last executing test programs: 25.214988115s ago: executing program 4 (id=2110): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x4, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0xb6, 0xb6) 24.777808238s ago: executing program 0 (id=2117): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@noquota}, {@noblock_validity}, {@nodioread_nolock}, {@nolazytime}]}, 0xfe, 0x275, &(0x7f0000000980)="$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") shutdown(0xffffffffffffffff, 0x0) unshare(0x2a020400) pselect6(0x40, &(0x7f0000000280)={0x5, 0x5, 0x7, 0x6, 0xbd, 0x8000000000000000, 0x56, 0x1}, &(0x7f0000000300)={0xc, 0x8000003, 0xf, 0x1, 0x9, 0x80000001, 0x1, 0xd}, 0x0, 0x0, 0x0) 24.702721364s ago: executing program 4 (id=2120): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x10, '\x00', 0x0, @sk_skb=0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000080010000000010000000080007000000020018000180140002006e657464657673696d300000000000000800060003100000080008"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 24.664532008s ago: executing program 0 (id=2123): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@ipv6_newroute={0x34, 0x18, 0x111, 0x1, 0xfe80ffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x8}}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 24.576221792s ago: executing program 0 (id=2124): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x8004, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe4c, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f00000000c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0xb3d) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1215965da6801a92000000000300000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x44, r6, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x14) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r3, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r4, 0x2}, 0x20) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@private1, @in=@private}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f00000006c0)=0xe8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000000)="bf", 0x1}], 0x1, &(0x7f0000000680)=ANY=[], 0xc}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)='s', 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x10}}], 0x2, 0x4044044) r7 = accept4(r1, &(0x7f0000000300)=@ll, &(0x7f0000000140)=0x80, 0x80000) sendmsg$inet(r7, &(0x7f00000005c0)={&(0x7f0000000380)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000500)=[{&(0x7f00000003c0)="2f0d6e38c33329aae0d881c9a9cf761d8a3ea9e3c7272e793cc71ce5b3a14b631cad669ad15357454d04c5b19b280e216981eba70cf6fd5be56e3c7e5abecb3bee0df58142af0c77af59a1c20aea89c4d0756a29df9335f7b6c85bec146f17dd211e37bb2376239a64c01ee887fb039ecbcc9806beb8237c95beec3d52badaa1cf14bd015236276ff5f87393b0e585627314ad278e7e9a4e7b31860d734409b0b109078fe3f4f7ac709daec8ff85a5bbd35b436ad60972072168", 0xba}, {&(0x7f0000000480)="27a100a742297096306c99bbd37b23b580c599654f920f1a060707a50dcb9d77b9edf4adeed2645e08986d96a4ebbefd1df3f226561d6fac4046fc3429bb69f8630afce7a0f43eb5d6f9c00416c4fe8e5ad48d", 0x53}], 0x2}, 0x44000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r8, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}}, 0x4044890) 24.575970102s ago: executing program 4 (id=2125): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080)) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmmsg$inet(r0, &(0x7f0000001e00)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000400)="97", 0x1}], 0x1}}], 0x2, 0x0) 24.498101758s ago: executing program 4 (id=2126): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000"], 0x110}}, 0x0) 24.274555749s ago: executing program 0 (id=2128): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd27, 0x25dfdc00, {0xa, 0x0, 0x0, 0xcc, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'rose0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid={'resuid', 0x3d, 0xee01}}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14907e, 0x3) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write(r2, &(0x7f0000000540)="953820a61a166fd5", 0x8) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0x5) 23.993887309s ago: executing program 4 (id=2133): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f000002eff0)={0x20d, &(0x7f0000000000)=[{0x4, 0xd, 0x8, 0x7fff}, {0x9000, 0x2, 0x12, 0x8}]}, 0x10) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x698, 0x5, 0x488, 0x268, 0x338, 0xfeffffff, 0x338, 0x141, 0x3f0, 0x3f0, 0xffffffff, 0x3f0, 0x3f0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010122, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6, 0x0, 0x8}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'veth1_to_hsr\x00', {}, 0xe, 0x7}}, @common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1a, @ipv6=@remote, @ipv4=@empty, @port=0x4e24, @port=0x4e24}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002, 0x500]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'ip6gre0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @icmp_id=0x68}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r7 = syz_open_pts(r4, 0x0) r8 = dup3(r7, r4, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x17) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000007d650de6b3ff39dbfd0da462291", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$unix(0x1, 0x2, 0x0) (async) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f000002eff0)={0x20d, &(0x7f0000000000)=[{0x4, 0xd, 0x8, 0x7fff}, {0x9000, 0x2, 0x12, 0x8}]}, 0x10) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x698, 0x5, 0x488, 0x268, 0x338, 0xfeffffff, 0x338, 0x141, 0x3f0, 0x3f0, 0xffffffff, 0x3f0, 0x3f0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010122, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6, 0x0, 0x8}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'veth1_to_hsr\x00', {}, 0xe, 0x7}}, @common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1a, @ipv6=@remote, @ipv4=@empty, @port=0x4e24, @port=0x4e24}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002, 0x500]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'ip6gre0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @icmp_id=0x68}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) (async) syz_open_pts(r4, 0x0) (async) dup3(r7, r4, 0x0) (async) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x17) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) (async) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000007d650de6b3ff39dbfd0da462291", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) 23.77054243s ago: executing program 4 (id=2138): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x7, 0x3}, 0x10, 0x5, 0x4381bd77, 0x7, 0xaa4, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8480, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0x4}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f00000024c0)=""/209, 0xd1, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x101}, 0x8) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x8) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080), 0x4) 22.80826187s ago: executing program 0 (id=2143): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) 20.524350588s ago: executing program 0 (id=2153): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0x871a15abc695fc3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x7000000, 0x40, 0x20000000, 0x5, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20014004}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = dup(0xffffffffffffffff) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 20.523965278s ago: executing program 32 (id=2153): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0x871a15abc695fc3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x7000000, 0x40, 0x20000000, 0x5, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20014004}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = dup(0xffffffffffffffff) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 7.530584208s ago: executing program 33 (id=2138): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x7, 0x3}, 0x10, 0x5, 0x4381bd77, 0x7, 0xaa4, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8480, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0x4}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f00000024c0)=""/209, 0xd1, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x101}, 0x8) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x8) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080), 0x4) 4.344366956s ago: executing program 1 (id=2297): unshare(0x22020400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000063000000018000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc0, &(0x7f0000000140)=""/192, 0x40f00}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@noquota}, {@noblock_validity}, {@nodioread_nolock}, {@nolazytime}]}, 0xfe, 0x275, &(0x7f0000000980)="$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") r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x5db) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) shutdown(0xffffffffffffffff, 0x0) unshare(0x2a020400) pselect6(0x40, &(0x7f0000000280)={0x5, 0x5, 0x110000000, 0x5, 0xbd, 0x7ffffffffffffffc, 0x56, 0x1}, &(0x7f0000000300)={0xc, 0x8000003, 0x6, 0x1, 0x9, 0x80000001, 0x1, 0xd}, 0x0, 0x0, 0x0) 4.275230194s ago: executing program 5 (id=2299): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x42510}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000a40)='./file1\x00', 0x1008014, &(0x7f00000009c0)=ANY=[@ANYBLOB="5f39a022a011ebb4b9868e28f40bc189f48c995a68286da0d40d105a2d29fa76f47325e1367bca592e4b87b77b2266c6f657c70994b9d7a8d6c6e2993bfef85e5edddd1c", @ANYRES32=r3], 0x3, 0x7f9, &(0x7f0000001f80)="$eJzs3UuIG/cZAPBv1rt+rKkJaUmDcZyxk4IDzka7m2y6+JAo2tn1JFppkbTFppQ0xOuwZJ2EpKGNL44pJG1pKT2ltzTX3Ao9tBRaaKHpqdAceuktkFNJoS8SSmHLjKS19mnHzzx+P2H9R6Nv5v/NSJ5Po5X+CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgktpMpTKeRD1vLJ5Kt1ebaTXnd7i/v77frmvWeXRdvxFJ8S/27o0P/9Wd96VLd99RXB2NQ91bh2Jv0eyNXfvvuO3EF4eH+svvkNDVOnKFcUnET3vJriy9uPHePdc/sRvoB7/+2It8tFpcz2WNvB35fHUuS/N2M52emqo8cHK2nc7m9ax9ut3J5tNaK6t2mq30WO2+dHx6ejLNxk43FxtzM9V61p/58P0TlcpU+vjYQlZttZuNBx6Pdu1kXq/njbkyZqLy7ShiHi6eiE/knbSTVefT9OzyytLk5VItgsbXz9oVl67TQ/fe9v7L7/1zeal4Qm63kqT3WE+Mj09MjE89NP3Qw5XK8ERlYt2MXRFRGRRrETEUUSxyQ560fIpcx6M3XJuhXv2PeuTRiMU4FekWl5GoxUy0ohnzxe2/jGyK6OnX/6888Pc/7dTvYP3vV/k7L919MMr6f7h763C//p/fUP+3zPVmXl6KV+J8PBtPxUqsxFK8eMszusxl6FrXkKy7NRdZNCKPdjQjj/molnPS3pw0pmMqpqIST8bJmI12pDEbedQji3acjnZ0IiufUbVoRRbV6EQzWpHGsajFfZHGeEzHdExGGlmMxeloxmI0Yi5molqu5Wwsl/t9ckOWX9gXv3rmz++/WUyvBY3vtFmvFi/kYin+sUPQxnK/qf4PD9b+1dXi9cLGCPX/8+4GHMXh6qz26z8AAADwmZWU774X5/8jcVc5NZvXs6/vuMhHq6WblyQAAABwTcq//B8qmpFi6q5IivP/yhaR79703AAAAIDrIym/Y5dExGjc3Z06G8vxaizFVm8CAAAAAJ9C5d//DxfNaMSFckZ/uBTn/wAAAPAZ8b1NY+z3xth9rz/GbnthT/KbkYgYSS4unLo3OVct4qrndnWX6zVfW1tjZ/ZgcqC3krKZGj6/P4mI4Vp2KOmPfvm/Pd32g/L64PDa4uvz+MVIf6zgpNXaMYHYOYHyVvwwjnRjjpwpm/29RYaTbi+js3k9G6s16yfKIRGLf52Xn1v+TkTR+/cb8weSOLu8sjT29PMrZ8pcLhaLXzzXG0Bx0ziKO+Sy2tsDcdfWoxuPlF/E6PU72u23Mrj9Q93Fh3buMxns87U42o05OtptR/v3dPvcW/Q5PnZiPKrVA0Od7FTn5dWBre9lMb625SNXteWvxT3dmHuO3dNtBrN4Y39EXs8m1mXx3OYsJgb3/5Xti/6zbOss9sVaFm8euXDqP39oJtnk5bKY3CqL4a2zWN0VsXFfANwqZ8tRfy5VoX1lFfrvam+InySJbt0tilW1G9BzmWNtcZT796Ve1l5l7BvpTg3UuuHYWN0vHUGvrLqvRveI3nOs+3pi+OAW1a2yxRH9heUX3ukd0R98+42ffePwH39e9ntV1e3tuK8b02vi9t9tyOLEO4u7iyxarQvJjzZU1beKJd7att92fSKJixG7vnXuhbjjpVfO37987qlnlp5Zem5iYnKq8mCl8tDE7g0P0LaZAvD5dfnf2Nk2ol9nkgc3nFXHmfV19/a1jxSMxdPxfKzEmTheftsgIu7eut/RgY8hHL/MWevowC+8HN/x3HIwdmJzbBLbxE4O7LEv/6RsPrwhDwcA3BRHt6jDv+/9sO1l6n//FUJyPI51I7Y5715fyzecHcf2tXwrX71xuwIAPjey1gfJaOf1pNXKF54cn54er3ZOZmmrWXsibeUzc1m6u9HJWrWT1cZcli4Up/y1/hvHM1k7bS8uLDRbnXS22UpjqJ2fKn/5PW3v7cXMVxudvNZeqGfVdpbWmo1OtdZJZ/J2LV1YfKyet09mrXLh9kJWy2fzWrWTNxtpu7nYqmVjadrOsoHAfCZrdPLZvJhspAutfL7auhgR9cX5LJ3J2rVWvtBpdlfY7ytvzDZb8+VqxzZv/t9u5r4GgE+Kl145/+xTKytLL17dxF+vJPhWbyMAsJ4qDQAAAAAAAAAAAAAAn3xrn/+/rT9RzL2GbwR+vIk9cWXBI3ENfa32htG98ZvziZrYtMm9kZfjVid2Mye++cgjzw7M2TcY89iFO09e2XriSr8pG68fiNj9yx935zy6ffB3r+tj8W7E1fwHWU12iFl3mNh9Ew9JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCt/wcAAP//XidTlQ==") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000580)='./mnt\x00', 0x2000000, &(0x7f0000000540)={[{@journal_dev={'journal_dev', 0x3d, 0xa}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") unshare(0x28020600) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40e8662e, &(0x7f0000000000)={0xc551, 0x40000000000003, 0xd, 0xb, 0x7, 0x1}) setsockopt$inet6_buf(r4, 0x29, 0xcd, &(0x7f00000008c0)="902846b0bcbaad6496f1ea5bb26b6ffb5f6f5ebdf83e005edd4d20e60f14abb9eac7a9519b63af85035fde099d4e27d579c6f0da3440a95c6a92f34ade1049aaa0b45d3ba2fd95c85840b6d000d791be82f8a4221fd86a59f97c28122106f1fc4ccf73f8dd4329bc5d41c0a02365a682f4b5dc045bff133222bc885a5c58809c5bf35a0feba608e7b382a46d95da17844221983c162d5c063805f194ce551bea497f1d7ccd6f353dfe3b2aba22dc35b6faafcabc5f5229b14512b52259f646213994", 0xc2) vmsplice(r5, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}, {&(0x7f0000000400)="04", 0xfe44}], 0x2, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x115) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) 3.640893641s ago: executing program 5 (id=2300): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x237, &(0x7f0000000300)="$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") 3.62855162s ago: executing program 1 (id=2301): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x18, 0xfffffffe, 0x8000, 0x1205, r0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000001c0)=0x8) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) sendfile(r6, r7, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f00000000c0)=0x200) 3.500083457s ago: executing program 1 (id=2302): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x353, &(0x7f0000000840)="$eJzs3U9vG0UYx/FfHNtxUjX2AYE4oD4SF7isknBHWKiVEJGoQo0oSIhtswErix15rSAjRNoTFw6IF8Gh6rG3StA3kAs3DogLt1yQONADMGj/2N40TmLcOiHJ9yNFO9qZZ3c2s1k9s9JO9t7/9rPNjcjb8LsqVEwzkvRYqqmgvplsW0jKZdU0dEevXvrj55fevfnB2/XV1atrZtfqN15bMbPFKz98/uV81uzhnHZrH+39vvLb7vO7L+79c+PTZmTNyFrtrvl2q/1r178VBrbejDY9s+th4EeBNVtR0Enr3Y4UBrYRtre2eua35i8vbHWCKDK/1bPNoGfdtnU7PfM/8Zst8zzPLi/oeHNjtDnPGvfW1vx6UvzbOfffgm9Pp094Gm7ELd3p1P1ZSfMHahr3TqZXAADg/yTL/wfZfiFO6Y/J//Pi/D9OOW4W0/z/F0m5/P9+7VH30nsPFrP8/2E5zv+lXP7/8eBQFdl6YZD/VyQN8/92Oj8Y5P/rzyb/P5gRnW3f7B8c5VL68qj2ufwf51ac/y9kf7+Jux/eX0oK5P8AAAAAAAAAAAAAAAAAAAAAAJwFj52rOueq6XY22+uqc8kHOZLL6g8Jnz3BrmIK9o//8GfM8ccZN1y4o7gohV9vN7Yb6TZr8EhSqEBLquqv5H7IxOXyHct/RfdjuJPF72w30kdDfUPNJH5ZVdWejHfu2lurV5fN+qsW5OJLWsjHr6iq56S5EfErlhqcvxRvy3rl5Sw+5qmqn26rrVDr2Zdx/fivls3efGfV9vd/PmkHAAAAAMB54NlArT//zS8h6HkH69P5cVqfzs+LGv1+IJ1fLz05P0/iiyoUT+uqAQAAAAC4WKLeF5t+GAadKRXuSjqqTVHTOfvwHca4Uf0Fcg9pM6OZZ9/ViqSk0D/5ZMeJ+zbB2Usjq0pj/cYKE3X1Snn8QSkfWtV/bXRYuK5PMhaumo3FU4zpC999/+fRbVz2b1bGOeDrDyrHXOkRt0TxqDbl4660tO8hUZjuMwgAAADAyRgm/f09b0il0+0TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXzbTX/8uvLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcdP8GAAD//wDO+UI=") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x112, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x1000c010) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x4004880}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r10, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000000c0)={0x18, r11, 0x1, 0x70bd1d, 0x25dfd9fd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800c) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r11, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x1) 3.45678179s ago: executing program 5 (id=2303): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0900000005000000000000000100000000000000ea028febeaef0018bfd844762f105033a86e1704b769d7d97a91846b2a035603efbc169247d6a214eacaa51d30f0cb7ef7e8f7a3529ff404706928d7d679f9b1c4db201c0007b115874ca90ee5a856c21912adef399e658e9b446fc894138b2bdbf5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000400), 0x640a, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c667363616368652c756e618a653d002c646972656374696f2c7375626a5f757365727d2c00"]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.196328414s ago: executing program 2 (id=2305): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x4, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0xb6, 0xb6) 2.176198113s ago: executing program 2 (id=2306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) 2.015535465s ago: executing program 2 (id=2307): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003900a00000000000073013f00000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6b, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 1.966643037s ago: executing program 2 (id=2308): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000"], 0x110}}, 0x0) 1.919942599s ago: executing program 5 (id=2309): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req={0x1, 0xb, 0x10, 0x5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000180)=0x81, 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="c56044932b6248f46e46cd6aca815fa2cd98bdb4edcf5559c5d5f8f7001c14259068d550f1bd184d95c4453d018a9ef5dfc712c543203d2913b1002b1f687ab0057fd56e2c1e5f6ee026611dc85995ffa441112d83530676b37249e7359c3290f1efc62da9b61024e9c936edb3a68a9eccfbee27d78feb5f02e3473376105c53a3e0c27c49f0c887d176c559f56a57ed73b9ceae6dde4318f22bbbf9ac3c6caca8b2c7dcf7225a1a40bdaf8b429c0b1f21766949cdcbfcd7cb3252c4e212d594ab95ff39cde955990e1892a74f651e67c1c2ce3973ee5033239a2b98f9ed8469d4c80c4c979db364052698bef4616c90c4724bb16fd4bbb6967fe5fe29b67ee862fcabfc239fe37ce45821452b33eae18b488c1bbdc543810bdf41374731678dedb080c1025de3cce53a8a733feb3f80e2e181178df32b36ef04c17077187cc1c1b47cfdd408372909a3db5984eb21c3735cc11f7ca49044f5dd3a1ce47b5d4cef7db9b4c2d2a96dbc88def618742b260b7c26dcf072066ebaa7d03b0c1ed47a1e109a002c2bab15224aefa7d5e48b9cef9ee5b944553e90ac3d1d22223d70367d9741ba185f43c46645155bad1a3730b5df7e5c4430ae97dde2675f3032b264f118616dbe9adde8e2526470dee95e5d1e8169f56a50aae3f4f5a2b85a0089f1495313a8086389046314f02ce89611abeb76c87a05ba46e38db0850d4423728f97eb7e2b4278d7cc01e1dc8a54ed955998885b5ad5c566834e5962d01b7c7195ac98646cbe881f62f0aef555a36e58705fd6cafd4a5d04e315e99bc2357ca993a0e0d175bc68e89b93a30789fd626de716d72e757b65b8986e10c4d21eb2d1e624b7f0ec81c498fe8ac247059e431e2ae5ad31a684172c6e42b480df122c99bc8ee0cd179a08bf9b32ffe5d1c5ab14b34130d6dd206954bfc723750e105095911cc50d11d7a3c41fb70d5be67cb73d15788fc4c50e1fd6f737af2c4af7dfab28207c0c28135554976113d01a06bbd07e60df4038fca9f9dfcb2985db803a3d023ee0feb2e633d87c5aba4f9723b2eefcaa170280874b7b7c301f0d9d695442b95db253c09d60d487a03c3bc7aa5042940600354bf63e50a2ff54a6bf9c298240ee98c229432b5f759ce000b2363ae332577ad2d85a0ebc42fd1b46ef4327d82d386b22619afdc10a0aada88f23a20d6d05eb914149781e7f1b78a230407b4acfe4c2d451155fe29df09055ef0508935c2fb1d2adb1c446a3ddccfa8f3706d00bdb656f340467e412a9cd28bfca52ac7c9d0ff85a0bc53eafa0f46f5cea426dd568be2eabe557935d62a27dfafa311308eddde489b568e7b9fdf12a3f62d9042d9332448797b88c927f16a545be2205b6a54758fd9b19c30e3f314edc39da35ee8ffae06c64a8bf1c2abad15bbf0bd72ca02399420824c384b977dc71d594e86b93ecd21ae0ca10e1c2457abbb8a085f798dc0f97f04bf7b269079b6cfa5cb534ad676ef3e5d42732f563c484a8fa87a0c2578d2d7aee0f546b3e995bb3bf2b2c866b23da3be4132057ed482f8554d2c3a300e6281be1e14eba90bbedb29532a4588316d4b920452061f703f61dd5d4e358401daa177ce330f65360716b769e40f5941d9136d1273652d3219dfe8f7730e2a563b991084bf9fb448f5d3c73e54d5c6f84b5c2f461d253a77d6cbf572a83ad9634a9119eef026d26759badcb1837c0ddca664e4e66727c44f6c8838004e9dac4d9c89fc427ce4700f5b87158df9497725ef2065bb5f60e240314884d8e761f66d800d6b867863fa0c9e1ab549cf3f1ae3571e5cc447b92155d582912a961fb58b1e139b6c14791ef90719a63c8a674a50422ed44e359c53921a227cbdb1514eda06b9ddfb4f35c7a3f44bfe6fdc580c00a7461526a690ebad6bc0da1bbd64488ecaa26b761433f658bb183c80d2f76f6c08488f069818af658653df52938a58dcf0d130ac3447407b69f20a015c37b1b6961d576f17f11f60596ab4fa9f5bbc76c789ff314255198c264c4d6bcb09c0507feb7531256a7a4d3b3ff49e0eb39eeb1ce2ee1737c4bf6d7bde809270f4681e84909f33be092c3167aa4412848e8938b7c2a94f2443e76d42dce548ce04f4af9dd2f83d6d09c6fbfbf0b1ed47da390cc6ab8450b55ea7d81ed57f523f6344d12be586a16ca29bd9ac313bf5d8ad1d538ebd9cd86416cbc55c0322e3f3c933fdf4999c649415d37344e94a01a6dedcda3a03cb053228b14165a7d5cb96a10f45904135cfcdead2dd6fe5096139de91a03129925d724e0ea2cab51f60d4fc217a3cc7536992388b920435109bfa60c858eb1cf80a2d389266252c1f229d69f1481b5e23a3cb8a8388b5f9aa740d81b0949e34fe5ca5dbdab51b956d77b2f61dea2a85db2136b129ac748b9969a60b0822d22df99a1cde66291864932ee396e50c26aee7301d4744eecf592bdec7f4f632bffc5ec243134f33481f142811ddc0624c24d52cb44175f13d3bd46846e85b2038be67a7cd2152c", 0x6fa}, {0x0}], 0x2}, 0x20040885) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x7}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x240000c0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='ns\x00') openat$cgroup_ro(r8, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x2) r9 = openat$cgroup_ro(r8, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$GIO_FONTX(r9, 0x4b6b, &(0x7f0000000100)={0x19d, 0x1b, &(0x7f0000000940)}) wait4(0x0, 0x0, 0x8, 0x0) 1.777518123s ago: executing program 3 (id=2311): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x18, 0xfffffffe, 0x8000, 0x1205, r0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000001c0)=0x8) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) sendfile(r6, r7, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f00000000c0)=0x200) 1.679702776s ago: executing program 3 (id=2312): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x237, &(0x7f0000000300)="$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") 1.539315621s ago: executing program 3 (id=2313): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000620000000060015000100000018001680"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) 1.396361286s ago: executing program 3 (id=2314): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000080)=""/49, 0x31) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.238766249s ago: executing program 1 (id=2315): unshare(0x22020600) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1b, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xffffffc0}, @exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f00000002c0)}, 0x10) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000"/32], 0x24, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000feffffffffffffff000a000000000000feffffffff7f40000200000000000008000000000000000001000600000000004400050064010102000000000000000000000000000200003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2e}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7ffe}, 0x8, 0x0, 0x1, 0x1, 0x3}}, 0xb8}}, 0x8044) sendto$inet6(r5, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}, 0x9}, 0x1c) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.18853118s ago: executing program 2 (id=2316): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) 548.569057ms ago: executing program 5 (id=2317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) 547.774077ms ago: executing program 5 (id=2318): r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bind$can_raw(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x7}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xbcf6}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1e, 0x100000000}, 0x1cad, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x13bb711e) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000140)=0x9) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB='\b'], 0x40}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8010000", @ANYRES16=r13, @ANYBLOB="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"], 0x1f8}}, 0x20000010) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:mount_tmp_t:s0\x00', 0x21, 0x2) 510.17235ms ago: executing program 3 (id=2319): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117b00000000008510000002000000850000008800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in6=@initdev}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xfffffe47) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000001c0)=""/103) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2800011, &(0x7f0000000380)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x8, 0x606, &(0x7f0000000ac0)="$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") 330.911759ms ago: executing program 1 (id=2320): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x300c001, &(0x7f0000000180), 0x2c, 0x516, &(0x7f0000000740)="$eJzs3c9vG1kdAPCvnV9umm6ysIcFAVuWhYKq2om7G632wnJBQqvVIi2cEGqjxI2i2HEUO6UJkUjPXJGoxAn+BA5IHJB64s4NblzKAalABWqQEPJq7HGbOHFiNXHcxp+PNPJ7MxN/v8/SvBc/2/MCGFpXI2I3IsYj4nZETKf7M+kWH7a25LynT3YW957sLGai0fj0n6PpmTuL7fPbLqfPmYv4JKlPHBG3trW9ulAulzbSeqFeWS/UtrZvrFQWlkvLpbVicX5ufvb9m+8Vz6ytb1V++/i7Kx/98A+///KjP+1+66dJzt9OjyVtO7NA+7Rel7GY2rcveeU+6kewARhJ2zM+6ER4IdmI+FxEvJ2Wn8kNLicAoL8ajeloTO+vd5fp4RwA4OWXvOefikw2n77/n4psNp9vzuHl3ojJbLlaq1+/U91cW4rmHNZMjGXvrJRLs+lc4UyMZZL6XLP8vF7sqN+MiNcj4hcTl5r1/GK1vDSof3oAYMhd7hj//zPRGv974BMCAHiVGckBYPgcHv/HBpIHAHB+vP8HgOGzb/w/6re6AMAFlOv47T8AcPGdOP//Zvzsx+eTCgBwTnz+DwBD5fsff5xsjb30/tdLd7c2V6t3byyVaqv5yuZifrG6sZ5frlaXm/fsqZz0fOVqdX3u3di8V6iXavVCbWv7VqW6uVa/1byv962SHxYAwOC9/tbDv2QiYveDS80t2ms5+EIAXHgucxheI4NOABiY0UEnAAyM+Xggc8Lxrl8RetD9by6dIh+g/659ocv8//H/G/y/cT7pAX1k/h+G1+nm/80ewKvM/D8Mr0YjYz1/ABgyPbyD9xVBuOBe+PN/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGGJTzS2TzadrgU9FNpvPR1yJiJkYy9xZKZdmI+K1iPjzxNhEUp8bdNIAwCll/55J1/+6Nv3OVOfR8cx/J5qPEfGTX336y3sL9frGXLL/X8/21x+k+4tHBpjofxsAgH1GO3e0x+n2ON5e3/fpk53F9naeCT7+Tmtx0STuXrq1U28ln4uxiJj8d+ZAYzJntDDx7v2IeLOz/dlnx2fSlU874yexr/QtfjRbOHUgfvZA/GzzWOsxeS0+fwa5wLB5mPQ/Hx51/WXjavMxvf4yBzvTXPz8cOf6Atr9316js/9rXe+fXMk1+5qj+r+rvcZ494/f63rs/kjji6MRe4f63/aK0Llm6aj47/QY/69f+srb3Y41fh1xLY6L3yoV6pX1Qm1r+8ZKZWG5tFxaKxbn5+Zn37/5XrHQnKMutGeqD/vHB9df697+iMku8XMntP/rPbb/N/+7/aOvHhP/m187Kn423jgmfjImfqPH+AuTv+u6fHcSf6lL+0cPxB8/8HfJvus9xn/0t+2lHk8FAM5BbWt7daFcLm0onLaQ69czX35JGqhwTGEkyu35qJcin1MXBtwxAX33/KIfdCYAAAAAAAAAAAAAAEA3tR+kt/zr44/hBt1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq7PAgAA//+iDcmp") stat(&(0x7f00000004c0)='./file0\x00', &(0x7f00000002c0)) (fail_nth: 7) 140.548425ms ago: executing program 2 (id=2321): sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x24004090) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="7f3ebbae09e009d351e8fd24a4efa52d8bece87b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x27c831488b8a80be, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000006c5aa25a000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = eventfd(0x9) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r9 = eventfd2(0x8, 0x1) io_submit(0x0, 0x5, &(0x7f0000000980)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f00000002c0)="5eac9c876423b3181d19465957f1ae27c6aecd6b6ab1c8bbc53ff40a5e92e555f018b459bfe8491930df70009e8c054fd9d25dbd9f2a1563ec141b47b39fd846400e769490518aebcdd6b1037b8a6000a273a6319b4a6429de958a8a0f9b924d781d64e1d8b73639209a2a91a79efe15e7b93936f344d297621c5c69bbe632dd56839bd4802f2176ff47a8", 0x8b, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f00000004c0)="03d974cc8decf1e15dcebdf57d5f5f04992c90f54a02574020f3aa3f62a8704a645b2719b6bf99007008829cb2c9429ad58daf067f9d7b821185be5204f7b794b5da8d10fe18ba8b8ac6ac24df1d289d99a597d60f2087f5107b320e2839b94036ef946fff33717219000e5ae1b63ac69d1647f9f50876813e82eae3f79da57b2faa512352b383fe97b66652e112c0", 0x8f, 0xd, 0x0, 0x2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x9, r0, &(0x7f0000000600)="1bc12124db9da6ecd18c53ec67b688352181937f6b4374a50d662c30dc3cb48f9097ed184cf2d86b69e9a3029d3365421d0d64aa1806c753a20cf9dcd03fe35865556c62c5743a4aa59554b236db204de0d80a8532e894383173e70cf526f4b727166cc2f594b0c362e44ebcc47c584fce0e5d9130b17d2d106d34f9572b90c97ad8ed3fc4e5aa192209ddb1d286496fe05d7c8bb3d02dee23131363a70ca801238a1165abf65483e4433cbbd00d4d310700f21b99d1befc625011fe6a3279206847c4a1f6437921089ad9f16f6477ed8e68c1afb0", 0xd5, 0x100000000, 0x0, 0x2, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x5, r8, &(0x7f0000000800)="979253b9b58bc2bfb0e1ec80bf2f4af3167c1a754a3cc9461f4489b5b383fabc8267278165429b68a3adf27ade101b3e4d015c44d8a7987345ab53407007ed", 0x3f, 0x3, 0x0, 0x1}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x8, 0x3, r3, &(0x7f0000000880)="cc47673b169df4ffcf2ed3861f9f58f03da13361be174e8f7c7a78f2a4d1d2a3b33a969b1816cf973b0058a9e823373c7d52b6f3714703d4dfec8064279cbadb15f5713164012561828faa923beb9f853b845daf7a4cafda774a5777c1eb75bbfc518106edcf2be9aae29a2ea64af9be841ceb772eb67be546fd768a3eba1f0b8e28b54c26ccc6a96fa63185792bab0faee2d91b0f3cf82ab44ef6feb0c61ab23e36a6e89e724e74aac0bd7912177edbd6eac4c182754b575a07f169", 0xbc, 0x3ff, 0x0, 0x2, r9}]) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x80000000, 0x46f, 0xfff, 0x5, 0x200}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x3000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 350.34µs ago: executing program 3 (id=2322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x18, 0xfffffffe, 0x8000, 0x1205, r0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000001c0)=0x8) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) sendfile(r6, r7, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f00000000c0)=0x200) 0s ago: executing program 1 (id=2323): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x237, &(0x7f0000000300)="$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") kernel console output (not intermixed with test programs): 8435][ T28] audit: type=1400 audit(1773080886.217:1495): avc: denied { shutdown } for pid=8283 comm="syz.3.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 266.873291][ T8268] loop0: lost filesystem error report for type 5 error -117 [ 267.119242][ T8268] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 267.190202][ T8268] loop0: lost filesystem error report for type 5 error -117 [ 267.190485][ T8268] EXT4-fs error (device loop0): ext4_evict_inode:255: inode #11: comm syz.0.1456: mark_inode_dirty error [ 267.233893][ T8268] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 267.234369][ T8268] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 267.261802][ T8291] loop3: detected capacity change from 0 to 512 [ 267.281772][ T8291] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 267.363912][ T8291] EXT4-fs (loop3): 1 truncate cleaned up [ 267.405202][ T8291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.437489][ T8268] EXT4-fs (loop0): 1 orphan inode deleted [ 267.841248][ T70] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 267.893912][ T70] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 267.894035][ T70] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 267.976421][ T70] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 0 [ 268.031476][ T70] loop0: lost filesystem error report for type 5 error -117 [ 268.032068][ T8268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.143213][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.182799][ T8304] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1466'. [ 268.391879][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 268.705292][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1468'. [ 268.941148][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.283809][ T8333] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1475'. [ 269.296052][ T8331] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1472'. [ 269.777089][ T8351] loop3: detected capacity change from 0 to 512 [ 269.810836][ T8351] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 269.833840][ T8351] EXT4-fs (loop3): 1 truncate cleaned up [ 269.847700][ T8351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.942379][ T8364] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1486'. [ 269.984321][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 270.093026][ T8371] tipc: Enabled bearer , priority 0 [ 270.127516][ T8371] syzkaller0: entered promiscuous mode [ 270.155965][ T8371] syzkaller0: entered allmulticast mode [ 270.231692][ T8371] tipc: Resetting bearer [ 270.721666][ T8370] tipc: Resetting bearer [ 270.746466][ T8370] tipc: Disabling bearer [ 271.139950][ T28] audit: type=1400 audit(1773080890.477:1496): avc: denied { mount } for pid=8400 comm="syz.1.1500" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 271.196921][ T8405] random: crng reseeded on system resumption [ 271.216233][ T28] audit: type=1400 audit(1773080890.537:1497): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 272.005988][ T8419] loop4: detected capacity change from 0 to 512 [ 272.017785][ T8419] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.165641][ T8419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.203857][ T8416] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.1504: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 272.271773][ T8416] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 12: comm syz.4.1504: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 272.321650][ T8416] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz.4.1504: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 272.361996][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 272.382715][ T8416] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz.4.1504: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0 [ 272.412255][ T8416] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 18: comm syz.4.1504: lblock 23 mapped to illegal pblock 18 (length 1) [ 272.819330][ T8443] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1514'. [ 272.840232][ T3314] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 272.876474][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.919144][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.710227][ T8463] loop1: detected capacity change from 0 to 164 [ 273.810618][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1520'. [ 273.830746][ T8467] loop0: detected capacity change from 0 to 1024 [ 273.837846][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 273.870213][ T8467] EXT4-fs: inline encryption not supported [ 273.913293][ T28] audit: type=1400 audit(1773080893.257:1498): avc: denied { connect } for pid=8462 comm="syz.1.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 273.946851][ T8467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.101256][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.120443][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1524'. [ 274.194532][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'. [ 274.339412][ T8490] loop0: detected capacity change from 0 to 512 [ 274.455519][ T8490] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 274.585445][ T8490] EXT4-fs (loop0): 1 truncate cleaned up [ 274.625677][ T8490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.738800][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.751239][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'. [ 275.994369][ T8535] random: crng reseeded on system resumption [ 276.013917][ T8521] loop1: detected capacity change from 0 to 512 [ 276.054708][ T8530] loop4: detected capacity change from 0 to 512 [ 276.087685][ T8530] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 276.087772][ T8521] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 276.131915][ T8521] EXT4-fs (loop1): 1 truncate cleaned up [ 276.147474][ T8521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.214354][ T8530] EXT4-fs (loop4): 1 truncate cleaned up [ 276.258959][ T8530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.389602][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.414328][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.625521][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1547'. [ 278.999146][ T8571] random: crng reseeded on system resumption [ 279.028495][ T8573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1556'. [ 279.655380][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1560'. [ 279.657269][ T8583] loop4: detected capacity change from 0 to 512 [ 279.772733][ T8583] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 280.298942][ T8583] EXT4-fs (loop4): 1 truncate cleaned up [ 280.480319][ T8583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.296706][ T28] audit: type=1400 audit(1773081156.346:1499): avc: denied { bind } for pid=8601 comm="syz.2.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 282.035284][ T28] audit: type=1400 audit(1773081156.346:1500): avc: denied { name_bind } for pid=8601 comm="syz.2.1564" src=18464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 282.980161][ T28] audit: type=1400 audit(1773081156.346:1501): avc: denied { write } for pid=8601 comm="syz.2.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 283.372957][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.521268][ T8617] netlink: 'syz.4.1568': attribute type 9 has an invalid length. [ 284.538612][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 284.699890][ T8619] loop1: detected capacity change from 0 to 512 [ 284.707356][ T8619] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.719407][ T8619] EXT4-fs (loop1): 1 truncate cleaned up [ 284.725949][ T8619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.978588][ T28] audit: type=1400 audit(1773081160.326:1502): avc: denied { read open } for pid=8632 comm="syz.4.1573" path="/" dev="configfs" ino=2085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 285.043073][ T8621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.052765][ T8633] loop4: detected capacity change from 0 to 1024 [ 286.075921][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1575'. [ 286.077849][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.086472][ T8646] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1575'. [ 286.167097][ T8648] lo speed is unknown, defaulting to 1000 [ 286.173584][ T8648] lo speed is unknown, defaulting to 1000 [ 286.210894][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1578'. [ 286.237953][ T8655] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1577'. [ 286.322322][ T28] audit: type=1326 audit(1773081161.676:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 286.396825][ T28] audit: type=1326 audit(1773081161.696:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 286.396923][ T28] audit: type=1326 audit(1773081161.696:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 286.396981][ T28] audit: type=1326 audit(1773081161.696:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 286.397021][ T28] audit: type=1326 audit(1773081161.696:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 286.397127][ T28] audit: type=1326 audit(1773081161.696:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 286.397154][ T28] audit: type=1326 audit(1773081161.696:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 286.397187][ T28] audit: type=1326 audit(1773081161.696:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 286.397327][ T28] audit: type=1326 audit(1773081161.706:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 286.397410][ T28] audit: type=1326 audit(1773081161.706:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 286.887976][ T8662] loop0: detected capacity change from 0 to 512 [ 287.073456][ T8665] loop0: detected capacity change from 0 to 128 [ 287.088365][ T8665] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.088882][ T8665] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.473150][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.603894][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'. [ 287.655318][ T8675] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 287.678775][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1586'. [ 287.713891][ T8675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.951684][ T8687] netlink: 'syz.2.1588': attribute type 2 has an invalid length. [ 289.065516][ T8702] loop4: detected capacity change from 0 to 128 [ 289.265755][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1598'. [ 289.299691][ T3438] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.309825][ T3438] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.318941][ T3438] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.328042][ T3438] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.468643][ T8732] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1600'. [ 289.611659][ T8736] bridge_slave_0: left allmulticast mode [ 289.617607][ T8736] bridge_slave_0: left promiscuous mode [ 289.633673][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.651538][ T8733] loop4: detected capacity change from 0 to 512 [ 289.673296][ T8738] netlink: 'syz.2.1604': attribute type 10 has an invalid length. [ 289.694555][ T8733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 289.808083][ T8736] bridge_slave_1: left allmulticast mode [ 289.831955][ T8733] EXT4-fs (loop4): 1 truncate cleaned up [ 289.843699][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 289.862743][ T8736] bridge_slave_1: left promiscuous mode [ 289.877143][ T8733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.897459][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.052338][ T8736] bond0: (slave bond_slave_0): Releasing backup interface [ 290.065696][ T8736] bond0: (slave bond_slave_1): Releasing backup interface [ 290.076398][ T8736] team0: Port device team_slave_0 removed [ 290.084658][ T8736] team0: Port device team_slave_1 removed [ 290.090851][ T8736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.101477][ T8736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.163875][ T8750] FAULT_INJECTION: forcing a failure. [ 290.163875][ T8750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.177033][ T8750] CPU: 1 UID: 0 PID: 8750 Comm: syz.1.1606 Tainted: G W syzkaller #0 PREEMPT(full) [ 290.177121][ T8750] Tainted: [W]=WARN [ 290.177129][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.177142][ T8750] Call Trace: [ 290.177149][ T8750] [ 290.177157][ T8750] __dump_stack+0x1d/0x30 [ 290.177259][ T8750] dump_stack_lvl+0x95/0xd0 [ 290.177281][ T8750] dump_stack+0x15/0x1b [ 290.177302][ T8750] should_fail_ex+0x263/0x280 [ 290.177327][ T8750] should_fail+0xb/0x20 [ 290.177581][ T8750] should_fail_usercopy+0x1a/0x20 [ 290.177659][ T8750] _copy_from_iter+0xcf/0xea0 [ 290.177687][ T8750] ? __alloc_skb+0x4f6/0x690 [ 290.177717][ T8750] ? __alloc_skb+0x200/0x690 [ 290.177749][ T8750] netlink_sendmsg+0x4ae/0x6f0 [ 290.177907][ T8750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.177941][ T8750] ____sys_sendmsg+0x563/0x5b0 [ 290.178022][ T8750] ___sys_sendmsg+0x195/0x1e0 [ 290.178075][ T8750] __x64_sys_sendmsg+0xd4/0x160 [ 290.178113][ T8750] x64_sys_call+0x194c/0x3020 [ 290.178186][ T8750] do_syscall_64+0x12c/0x370 [ 290.178214][ T8750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.178278][ T8750] RIP: 0033:0x7f1fbf7cc799 [ 290.178298][ T8750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.178321][ T8750] RSP: 002b:00007f1fbe1e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.178346][ T8750] RAX: ffffffffffffffda RBX: 00007f1fbfa46180 RCX: 00007f1fbf7cc799 [ 290.178362][ T8750] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 290.178449][ T8750] RBP: 00007f1fbe1e5090 R08: 0000000000000000 R09: 0000000000000000 [ 290.178463][ T8750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.178556][ T8750] R13: 00007f1fbfa46218 R14: 00007f1fbfa46180 R15: 00007ffd8fa61198 [ 290.178575][ T8750] [ 290.476682][ T8736] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 290.506567][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.652253][ T8738] team0: Device bond0 failed to register rx_handler [ 290.740912][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1610'. [ 291.011509][ T8781] loop0: detected capacity change from 0 to 512 [ 291.028149][ T8781] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 291.055884][ T8781] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 291.075957][ T8781] System zones: 1-12 [ 291.084394][ T8781] EXT4-fs (loop0): orphan cleanup on readonly fs [ 291.099074][ T8781] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1616: bg 0: block 361: padding at end of block bitmap is not set [ 291.120482][ T8781] loop0: lost filesystem error report for type 5 error -117 [ 291.120635][ T8781] EXT4-fs (loop0): Remounting filesystem read-only [ 291.128086][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 291.128103][ C0] EXT4-fs (loop0): initial error at time 1773081166: ext4_validate_block_bitmap:441 [ 291.128126][ C0] EXT4-fs (loop0): last error at time 1773081166: ext4_validate_block_bitmap:441 [ 291.161422][ T8781] EXT4-fs (loop0): 1 truncate cleaned up [ 291.167727][ T8781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 291.242670][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 292.358147][ T8792] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1619'. [ 292.647531][ T8799] random: crng reseeded on system resumption [ 292.684880][ T8797] loop1: detected capacity change from 0 to 512 [ 292.703052][ T8797] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 292.838054][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 292.838072][ T28] audit: type=1400 audit(1773081168.186:1525): avc: denied { mount } for pid=8808 comm="syz.2.1626" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 292.970673][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1625'. [ 293.744431][ T8836] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1634'. [ 294.844081][ T28] audit: type=1400 audit(1773081170.196:1526): avc: denied { bind } for pid=8832 comm="syz.1.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 294.952650][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1635'. [ 294.999377][ T8844] loop4: detected capacity change from 0 to 128 [ 295.049173][ T28] audit: type=1400 audit(1773081170.196:1527): avc: denied { ioctl } for pid=8832 comm="syz.1.1633" path="socket:[21996]" dev="sockfs" ino=21996 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 295.263246][ T8844] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.309930][ T8844] ext4 filesystem being mounted at /333/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 295.362835][ T8844] FAULT_INJECTION: forcing a failure. [ 295.362835][ T8844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.376185][ T8844] CPU: 1 UID: 0 PID: 8844 Comm: syz.4.1637 Tainted: G W syzkaller #0 PREEMPT(full) [ 295.376237][ T8844] Tainted: [W]=WARN [ 295.376246][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.376260][ T8844] Call Trace: [ 295.376267][ T8844] [ 295.376275][ T8844] __dump_stack+0x1d/0x30 [ 295.376301][ T8844] dump_stack_lvl+0x95/0xd0 [ 295.376404][ T8844] dump_stack+0x15/0x1b [ 295.376432][ T8844] should_fail_ex+0x263/0x280 [ 295.376464][ T8844] should_fail+0xb/0x20 [ 295.376500][ T8844] should_fail_usercopy+0x1a/0x20 [ 295.376526][ T8844] _copy_from_user+0x1c/0xb0 [ 295.376613][ T8844] core_sys_select+0x1e6/0x730 [ 295.376661][ T8844] ? set_user_sigmask+0x8b/0x140 [ 295.376722][ T8844] ? kmem_cache_free+0xc8/0x380 [ 295.376753][ T8844] __se_sys_pselect6+0x23c/0x2a0 [ 295.376780][ T8844] __x64_sys_pselect6+0x78/0x90 [ 295.376829][ T8844] x64_sys_call+0x8d5/0x3020 [ 295.376915][ T8844] do_syscall_64+0x12c/0x370 [ 295.376943][ T8844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.376972][ T8844] RIP: 0033:0x7f015a80c799 [ 295.376992][ T8844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.377014][ T8844] RSP: 002b:00007f015925f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 295.377105][ T8844] RAX: ffffffffffffffda RBX: 00007f015aa85fa0 RCX: 00007f015a80c799 [ 295.377122][ T8844] RDX: 0000200000000300 RSI: 0000200000000280 RDI: 0000000000000040 [ 295.377137][ T8844] RBP: 00007f015925f090 R08: 0000000000000000 R09: 0000000000000000 [ 295.377181][ T8844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.377193][ T8844] R13: 00007f015aa86038 R14: 00007f015aa85fa0 R15: 00007ffff0864128 [ 295.377291][ T8844] [ 295.588699][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.705206][ T8862] IPv6: NLM_F_REPLACE set, but no existing node found! [ 295.881051][ T8871] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1647'. [ 295.893507][ T8869] loop1: detected capacity change from 0 to 512 [ 296.030915][ T8869] EXT4-fs (loop1): 1 truncate cleaned up [ 296.288004][ T8869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.381990][ T8869] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1639: invalid indirect mapped block 4294967295 (level 1) [ 296.408353][ T8869] EXT4-fs (loop1): Remounting filesystem read-only [ 296.679571][ T8880] loop0: detected capacity change from 0 to 128 [ 296.702963][ T8880] syz.0.1650: attempt to access beyond end of device [ 296.702963][ T8880] loop0: rw=8388611, sector=138, nr_sectors = 6 limit=128 [ 296.716871][ T8880] syz.0.1650: attempt to access beyond end of device [ 296.716871][ T8880] loop0: rw=8390659, sector=144, nr_sectors = 106 limit=128 [ 296.735233][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.890136][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1652'. [ 297.029100][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1655'. [ 297.081591][ T28] audit: type=1400 audit(1773081172.426:1528): avc: denied { ioctl } for pid=8894 comm="syz.1.1655" path="socket:[22090]" dev="sockfs" ino=22090 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 297.125693][ T8897] loop4: detected capacity change from 0 to 512 [ 297.172532][ T8897] EXT4-fs (loop4): 1 truncate cleaned up [ 297.194278][ T8897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.284757][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.346272][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 297.431350][ T8902] macvlan3: entered promiscuous mode [ 297.437646][ T8902] macvlan3: entered allmulticast mode [ 297.444696][ T8902] veth0_virt_wifi: entered allmulticast mode [ 297.461759][ T8908] bridge_slave_1: left allmulticast mode [ 297.461781][ T8908] bridge_slave_1: left promiscuous mode [ 297.462007][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.483862][ T8908] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 297.517937][ T8906] loop1: detected capacity change from 0 to 512 [ 297.534284][ T8906] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 297.566627][ T8906] EXT4-fs (loop1): 1 truncate cleaned up [ 297.578238][ T8906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.846604][ T8916] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1661'. [ 298.960033][ T28] audit: type=1400 audit(1773081174.306:1529): avc: denied { ioctl } for pid=8918 comm="syz.0.1662" path="socket:[22143]" dev="sockfs" ino=22143 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 299.201482][ T8933] loop0: detected capacity change from 0 to 512 [ 299.244169][ T8934] netlink: 'syz.2.1667': attribute type 2 has an invalid length. [ 299.322107][ T8933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.106896][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1670'. [ 300.398478][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.433303][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.387788][ T8963] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1677'. [ 301.421210][ T8963] loop4: detected capacity change from 0 to 512 [ 302.333189][ T8963] EXT4-fs: inline encryption not supported [ 302.356467][ T8963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.504033][ T8974] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1673'. [ 302.513695][ T8963] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.722404][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.726461][ T8982] bridge0: entered allmulticast mode [ 302.860246][ T8979] loop3: detected capacity change from 0 to 512 [ 302.876946][ T8994] random: crng reseeded on system resumption [ 302.962457][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1682'. [ 302.984010][ T8979] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 303.003388][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 303.018065][ T8979] EXT4-fs (loop3): 1 truncate cleaned up [ 303.023846][ T28] audit: type=1400 audit(1773081178.366:1530): avc: denied { setattr } for pid=8997 comm="syz.0.1687" name="CAN_RAW" dev="sockfs" ino=22944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 303.032415][ T8979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.083253][ T28] audit: type=1400 audit(1773081178.396:1531): avc: denied { connect } for pid=8997 comm="syz.0.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 303.162561][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.191347][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1688'. [ 303.338454][ T9014] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1691'. [ 303.471989][ T28] audit: type=1326 audit(1773081178.816:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9010 comm="syz.1.1692" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1fbf7cc799 code=0x0 [ 304.235080][ T9019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.255008][ T9019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.274107][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1693'. [ 304.744272][ T9019] vlan0: entered promiscuous mode [ 304.814340][ T9019] batadv0: entered promiscuous mode [ 305.111577][ T28] audit: type=1400 audit(1773081180.366:1533): avc: denied { create } for pid=9029 comm="syz.4.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 305.284549][ T9035] random: crng reseeded on system resumption [ 305.552734][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1703'. [ 305.632892][ T9046] loop0: detected capacity change from 0 to 512 [ 305.666004][ T9046] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 305.715998][ T9046] EXT4-fs (loop0): 1 truncate cleaned up [ 305.740026][ T9046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.210871][ T9073] loop1: detected capacity change from 0 to 512 [ 306.219155][ T9073] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 306.289087][ T9073] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 306.298998][ T9073] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 306.312055][ T9073] System zones: 0-2, 18-18, 34-35 [ 306.331813][ T9073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 306.374772][ T9073] FAULT_INJECTION: forcing a failure. [ 306.374772][ T9073] name failslab, interval 1, probability 0, space 0, times 0 [ 306.415079][ T9082] loop3: detected capacity change from 0 to 256 [ 306.421728][ T9073] CPU: 1 UID: 0 PID: 9073 Comm: syz.1.1713 Tainted: G W syzkaller #0 PREEMPT(full) [ 306.421769][ T9073] Tainted: [W]=WARN [ 306.421777][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.421813][ T9073] Call Trace: [ 306.421821][ T9073] [ 306.421829][ T9073] __dump_stack+0x1d/0x30 [ 306.421883][ T9073] dump_stack_lvl+0x95/0xd0 [ 306.421909][ T9073] dump_stack+0x15/0x1b [ 306.422018][ T9073] should_fail_ex+0x263/0x280 [ 306.422063][ T9073] should_failslab+0x8c/0xb0 [ 306.422091][ T9073] __kmalloc_noprof+0xb8/0x4e0 [ 306.422133][ T9073] ? ext4_find_extent+0x17a/0x790 [ 306.422166][ T9073] ext4_find_extent+0x17a/0x790 [ 306.422198][ T9073] ? widen_string+0x98/0x210 [ 306.422310][ T9073] ext4_ext_map_blocks+0x10d/0x2fb0 [ 306.422349][ T9073] ? vsnprintf+0x7ee/0x860 [ 306.422409][ T9073] ? sprintf+0x88/0xb0 [ 306.422533][ T9073] ? panic_on_this_cpu+0x2d/0x40 [ 306.422583][ T9073] ext4_map_query_blocks+0xb2/0x550 [ 306.422675][ T9073] ? ext4_es_lookup_extent+0x3ae/0x570 [ 306.422734][ T9073] ? xas_load+0x413/0x430 [ 306.422777][ T9073] ext4_map_blocks+0x306/0x970 [ 306.422819][ T9073] ext4_getblk+0x128/0x530 [ 306.422925][ T9073] ext4_bread_batch+0x5c/0x320 [ 306.422967][ T9073] __ext4_find_entry+0x852/0xdf0 [ 306.423064][ T9073] ? kmem_cache_alloc_lru_noprof+0x1eb/0x410 [ 306.423100][ T9073] ? __rcu_read_unlock+0x4e/0x70 [ 306.423154][ T9073] ? d_alloc_parallel+0xc01/0xce0 [ 306.423199][ T9073] ext4_lookup+0xcd/0x3a0 [ 306.423229][ T9073] __lookup_slow+0x19d/0x260 [ 306.423277][ T9073] lookup_slow+0x3c/0x60 [ 306.423313][ T9073] path_lookupat+0x2f7/0x500 [ 306.423351][ T9073] filename_lookup+0x190/0x390 [ 306.423474][ T9073] vfs_statx+0x96/0x170 [ 306.423504][ T9073] __se_sys_newstat+0x66/0x3f0 [ 306.423553][ T9073] ? mutex_lock+0x57/0x90 [ 306.423588][ T9073] ? mutex_unlock+0x4e/0x90 [ 306.423635][ T9073] ? fput+0x8f/0xc0 [ 306.423668][ T9073] ? ksys_write+0x194/0x1a0 [ 306.423693][ T9073] __x64_sys_newstat+0x31/0x40 [ 306.423817][ T9073] x64_sys_call+0x7c8/0x3020 [ 306.423853][ T9073] do_syscall_64+0x12c/0x370 [ 306.423941][ T9073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.424050][ T9073] RIP: 0033:0x7f1fbf7cc799 [ 306.424068][ T9073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.424090][ T9073] RSP: 002b:00007f1fbe227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 306.424155][ T9073] RAX: ffffffffffffffda RBX: 00007f1fbfa45fa0 RCX: 00007f1fbf7cc799 [ 306.424173][ T9073] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 00002000000004c0 [ 306.424190][ T9073] RBP: 00007f1fbe227090 R08: 0000000000000000 R09: 0000000000000000 [ 306.424278][ T9073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.424294][ T9073] R13: 00007f1fbfa46038 R14: 00007f1fbfa45fa0 R15: 00007ffd8fa61198 [ 306.424401][ T9073] [ 306.764957][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.893355][ T9086] xt_bpf: check failed: parse error [ 306.906527][ T28] audit: type=1400 audit(1773081182.256:1534): avc: denied { connect } for pid=9085 comm="syz.2.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 307.107261][ T9100] loop4: detected capacity change from 0 to 128 [ 307.148690][ T9092] loop1: detected capacity change from 0 to 512 [ 307.179790][ T9092] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 307.893254][ T9092] EXT4-fs (loop1): 1 truncate cleaned up [ 307.937120][ T9092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.140534][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1724'. [ 308.513086][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.788370][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.813552][ T9116] loop0: detected capacity change from 0 to 1024 [ 308.921736][ T9120] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1727'. [ 309.245702][ T9128] loop1: detected capacity change from 0 to 512 [ 309.371656][ T9128] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 309.491188][ T9128] EXT4-fs (loop1): 1 truncate cleaned up [ 309.546248][ T9128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.630049][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 309.685010][ T9129] loop4: detected capacity change from 0 to 1024 [ 309.706949][ T9129] EXT4-fs: Ignoring removed mblk_io_submit option [ 309.762988][ T9129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.788638][ T9146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1735'. [ 310.016288][ T9150] loop0: detected capacity change from 0 to 512 [ 310.063952][ T9150] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 310.082266][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.119285][ T9150] EXT4-fs (loop0): 1 truncate cleaned up [ 310.137304][ T9150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.354654][ T9161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1740'. [ 310.380239][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.200785][ T9174] loop0: detected capacity change from 0 to 128 [ 311.382919][ T9183] 9p: Bad value for 'rfdno' [ 311.416289][ T9183] debugfs: 'ttyS3' already exists in 'caif_serial' [ 311.679233][ T9187] loop0: detected capacity change from 0 to 512 [ 311.754807][ T9187] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 311.851817][ T9187] EXT4-fs (loop0): 1 truncate cleaned up [ 311.913538][ T9187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.136022][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.210270][ T9235] random: crng reseeded on system resumption [ 312.234925][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.253812][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1753'. [ 312.456366][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1756'. [ 313.009817][ T9257] loop1: detected capacity change from 0 to 128 [ 313.243008][ T9274] loop0: detected capacity change from 0 to 2048 [ 313.255660][ T9263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.302602][ T9263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.317181][ T9274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.379087][ T9263] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 313.385769][ T9263] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 313.456121][ T9263] vhci_hcd vhci_hcd.0: Device attached [ 313.465432][ T9283] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1768'. [ 313.626710][ T28] audit: type=1400 audit(1773081188.976:1535): avc: denied { write } for pid=9262 comm="syz.1.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 313.647193][ T1033] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 313.685417][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.694791][ T9279] vhci_hcd: connection closed [ 313.709218][ T50] vhci_hcd vhci_hcd.1: stop threads [ 313.719404][ T1033] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 313.773631][ T50] vhci_hcd vhci_hcd.1: release socket [ 313.801699][ T50] vhci_hcd vhci_hcd.1: disconnect device [ 314.340724][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1773'. [ 314.381637][ T28] audit: type=1400 audit(1773081189.726:1536): avc: denied { read } for pid=9301 comm="syz.1.1774" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 314.461487][ T28] audit: type=1400 audit(1773081189.776:1537): avc: denied { setattr } for pid=9301 comm="syz.1.1774" name="UDP-Lite" dev="sockfs" ino=23293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 314.652667][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1778'. [ 315.168081][ T28] audit: type=1400 audit(1773081190.516:1538): avc: denied { setopt } for pid=9315 comm="syz.3.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.203705][ T9316] loop3: detected capacity change from 0 to 2048 [ 315.240589][ T9319] loop4: detected capacity change from 0 to 1024 [ 315.291864][ T3592] loop3: p4 < > [ 315.321167][ T9324] loop0: detected capacity change from 0 to 512 [ 315.332783][ T9324] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 315.380470][ T9316] loop3: p4 < > [ 315.390645][ T9324] EXT4-fs (loop0): 1 truncate cleaned up [ 315.408265][ T9324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.584606][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.196605][ T9336] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1784'. [ 316.350878][ T9339] loop4: detected capacity change from 0 to 512 [ 316.413690][ T9339] msdos: Unknown parameter ' dmts' [ 316.549486][ T9346] loop3: detected capacity change from 0 to 128 [ 316.613789][ T9345] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1788'. [ 316.999581][ T9358] random: crng reseeded on system resumption [ 317.039845][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1790'. [ 317.096552][ T9361] loop4: detected capacity change from 0 to 512 [ 317.170000][ T3592] udevd[3592]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 317.186194][ T3592] udevd[3592]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 317.326007][ T9352] loop1: detected capacity change from 0 to 1764 [ 317.442380][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1793'. [ 317.894248][ T9373] loop3: detected capacity change from 0 to 512 [ 318.017436][ T9373] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 318.078581][ T9373] EXT4-fs (loop3): 1 truncate cleaned up [ 318.121244][ T9373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.157742][ T9386] lo speed is unknown, defaulting to 1000 [ 318.229813][ T9386] lo speed is unknown, defaulting to 1000 [ 318.241854][ T9389] lo speed is unknown, defaulting to 1000 [ 318.264928][ T9389] lo speed is unknown, defaulting to 1000 [ 318.323241][ T28] audit: type=1400 audit(1773081193.676:1539): avc: denied { setopt } for pid=9381 comm="syz.2.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 318.381039][ T9396] v: renamed from ip6_vti0 [ 318.392572][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.454871][ T9403] loop1: detected capacity change from 0 to 256 [ 318.473159][ T9403] FAT-fs (loop1): Directory bread(block 64) failed [ 318.479914][ T9403] FAT-fs (loop1): Directory bread(block 65) failed [ 318.486522][ T9403] FAT-fs (loop1): Directory bread(block 66) failed [ 318.493079][ T9403] FAT-fs (loop1): Directory bread(block 67) failed [ 318.499641][ T9403] FAT-fs (loop1): Directory bread(block 68) failed [ 318.506231][ T9403] FAT-fs (loop1): Directory bread(block 69) failed [ 318.512807][ T9403] FAT-fs (loop1): Directory bread(block 70) failed [ 318.519343][ T9403] FAT-fs (loop1): Directory bread(block 71) failed [ 318.526018][ T9403] FAT-fs (loop1): Directory bread(block 72) failed [ 318.532643][ T9403] FAT-fs (loop1): Directory bread(block 73) failed [ 318.666760][ T9401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1803'. [ 318.741566][ T1033] usb 3-1: enqueue for inactive port 0 [ 318.753139][ T1033] usb 3-1: enqueue for inactive port 0 [ 318.851553][ T1033] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 319.061934][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 319.648563][ T9430] loop4: detected capacity change from 0 to 1024 [ 319.709777][ T9430] EXT4-fs: Ignoring removed bh option [ 319.751889][ T9430] EXT4-fs: inline encryption not supported [ 319.791736][ T9430] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 319.865865][ T9430] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 319.905371][ T9430] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 319.921714][ T9430] EXT4-fs (loop4): orphan cleanup on readonly fs [ 319.987347][ T9430] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.1811: lblock 2 mapped to illegal pblock 2 (length 1) [ 320.001585][ T9430] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 320.001694][ T9430] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 320.018920][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 320.018959][ C1] EXT4-fs (loop4): initial error at time 1773081195: ext4_map_blocks:776: inode 3: block 2 [ 320.018989][ C1] EXT4-fs (loop4): last error at time 1773081195: ext4_map_blocks:776: inode 3: block 2 [ 320.047504][ T9430] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.1811: Invalid inode table block 1 in block_group 0 [ 320.060305][ T9430] loop4: lost filesystem error report for type 5 error -117 [ 320.060429][ T9430] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 320.077868][ T9430] loop4: lost filesystem error report for type 5 error -117 [ 320.077970][ T9430] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.1811: mark_inode_dirty error [ 320.096931][ T9430] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 320.097040][ T9430] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 320.130831][ T9430] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1811: Failed to acquire dquot type 0 [ 320.142494][ T9430] loop4: lost filesystem error report for type 5 error -117 [ 320.191451][ T9430] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 320.283807][ T9430] loop4: lost filesystem error report for type 5 error -117 [ 320.314476][ T28] audit: type=1400 audit(1773081195.656:1540): avc: denied { setopt } for pid=9443 comm="syz.1.1817" lport=53023 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 320.351657][ T9430] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.1811: mark_inode_dirty error [ 320.720243][ T9439] loop3: detected capacity change from 0 to 512 [ 320.731364][ T9430] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 320.731793][ T9430] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 320.756838][ T28] audit: type=1400 audit(1773081195.656:1541): avc: denied { getopt } for pid=9443 comm="syz.1.1817" lport=53023 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 320.780872][ T9430] EXT4-fs (loop4): 1 orphan inode deleted [ 320.789480][ T70] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 320.806550][ T9439] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 320.864265][ T9439] EXT4-fs (loop3): 1 truncate cleaned up [ 320.866749][ T70] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 320.877341][ T9439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.887393][ T9456] loop1: detected capacity change from 0 to 128 [ 320.909530][ T70] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 320.928410][ T70] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 0 [ 320.969826][ T70] loop4: lost filesystem error report for type 5 error -117 [ 320.970860][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.008048][ T9430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.157764][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.212216][ T9475] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1820'. [ 321.221858][ T9476] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1821'. [ 321.444602][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 321.696238][ T9496] loop0: detected capacity change from 0 to 512 [ 321.740553][ T9496] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 321.752236][ T9496] EXT4-fs (loop0): orphan cleanup on readonly fs [ 321.785523][ T9496] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 321.950981][ T9496] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 321.968072][ T9496] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.1828: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 322.001465][ T9496] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 322.014967][ T9493] loop4: detected capacity change from 0 to 1764 [ 322.021554][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 322.036986][ C0] EXT4-fs (loop0): last error at time 1773081197: ext4_ext_check_inode:521: inode 13 [ 322.051911][ T9496] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1828: couldn't read orphan inode 13 (err -117) [ 322.052020][ T9493] grow_buffers: requested out-of-range block 18446744072010032070 for device loop4 [ 322.097853][ T9496] loop0: lost filesystem error report for type 5 error -117 [ 322.098561][ T9496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 322.175068][ T9493] isofs_fill_super: bread failed, dev=loop4, iso_blknum=1297723875, block=-1699519546 [ 322.221544][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'. [ 322.231922][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.971572][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 323.202423][ T9553] loop1: detected capacity change from 0 to 512 [ 323.305946][ T9553] EXT4-fs (loop1): 1 orphan inode deleted [ 323.323868][ T9553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.340203][ T9553] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.455509][ T9548] lo speed is unknown, defaulting to 1000 [ 323.565716][ T9548] lo speed is unknown, defaulting to 1000 [ 323.661667][ T50] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 323.855640][ T50] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 1 [ 323.989997][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1844'. [ 324.002296][ T9569] loop0: detected capacity change from 0 to 1024 [ 324.025600][ T9569] EXT4-fs: Ignoring removed orlov option [ 324.050687][ T9569] EXT4-fs: Ignoring removed nobh option [ 324.073114][ T9569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.096713][ T9569] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 324.121811][ T9569] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 324.160985][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.503436][ T9580] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1848'. [ 324.839902][ T9587] loop0: detected capacity change from 0 to 128 [ 324.885979][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.020725][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 325.051660][ T9597] loop0: detected capacity change from 0 to 1024 [ 325.074941][ T9597] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 325.102767][ T9597] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 325.136299][ T9597] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 325.162779][ T9597] EXT4-fs error (device loop0): ext4_get_journal_inode:5863: inode #32: comm syz.0.1855: iget: special inode unallocated [ 325.187563][ T9597] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 325.187840][ T9597] EXT4-fs (loop0): no journal found [ 325.197109][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 325.197140][ C1] EXT4-fs (loop0): initial error at time 1773081200: ext4_get_journal_inode:5863: inode 32 [ 325.197197][ C1] EXT4-fs (loop0): last error at time 1773081200: ext4_get_journal_inode:5863: inode 32 [ 325.229414][ T9597] EXT4-fs (loop0): can't get journal size [ 325.239186][ T9597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.300177][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1855'. [ 325.377886][ T9602] loop1: detected capacity change from 0 to 512 [ 325.455057][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.474771][ T9602] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 325.545430][ T9602] EXT4-fs (loop1): 1 truncate cleaned up [ 325.563883][ T9602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.592653][ T9613] lo speed is unknown, defaulting to 1000 [ 325.598850][ T9613] lo speed is unknown, defaulting to 1000 [ 325.737761][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.808600][ T9630] loop1: detected capacity change from 0 to 128 [ 325.826911][ T9630] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 325.837410][ T28] audit: type=1400 audit(1773081201.186:1542): avc: denied { connect } for pid=9625 comm="syz.2.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 325.993378][ T9630] ext4 filesystem being mounted at /348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 326.038273][ T9643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.050622][ T9630] FAULT_INJECTION: forcing a failure. [ 326.050622][ T9630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.065239][ T9643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.248545][ T9645] loop0: detected capacity change from 0 to 512 [ 326.380827][ T9645] EXT4-fs (loop0): 1 orphan inode deleted [ 326.398523][ T9645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.430294][ T3438] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 326.442574][ T9645] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.566703][ T3438] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 1 [ 326.605156][ T9630] CPU: 0 UID: 0 PID: 9630 Comm: syz.1.1861 Tainted: G W syzkaller #0 PREEMPT(full) [ 326.605261][ T9630] Tainted: [W]=WARN [ 326.605268][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.605283][ T9630] Call Trace: [ 326.605290][ T9630] [ 326.605300][ T9630] __dump_stack+0x1d/0x30 [ 326.605335][ T9630] dump_stack_lvl+0x95/0xd0 [ 326.605366][ T9630] dump_stack+0x15/0x1b [ 326.605433][ T9630] should_fail_ex+0x263/0x280 [ 326.605460][ T9630] should_fail+0xb/0x20 [ 326.605491][ T9630] should_fail_usercopy+0x1a/0x20 [ 326.605563][ T9630] _copy_from_user+0x1c/0xb0 [ 326.605600][ T9630] core_sys_select+0x26f/0x730 [ 326.605648][ T9630] ? set_user_sigmask+0x8b/0x140 [ 326.605724][ T9630] ? kmem_cache_free+0xc8/0x380 [ 326.605755][ T9630] __se_sys_pselect6+0x23c/0x2a0 [ 326.605805][ T9630] __x64_sys_pselect6+0x78/0x90 [ 326.605852][ T9630] x64_sys_call+0x8d5/0x3020 [ 326.605949][ T9630] do_syscall_64+0x12c/0x370 [ 326.605977][ T9630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.606005][ T9630] RIP: 0033:0x7f1fbf7cc799 [ 326.606032][ T9630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.606055][ T9630] RSP: 002b:00007f1fbe227028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 326.606078][ T9630] RAX: ffffffffffffffda RBX: 00007f1fbfa45fa0 RCX: 00007f1fbf7cc799 [ 326.606156][ T9630] RDX: 0000200000000300 RSI: 0000200000000280 RDI: 0000000000000040 [ 326.606174][ T9630] RBP: 00007f1fbe227090 R08: 0000000000000000 R09: 0000000000000000 [ 326.606191][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.606204][ T9630] R13: 00007f1fbfa46038 R14: 00007f1fbfa45fa0 R15: 00007ffd8fa61198 [ 326.606223][ T9630] [ 326.958783][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.999435][ T9649] loop3: detected capacity change from 0 to 128 [ 327.010061][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.032092][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.073794][ T28] audit: type=1326 audit(1773081202.416:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.4.1865" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f015a80c799 code=0x0 [ 327.148727][ T9656] IPv6: NLM_F_REPLACE set, but no existing node found! [ 327.789657][ T9668] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1870'. [ 327.824213][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.130991][ T28] audit: type=1326 audit(1773081203.476:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 328.191620][ T28] audit: type=1326 audit(1773081203.506:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 328.219858][ T28] audit: type=1326 audit(1773081203.506:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 328.307604][ T28] audit: type=1326 audit(1773081203.506:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 328.332299][ T28] audit: type=1326 audit(1773081203.506:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 328.362062][ T28] audit: type=1326 audit(1773081203.506:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 328.365149][ T9692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.399363][ T28] audit: type=1326 audit(1773081203.506:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 328.422536][ T9692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.440963][ T9697] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1879'. [ 328.489083][ T9687] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 328.495743][ T9687] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 328.521467][ T9687] vhci_hcd vhci_hcd.0: Device attached [ 328.552239][ T9700] vhci_hcd: connection closed [ 328.552764][ T3438] vhci_hcd vhci_hcd.0: stop threads [ 328.563660][ T3438] vhci_hcd vhci_hcd.0: release socket [ 328.569062][ T3438] vhci_hcd vhci_hcd.0: disconnect device [ 328.608778][ T9710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1884'. [ 328.640819][ T9710] ip6gre1: entered promiscuous mode [ 328.658449][ T9710] ip6gre1: entered allmulticast mode [ 329.054166][ T9720] FAULT_INJECTION: forcing a failure. [ 329.054166][ T9720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.074833][ T9720] CPU: 0 UID: 0 PID: 9720 Comm: syz.4.1886 Tainted: G W syzkaller #0 PREEMPT(full) [ 329.074911][ T9720] Tainted: [W]=WARN [ 329.074921][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.075000][ T9720] Call Trace: [ 329.075006][ T9720] [ 329.075078][ T9720] __dump_stack+0x1d/0x30 [ 329.075111][ T9720] dump_stack_lvl+0x95/0xd0 [ 329.075140][ T9720] dump_stack+0x15/0x1b [ 329.075166][ T9720] should_fail_ex+0x263/0x280 [ 329.075192][ T9720] should_fail+0xb/0x20 [ 329.075278][ T9720] should_fail_usercopy+0x1a/0x20 [ 329.075302][ T9720] _copy_from_user+0x1c/0xb0 [ 329.075449][ T9720] ___sys_sendmsg+0xc1/0x1e0 [ 329.075498][ T9720] __x64_sys_sendmsg+0xd4/0x160 [ 329.075535][ T9720] x64_sys_call+0x194c/0x3020 [ 329.075561][ T9720] do_syscall_64+0x12c/0x370 [ 329.075681][ T9720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.075710][ T9720] RIP: 0033:0x7f015a80c799 [ 329.075730][ T9720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.075753][ T9720] RSP: 002b:00007f015925f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.075814][ T9720] RAX: ffffffffffffffda RBX: 00007f015aa85fa0 RCX: 00007f015a80c799 [ 329.075832][ T9720] RDX: 0000000004000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 329.075854][ T9720] RBP: 00007f015925f090 R08: 0000000000000000 R09: 0000000000000000 [ 329.075870][ T9720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.075887][ T9720] R13: 00007f015aa86038 R14: 00007f015aa85fa0 R15: 00007ffff0864128 [ 329.075911][ T9720] [ 329.503999][ T9731] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1888'. [ 330.098630][ T9748] 9p: Bad value for 'wfdno' [ 330.145997][ T9752] sg_write: data in/out 319425317/4054 bytes for SCSI command 0x72-- guessing data in; [ 330.145997][ T9752] program syz.3.1891 not setting count and/or reply_len properly [ 330.189410][ T9753] netlink: 'syz.2.1897': attribute type 1 has an invalid length. [ 330.273174][ T9770] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1905'. [ 330.285020][ T9770] siw: device registration error -23 [ 330.326872][ T9773] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1902'. [ 330.389360][ T9778] loop0: detected capacity change from 0 to 128 [ 330.422001][ T9781] syzkaller0: entered promiscuous mode [ 330.427594][ T9781] syzkaller0: entered allmulticast mode [ 330.434820][ T9781] 9pnet_fd: Insufficient options for proto=fd [ 330.608695][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 330.657641][ T9798] loop0: detected capacity change from 0 to 256 [ 330.676934][ T9800] loop4: detected capacity change from 0 to 764 [ 330.695827][ T9801] rock: directory entry would overflow storage [ 330.703132][ T9801] rock: sig=0x4f50, size=4, remaining=3 [ 330.714405][ T9801] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 330.735270][ T9804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1917'. [ 330.748282][ T9800] rock: directory entry would overflow storage [ 330.756181][ T9800] rock: sig=0x4f50, size=4, remaining=3 [ 330.761067][ T9798] FAT-fs (loop0): Directory bread(block 64) failed [ 330.770755][ T9798] FAT-fs (loop0): Directory bread(block 65) failed [ 330.772711][ T9800] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 330.789403][ T9798] FAT-fs (loop0): Directory bread(block 66) failed [ 330.816977][ T9798] FAT-fs (loop0): Directory bread(block 67) failed [ 330.826608][ T9798] FAT-fs (loop0): Directory bread(block 68) failed [ 330.843826][ T9808] team0 (unregistering): Port device team_slave_0 removed [ 330.844852][ T9798] FAT-fs (loop0): Directory bread(block 69) failed [ 330.857945][ T9798] FAT-fs (loop0): Directory bread(block 70) failed [ 330.864760][ T9798] FAT-fs (loop0): Directory bread(block 71) failed [ 330.880894][ T9798] FAT-fs (loop0): Directory bread(block 72) failed [ 330.882543][ T9808] team0 (unregistering): Port device team_slave_1 removed [ 330.888046][ T9798] FAT-fs (loop0): Directory bread(block 73) failed [ 330.967639][ T9812] loop1: detected capacity change from 0 to 128 [ 330.989066][ T9818] loop4: detected capacity change from 0 to 164 [ 331.095657][ T9823] loop4: detected capacity change from 0 to 2048 [ 331.204931][ T9835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.216025][ T9837] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1932'. [ 331.244081][ T9835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.266448][ T9835] loop4: detected capacity change from 0 to 512 [ 331.278888][ T9835] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 331.295278][ T9835] EXT4-fs (loop4): orphan cleanup on readonly fs [ 331.302488][ T9835] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 331.317957][ T9835] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 331.325077][ T9835] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.1931: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 331.343480][ T9835] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 331.343803][ T9835] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1931: couldn't read orphan inode 13 (err -117) [ 331.353023][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 331.353045][ C1] EXT4-fs (loop4): last error at time 1773081206: ext4_ext_check_inode:521: inode 13 [ 331.381023][ T9835] loop4: lost filesystem error report for type 5 error -117 [ 331.381837][ T9835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 331.408931][ T9829] loop0: detected capacity change from 0 to 736 [ 331.476269][ T9857] 9p: Bad value for 'wfdno' [ 331.483908][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 331.483926][ T28] audit: type=1400 audit(1773081206.836:1587): avc: denied { listen } for pid=9828 comm="syz.0.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 331.492003][ T9855] loop3: detected capacity change from 0 to 128 [ 331.514939][ T28] audit: type=1400 audit(1773081206.836:1588): avc: denied { accept } for pid=9828 comm="syz.0.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 331.538929][ T9842] sit0: left allmulticast mode [ 331.552086][ T9842] bridge0: left allmulticast mode [ 331.560649][ T9842] macvlan1: left allmulticast mode [ 331.567047][ T9842] ip6erspan0: left promiscuous mode [ 331.572773][ T9842] bridge1: left promiscuous mode [ 331.949947][ T9923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1943'. [ 331.966766][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.007494][ T9929] netlink: 'syz.3.1946': attribute type 3 has an invalid length. [ 332.069877][ T9939] loop3: detected capacity change from 0 to 128 [ 332.081609][ T9933] lo speed is unknown, defaulting to 1000 [ 332.200085][ T28] audit: type=1400 audit(1773081207.536:1589): avc: denied { getopt } for pid=9946 comm="syz.0.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 332.804706][ T9927] loop1: detected capacity change from 0 to 512 [ 332.899103][ T9990] netlink: 'syz.4.1953': attribute type 1 has an invalid length. [ 332.992227][ T9927] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 333.055622][ T9927] EXT4-fs (loop1): 1 truncate cleaned up [ 333.083042][ T9927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.396027][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.606932][T10009] loop4: detected capacity change from 0 to 512 [ 334.268058][T10009] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.418650][T10013] loop0: detected capacity change from 0 to 128 [ 334.460046][T10009] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 334.581273][T10009] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 334.622664][T10009] System zones: 0-2, 18-18, 34-35 [ 334.628058][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'. [ 334.645105][T10023] sit0: entered allmulticast mode [ 334.654616][T10009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 334.668376][T10009] FAULT_INJECTION: forcing a failure. [ 334.668376][T10009] name failslab, interval 1, probability 0, space 0, times 0 [ 334.681144][T10009] CPU: 0 UID: 0 PID: 10009 Comm: syz.4.1958 Tainted: G W syzkaller #0 PREEMPT(full) [ 334.681177][T10009] Tainted: [W]=WARN [ 334.681186][T10009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 334.681212][T10009] Call Trace: [ 334.681284][T10009] [ 334.681330][T10009] __dump_stack+0x1d/0x30 [ 334.681358][T10009] dump_stack_lvl+0x95/0xd0 [ 334.681398][T10009] dump_stack+0x15/0x1b [ 334.681447][T10009] should_fail_ex+0x263/0x280 [ 334.681474][T10009] should_failslab+0x8c/0xb0 [ 334.681569][T10009] kmem_cache_alloc_noprof+0x66/0x400 [ 334.681611][T10009] ? __es_insert_extent+0x508/0xee0 [ 334.681698][T10009] __es_insert_extent+0x508/0xee0 [ 334.681804][T10009] ? __perf_event_task_sched_in+0xa65/0xad0 [ 334.681837][T10009] ? _find_next_zero_bit+0x29/0xa0 [ 334.681883][T10009] ext4_es_cache_extent+0x37e/0x5d0 [ 334.682057][T10009] ext4_find_extent+0x341/0x790 [ 334.682090][T10009] ext4_ext_map_blocks+0x10d/0x2fb0 [ 334.682175][T10009] ? vsnprintf+0x7ee/0x860 [ 334.682203][T10009] ? sprintf+0x88/0xb0 [ 334.682229][T10009] ? panic_on_this_cpu+0x2d/0x40 [ 334.682292][T10009] ext4_map_query_blocks+0xb2/0x550 [ 334.682330][T10009] ? ext4_es_lookup_extent+0x3ae/0x570 [ 334.682361][T10009] ? xas_load+0x413/0x430 [ 334.682448][T10009] ext4_map_blocks+0x306/0x970 [ 334.682488][T10009] ext4_getblk+0x128/0x530 [ 334.682530][T10009] ext4_bread_batch+0x5c/0x320 [ 334.682618][T10009] __ext4_find_entry+0x852/0xdf0 [ 334.682710][T10009] ? kmem_cache_alloc_lru_noprof+0x1eb/0x410 [ 334.682737][T10009] ? __rcu_read_unlock+0x4e/0x70 [ 334.682853][T10009] ? d_alloc_parallel+0xc01/0xce0 [ 334.682898][T10009] ext4_lookup+0xcd/0x3a0 [ 334.682932][T10009] __lookup_slow+0x19d/0x260 [ 334.682961][T10009] lookup_slow+0x3c/0x60 [ 334.683039][T10009] path_lookupat+0x2f7/0x500 [ 334.683067][T10009] filename_lookup+0x190/0x390 [ 334.683108][T10009] vfs_statx+0x96/0x170 [ 334.683157][T10009] __se_sys_newstat+0x66/0x3f0 [ 334.683190][T10009] ? mutex_lock+0x57/0x90 [ 334.683224][T10009] ? mutex_unlock+0x4e/0x90 [ 334.683335][T10009] ? fput+0x8f/0xc0 [ 334.683415][T10009] ? ksys_write+0x194/0x1a0 [ 334.683434][T10009] __x64_sys_newstat+0x31/0x40 [ 334.683457][T10009] x64_sys_call+0x7c8/0x3020 [ 334.683492][T10009] do_syscall_64+0x12c/0x370 [ 334.683520][T10009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.683587][T10009] RIP: 0033:0x7f015a80c799 [ 334.683604][T10009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.683622][T10009] RSP: 002b:00007f015925f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 334.683646][T10009] RAX: ffffffffffffffda RBX: 00007f015aa85fa0 RCX: 00007f015a80c799 [ 334.683664][T10009] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 00002000000004c0 [ 334.683681][T10009] RBP: 00007f015925f090 R08: 0000000000000000 R09: 0000000000000000 [ 334.683776][T10009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.683791][T10009] R13: 00007f015aa86038 R14: 00007f015aa85fa0 R15: 00007ffff0864128 [ 334.683812][T10009] [ 335.057222][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.903836][T10038] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1970'. [ 336.001865][ T28] audit: type=1400 audit(1773081211.336:1590): avc: denied { setopt } for pid=10037 comm="syz.1.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 336.263319][T10043] loop7: detected capacity change from 0 to 16384 [ 336.290501][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1973'. [ 336.339881][T10048] loop0: detected capacity change from 0 to 128 [ 336.360043][T10045] loop1: detected capacity change from 0 to 256 [ 336.602857][ T28] audit: type=1326 audit(1773081211.956:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 336.769114][T10057] loop0: detected capacity change from 0 to 128 [ 336.811212][ T28] audit: type=1326 audit(1773081211.956:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 337.143100][ T28] audit: type=1326 audit(1773081211.956:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 337.173166][T10057] FAT-fs (loop0): bogus logical sector size 2134 [ 337.761433][T10057] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 338.096675][T10057] FAT-fs (loop0): Can't find a valid FAT filesystem [ 339.010931][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1979'. [ 339.050339][ T28] audit: type=1326 audit(1773081211.956:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 339.173662][ T28] audit: type=1326 audit(1773081211.976:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 339.210731][ T28] audit: type=1326 audit(1773081211.976:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 339.288515][ T28] audit: type=1326 audit(1773081211.976:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 339.312934][ T28] audit: type=1326 audit(1773081211.976:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 339.336836][ T28] audit: type=1326 audit(1773081212.486:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 339.365865][ T28] audit: type=1326 audit(1773081212.486:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.0.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 339.415379][T10085] loop0: detected capacity change from 0 to 512 [ 339.431997][T10089] loop3: detected capacity change from 0 to 256 [ 339.440914][T10085] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 339.464643][T10085] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 339.488237][T10085] System zones: 1-12 [ 339.499726][T10085] EXT4-fs (loop0): orphan cleanup on readonly fs [ 339.525706][T10085] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1987: bg 0: block 361: padding at end of block bitmap is not set [ 339.540749][T10085] loop0: lost filesystem error report for type 5 error -117 [ 339.540955][T10085] EXT4-fs (loop0): Remounting filesystem read-only [ 339.548331][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 339.548357][ C0] EXT4-fs (loop0): initial error at time 1773081214: ext4_validate_block_bitmap:441 [ 339.548385][ C0] EXT4-fs (loop0): last error at time 1773081214: ext4_validate_block_bitmap:441 [ 339.582372][T10085] EXT4-fs (loop0): 1 truncate cleaned up [ 339.588818][T10085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 339.621753][T10085] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.1987: error -117 reading directory block [ 339.758781][T10098] loop4: detected capacity change from 0 to 512 [ 339.769628][T10110] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1991'. [ 339.809924][T10098] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 339.932282][T10098] EXT4-fs (loop4): 1 truncate cleaned up [ 339.966885][T10111] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 340.016685][T10098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.108901][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.740159][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1994'. [ 341.778623][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 341.793372][T10120] loop1: detected capacity change from 0 to 128 [ 341.929054][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 341.929073][ T28] audit: type=1400 audit(1773081218.119:1604): avc: denied { cpu } for pid=10125 comm="syz.1.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 341.970421][T10126] sit0: entered promiscuous mode [ 342.479163][ T28] audit: type=1326 audit(1773081218.643:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 342.511081][ T28] audit: type=1326 audit(1773081218.661:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 342.535776][ T28] audit: type=1326 audit(1773081218.661:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0714acfce code=0x7ffc0000 [ 342.559814][ T28] audit: type=1326 audit(1773081218.661:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe0714eda97 code=0x7ffc0000 [ 342.584029][T10167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10167 comm=syz.0.2007 [ 342.604341][ T28] audit: type=1326 audit(1773081218.661:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 342.628784][ T28] audit: type=1326 audit(1773081218.661:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe0714eda97 code=0x7ffc0000 [ 342.668611][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2008'. [ 342.681404][ T28] audit: type=1326 audit(1773081218.661:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe0714acfce code=0x7ffc0000 [ 342.707944][ T28] audit: type=1326 audit(1773081218.661:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 342.733028][ T28] audit: type=1326 audit(1773081218.661:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fe0714ec799 code=0x7ffc0000 [ 342.980882][T10137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.217154][T10186] loop1: detected capacity change from 0 to 256 [ 343.250734][T10186] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 343.274294][T10189] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2012'. [ 343.315586][T10186] FAT-fs (loop1): Directory bread(block 64) failed [ 343.329187][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2014'. [ 343.342962][T10186] FAT-fs (loop1): Directory bread(block 65) failed [ 343.356176][T10186] FAT-fs (loop1): Directory bread(block 66) failed [ 343.385765][T10186] FAT-fs (loop1): Directory bread(block 67) failed [ 343.392359][T10186] FAT-fs (loop1): Directory bread(block 68) failed [ 343.444805][T10186] FAT-fs (loop1): Directory bread(block 69) failed [ 343.451688][T10186] FAT-fs (loop1): Directory bread(block 70) failed [ 343.481772][T10186] FAT-fs (loop1): Directory bread(block 71) failed [ 343.498651][T10186] FAT-fs (loop1): Directory bread(block 72) failed [ 343.519324][T10186] FAT-fs (loop1): Directory bread(block 73) failed [ 343.530760][T10211] netlink: 'syz.3.2018': attribute type 4 has an invalid length. [ 343.665143][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 343.836309][T10237] macvtap1: entered promiscuous mode [ 343.841661][T10237] bond0: entered promiscuous mode [ 343.856089][T10237] bond_slave_0: entered promiscuous mode [ 343.861855][T10237] bond_slave_1: entered promiscuous mode [ 343.883393][T10237] macvtap1: entered allmulticast mode [ 343.888984][T10237] bond0: entered allmulticast mode [ 343.894185][T10237] bond_slave_0: entered allmulticast mode [ 343.900030][T10237] bond_slave_1: entered allmulticast mode [ 343.906368][T10237] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 343.947309][T10237] bond0: left allmulticast mode [ 343.952330][T10237] bond_slave_0: left allmulticast mode [ 343.957840][T10237] bond_slave_1: left allmulticast mode [ 343.963817][T10237] bond0: left promiscuous mode [ 343.967829][T10227] loop0: detected capacity change from 0 to 512 [ 343.976266][T10237] bond_slave_0: left promiscuous mode [ 343.976410][T10237] bond_slave_1: left promiscuous mode [ 344.117733][T10227] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 344.152773][T10227] EXT4-fs (loop0): 1 truncate cleaned up [ 344.174422][T10227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.226423][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2027'. [ 344.709979][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.107413][T10269] loop4: detected capacity change from 0 to 128 [ 345.237046][T10269] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.306895][T10269] ext4 filesystem being mounted at /407/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 345.938414][T10269] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.239927][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2039'. [ 346.693946][T10297] loop1: detected capacity change from 0 to 128 [ 347.287142][T10296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2044'. [ 347.616317][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2047'. [ 347.655444][T10309] bond2: entered promiscuous mode [ 347.670570][T10309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.721054][T10306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.735833][T10306] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 347.746941][T10306] bond2: (slave sit1): Error -95 calling set_mac_address [ 347.766474][T10316] loop3: detected capacity change from 0 to 512 [ 347.773696][T10316] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 347.842570][T10316] EXT4-fs (loop3): 1 truncate cleaned up [ 347.858061][T10316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.877709][T10321] netlink: 'syz.1.2051': attribute type 4 has an invalid length. [ 347.927362][T10315] loop4: detected capacity change from 0 to 512 [ 347.972740][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.081301][T10315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 348.104588][T10332] sg_write: process 1121 (syz.1.2055) changed security contexts after opening file descriptor, this is not allowed. [ 348.131089][T10315] EXT4-fs (loop4): 1 truncate cleaned up [ 348.156796][T10315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.253701][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.297296][ T28] kauditd_printk_skb: 200 callbacks suppressed [ 348.297311][ T28] audit: type=1400 audit(1773081224.077:1814): avc: denied { create } for pid=10344 comm="syz.3.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 348.495082][T10351] loop1: detected capacity change from 0 to 256 [ 348.564397][T10353] loop3: detected capacity change from 0 to 512 [ 348.599300][T10353] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 348.637838][T10353] EXT4-fs (loop3): 1 truncate cleaned up [ 348.662636][T10353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.796795][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.827161][T10366] netlink: 'syz.2.2064': attribute type 2 has an invalid length. [ 349.324579][T10382] lo speed is unknown, defaulting to 1000 [ 349.920297][T10406] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2077'. [ 350.414987][ T28] audit: type=1326 audit(1773081226.060:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 350.442165][T10427] xt_bpf: check failed: parse error [ 350.491900][ T28] audit: type=1326 audit(1773081226.060:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 350.532550][T10427] tipc: Enabled bearer , priority 10 [ 350.569853][ T28] audit: type=1326 audit(1773081226.060:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 350.634691][ T28] audit: type=1326 audit(1773081226.060:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 350.678894][ T28] audit: type=1326 audit(1773081226.060:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 350.751511][ T28] audit: type=1326 audit(1773081226.060:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 350.804962][ T28] audit: type=1326 audit(1773081226.060:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 350.859093][ T28] audit: type=1326 audit(1773081226.060:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 350.882810][ T28] audit: type=1326 audit(1773081226.060:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f015a80c799 code=0x7ffc0000 [ 350.981398][T10455] Q6`Ҙ: renamed from lo [ 351.424858][T10454] loop3: detected capacity change from 0 to 512 [ 351.463914][T10454] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 351.550903][T10454] EXT4-fs (loop3): 1 truncate cleaned up [ 351.603980][T10454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.640465][T10471] loop1: detected capacity change from 0 to 512 [ 351.647583][T10471] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 351.665648][ T3592] udevd[3592]: incorrect ext4 checksum on /dev/loop1 [ 351.679891][ T3592] udevd[3592]: incorrect ext4 checksum on /dev/loop1 [ 351.828428][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2094'. [ 351.871024][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.320772][T10493] loop3: detected capacity change from 0 to 2048 [ 352.371741][T10497] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 352.379704][T10497] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2102'. [ 352.561544][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2108'. [ 352.579186][T10515] loop1: detected capacity change from 0 to 164 [ 352.624557][T10515] ISOFS: unable to read i-node block [ 352.629936][T10515] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 352.948953][T10531] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2112'. [ 352.982417][T10535] loop0: detected capacity change from 0 to 128 [ 353.002194][T10535] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.018165][T10535] ext4 filesystem being mounted at /434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 353.071244][T10540] Q6`Ҙ speed is unknown, defaulting to 1000 [ 353.164101][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.187802][T10551] IPv6: NLM_F_REPLACE set, but no existing node found! [ 353.304328][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2122'. [ 353.457760][T10561] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2126'. [ 353.645365][T10565] loop0: detected capacity change from 0 to 1024 [ 353.689576][T10565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 353.781871][T10565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.852822][T10571] loop1: detected capacity change from 0 to 128 [ 353.923138][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 353.923153][ T28] audit: type=1326 audit(1773081229.344:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.2.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 353.927126][T10565] loop0: detected capacity change from 1024 to 0 [ 353.929915][ T28] audit: type=1326 audit(1773081229.353:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.2.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 353.992001][ C0] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 354.001834][T10576] EXT4-fs error (device loop0): ext4_get_inode_loc:4920: inode #15: block 8: comm syz.0.2128: unable to read itable block [ 354.002902][ T28] audit: type=1326 audit(1773081229.400:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.2.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 354.036510][T10576] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 354.053481][ T28] audit: type=1326 audit(1773081229.409:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.2.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 354.077180][ T28] audit: type=1326 audit(1773081229.409:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.2.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 354.106919][T10576] EXT4-fs (loop0): I/O error while writing superblock [ 354.129675][T10576] EXT4-fs error (device loop0): ext4_get_inode_loc:4920: inode #15: block 8: comm syz.0.2128: unable to read itable block [ 354.144302][ T28] audit: type=1326 audit(1773081229.409:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.2.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 354.168465][ T28] audit: type=1326 audit(1773081229.409:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.2.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 354.192318][ T28] audit: type=1326 audit(1773081229.409:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.2.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 354.216091][T10576] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 354.241432][T10576] EXT4-fs (loop0): I/O error while writing superblock [ 354.264928][T10601] loop3: detected capacity change from 0 to 1024 [ 354.271456][T10576] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: IO failure [ 354.367009][ T28] audit: type=1326 audit(1773081229.409:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.2.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 354.412805][T10576] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 354.701815][T10576] EXT4-fs (loop0): I/O error while writing superblock [ 354.748146][T10576] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.2128: mark_inode_dirty error [ 354.767399][ T28] audit: type=1326 audit(1773081229.409:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.2.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 354.852165][T10576] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 354.903854][T10576] EXT4-fs (loop0): I/O error while writing superblock [ 354.964747][ T3312] EXT4-fs error (device loop0): ext4_get_inode_loc:4920: inode #2: block 5: comm syz-executor: unable to read itable block [ 354.985083][T10608] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2144'. [ 354.994751][ T3312] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 355.003428][ T3312] EXT4-fs (loop0): I/O error while writing superblock [ 355.010449][ T3312] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: IO failure [ 355.019869][ T3312] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 355.041195][ T3312] EXT4-fs (loop0): I/O error while writing superblock [ 355.048009][ T3312] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz-executor: mark_inode_dirty error [ 355.081432][ T3312] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 355.103099][ T3312] EXT4-fs (loop0): I/O error while writing superblock [ 355.289404][ T9973] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4905: inode #15: block 8: comm kworker/u8:11: unable to read itable block [ 355.316039][ T9973] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 355.368093][ T9973] EXT4-fs (loop0): I/O error while writing superblock [ 355.425722][ T9973] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4905: inode #2: block 5: comm kworker/u8:11: unable to read itable block [ 355.606020][ T9973] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 355.687724][ T9973] EXT4-fs (loop0): I/O error while writing superblock [ 355.794739][T10621] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.803263][ T6896] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 355.984561][T10621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.987356][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2149'. [ 357.175011][T10635] loop1: detected capacity change from 0 to 512 [ 357.189065][T10635] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 357.211040][T10635] EXT4-fs (loop1): 1 truncate cleaned up [ 357.248145][T10635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.321061][T10642] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2155'. [ 357.399579][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.509878][T10643] Q6`Ҙ speed is unknown, defaulting to 1000 [ 357.523167][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 357.592869][T10643] chnl_net:caif_netlink_parms(): no params data found [ 357.647128][T10643] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.655145][T10643] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.663179][T10643] bridge_slave_0: entered allmulticast mode [ 357.669887][T10643] bridge_slave_0: entered promiscuous mode [ 357.677559][T10643] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.684806][T10643] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.692992][T10643] bridge_slave_1: entered allmulticast mode [ 357.699608][T10643] bridge_slave_1: entered promiscuous mode [ 357.721354][T10667] Q6`Ҙ speed is unknown, defaulting to 1000 [ 357.724758][T10643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.738988][T10643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.777009][T10643] team0: Port device team_slave_0 added [ 357.835665][T10643] team0: Port device team_slave_1 added [ 357.854151][T10643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.861273][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.888498][T10679] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2163'. [ 357.899196][T10643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.930983][T10643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.941036][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.967498][T10643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.008919][T10643] hsr_slave_0: entered promiscuous mode [ 358.016105][T10643] hsr_slave_1: entered promiscuous mode [ 358.022399][T10643] debugfs: 'hsr0' already exists in 'hsr' [ 358.028313][T10643] Cannot create hsr debugfs directory [ 358.138501][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'. [ 358.184428][T10688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2167'. [ 358.195228][T10643] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 358.206108][T10643] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 358.216290][T10643] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 358.226044][T10643] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 358.250986][T10643] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.258290][T10643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.265627][T10643] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.272802][T10643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.307879][T10698] sctp: [Deprecated]: syz.2.2169 (pid 10698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.307879][T10698] Use struct sctp_sack_info instead [ 358.328757][T10643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.341750][T10643] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.350995][ T9981] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.362655][ T9981] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.391464][ T9981] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.398692][ T9981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.408374][ T9981] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.415482][ T9981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.513968][T10643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.755976][T10721] loop3: detected capacity change from 0 to 1024 [ 358.787824][T10721] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 358.796007][T10721] System zones: 0-1, 3-36 [ 358.801449][T10721] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2174: bad orphan inode 134217728 [ 358.812972][T10721] loop3: lost filesystem error report for type 5 error -117 [ 358.819390][T10721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.854549][T10721] Q6`Ҙ speed is unknown, defaulting to 1000 [ 358.926586][T10643] veth0_vlan: entered promiscuous mode [ 358.947443][T10643] veth1_vlan: entered promiscuous mode [ 358.981613][T10643] veth0_macvtap: entered promiscuous mode [ 359.000223][T10643] veth1_macvtap: entered promiscuous mode [ 359.028628][T10643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.054944][T10643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.080474][ T3483] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.093815][ T3483] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.121072][ T3483] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.141317][ T3483] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.269315][T10740] sit0: left promiscuous mode [ 359.370657][T10748] netlink: 'syz.5.2183': attribute type 27 has an invalid length. [ 359.432935][T10748] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.440300][T10748] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.480931][T10756] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2184'. [ 359.558593][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.570684][T10748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.588711][T10748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.734124][T10755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.750133][T10755] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.860107][T10755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.897197][ T9981] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.916383][ T9981] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.979032][ T9981] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.988090][ T9981] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.001496][T10769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2188'. [ 360.189812][T10785] tipc: Enabling of bearer rejected, failed to enable media [ 360.204371][T10790] Q6`Ҙ speed is unknown, defaulting to 1000 [ 360.435393][T10815] loop5: detected capacity change from 0 to 128 [ 360.515862][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'. [ 360.725012][T10834] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10834 comm=syz.5.2209 [ 360.754672][T10834] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=10834 comm=syz.5.2209 [ 360.843204][T10835] loop5: detected capacity change from 0 to 512 [ 360.882081][T10835] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2209: invalid indirect mapped block 256 (level 2) [ 360.900063][T10835] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 360.900481][T10835] EXT4-fs (loop5): 2 truncates cleaned up [ 360.909833][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 360.909863][ C0] EXT4-fs (loop5): initial error at time 1773081235: ext4_free_branches:1023: inode 11 [ 360.909899][ C0] EXT4-fs (loop5): last error at time 1773081235: ext4_free_branches:1023: inode 11 [ 360.972304][T10835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.119905][T10851] 9p: Bad value for 'rfdno' [ 361.255626][T10863] netlink: 'syz.2.2221': attribute type 13 has an invalid length. [ 361.277021][T10864] netlink: 'syz.2.2221': attribute type 13 has an invalid length. [ 361.297180][T10863] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.2221'. [ 361.323756][T10864] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.2221'. [ 361.411631][T10837] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 361.624931][T10643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.949049][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 361.949070][ T28] audit: type=1400 audit(1773081236.855:1868): avc: denied { getopt } for pid=10889 comm="syz.2.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 362.111208][T10892] Q6`Ҙ speed is unknown, defaulting to 1000 [ 363.452632][T10925] __nla_validate_parse: 1 callbacks suppressed [ 363.452648][T10925] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2243'. [ 363.819215][T10928] loop1: detected capacity change from 0 to 736 [ 363.921423][T10928] netlink: zone id is out of range [ 363.963629][T10923] loop5: detected capacity change from 0 to 1764 [ 363.976852][T10928] netlink: zone id is out of range [ 363.985597][T10928] netlink: zone id is out of range [ 363.992845][T10938] loop3: detected capacity change from 0 to 128 [ 364.008130][T10928] netlink: zone id is out of range [ 364.013857][T10928] netlink: zone id is out of range [ 364.055916][T10928] netlink: zone id is out of range [ 364.093570][T10928] netlink: zone id is out of range [ 364.099257][T10928] netlink: zone id is out of range [ 364.142255][T10942] macvtap1: entered promiscuous mode [ 364.148699][T10928] netlink: zone id is out of range [ 364.154308][T10928] netlink: zone id is out of range [ 364.193903][T10942] bond0: entered promiscuous mode [ 364.211974][T10942] bond_slave_0: entered promiscuous mode [ 364.225734][T10942] bond_slave_1: entered promiscuous mode [ 364.297138][T10942] macvtap1: entered allmulticast mode [ 364.307548][T10942] bond0: entered allmulticast mode [ 364.318211][T10942] bond_slave_0: entered allmulticast mode [ 364.338251][T10942] bond_slave_1: entered allmulticast mode [ 364.361453][T10942] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 364.381266][T10942] bond0: left allmulticast mode [ 364.397142][T10942] bond_slave_0: left allmulticast mode [ 364.413522][T10942] bond_slave_1: left allmulticast mode [ 364.424364][T10942] bond0: left promiscuous mode [ 364.454536][T10942] bond_slave_0: left promiscuous mode [ 364.470707][T10942] bond_slave_1: left promiscuous mode [ 364.587677][T10950] Q6`Ҙ speed is unknown, defaulting to 1000 [ 364.764853][T10950] netlink: 'syz.1.2252': attribute type 13 has an invalid length. [ 364.811901][T10950] loop1: detected capacity change from 0 to 512 [ 364.855165][T10950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.957466][T10967] vlan3: entered promiscuous mode [ 365.163182][T10967] bridge0: entered promiscuous mode [ 365.272907][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.915750][T10978] loop5: detected capacity change from 0 to 164 [ 365.933978][T10977] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 366.148942][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2261'. [ 368.049183][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 368.178573][T11032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.812999][T11040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.062896][ T28] audit: type=1400 audit(1773081500.443:1869): avc: denied { listen } for pid=11043 comm="syz.2.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 370.363851][T11044] batadv_slave_1: entered promiscuous mode [ 371.413533][T11043] batadv_slave_1: left promiscuous mode [ 371.472126][T11058] syzkaller0: refused to change device tx_queue_len [ 371.608119][ T28] audit: type=1326 audit(1773081501.883:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.2.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 371.721419][T11068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2288'. [ 371.730575][T11068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2288'. [ 371.754379][ T28] audit: type=1326 audit(1773081501.883:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.2.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 372.530816][ T28] audit: type=1326 audit(1773081501.883:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.2.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f29b574cfce code=0x7ffc0000 [ 373.078415][T11079] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2291'. [ 373.250465][T11084] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2294'. [ 373.281237][ T28] audit: type=1326 audit(1773081501.883:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.2.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 373.305154][ T28] audit: type=1326 audit(1773081501.883:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.2.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 373.328854][ T28] audit: type=1326 audit(1773081501.883:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.2.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 373.352662][ T28] audit: type=1326 audit(1773081501.883:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.2.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 373.407135][ T28] audit: type=1326 audit(1773081501.883:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.2.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 373.418779][T11053] Q6`Ҙ speed is unknown, defaulting to 1000 [ 373.452555][T11097] loop1: detected capacity change from 0 to 128 [ 373.484461][ T28] audit: type=1326 audit(1773081501.883:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.2.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b578c799 code=0x7ffc0000 [ 373.522350][T11097] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.555082][T11097] ext4 filesystem being mounted at /453/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 373.659199][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2298'. [ 373.976745][ T36] bridge_slave_0: left allmulticast mode [ 374.020772][ T36] bridge_slave_0: left promiscuous mode [ 374.075173][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.165427][T11097] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.287249][T11118] loop5: detected capacity change from 0 to 128 [ 374.358673][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.390642][T11131] loop1: detected capacity change from 0 to 128 [ 374.449117][T11135] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2303'. [ 374.474253][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.488683][T11135] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2303'. [ 374.497992][T11135] netlink: 'syz.5.2303': attribute type 5 has an invalid length. [ 374.509498][T11141] loop5: detected capacity change from 0 to 512 [ 374.516090][T11135] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2303'. [ 374.529413][T11141] EXT4-fs: Ignoring removed nobh option [ 374.547218][ T36] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 374.556892][T11141] EXT4-fs (loop5): orphan cleanup on readonly fs [ 374.564521][ T36] bond0 (unregistering): Released all slaves [ 374.571566][T11141] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.2303: EA inode hash validation failed [ 374.592410][T11141] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 374.647498][ T36] tipc: Disabling bearer [ 374.656023][T11141] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.2303: corrupted inode contents [ 374.668063][ T36] tipc: Disabling bearer [ 374.673478][ T36] tipc: Left network mode [ 374.680079][T11137] syzkaller0: refused to change device tx_queue_len [ 374.690499][T11053] chnl_net:caif_netlink_parms(): no params data found [ 374.974514][T11140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2304'. [ 374.988516][T11141] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 374.988885][T11141] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.2303: mark_inode_dirty error [ 374.998204][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 374.998220][ C0] EXT4-fs (loop5): initial error at time 1773081505: ext4_do_update_inode:5569: inode 15 [ 374.998279][ C0] EXT4-fs (loop5): last error at time 1773081505: ext4_do_update_inode:5569: inode 15 [ 375.067589][T11140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2304'. [ 375.425498][T11141] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 375.425768][T11141] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.2303: corrupted inode contents [ 375.489372][T11141] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 375.490335][T11141] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.2303: mark_inode_dirty error [ 375.543294][T11141] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 375.543481][T11141] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.2303: mark inode dirty (error -117) [ 375.585460][T11141] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 375.585697][T11141] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 375.612958][T11141] EXT4-fs (loop5): 1 orphan inode deleted [ 375.619621][T11141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 375.865546][T10643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.899905][T11053] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.907131][T11053] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.914305][T11053] bridge_slave_0: entered allmulticast mode [ 375.920881][T11053] bridge_slave_0: entered promiscuous mode [ 375.927728][T11053] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.945704][T11053] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.960174][T11053] bridge_slave_1: entered allmulticast mode [ 375.977592][T11053] bridge_slave_1: entered promiscuous mode [ 376.032902][ T36] hsr_slave_0: left promiscuous mode [ 376.042274][ T36] hsr_slave_1: left promiscuous mode [ 376.210916][T11175] loop3: detected capacity change from 0 to 128 [ 376.265242][T11053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.311313][T11178] loop3: detected capacity change from 0 to 256 [ 376.320518][T11053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.382583][T11053] team0: Port device team_slave_0 added [ 376.424638][T11053] team0: Port device team_slave_1 added [ 376.433811][T11184] loop3: detected capacity change from 0 to 1024 [ 376.471636][T11053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.512395][T11053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.561754][T11053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.586660][T11053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.648908][T11053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.677251][T11053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.688257][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 376.688274][ T28] audit: type=1400 audit(1773081506.645:1887): avc: denied { setopt } for pid=11194 comm="syz.5.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 377.281537][ T36] IPVS: stop unused estimator thread 0... [ 377.300618][T11053] hsr_slave_0: entered promiscuous mode [ 377.310415][T11053] hsr_slave_1: entered promiscuous mode [ 377.353563][T11211] loop3: detected capacity change from 0 to 1024 [ 377.389777][T11211] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 377.414503][T11218] __nla_validate_parse: 3 callbacks suppressed [ 377.414579][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2318'. [ 377.450394][T11211] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 377.508783][T11211] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: comm syz.3.2319: inode #4294967295: comm syz.3.2319: iget: illegal inode # [ 377.558893][T11229] loop1: detected capacity change from 0 to 512 [ 377.592368][T11053] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 377.606416][T11211] loop3: lost filesystem error report for type 5 error -117 [ 377.607295][T11211] EXT4-fs (loop3): no journal found [ 377.607405][T11229] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 377.617129][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 377.631065][T11229] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 377.635554][ C1] EXT4-fs (loop3): initial error at time 1773081507: ext4_get_journal_inode:5863 [ 377.653002][ C1] EXT4-fs (loop3): last error at time 1773081507: ext4_get_journal_inode:5863 [ 377.677610][T11211] EXT4-fs (loop3): can't get journal size [ 377.683348][T11053] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 377.695024][T11211] EXT4-fs (loop3): failed to initialize system zone (-22) [ 377.697650][T11053] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 377.702285][T11211] EXT4-fs (loop3): mount failed [ 377.711055][T11229] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 377.745388][T11229] System zones: 0-2, 18-18, 34-35 [ 377.751081][T11229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 377.765138][T11053] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 377.836916][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.858051][T11248] ================================================================== [ 377.866172][T11248] BUG: KCSAN: data-race in hrtimer_interrupt / print_tickdevice [ 377.873855][T11248] [ 377.876206][T11248] write to 0xffff888237d17b58 of 8 bytes by interrupt on cpu 1: [ 377.883857][T11248] hrtimer_interrupt+0x84/0x810 [ 377.888730][T11248] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 377.894645][T11248] sysvec_apic_timer_interrupt+0x6f/0x80 [ 377.900306][T11248] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 377.906327][T11248] kcsan_setup_watchpoint+0x404/0x410 [ 377.911738][T11248] handle_mm_fault+0xbae/0x3020 [ 377.916615][T11248] do_user_addr_fault+0x3fd/0x1050 [ 377.921756][T11248] exc_page_fault+0x62/0xa0 [ 377.926290][T11248] asm_exc_page_fault+0x26/0x30 [ 377.931166][T11248] fault_in_readable+0xad/0x170 [ 377.936077][T11248] fault_in_iov_iter_readable+0x129/0x210 [ 377.941825][T11248] generic_perform_write+0x3ce/0x490 [ 377.947139][T11248] shmem_file_write_iter+0xc5/0xf0 [ 377.952300][T11248] vfs_write+0x5a6/0x9f0 [ 377.956578][T11248] ksys_write+0xdc/0x1a0 [ 377.960835][T11248] __x64_sys_write+0x40/0x50 [ 377.965457][T11248] x64_sys_call+0x27e1/0x3020 [ 377.970176][T11248] do_syscall_64+0x12c/0x370 [ 377.974796][T11248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.980710][T11248] [ 377.983057][T11248] read to 0xffff888237d17b58 of 8 bytes by task 11248 on cpu 0: [ 377.990711][T11248] print_tickdevice+0x142/0x340 [ 377.995590][T11248] timer_list_show+0x6c/0x170 [ 378.000311][T11248] seq_read_iter+0x636/0x940 [ 378.004932][T11248] proc_reg_read_iter+0x110/0x180 [ 378.009992][T11248] copy_splice_read+0x471/0x6c0 [ 378.014857][T11248] splice_direct_to_actor+0x26e/0x670 [ 378.020254][T11248] do_splice_direct+0x119/0x1a0 [ 378.025122][T11248] do_sendfile+0x382/0x650 [ 378.029565][T11248] __x64_sys_sendfile64+0x105/0x150 [ 378.034784][T11248] x64_sys_call+0x2dc4/0x3020 [ 378.039482][T11248] do_syscall_64+0x12c/0x370 [ 378.044090][T11248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.050012][T11248] [ 378.052345][T11248] value changed: 0x00000057590032ab -> 0x000000575901a76f [ 378.059468][T11248] [ 378.061803][T11248] Reported by Kernel Concurrency Sanitizer on: [ 378.067973][T11248] CPU: 0 UID: 0 PID: 11248 Comm: syz.3.2322 Tainted: G W syzkaller #0 PREEMPT(full) [ 378.078931][T11248] Tainted: [W]=WARN [ 378.082743][T11248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.092818][T11248] ================================================================== [ 378.106504][T11053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.120082][T11053] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.166465][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.173753][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.186003][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.193185][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.311049][T11265] loop1: detected capacity change from 0 to 128 [ 378.356319][T11053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.535772][T11053] veth0_vlan: entered promiscuous mode [ 378.544033][T11053] veth1_vlan: entered promiscuous mode [ 378.563595][T11053] veth0_macvtap: entered promiscuous mode [ 378.571749][T11053] veth1_macvtap: entered promiscuous mode [ 378.584661][T11053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.597756][T11053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.610385][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.619440][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.630885][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.640229][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0