [ 553.492205][T20041] do_user_addr_fault+0x3fd/0x1050 [ 553.497484][T20041] exc_page_fault+0x62/0xa0 [ 553.502153][T20041] asm_exc_page_fault+0x26/0x30 [ 553.506994][T20041] __get_user_8+0x14/0x30 [ 553.511329][T20041] exit_robust_list+0x31/0x280 [ 553.516094][T20041] futex_exit_release+0xe0/0x130 [ 553.521032][T20041] exit_mm_release+0x1a/0x30 [ 553.525611][T20041] exit_mm+0x38/0x1f0 [ 553.530110][T20041] do_exit+0x442/0x1530 [ 553.534259][T20041] do_group_exit+0xfe/0x140 [ 553.538758][T20041] get_signal+0xe30/0xf20 [ 553.543691][T20041] arch_do_signal_or_restart+0x96/0x480 [ 553.549235][T20041] exit_to_user_mode_loop+0x6f/0x820 [ 553.554510][T20041] do_syscall_64+0x232/0x3b0 [ 553.559281][T20041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.565168][T20041] [ 553.567485][T20041] value changed: 0x000000010000628d -> 0x000000010000628e [ 553.574575][T20041] [ 553.576887][T20041] Reported by Kernel Concurrency Sanitizer on: [ 553.583023][T20041] CPU: 1 UID: 0 PID: 20041 Comm: syz.3.4583 Not tainted syzkaller #0 PREEMPT(lazy) [ 553.592558][T20041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 553.602605][T20041] ==================================================================