last executing test programs: 3m15.192456502s ago: executing program 3 (id=113): r0 = socket$inet6(0xa, 0x4, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5be, 0x4) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c844) write(r0, &(0x7f00000001c0)='+', 0x1) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\x1b\xfe\xe0\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87f\xac\x06\x14\xf7\xc2\xd6iPN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(r1, 0x0, &(0x7f0000000180)={0x2, 0x8}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000045c0), 0x1012e, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) fsopen(&(0x7f0000000300)='devpts\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file1\x00', 0x0, 0x10}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) 3m1.558592822s ago: executing program 4 (id=227): unshare(0x2000400) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000140)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 3m1.19867723s ago: executing program 4 (id=233): r0 = socket$inet6(0xa, 0x2, 0xfff70001) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@gettaction={0x5c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f00000001c0), 0x3, 0x4c7, &(0x7f0000001780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000540)={@id={0x2, 0x0, @c}}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b140100"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r4 = syz_io_uring_setup(0x3e3, &(0x7f00000001c0)={0x0, 0x4f4b, 0x0, 0x2, 0xffbfffff}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x10000) io_uring_enter(r4, 0x80, 0xfffffffd, 0xb, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="d29e56ee2fdd03630b5e109ba0be3d41c2f9de1c75cd804908327edec2dc2931b01a8308f8e21a473c7abadb761b756f3c4a153b3d7b437cc0fe990be4fecf955071dd5b6e9f8f8b3f2387ae2598c32e974ded8ef152d039f3fdc7f401c10094adb05d9bd40528b04c", 0x69}], 0x1) read(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000003c0)={r0, &(0x7f00000000c0)='\x02', 0x0, &(0x7f0000000280)={@align=0x2c, {0xffff, 0x2, 0x6, 0x3}}, 0x8006, &(0x7f00000002c0), &(0x7f0000000300)=0x1}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r8, &(0x7f0000001440)=[{&(0x7f0000001480)=""/125, 0x7d}], 0x1, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 3m1.096292003s ago: executing program 1 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x38, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x13, 0x1, 0x0, 0x0, @binary="2ddd70fcee40c4925b7052dc85bd5a"}]}]}, 0x38}], 0x1}, 0x0) 3m0.951382887s ago: executing program 4 (id=239): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x5}, {0xfffffffe, 0x3fc, 0x80ff}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x22, 0x2}]}, 0x140}}, 0x844) 3m0.831835509s ago: executing program 1 (id=241): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x81, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x3ff, @remote, 0xff}}, 0x0, 0x0, 0x23, 0x0, "009b59557dc1b5123c64fcc67df9901d7a2e8a8ab8af14f15749796d758da20e43d329589647ea9f6a817312d894acc8525f60c827120fe6ba22affcc0260520dbbe61e312ce83b5f61534b6d6bb6ffd"}, 0xd8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capget(&(0x7f0000feaff9)={0x20071026}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f0000000a80)) 2m57.929783287s ago: executing program 1 (id=245): setns(0xc9, 0x0) mkdir(0x0, 0x1ff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x7ffffffe, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) 2m57.875032548s ago: executing program 4 (id=247): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="b5da000000000000000000000000080000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], 0x50) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000063117c000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2m57.845381629s ago: executing program 33 (id=247): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="b5da000000000000000000000000080000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], 0x50) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000063117c000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2m57.81347604s ago: executing program 1 (id=250): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x11, 0x0, 0x0, 0x0, 0x10009, 0x861be, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x6}, 0x204, 0xeab0, 0x101, 0x0, 0x9, 0x4, 0x9, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, r0, 0xa) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400000037030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff000000008d7d1b2435ef30cdaefd91880ec3bfa100000000000007010000f8ffffffbfa400000000000007ffff00f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYRES64=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x20000400) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0xbf5}, 0x0, 0x2, 0x0, 0x3, 0x1, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r7, &(0x7f0000000140)='0fc5:1227:f', 0xb) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a0069ae00000000000000001cfa"], 0x24}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x7, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000, 0xffffffffffffffff}, 0xfffd, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4c050) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 2m57.593299945s ago: executing program 1 (id=253): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x7, 0x0, &(0x7f0000000280)='j\x00\x00\x00\x00\x00\x00', 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2m57.212260684s ago: executing program 1 (id=257): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc8241, 0x0) io_uring_enter(r0, 0x2219, 0x35a5, 0x16, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x1400, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x3b, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb8035450000140000000101110000010203040506070800000c0002000600200008000000100003000c001a0004000100"]}, 0x68}}, 0x0) 2m57.190193455s ago: executing program 34 (id=257): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc8241, 0x0) io_uring_enter(r0, 0x2219, 0x35a5, 0x16, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x1400, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x3b, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb8035450000140000000101110000010203040506070800000c0002000600200008000000100003000c001a0004000100"]}, 0x68}}, 0x0) 1m23.975676191s ago: executing program 0 (id=1258): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x90}, {0xc, 0x90, 0xfffffffffffffffe}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x0) rt_sigqueueinfo(0x0, 0xf, 0x0) 1m23.950126691s ago: executing program 0 (id=1259): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x6, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f00000001c0)=@raw=[@jmp={0x4, 0x0, 0x3, 0x1, 0x0, 0x50, 0x10}, @map_idx={0x18, 0x7cff44d1025d03a9, 0x5, 0x0, 0xf}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffd53}, 0x94) 1m23.852652534s ago: executing program 0 (id=1262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 1m23.772081596s ago: executing program 0 (id=1264): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x319804f, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8000) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x40, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5e2d6d5161ffdb78}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044804}, 0xd732828148db4cd2) (async) accept4(r1, &(0x7f0000000180)=@can, &(0x7f0000000240)=0x80, 0x80800) 1m23.726130797s ago: executing program 0 (id=1265): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000140)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@errors_continue}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x472, &(0x7f0000000540)="$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") syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x103482) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0x7fff}, 0x10040, 0x0, 0x0, 0x9, 0x20000003, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000000400)=""/150, 0x96}], 0x2}, 0x102) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2419b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x6, 0x6, 0x8, 0x9, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'vlan1\x00', 0x4}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) futex_waitv(&(0x7f0000000000), 0x0, 0x0, &(0x7f00000014c0)={0x0, 0x3938700}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 1m23.320182206s ago: executing program 0 (id=1271): ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0x5e, "23076a9f408698308557139b8a1d136317b76b545ff29aa41fb9e92a7f3abd931dae1e32db6549406558d18a373f396842106baa9c1c0df20aaa45d4a1466c9c4613802c179cf39383d44442c69e62cfc6c7711b5c9b872179d43aa994ac"}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f0000005000)) r1 = dup3(r0, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000004080), r2) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f00000040c0)={0x38, r3, 0x1, 0x70bd2d, 0x1, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x40, @time={0x1, 0x1}, 0x9, {0x1, 0x81}, 0x2, 0x1, 0x7}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000004200)=ANY=[@ANYBLOB="020000040100000000000000040004000000001e10000000000000002000000000000000"], 0x24, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r6, 0xffffffffffffffff, 0xee01) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(r6, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 1m23.313120547s ago: executing program 35 (id=1271): ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0x5e, "23076a9f408698308557139b8a1d136317b76b545ff29aa41fb9e92a7f3abd931dae1e32db6549406558d18a373f396842106baa9c1c0df20aaa45d4a1466c9c4613802c179cf39383d44442c69e62cfc6c7711b5c9b872179d43aa994ac"}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f0000005000)) r1 = dup3(r0, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000004080), r2) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f00000040c0)={0x38, r3, 0x1, 0x70bd2d, 0x1, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x40, @time={0x1, 0x1}, 0x9, {0x1, 0x81}, 0x2, 0x1, 0x7}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000004200)=ANY=[@ANYBLOB="020000040100000000000000040004000000001e10000000000000002000000000000000"], 0x24, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r6, 0xffffffffffffffff, 0xee01) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(r6, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 8.299956666s ago: executing program 6 (id=2174): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef"], 0x24}, 0x1, 0x0, 0x0, 0xffffff80}, 0x0) 7.772021329s ago: executing program 6 (id=2176): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x406, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0xc1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.576918223s ago: executing program 6 (id=2177): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, &(0x7f0000000380)={[0xfffff7feffff7fff]}, 0x0, 0x8) pselect6(0x40, &(0x7f0000000080)={0x6, 0x100000000, 0x80, 0x7f, 0x4, 0x5eb, 0x3, 0x3}, &(0x7f00000000c0)={0x9d04, 0x1, 0x4f6c, 0x5, 0x80, 0x7, 0x2, 0x5}, 0x0, 0x0, 0x0) 7.444667826s ago: executing program 6 (id=2178): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0xa30080, &(0x7f0000000500)={[{@usrquota}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@noauto_da_alloc}, {@nolazytime}, {@minixdf}, {@orlov}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x5}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@resuid}], [{@obj_role={'obj_role', 0x3d, '|pu\t&0&&\t'}}, {@context={'context', 0x3d, 'staff_u'}}]}, 0x1, 0x5ad, &(0x7f0000000b80)="$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") mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000740)=""/90) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x8000, 0x0, {{@in6=@mcast2, @in6=@local, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000, 0x0, 0x100000000000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0) 6.270466034s ago: executing program 6 (id=2189): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 5.97999986s ago: executing program 5 (id=2194): syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x4020040) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x7ffffc, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=ANY=[], 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) close(0x3) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x4}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000100000000000075420663df005b340000001100010000000000000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 5.817309764s ago: executing program 6 (id=2196): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x8, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r5, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$sg(0x0, 0x7, 0x40000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x2, 0x30, 0x7}, &(0x7f0000000040)=0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.344323905s ago: executing program 5 (id=2197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r1, 0x11c, 0x1, &(0x7f0000001240)=""/4104, &(0x7f0000000000)=0x1008) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xa0000a, &(0x7f0000000000)={[{@mblk_io_submit}, {@acl}]}, 0x21, 0x4c0, &(0x7f0000001740)="$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") lsetxattr$security_selinux(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r5) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x50, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x40}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_PKTS={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x204}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8c1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f67003000028006000c400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4000) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000500)=0x0) recvfrom(r0, &(0x7f00000004c0)=""/29, 0x1d, 0x10000, &(0x7f0000000540)=@nfc={0x27, r10, 0x1, 0x1}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="aafd000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="937b0100ef000000240012800b0001006d616373656300001400028005000d000000000005000c000000000008000500", @ANYRES32=r2, @ANYBLOB="c56092d68d40776c73b595126569328936a980e39f6ec2817a336a90e908d2d12d1115a81cc6abac619b28be8af3f77c98b9c98f4b23aea8f4a4231bc13a0f6954f5196e40aa412e593d6c4e166d9e14f6567033db5636530fc5f294dd13f5788b6e1c091266"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f00000003c0)) 4.635500352s ago: executing program 8 (id=2202): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4408b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffb70}}, './file0\x00'}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0xe8, 0xe8, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0xffff, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @mac=@random="8a8841fcc2b2", @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, {[0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x11}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x162) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009", 0xe) ioctl(r2, 0xc138fd02, &(0x7f0000000000)="0400000000000032") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.405408608s ago: executing program 5 (id=2203): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a030600000000000000000200ffff2c000480280001800e000100696d6d656469a16dfbd4a5734c81"], 0x80}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) write$cgroup_subtree(r1, 0x0, 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 4.076303105s ago: executing program 7 (id=2205): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt(r1, 0xff, 0x25, 0x0, 0x0) unshare(0x22020600) lseek(0xffffffffffffffff, 0x0, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000000c0)={0x80000000, 0x401, 0x0, 0x8, 0x2, 0x0, [{0xfffffffffffffffb, 0x7, 0x3800, '\x00', 0x82}, {0x800, 0x5, 0x3, '\x00', 0x2001}]}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_config_ext={0xc, 0x4bc}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x9}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) syz_clone(0xaca80400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.943411559s ago: executing program 8 (id=2206): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x73ce, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x9, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0002000000010000000000200001410000001c001700000000000000004574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3.563733367s ago: executing program 7 (id=2207): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}, 0xa}]}, &(0x7f0000000000)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000200)=0x84) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80080a, &(0x7f00000002c0)={[{@errors_remount}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x7db, &(0x7f0000001100)="$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") chdir(&(0x7f0000000040)='./file0\x00') 2.932504622s ago: executing program 5 (id=2208): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) 2.929506812s ago: executing program 7 (id=2209): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="9832d7fc", @ANYRES16=r0, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) unshare(0x2c020400) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) timerfd_gettime(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', 0x0}) r3 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000000300), &(0x7f0000000000)) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000280)="481d1aead6d2c882fd91af14ae4531b3c74f45e9a2fe1b9b92c634167914b7ff1507c8fd6bb9", 0x26, 0x20000000, &(0x7f00000002c0)={0xa, 0x0, 0xe, @empty, 0x5, 0x1}, 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(0x0, 0x8da6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_flash={0x33, 0x7f, './file0/../file0/file0\x00'}}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) 2.856646334s ago: executing program 5 (id=2210): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ppoll(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)={[0x2]}, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xfffffbff7ffffffa, 0x1222e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x4000000000b0000}, 0x11270, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x5, 0xc1, &(0x7f000000cf3d)=""/193, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x23}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair(0xf, 0x3, 0x2, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001540)=ANY=[@ANYRESOCT=r5, @ANYRES8=r6, @ANYBLOB="0000000000000000000000080000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000009a0eaa05a23e351541a12e8137da2500000000040000000000", @ANYRESDEC=r6], 0x48) io_setup(0x0, &(0x7f0000000200)) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r7, 0x5393, &(0x7f0000000040)=0x85) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xff, 0x8, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0xf}, 0x17660, 0x0, 0x7, 0x4, 0x81, 0x8001, 0x7fff}, 0x0, 0xff6dbfffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=@newtaction={0x14, 0x76, 0x300, 0x70bd2b, 0x25d7dbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000080000000611048000000000063519234eceff9d49459b0d16f869d00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)}, 0x0) recvmmsg(r9, &(0x7f00000044c0)=[{{0x0, 0x0, 0x0}, 0x5e}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/200, 0xc8}, {&(0x7f00000015c0)=""/106, 0x6a}, {&(0x7f00000016c0)=""/49, 0x31}, {&(0x7f0000000300)=""/202, 0xca}], 0x5}, 0x7}], 0x2, 0x2022, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'team_slave_1\x00', @random="013701329eff"}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001900010000000000000000001d01000005000d0001000000150003000000000000000000062e346aa0f998570000000015000200000000000002000003ef7506ecbef9700600000015000400000000000000000000000000000000010100000008000900", @ANYRES32=0x0, @ANYBLOB="0c000b00000000000000000008000e00", @ANYRES32=0x0, @ANYBLOB="080005"], 0x88}}, 0x0) sendfile(r0, r1, 0x0, 0x3) 2.694343918s ago: executing program 8 (id=2211): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x50) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x406, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0xc1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.406230104s ago: executing program 8 (id=2212): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, &(0x7f0000000380)={[0xfffff7feffff7fff]}, 0x0, 0x8) pselect6(0x40, &(0x7f0000000080)={0x6, 0x100000000, 0x80, 0x7f, 0x4, 0x5eb, 0x3, 0x3}, &(0x7f00000000c0)={0x9d04, 0x1, 0x4f6c, 0x5, 0x80, 0x7, 0x2, 0x5}, 0x0, 0x0, &(0x7f0000000240)={0x0}) 2.272273867s ago: executing program 8 (id=2213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newqdisc={0xa8, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x5c, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc8000000}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4b}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffff}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x100}]}}]}, 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "e303c91859734075", "9867ccd1df5a06f0c0b9410dd9641e44", "ed795d1e", "2408ac93e09963e3"}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a48000000060a010400000000000000000a0000010900010073797a31000000001400048010000180080001006c6f"], 0x70}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x100}, 0x8000) 2.096432731s ago: executing program 2 (id=2214): sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xca9ca18c98920048}, 0x8804) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x34, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x90, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x7, 0xae, 0xfffffffd, 0x2, 0x5, 0xfff}}, {0x4}}]}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffd}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x90}}, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x7835d85762bdbef9, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r5, 0x4) recvfrom(r1, &(0x7f0000000000)=""/44, 0x2c, 0x10000, &(0x7f00000000c0)=@can={0x1d, r4}, 0x80) 2.030440264s ago: executing program 2 (id=2215): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4040000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000044) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a0109000000000000ffa60a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.906673606s ago: executing program 2 (id=2216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x1000000, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 1.889176056s ago: executing program 2 (id=2217): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0x9, @loopback, 0x1}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d01000000a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) 1.876220027s ago: executing program 5 (id=2218): socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x44) r4 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x3}, 0xe) syz_open_pts(r4, 0x1) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) syz_emit_ethernet(0x73, &(0x7f0000000700)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x3d, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x0, 0x4, 0x0, 0x3, 0x28, 0x2}], "13d86558da"}}}}}}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x3, 0x400000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0dff"], 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) io_uring_enter(r7, 0x2219, 0x7721, 0x17, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.668446801s ago: executing program 7 (id=2219): syz_emit_ethernet(0xfdef, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x2000000000000062, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (fail_nth: 16) 632.109456ms ago: executing program 7 (id=2220): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000300)='E', 0x1, 0x47ecf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4f000, 0x100000001}) 435.509251ms ago: executing program 7 (id=2221): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000140)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@errors_continue}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x472, &(0x7f0000000540)="$eJzs3M9vFFUcAPDvzLZFfrbiTxC1SoyNP1paUDl40WjiAaOJHvBmbQshFGpoTYQQqcbgxcSQ6Fk9mvgXePNi1JOJV70bEqJcQE81MztTdpfutoVlt7CfTzLsezNv9r1v59ebebME0LOGs3+SiG0R8UdEDFaz9QWGqx9XL5+d+vfy2akklpbe+jvJy125fHaqLFqut7XIjKQR6adJUUm9+dNnjk/Ozs6cKvJjCyfeH5s/febZYycmj84cnTk5cfDggf3jLzw/8Vxb4sziurL7o7k9u15758LrU4cvvPfL91l7txXLa+NosKnhc82Gs8D/Wcotz0yrH0+sO4KNbXtNOunrYkNYl0pEZJurPz/+B6MS1zbeYLz6SVcbB9xS2bWpxYVtcQm4gyXR7RYA3VFe6LP733LqUNdjQ7j0UvUGKIv7ajFVl/SVt+r5vdH2W1T/cEQcXvzv62yK1s8hAADa4vOprw7FMyv1/9K4v6bcjmIMZSgi7o6InRFxTzEocl9EXvaBiHhw9SrT2kzj0ND1/Z/04g0HtwZZ/+/FYmyrvv+33MyhSpHbnsffnxw5Njuzr/ibjET/piw/3qKOH1/5/Ytmy2r7f9mU1V/2BYt2XOxreEA3PbkwmXdK2+DSxxG7+1aKP1keCUgiYldE7F7fV+8oE8ee+m5Ps0Krx99CG8aZlr6NeLK6/RejIf5S0np8cuyumJ3ZN1buFdf79bfzbzar/6bib4Ns+2+p3/8biwwlteO18+uv4/yfnzW9p7nR/X8geTtfd6CY9+HkwsKp8YiB5FCer5s/cW3dMl+Wz+If2bvy8b+zWCeL/6GIyHbihyPikYh4tGj7YxHxeETsbRH/zy83X1Yf/+Zt3dj+0w3nv835kuX9v2H7rz9ROf7TDyvX/s27a9v+B/LUSDEnP/+tYq0NvMk/HwAAANwW0vwd+CQdXU6n6eho9R3+e2NLOjs3v/D0kbkPTk5X35Ufiv60fNI1WPM8dDxZLL6xmp8onhWXy/cXz42/rGzO86NTc7PTXY4det3WJsd/5q9Kt1sH3HIrjaNNDHShIUDHNR7/aX323BudbAzQUU3fo9nS2XYAnbfKe3Rpp9oBdJ7/rwV610rH/7mGvLEAuDO5/kPvcvxD7+oLJwHoVQ596Emr/Ui+cpO//Ze47RLJ2gpH2v2mboxEf0S05QsHNkQ4RaLbZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+D8AAP//sYTqKA==") syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x103482) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0x7fff}, 0x10040, 0x0, 0x0, 0x9, 0x20000003, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000000400)=""/150, 0x96}], 0x2}, 0x102) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2419b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x6, 0x6, 0x8, 0x9, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) (fail_nth: 1) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'vlan1\x00', 0x4}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) futex_waitv(&(0x7f0000000000), 0x0, 0x0, &(0x7f00000014c0)={0x0, 0x3938700}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) 382.851471ms ago: executing program 8 (id=2222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r1, 0x11c, 0x1, &(0x7f0000001240)=""/4104, &(0x7f0000000000)=0x1008) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xa0000a, &(0x7f0000000000)={[{@mblk_io_submit}, {@acl}]}, 0x21, 0x4c0, &(0x7f0000001740)="$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") lsetxattr$security_selinux(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r5) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x50, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x40}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_PKTS={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x204}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8c1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f67003000028006000c400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4000) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000500)=0x0) recvfrom(r0, &(0x7f00000004c0)=""/29, 0x1d, 0x10000, &(0x7f0000000540)=@nfc={0x27, r10, 0x1, 0x1}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="aafd000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="937b0100ef000000240012800b0001006d616373656300001400028005000d000000000005000c000000000008000500", @ANYRES32=r2, @ANYBLOB="c56092d68d40776c73b595126569328936a980e39f6ec2817a336a90e908d2d12d1115a81cc6abac619b28be8af3f77c98b9c98f4b23aea8f4a4231bc13a0f6954f5196e40aa412e593d6c4e166d9e14f6567033db5636530fc5f294dd13f5788b6e1c091266"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f00000003c0)) 115.269478ms ago: executing program 2 (id=2223): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000"], 0x28}, 0x1, 0xfffe}, 0x0) 0s ago: executing program 2 (id=2224): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000001740)='./file0\x00', 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002280)={0x0, 0x0}, &(0x7f00000022c0)=0xc) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r2) move_mount(r2, 0x0, r2, 0x0, 0x65) (async) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) epoll_create1(0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r3, &(0x7f0000000140)=""/50, 0x32, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000101010100000000000000000a00000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x4000) (async) mount$bpf(0x0, &(0x7f0000002200)='./file0\x00', &(0x7f0000002240), 0x415, &(0x7f0000000000)={[{@uid={'uid', 0x3d, r1}}], [{@func={'func', 0x3d, 'FILE_CHECK'}}]}) kernel console output (not intermixed with test programs): loop2): initial error at time 1786423357: ext4_iget_extra_inode:5180: inode 15 [ 182.525662][ C0] EXT4-fs (loop2): last error at time 1786423357: ext4_iget_extra_inode:5180: inode 15 [ 182.673683][ T8805] loop2: lost filesystem error report for type 5 error -117 [ 182.677642][ T8805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.706028][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1504'. [ 182.765049][ T8788] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 182.894103][ T8817] loop6: detected capacity change from 0 to 1024 [ 182.900814][ T8788] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1504: corrupted xattr block 6: invalid header [ 183.005900][ T8788] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 183.060956][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.107368][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.119936][ T8824] SELinux: policydb string does not match my string SE Linux [ 183.135878][ T8824] SELinux: failed to load policy [ 183.359691][ T8846] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1520'. [ 183.407935][ T8846] loop7: detected capacity change from 0 to 1024 [ 183.417191][ T8846] EXT4-fs: Ignoring removed orlov option [ 183.445744][ T8846] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.591341][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.648186][ T8857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 183.657110][ T8857] System zones: 1-12 [ 183.668478][ T8857] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1522: error while reading EA inode 32 err=-116 [ 183.681264][ T8857] loop7: lost filesystem error report for type 5 error -117 [ 183.681495][ T8857] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1522: error while reading EA inode 32 err=-116 [ 183.688839][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 183.688860][ C0] EXT4-fs (loop7): initial error at time 1786423358: ext4_xattr_inode_iget:446 [ 183.688880][ C0] EXT4-fs (loop7): last error at time 1786423358: ext4_xattr_inode_iget:446 [ 183.744956][ T8857] loop7: lost filesystem error report for type 5 error -117 [ 183.745134][ T8857] EXT4-fs (loop7): 1 orphan inode deleted [ 183.761692][ T8857] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.808874][ T8857] SET target dimension over the limit! [ 183.860167][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.954145][ T8870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.987126][ T8870] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.023334][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.300504][ T8883] set_capacity_and_notify: 2 callbacks suppressed [ 184.300828][ T8883] loop7: detected capacity change from 0 to 256 [ 185.050172][ T8908] zero sized request [ 185.074298][ T837] IPVS: starting estimator thread 0... [ 185.176059][ T8911] IPVS: using max 2688 ests per chain, 134400 per kthread [ 185.225812][ T8917] sctp: [Deprecated]: syz.5.1546 (pid 8917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.225812][ T8917] Use struct sctp_sack_info instead [ 185.405891][ T8924] tipc: Enabling of bearer rejected, media not registered [ 185.478447][ T8931] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1552'. [ 185.678856][ T8938] loop8: detected capacity change from 0 to 512 [ 185.711209][ T8938] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1555: invalid indirect mapped block 256 (level 2) [ 185.848590][ T8938] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 185.858227][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 185.874147][ C0] EXT4-fs (loop8): initial error at time 1786423360: ext4_free_branches:1023: inode 11 [ 185.883936][ C0] EXT4-fs (loop8): last error at time 1786423360: ext4_free_branches:1023: inode 11 [ 185.914155][ T8944] loop5: detected capacity change from 0 to 512 [ 185.945137][ T8938] EXT4-fs (loop8): 2 truncates cleaned up [ 185.957249][ T8938] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.133298][ T8944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 186.149314][ T8944] System zones: 1-12 [ 186.181094][ T8944] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1556: error while reading EA inode 32 err=-116 [ 186.226242][ T8944] loop5: lost filesystem error report for type 5 error -117 [ 186.226348][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 186.240163][ C0] EXT4-fs (loop5): initial error at time 1786423360: ext4_xattr_inode_iget:446 [ 186.249161][ C0] EXT4-fs (loop5): last error at time 1786423360: ext4_xattr_inode_iget:446 [ 186.271917][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.284168][ T8949] loop2: detected capacity change from 0 to 8192 [ 186.290876][ T8944] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1556: error while reading EA inode 32 err=-116 [ 186.306095][ T8949] netlink: 'syz.2.1558': attribute type 1 has an invalid length. [ 186.315099][ T8944] loop5: lost filesystem error report for type 5 error -117 [ 186.319494][ T8944] EXT4-fs (loop5): 1 orphan inode deleted [ 186.334392][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 186.334410][ T28] audit: type=1400 audit(1786423361.025:2343): avc: denied { map } for pid=8948 comm="syz.2.1558" path="socket:[24183]" dev="sockfs" ino=24183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 186.376903][ T8944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.457079][ T8944] SET target dimension over the limit! [ 186.482203][ T8953] tipc: Started in network mode [ 186.487946][ T8953] tipc: Node identity b653a6b1bbe8, cluster identity 4711 [ 186.496671][ T8953] tipc: Enabled bearer , priority 0 [ 186.518587][ T8953] syzkaller0: mtu less than device minimum [ 186.520609][ T3960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.549592][ T8953] loop2: detected capacity change from 0 to 512 [ 186.568298][ T8953] ext4: Bad value for 'resgid' [ 186.573712][ T8953] ext4: Bad value for 'resgid' [ 186.695443][ T8975] loop5: detected capacity change from 0 to 512 [ 186.712058][ T8972] loop8: detected capacity change from 0 to 512 [ 186.723364][ T8975] EXT4-fs (loop5): 1 truncate cleaned up [ 186.730253][ T8975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.731137][ T8972] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.765203][ T28] audit: type=1400 audit(1786423361.431:2344): avc: denied { write } for pid=8973 comm="syz.5.1570" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.796525][ T28] audit: type=1400 audit(1786423361.431:2345): avc: denied { write } for pid=8973 comm="syz.5.1570" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.818411][ T28] audit: type=1400 audit(1786423361.431:2346): avc: denied { rename } for pid=8973 comm="syz.5.1570" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.841996][ T8971] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1568'. [ 186.867780][ T8972] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.882171][ T8972] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.921761][ T8972] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1569: corrupted xattr block 6: invalid header [ 186.943722][ T8972] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 186.950505][ T3960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.970113][ T8972] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1569: corrupted xattr block 6: invalid header [ 186.989828][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1569'. [ 187.000468][ T8972] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 187.019933][ T8989] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1575'. [ 187.037909][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 187.043968][ T8993] loop5: detected capacity change from 0 to 128 [ 187.055753][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 187.066656][ T8991] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1576'. [ 187.143566][ T9007] FAULT_INJECTION: forcing a failure. [ 187.143566][ T9007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.188930][ T9007] CPU: 1 UID: 0 PID: 9007 Comm: syz.7.1580 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 187.188976][ T9007] Tainted: [W]=WARN [ 187.188982][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.188993][ T9007] Call Trace: [ 187.188998][ T9007] [ 187.189004][ T9007] __dump_stack+0x1d/0x30 [ 187.189032][ T9007] dump_stack_lvl+0x95/0xd0 [ 187.189077][ T9007] dump_stack+0x15/0x1b [ 187.189095][ T9007] should_fail_ex+0x25e/0x270 [ 187.189121][ T9007] should_fail+0xb/0x20 [ 187.189191][ T9007] should_fail_usercopy+0x1a/0x20 [ 187.189221][ T9007] strncpy_from_user+0x27/0x250 [ 187.189250][ T9007] path_getxattrat+0xae/0x2b0 [ 187.189370][ T9007] __x64_sys_fgetxattr+0x59/0x70 [ 187.189476][ T9007] x64_sys_call+0x2da3/0x3020 [ 187.189496][ T9007] do_syscall_64+0x136/0x3c0 [ 187.189566][ T9007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.189590][ T9007] RIP: 0033:0x7ffb461ae0d9 [ 187.189630][ T9007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.189697][ T9007] RSP: 002b:00007ffb44c07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 187.189718][ T9007] RAX: ffffffffffffffda RBX: 00007ffb46435fa0 RCX: 00007ffb461ae0d9 [ 187.189737][ T9007] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 187.189754][ T9007] RBP: 00007ffb44c07090 R08: 0000000000000000 R09: 0000000000000000 [ 187.189771][ T9007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.189820][ T9007] R13: 00007ffb46436038 R14: 00007ffb46435fa0 R15: 00007fff0d8e6508 [ 187.189846][ T9007] [ 187.216731][ T9016] sctp: [Deprecated]: syz.6.1581 (pid 9016) Use of int in maxseg socket option. [ 187.216731][ T9016] Use struct sctp_assoc_value instead [ 187.510029][ T28] audit: type=1400 audit(1786423362.115:2347): avc: denied { write } for pid=9031 comm="syz.2.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 187.599397][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.699229][ T3411] tipc: Node number set to 230401713 [ 188.208554][ T28] audit: type=1400 audit(1786423362.724:2348): avc: denied { bind } for pid=9049 comm="syz.8.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 188.231683][ T9054] loop6: detected capacity change from 0 to 1024 [ 188.245421][ T9054] EXT4-fs: Ignoring removed bh option [ 188.294954][ T9054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 188.314082][ T28] audit: type=1400 audit(1786423362.854:2349): avc: denied { write } for pid=9053 comm="syz.6.1597" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.509195][ T28] audit: type=1400 audit(1786423362.909:2350): avc: denied { write } for pid=9053 comm="syz.6.1597" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.234101][ T4404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 191.124996][ T9097] sctp: [Deprecated]: syz.6.1607 (pid 9097) Use of int in maxseg socket option. [ 191.124996][ T9097] Use struct sctp_assoc_value instead [ 191.248282][ T9102] __nla_validate_parse: 7 callbacks suppressed [ 191.248295][ T9102] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1606'. [ 191.555950][ T28] audit: type=1400 audit(1786423365.845:2351): avc: denied { read } for pid=9109 comm="syz.5.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 191.627839][ T837] hid (null): unknown global tag 0xd [ 191.638108][ T837] hid-generic 0007:000E:0002.0001: unexpected long global item [ 191.645798][ T9125] loop2: detected capacity change from 0 to 1024 [ 191.657462][ T837] hid-generic 0007:000E:0002.0001: probe with driver hid-generic failed with error -22 [ 191.658995][ T9125] EXT4-fs warning (device loop2): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop2. [ 191.873716][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1620'. [ 191.896682][ T28] audit: type=1400 audit(1786423366.168:2352): avc: denied { mounton } for pid=9133 comm="syz.8.1620" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 192.037721][ T9136] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1621'. [ 192.080777][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1621'. [ 192.110552][ T28] audit: type=1400 audit(1786423366.371:2353): avc: denied { read } for pid=9135 comm="syz.8.1621" name="trace" dev="tracefs" ino=2150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 192.155979][ T28] audit: type=1400 audit(1786423366.371:2354): avc: denied { ioctl } for pid=9135 comm="syz.8.1621" path="/61/tracefs_dir/trace" dev="tracefs" ino=2150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 192.294020][ T9154] sg_read: process 166 (syz.8.1629) changed security contexts after opening file descriptor, this is not allowed. [ 192.306306][ T9144] loop2: detected capacity change from 0 to 512 [ 192.313088][ T9144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.331836][ T9144] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 192.342824][ T9144] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 192.359484][ T9144] EXT4-fs (loop2): Invalid default hash set in the superblock [ 192.418571][ T9160] loop5: detected capacity change from 0 to 512 [ 192.566272][ T9160] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.579013][ T9160] EXT4-fs (loop5): 1 truncate cleaned up [ 192.585495][ T9160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.684965][ T28] audit: type=1400 audit(1786423366.861:2355): avc: denied { write } for pid=9159 comm="syz.5.1632" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.725685][ T9171] hub 8-0:1.0: USB hub found [ 192.748159][ T9171] hub 8-0:1.0: 8 ports detected [ 192.759796][ T3960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.812439][ T9171] loop7: detected capacity change from 0 to 256 [ 192.881611][ T28] audit: type=1400 audit(1786423367.073:2356): avc: denied { module_load } for pid=9165 comm="syz.7.1634" path="/232/file0/bus" dev="loop7" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 192.941135][ T9171] Invalid ELF header magic: != ELF [ 193.207034][ T9184] loop7: detected capacity change from 0 to 1024 [ 193.231673][ T9195] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1645'. [ 193.254637][ T9184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.276359][ T28] audit: type=1400 audit(1786423367.433:2357): avc: denied { write } for pid=9183 comm="syz.7.1640" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.278175][ T9184] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 193.368699][ T9206] loop5: detected capacity change from 0 to 164 [ 193.375545][ T9191] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.1643'. [ 193.422627][ T28] audit: type=1400 audit(1786423367.571:2358): avc: denied { getopt } for pid=9190 comm="syz.8.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.576546][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1652'. [ 193.599813][ T28] audit: type=1400 audit(1786423367.738:2359): avc: denied { setopt } for pid=9217 comm="syz.8.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 193.642846][ T9213] loop6: detected capacity change from 0 to 512 [ 193.652288][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1651'. [ 193.667310][ T9213] EXT4-fs: dax option not supported [ 193.767543][ T9226] loop2: detected capacity change from 0 to 1024 [ 193.803589][ T9226] EXT4-fs: inline encryption not supported [ 193.817977][ T9226] EXT4-fs: Ignoring removed bh option [ 193.829732][ T9231] Unsupported NM flag settings (240) [ 193.836639][ T9226] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 193.881165][ T9226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.071366][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.283845][ T9249] sctp: [Deprecated]: syz.5.1663 (pid 9249) Use of int in maxseg socket option. [ 194.283845][ T9249] Use struct sctp_assoc_value instead [ 194.587794][ T9257] netlink: 'syz.6.1666': attribute type 1 has an invalid length. [ 194.610346][ T9257] bond2: entered promiscuous mode [ 194.625820][ T9257] bond2: entered allmulticast mode [ 194.632179][ T9257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.642350][ T9261] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 194.658145][ T9257] erspan1: entered allmulticast mode [ 194.668203][ T9257] bond2: (slave erspan1): making interface the new active one [ 194.676212][ T9257] erspan1: entered promiscuous mode [ 194.682380][ T9257] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 194.692948][ T9261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1793 sclass=netlink_tcpdiag_socket pid=9261 comm=syz.2.1667 [ 194.724508][ T9261] netlink: 'syz.2.1667': attribute type 2 has an invalid length. [ 194.747963][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 194.759520][ T9268] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1671'. [ 194.760114][ T28] audit: type=1400 audit(1786423368.818:2360): avc: denied { append } for pid=9267 comm="syz.6.1671" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 194.794902][ T9261] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 194.844638][ T28] audit: type=1400 audit(1786423368.818:2361): avc: denied { ioctl } for pid=9267 comm="syz.6.1671" path="socket:[25680]" dev="sockfs" ino=25680 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 194.952575][ T9279] loop8: detected capacity change from 0 to 512 [ 194.996199][ T9279] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.027543][ T9279] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.042978][ T9279] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1674: corrupted xattr block 6: invalid header [ 195.056310][ T9279] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 195.065460][ T9279] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1674: corrupted xattr block 6: invalid header [ 195.085966][ T9279] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 195.212143][ T9297] loop2: detected capacity change from 0 to 512 [ 195.226668][ T9299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.247536][ T9299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.263022][ T9297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 195.271159][ T9297] System zones: 1-12 [ 195.275738][ T9297] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1681: error while reading EA inode 32 err=-116 [ 195.288290][ T9297] loop2: lost filesystem error report for type 5 error -117 [ 195.289096][ T9297] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1681: error while reading EA inode 32 err=-116 [ 195.296497][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 195.296518][ C1] EXT4-fs (loop2): initial error at time 1786423369: ext4_xattr_inode_iget:446 [ 195.296535][ C1] EXT4-fs (loop2): last error at time 1786423369: ext4_xattr_inode_iget:446 [ 195.333024][ T9297] loop2: lost filesystem error report for type 5 error -117 [ 195.334621][ T9297] EXT4-fs (loop2): 1 orphan inode deleted [ 195.371786][ T9297] SET target dimension over the limit! [ 195.445105][ T9273] EXT4-fs: Ignoring removed bh option [ 195.471188][ T9303] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 195.489899][ T9303] System zones: 1-12 [ 195.503685][ T9303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1683: error while reading EA inode 32 err=-116 [ 195.523751][ T9303] loop2: lost filesystem error report for type 5 error -117 [ 195.523962][ T9303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1683: error while reading EA inode 32 err=-116 [ 195.531323][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 195.531354][ C0] EXT4-fs (loop2): initial error at time 1786423369: ext4_xattr_inode_iget:446 [ 195.531378][ C0] EXT4-fs (loop2): last error at time 1786423369: ext4_xattr_inode_iget:446 [ 195.567917][ T9303] loop2: lost filesystem error report for type 5 error -117 [ 195.568214][ T9303] EXT4-fs (loop2): 1 orphan inode deleted [ 195.592306][ T9303] SET target dimension over the limit! [ 196.293472][ T9326] sctp: [Deprecated]: syz.7.1690 (pid 9326) Use of int in maxseg socket option. [ 196.293472][ T9326] Use struct sctp_assoc_value instead [ 196.332382][ T7919] EXT4-fs unmount: 8 callbacks suppressed [ 196.332400][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.440752][ T9332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 196.449026][ T9332] System zones: 1-12 [ 196.454075][ T9332] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1693: error while reading EA inode 32 err=-116 [ 196.469079][ T9332] loop8: lost filesystem error report for type 5 error -117 [ 196.469283][ T9332] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1693: error while reading EA inode 32 err=-116 [ 196.476632][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 196.476646][ C1] EXT4-fs (loop8): initial error at time 1786423370: ext4_xattr_inode_iget:446 [ 196.476666][ C1] EXT4-fs (loop8): last error at time 1786423370: ext4_xattr_inode_iget:446 [ 196.513610][ T9332] loop8: lost filesystem error report for type 5 error -117 [ 196.513791][ T9332] EXT4-fs (loop8): 1 orphan inode deleted [ 196.527500][ T9332] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.546730][ T9332] SET target dimension over the limit! [ 196.603553][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.959462][ T9358] __nla_validate_parse: 5 callbacks suppressed [ 196.959480][ T9358] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1703'. [ 197.037588][ T9360] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.089219][ T9360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.131679][ T9360] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.148050][ T9364] set_capacity_and_notify: 5 callbacks suppressed [ 197.148145][ T9364] loop7: detected capacity change from 0 to 512 [ 197.177424][ T9360] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.1704: corrupted xattr block 6: invalid header [ 197.227202][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 197.246305][ T9364] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 197.258951][ T9360] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 197.273146][ T9364] System zones: 1-12 [ 197.277378][ T9360] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.1704: corrupted xattr block 6: invalid header [ 197.290820][ T9364] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1705: error while reading EA inode 32 err=-116 [ 197.305795][ T9364] loop7: lost filesystem error report for type 5 error -117 [ 197.306001][ T9364] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1705: error while reading EA inode 32 err=-116 [ 197.314632][ T9360] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 197.325647][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 197.341019][ C1] EXT4-fs (loop7): initial error at time 1786423371: ext4_xattr_inode_iget:446 [ 197.349994][ C1] EXT4-fs (loop7): last error at time 1786423371: ext4_xattr_inode_iget:446 [ 197.358891][ T9364] loop7: lost filesystem error report for type 5 error -117 [ 197.359897][ T9364] EXT4-fs (loop7): 1 orphan inode deleted [ 197.373554][ T9364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.407113][ T9364] SET target dimension over the limit! [ 197.464820][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.484927][ T9368] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1707'. [ 197.567761][ T9372] bridge0: port 3(vlan0) entered blocking state [ 197.574543][ T9372] bridge0: port 3(vlan0) entered disabled state [ 197.580953][ T9372] vlan0: entered allmulticast mode [ 197.586160][ T9372] geneve0: entered allmulticast mode [ 197.592380][ T9372] vlan0: entered promiscuous mode [ 197.597489][ T9372] geneve0: entered promiscuous mode [ 197.660414][ T9376] loop8: detected capacity change from 0 to 512 [ 197.685976][ T9376] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.718626][ T9382] loop6: detected capacity change from 0 to 512 [ 197.734929][ T9376] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.751171][ T9376] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.752612][ T9382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.774158][ T9382] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.785476][ T9376] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1710: corrupted xattr block 6: invalid header [ 197.799448][ T9376] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 197.808490][ T9376] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1710: corrupted xattr block 6: invalid header [ 197.823132][ T9376] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 197.834954][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1710'. [ 197.856228][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.890338][ T9388] loop2: detected capacity change from 0 to 512 [ 197.892174][ T4404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.914829][ T9388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 197.936019][ T9388] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.1714: Unimplemented hash flags: 0x0001 [ 197.948960][ T9388] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1714: Corrupt directory, running e2fsck is recommended [ 197.970375][ T9388] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.1714: path /367/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 197.992876][ T9392] sctp: [Deprecated]: syz.6.1715 (pid 9392) Use of int in maxseg socket option. [ 197.992876][ T9392] Use struct sctp_assoc_value instead [ 198.112752][ T9388] syz.2.1714 (9388) used greatest stack depth: 8888 bytes left [ 198.124233][ T9398] loop6: detected capacity change from 0 to 512 [ 198.144589][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.153988][ T9398] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 198.190654][ T9398] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #11: comm syz.6.1717: corrupted in-inode xattr: invalid ea_ino [ 198.208876][ T9398] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 198.209172][ T9398] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1717: couldn't read orphan inode 11 (err -117) [ 198.218440][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 198.218465][ C0] EXT4-fs (loop6): initial error at time 1786423372: ext4_iget_extra_inode:5180: inode 11 [ 198.218506][ C0] EXT4-fs (loop6): last error at time 1786423372: ext4_iget_extra_inode:5180: inode 11 [ 198.258253][ T9401] loop2: detected capacity change from 0 to 512 [ 198.285176][ T9398] loop6: lost filesystem error report for type 5 error -117 [ 198.285759][ T9398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.306396][ T9401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0200-000000000000 r/w without journal. Quota mode: writeback. [ 198.319364][ T9401] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.340343][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 198.340360][ T28] audit: type=1400 audit(1786423372.255:2365): avc: denied { write } for pid=9400 comm="syz.2.1718" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.368525][ T9401] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1718: bg 0: block 304: padding at end of block bitmap is not set [ 198.383468][ T9401] EXT4-fs (loop2): Remounting filesystem read-only [ 198.390423][ T9401] Quota error (device loop2): write_blk: dquota write failed [ 198.394856][ T4404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.398111][ T9401] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 198.415979][ T9401] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 198.437634][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0200-000000000000. [ 198.489062][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.544595][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1722'. [ 198.574584][ T9416] loop2: detected capacity change from 0 to 512 [ 198.592702][ T9416] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.626690][ T9416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.665528][ T28] audit: type=1400 audit(1786423372.591:2366): avc: denied { connect } for pid=9414 comm="syz.8.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.685945][ T9416] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.705447][ T9416] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.1724: corrupted xattr block 6: invalid header [ 198.730959][ T9416] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 198.740147][ T28] audit: type=1400 audit(1786423372.652:2367): avc: denied { read } for pid=9414 comm="syz.8.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.759803][ T9416] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.1724: corrupted xattr block 6: invalid header [ 198.773451][ T9416] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 198.826393][ T9429] netlink: 'syz.5.1727': attribute type 21 has an invalid length. [ 198.835632][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1724'. [ 198.907668][ T28] audit: type=1400 audit(1786423372.835:2368): avc: denied { read } for pid=9436 comm="syz.6.1730" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.948839][ T9442] loop5: detected capacity change from 0 to 512 [ 198.955911][ T9442] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.974620][ T9442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.993304][ T9442] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.004440][ T9442] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.1732: corrupted xattr block 6: invalid header [ 199.018149][ T9442] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 199.027344][ T9447] team0: Port device syz_tun added [ 199.028785][ T9442] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.1732: corrupted xattr block 6: invalid header [ 199.046171][ T9442] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 199.057302][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1732'. [ 199.403233][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.430807][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1741'. [ 199.468148][ T28] audit: type=1400 audit(1786423373.395:2369): avc: denied { mount } for pid=9466 comm="syz.2.1741" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 199.496218][ T9467] netdevsim netdevsim2 ì: renamed from netdevsim0 (while UP) [ 199.502318][ T28] audit: type=1400 audit(1786423373.425:2370): avc: denied { remount } for pid=9466 comm="syz.2.1741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 199.565851][ T28] audit: type=1400 audit(1786423373.475:2371): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 199.590155][ T9476] netlink: 'syz.2.1745': attribute type 4 has an invalid length. [ 199.624841][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1746'. [ 199.659322][ T9470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.668010][ T9470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.684420][ T3960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.741298][ T9494] loop7: detected capacity change from 0 to 512 [ 200.802241][ T9494] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.837804][ T9494] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.880129][ T9499] loop8: detected capacity change from 0 to 128 [ 200.888200][ T9494] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.917307][ T9499] FAT-fs (loop8): bogus number of reserved sectors [ 200.939009][ T9494] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.1751: corrupted xattr block 6: invalid header [ 200.967232][ T9499] FAT-fs (loop8): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 201.206037][ T9499] FAT-fs (loop8): Can't find a valid FAT filesystem [ 201.240419][ T9494] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 201.249712][ T9494] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.1751: corrupted xattr block 6: invalid header [ 201.916221][ T9494] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 202.042238][ T9504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.267744][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1751'. [ 202.342463][ T9512] netlink: 'syz.6.1756': attribute type 1 has an invalid length. [ 202.405217][ T9517] set_capacity_and_notify: 2 callbacks suppressed [ 202.405229][ T9517] loop8: detected capacity change from 0 to 512 [ 202.420666][ T9512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.424201][ T9517] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 202.441356][ T9517] EXT4-fs (loop8): orphan cleanup on readonly fs [ 202.448835][ T9517] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.1757: bad orphan inode 15 [ 202.472962][ T9517] loop8: lost filesystem error report for type 5 error -117 [ 202.473082][ T9517] ext4_test_bit(bit=14, block=18) = 1 [ 202.480465][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 202.480484][ C1] EXT4-fs (loop8): initial error at time 1786423376: ext4_orphan_get:1425 [ 202.480512][ C1] EXT4-fs (loop8): last error at time 1786423376: ext4_orphan_get:1425 [ 202.509442][ T9517] is_bad_inode(inode)=0 [ 202.510576][ T9519] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 202.513667][ T9517] NEXT_ORPHAN(inode)=1023 [ 202.513678][ T9517] max_ino=32 [ 202.513684][ T9517] i_nlink=0 [ 202.525930][ T9517] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #15: comm syz.8.1757: corrupted xattr block 19: e_value size too large [ 202.528678][ T3960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.530629][ T9517] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.564074][ T9517] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 202.582607][ T9517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 202.594964][ T9512] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 202.615089][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.652457][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.672646][ T9527] loop6: detected capacity change from 0 to 512 [ 202.684057][ T9527] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.713989][ T9534] loop5: detected capacity change from 0 to 512 [ 202.716362][ T9536] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1763'. [ 202.756967][ T9534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 202.772075][ T9527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.774074][ T9534] System zones: 1-12 [ 202.789044][ T9527] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.800306][ T9527] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.1762: corrupted xattr block 6: invalid header [ 202.813106][ T9534] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1764: error while reading EA inode 32 err=-116 [ 202.832277][ T9527] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 202.852689][ T9547] FAULT_INJECTION: forcing a failure. [ 202.852689][ T9547] name failslab, interval 1, probability 0, space 0, times 0 [ 202.873111][ T9527] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.1762: corrupted xattr block 6: invalid header [ 202.886344][ T9534] loop5: lost filesystem error report for type 5 error -117 [ 202.886640][ T9534] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1764: error while reading EA inode 32 err=-116 [ 202.897199][ T9547] CPU: 1 UID: 0 PID: 9547 Comm: syz.7.1767 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 202.897287][ T9547] Tainted: [W]=WARN [ 202.897310][ T9547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.897345][ T9547] Call Trace: [ 202.897363][ T9547] [ 202.897381][ T9547] __dump_stack+0x1d/0x30 [ 202.897510][ T9547] dump_stack_lvl+0x95/0xd0 [ 202.897568][ T9547] dump_stack+0x15/0x1b [ 202.897672][ T9547] should_fail_ex+0x25e/0x270 [ 202.897760][ T9547] should_failslab+0x8c/0xb0 [ 202.897828][ T9547] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 202.897892][ T9547] ? security_file_alloc+0x32/0xf0 [ 202.897968][ T9547] ? security_file_alloc+0x32/0xf0 [ 202.898078][ T9547] security_file_alloc+0x32/0xf0 [ 202.898104][ T9547] init_file+0x5b/0x1b0 [ 202.898163][ T9547] alloc_empty_file+0x85/0x1e0 [ 202.898302][ T9547] path_openat+0x54/0x2000 [ 202.898360][ T9547] ? __rcu_read_unlock+0x4e/0x70 [ 202.898438][ T9547] ? terminate_walk+0x1d5/0x200 [ 202.898517][ T9547] ? path_openat+0x1ae6/0x2000 [ 202.898604][ T9547] ? _parse_integer_limit+0x177/0x1a0 [ 202.898689][ T9547] do_file_open+0x16c/0x290 [ 202.898802][ T9547] do_open_execat+0xab/0x240 [ 202.898897][ T9547] alloc_bprm+0x24/0x430 [ 202.898945][ T9547] do_execveat_common+0x110/0x8a0 [ 202.899000][ T9547] __x64_sys_execveat+0x76/0xa0 [ 202.899090][ T9547] x64_sys_call+0x2a33/0x3020 [ 202.899223][ T9547] do_syscall_64+0x136/0x3c0 [ 202.899303][ T9547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.899366][ T9547] RIP: 0033:0x7ffb461ae0d9 [ 202.899411][ T9547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.899551][ T9547] RSP: 002b:00007ffb44c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 202.899643][ T9547] RAX: ffffffffffffffda RBX: 00007ffb46435fa0 RCX: 00007ffb461ae0d9 [ 202.899693][ T9547] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 202.899735][ T9547] RBP: 00007ffb44c07090 R08: 0000000000001000 R09: 0000000000000000 [ 202.899915][ T9547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.899957][ T9547] R13: 00007ffb46436038 R14: 00007ffb46435fa0 R15: 00007fff0d8e6508 [ 202.900029][ T9547] [ 202.906233][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 202.906274][ C0] EXT4-fs (loop5): initial error at time 1786423376: ext4_xattr_inode_iget:446 [ 202.906304][ C0] EXT4-fs (loop5): last error at time 1786423376: ext4_xattr_inode_iget:446 [ 202.936123][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1762'. [ 202.965365][ T9527] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 203.148270][ T9534] loop5: lost filesystem error report for type 5 error -117 [ 203.186613][ T9534] EXT4-fs (loop5): 1 orphan inode deleted [ 203.208183][ T9534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.280883][ T9534] SET target dimension over the limit! [ 203.289873][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1770'. [ 203.321155][ T9564] loop8: detected capacity change from 0 to 512 [ 203.345069][ T3960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.370998][ T9564] EXT4-fs: Ignoring removed oldalloc option [ 203.437839][ T9564] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.450521][ T9564] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.475679][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.565269][ T4404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.593833][ T9580] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1776'. [ 203.687065][ T9578] loop8: detected capacity change from 0 to 512 [ 203.784073][ T9578] EXT4-fs: inline encryption not supported [ 203.814462][ T9578] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 203.834602][ T9591] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1781'. [ 203.923358][ T9578] EXT4-fs (loop8): orphan cleanup on readonly fs [ 203.972721][ T9578] EXT4-fs error (device loop8): ext4_orphan_get:1399: comm syz.8.1774: inode #15: comm syz.8.1774: iget: illegal inode # [ 204.019837][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1783'. [ 204.039353][ T9603] tipc: MTU too low for tipc bearer [ 204.051300][ T9578] loop8: lost filesystem error report for type 5 error -117 [ 204.052717][ T9578] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1774: couldn't read orphan inode 15 (err -117) [ 204.060373][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 204.060513][ C1] EXT4-fs (loop8): initial error at time 1786423377: ext4_orphan_get:1399 [ 204.060682][ C1] EXT4-fs (loop8): last error at time 1786423377: ext4_orphan_get:1399 [ 204.097479][ T9578] loop8: lost filesystem error report for type 5 error -117 [ 204.161642][ T9578] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 204.218968][ T9609] loop7: detected capacity change from 0 to 512 [ 204.234229][ T9609] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.269385][ T9578] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 204.279520][ T9609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.306778][ T9609] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.327628][ T9609] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.1786: corrupted xattr block 6: invalid header [ 204.381239][ T9609] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 204.391966][ T9614] EXT4-fs error (device loop8): ext4_lookup:1785: comm syz.8.1774: inode #15: comm syz.8.1774: iget: illegal inode # [ 204.421690][ T9609] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.1786: corrupted xattr block 6: invalid header [ 204.436875][ T9578] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 204.462405][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1786'. [ 204.482875][ T9609] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 204.570939][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.653189][ T9621] netlink: 1347 bytes leftover after parsing attributes in process `syz.8.1788'. [ 204.760370][ T9623] netlink: 'syz.8.1789': attribute type 3 has an invalid length. [ 205.118893][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.182108][ T9639] loop7: detected capacity change from 0 to 7 [ 205.247565][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1796'. [ 205.303385][ T3591] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.327326][ T3591] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.366897][ T3591] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.434600][ T3591] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.445985][ T3591] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.173735][ T9666] loop6: detected capacity change from 0 to 512 [ 206.205605][ T9666] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.237444][ T9666] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.270465][ T9666] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.314915][ T9666] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.1807: corrupted xattr block 6: invalid header [ 206.378003][ T9666] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 206.425131][ T9666] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.1807: corrupted xattr block 6: invalid header [ 206.452224][ T9666] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 206.927107][ T9695] loop8: detected capacity change from 0 to 512 [ 206.941852][ T9695] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.003315][ T9695] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.035026][ T9695] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.059241][ T9695] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1815: corrupted xattr block 6: invalid header [ 207.090020][ T4404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.115249][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 207.115264][ T28] audit: type=1400 audit(1786423380.689:2378): avc: denied { write } for pid=9692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.166506][ T9695] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 207.184638][ T9695] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1815: corrupted xattr block 6: invalid header [ 207.202269][ T28] audit: type=1400 audit(1786423380.764:2379): avc: denied { write } for pid=9710 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.223066][ T9695] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 207.395983][ T28] audit: type=1400 audit(1786423380.950:2380): avc: denied { write } for pid=9716 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.510563][ T28] audit: type=1400 audit(1786423381.053:2381): avc: denied { write } for pid=9733 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.621315][ T9728] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.629101][ T9728] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.864244][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.886923][ T9728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.942066][ T9728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.968166][ T9755] loop2: detected capacity change from 0 to 8192 [ 208.047692][ T9755] loop2: p1 p2 p3 p4 [ 208.059674][ T9755] loop2: p2 start 201326592 is beyond EOD, truncated [ 208.071544][ T9755] loop2: p3 start 36132 is beyond EOD, truncated [ 208.082978][ T9755] loop2: p4 start 167772160 is beyond EOD, truncated [ 208.200800][ T9756] tipc: Started in network mode [ 208.221055][ T9756] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 208.239452][ T9756] tipc: Enabling of bearer rejected, failed to enable media [ 208.255179][ T9768] netlink: 'syz.2.1826': attribute type 1 has an invalid length. [ 208.263367][ T8675] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.285154][ T8675] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.320857][ T8675] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.332397][ T9772] xt_connbytes: Forcing CT accounting to be enabled [ 208.350741][ T8675] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.397987][ T9768] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.598264][ T9775] bond4: (slave veth0_to_bond): Releasing active interface [ 208.625861][ T9775] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 208.658324][ T8686] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.685821][ T8686] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.705541][ T9787] loop8: detected capacity change from 0 to 512 [ 208.736191][ T9787] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.778429][ T8686] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.787442][ T8686] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.826646][ T9787] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.946582][ T9787] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.989887][ T9787] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1831: corrupted xattr block 6: invalid header [ 209.012791][ T9787] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 209.046830][ T9795] __nla_validate_parse: 4 callbacks suppressed [ 209.046842][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1831'. [ 209.058827][ T9787] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1831: corrupted xattr block 6: invalid header [ 209.130853][ T9787] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 209.323921][ T9810] sctp: [Deprecated]: syz.2.1837 (pid 9810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.323921][ T9810] Use struct sctp_sack_info instead [ 209.547822][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 209.558626][ T9817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1840'. [ 209.571996][ T9816] loop7: detected capacity change from 0 to 512 [ 209.606561][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.645474][ T9816] EXT4-fs: Ignoring removed bh option [ 209.703751][ T9816] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 209.731672][ T9816] EXT4-fs (loop7): 1 truncate cleaned up [ 209.743011][ T9816] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.913310][ T9823] loop2: detected capacity change from 0 to 4096 [ 209.963118][ T9822] loop8: detected capacity change from 0 to 512 [ 210.038117][ T9823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.080746][ T9822] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1841: inode has both inline data and extents flags [ 210.124206][ T28] audit: type=1400 audit(1786423383.431:2382): avc: denied { listen } for pid=9815 comm="syz.7.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 210.199872][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.246209][ T9822] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 210.246506][ T9822] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1841: couldn't read orphan inode 15 (err -117) [ 210.255706][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 210.255722][ C1] EXT4-fs (loop8): initial error at time 1786423383: ext4_orphan_get:1399: inode 15 [ 210.255755][ C1] EXT4-fs (loop8): last error at time 1786423383: ext4_orphan_get:1399: inode 15 [ 210.311297][ T9822] loop8: lost filesystem error report for type 5 error -117 [ 210.311865][ T9822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.429752][ T28] audit: type=1400 audit(1786423383.764:2383): avc: denied { write } for pid=9821 comm="syz.8.1841" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.575038][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.158973][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.252879][ T9850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9850 comm=syz.2.1850 [ 211.267824][ T9853] loop7: detected capacity change from 0 to 512 [ 211.288393][ T9853] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.340437][ T28] audit: type=1326 audit(1786423384.607:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.2.1852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad205e0d9 code=0x7ffc0000 [ 211.376612][ T9853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.406915][ T28] audit: type=1326 audit(1786423384.607:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.2.1852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad205e0d9 code=0x7ffc0000 [ 211.408808][ T9853] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.432584][ T28] audit: type=1326 audit(1786423384.607:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.2.1852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad205e0d9 code=0x7ffc0000 [ 211.468390][ T28] audit: type=1326 audit(1786423384.607:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.2.1852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad205e0d9 code=0x7ffc0000 [ 211.559467][ T9853] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.1851: corrupted xattr block 6: invalid header [ 211.595273][ T9853] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 211.617794][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1851'. [ 211.633036][ T9853] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.1851: corrupted xattr block 6: invalid header [ 211.676056][ T9853] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 211.792592][ T9874] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1855'. [ 212.261156][ T9903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4624 sclass=netlink_route_socket pid=9903 comm=syz.6.1868 [ 212.276097][ T9904] ucma_write: process 327 (syz.8.1867) changed security contexts after opening file descriptor, this is not allowed. [ 212.482290][ T9904] netlink: 'syz.8.1867': attribute type 11 has an invalid length. [ 212.579217][ T9908] loop8: detected capacity change from 0 to 128 [ 212.615860][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 212.615900][ T28] audit: type=1400 audit(1786423385.783:2514): avc: denied { remount } for pid=9907 comm="syz.8.1870" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 212.836714][ T28] audit: type=1400 audit(1786423385.959:2515): avc: denied { append } for pid=9907 comm="syz.8.1870" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 213.112295][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.161943][ T9916] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1873'. [ 213.165942][ T9917] loop7: detected capacity change from 0 to 512 [ 213.258281][ T9917] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.369759][ T9913] Set syz1 is full, maxelem 6117 reached [ 213.399439][ T9917] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.496939][ T9917] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.591813][ T9917] SELinux: security_context_str_to_sid ('|àkº) failed with errno=-22 [ 213.614183][ T9934] loop8: detected capacity change from 0 to 256 [ 213.736616][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.764368][ T9941] loop6: detected capacity change from 0 to 512 [ 213.789836][ T9941] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.829512][ T9941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.857344][ T9941] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.884361][ T9941] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.1884: corrupted xattr block 6: invalid header [ 213.918133][ T9941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 213.937627][ T9941] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.1884: corrupted xattr block 6: invalid header [ 213.953797][ T9941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 213.965777][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1884'. [ 214.085219][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1890'. [ 214.095382][ T9959] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1890'. [ 214.106292][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1890'. [ 214.418872][ T9966] loop5: detected capacity change from 0 to 512 [ 214.425664][ T9966] EXT4-fs: Ignoring removed nobh option [ 214.513792][ T9966] ------------[ cut here ]------------ [ 214.519342][ T9966] EA inode 11 i_nlink=1026 [ 214.519363][ T9966] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.5.1889/9966 [ 214.534846][ T9966] Modules linked in: [ 214.539835][ T9966] CPU: 1 UID: 0 PID: 9966 Comm: syz.5.1889 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 214.551353][ T9966] Tainted: [W]=WARN [ 214.556017][ T9966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.566779][ T9966] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 214.574029][ T9966] Code: d6 b4 96 ff 49 8d 7e 40 4c 8d 2d 8b 94 5a 05 e8 16 9a b5 ff 49 8b 6e 40 4c 89 e7 e8 4a 95 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 e1 8b da 03 90 90 90 90 90 90 90 [ 214.594188][ T9966] RSP: 0018:ffffc900019eb648 EFLAGS: 00010246 [ 214.601137][ T9966] RAX: ffff8881047dd030 RBX: ffff888105d6a6e8 RCX: ffffffff81c2a3c6 [ 214.609214][ T9966] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d3840 [ 214.617209][ T9966] RBP: 000000000000000b R08: 0001888105d6a69b R09: 0000000000000000 [ 214.625634][ T9966] R10: ffffc900019eb578 R11: 0001c900019eb578 R12: ffff888105d6a698 [ 214.634289][ T9966] R13: ffffffff871d3840 R14: ffff888105d6a650 R15: 0000000000000001 [ 214.643321][ T9966] FS: 00007f21f38256c0(0000) GS:ffff8882ae9c7000(0000) knlGS:0000000000000000 [ 214.653372][ T9966] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.660317][ T9966] CR2: 0000000034747865 CR3: 0000000120f98000 CR4: 00000000003506f0 [ 214.669035][ T9966] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.677354][ T9966] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 214.686036][ T9966] Call Trace: [ 214.689327][ T9966] [ 214.692340][ T9966] ext4_xattr_set_entry+0x78a/0x1050 [ 214.698390][ T9966] ext4_xattr_ibody_set+0x156/0x390 [ 214.704687][ T9966] ext4_expand_extra_isize_ea+0xc04/0x1120 [ 214.711460][ T9966] __ext4_expand_extra_isize+0x246/0x280 [ 214.717701][ T9966] __ext4_mark_inode_dirty+0x290/0x3d0 [ 214.723608][ T9966] ext4_evict_inode+0x8b6/0xdf0 [ 214.728515][ T9966] ? __pfx_ext4_evict_inode+0x10/0x10 [ 214.733984][ T9966] evict+0x2a5/0x510 [ 214.738204][ T9966] iput+0x430/0x5a0 [ 214.742172][ T9966] ext4_process_orphan+0x1a4/0x1c0 [ 214.747444][ T9966] ext4_orphan_cleanup+0x6a6/0xa10 [ 214.752662][ T9966] ? ext4_register_li_request+0x14c/0x440 [ 214.758667][ T9966] ext4_fill_super+0x33ab/0x3760 [ 214.764107][ T9966] ? set_blocksize+0x14c/0x270 [ 214.769541][ T9966] ? __pfx_ext4_fill_super+0x10/0x10 [ 214.775540][ T9966] get_tree_bdev_flags+0x291/0x300 [ 214.780676][ T9966] ? __pfx_ext4_fill_super+0x10/0x10 [ 214.786008][ T9966] get_tree_bdev+0x1f/0x30 [ 214.790461][ T9966] ext4_get_tree+0x1c/0x30 [ 214.794927][ T9966] vfs_get_tree+0x57/0x1d0 [ 214.800192][ T9966] do_new_mount+0x288/0x8d0 [ 214.805624][ T9966] path_mount+0x4ad/0xb90 [ 214.810675][ T9966] __se_sys_mount+0x28c/0x2e0 [ 214.815424][ T9966] __x64_sys_mount+0x67/0x80 [ 214.820049][ T9966] x64_sys_call+0x2d61/0x3020 [ 214.824759][ T9966] do_syscall_64+0x136/0x3c0 [ 214.829397][ T9966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.835563][ T9966] RIP: 0033:0x7f21f4e0f34a [ 214.840911][ T9966] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.861548][ T9966] RSP: 002b:00007f21f3824e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 214.870731][ T9966] RAX: ffffffffffffffda RBX: 00007f21f3824ee0 RCX: 00007f21f4e0f34a [ 214.879503][ T9966] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f21f3824ea0 [ 214.888613][ T9966] RBP: 0000200000000180 R08: 00007f21f3824ee0 R09: 0000000000800718 [ 214.897126][ T9966] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 214.905621][ T9966] R13: 00007f21f3824ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 214.914420][ T9966] [ 214.917797][ T9966] ---[ end trace 0000000000000000 ]--- [ 214.945500][ T9966] EXT4-fs (loop5): 1 orphan inode deleted [ 214.966583][ T9966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.144931][ T9961] netlink: 'syz.7.1891': attribute type 11 has an invalid length. [ 215.184296][ T9976] loop2: detected capacity change from 0 to 512 [ 215.203527][ T4404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.237467][ T9976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.321210][ T9976] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.350699][ T9981] loop8: detected capacity change from 0 to 512 [ 215.375839][ T9981] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.433226][ T9981] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.455082][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.486162][ T9981] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.540422][ T9995] __nla_validate_parse: 5 callbacks suppressed [ 215.540441][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1898'. [ 215.564596][ T9981] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1895: corrupted xattr block 6: invalid header [ 215.607293][ T28] audit: type=1326 audit(1786423388.557:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9996 comm="syz.6.1901" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f797cc7e0d9 code=0x0 [ 215.638046][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1895'. [ 215.658569][ T9981] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 215.687746][ T9981] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1895: corrupted xattr block 6: invalid header [ 215.736072][T10001] loop2: detected capacity change from 0 to 512 [ 215.757789][T10001] EXT4-fs (loop2): 1 orphan inode deleted [ 215.764282][T10001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.783435][T10001] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.805705][ T28] audit: type=1400 audit(1786423388.733:2517): avc: denied { setopt } for pid=9996 comm="syz.6.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 215.848874][ T9981] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 215.893290][ T8683] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 215.909592][T10004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.923107][ T8683] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:50: Failed to release dquot type 1 [ 215.938274][T10004] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.955622][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.004881][T10004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.061660][T10004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.079843][T10004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.102020][T10004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.123607][T10004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.151034][T10004] veth1_vlan: left promiscuous mode [ 216.162223][T10004] veth0_vlan: left promiscuous mode [ 216.177233][T10004] veth0_vlan: entered promiscuous mode [ 216.190652][T10004] veth1_vlan: entered promiscuous mode [ 216.209035][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.227637][T10004] veth1_macvtap: left promiscuous mode [ 216.241188][T10004] veth0_macvtap: left promiscuous mode [ 216.255694][T10004] veth0_macvtap: entered promiscuous mode [ 216.270237][T10004] veth1_macvtap: entered promiscuous mode [ 216.287142][T10004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.303457][T10004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.321576][T10004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.335133][T10004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.335498][ T3960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.344738][T10004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.361642][T10004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.373735][T10004] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.384288][ T8683] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.393611][ T8683] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.436254][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.443494][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.463354][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.468592][T10016] loop5: detected capacity change from 0 to 512 [ 216.470570][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.479025][T10018] atomic_op ffff88811a6eb928 conn xmit_atomic 0000000000000000 [ 216.521538][T10016] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 216.562639][ T8681] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.571660][T10016] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 216.584780][ T8681] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.606945][T10016] System zones: 0-1, 15-15, 18-18, 34-34 [ 216.621137][ T8681] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.647960][T10016] EXT4-fs (loop5): orphan cleanup on readonly fs [ 216.661486][ T8681] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.674777][T10031] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1913'. [ 216.700438][T10016] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 216.717644][T10016] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 216.733579][ T8683] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.749342][ T8683] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.768627][T10016] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 216.788198][T10016] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1906: bad orphan inode 16 [ 216.816151][T10016] loop5: lost filesystem error report for type 5 error -117 [ 216.816756][T10016] ext4_test_bit(bit=15, block=18) = 1 [ 216.830047][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 216.830210][ C1] EXT4-fs (loop5): initial error at time 1786423389: ext4_orphan_get:1425 [ 216.830374][ C1] EXT4-fs (loop5): last error at time 1786423389: ext4_orphan_get:1425 [ 216.871384][T10041] loop2: detected capacity change from 0 to 512 [ 216.881223][T10042] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1918'. [ 216.923897][T10016] is_bad_inode(inode)=0 [ 216.928871][T10016] NEXT_ORPHAN(inode)=0 [ 216.937047][T10016] max_ino=32 [ 216.950434][T10016] i_nlink=2 [ 216.967384][T10041] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.1914: Bad quota inum: 1, type: 2 [ 216.994147][T10016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 217.007724][T10041] loop2: lost filesystem error report for type 5 error -117 [ 217.008498][T10041] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 217.029558][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 217.037169][ C1] EXT4-fs (loop2): initial error at time 1786423389: ext4_quota_enable:7228 [ 217.045881][ C1] EXT4-fs (loop2): last error at time 1786423389: ext4_quota_enable:7228 [ 217.062807][T10041] EXT4-fs (loop2): mount failed [ 217.218717][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1925'. [ 217.557529][T10099] loop6: detected capacity change from 0 to 512 [ 217.578036][T10099] EXT4-fs: dax option not supported [ 217.591038][ T28] audit: type=1400 audit(1786423390.386:2518): avc: denied { write } for pid=10086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.659912][ T28] audit: type=1400 audit(1786423390.451:2519): avc: denied { write } for pid=10107 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.744449][ T28] audit: type=1400 audit(1786423390.525:2520): avc: denied { mount } for pid=10112 comm="syz.6.1941" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 217.856431][T10120] netlink: 2608 bytes leftover after parsing attributes in process `syz.2.1942'. [ 217.899970][ T28] audit: type=1400 audit(1786423390.673:2521): avc: denied { write } for pid=10114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.028897][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 218.028909][ T28] audit: type=1400 audit(1786423390.793:2523): avc: denied { read write } for pid=10140 comm="syz.2.1946" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 218.118733][ T28] audit: type=1400 audit(1786423390.793:2524): avc: denied { open } for pid=10140 comm="syz.2.1946" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 218.179862][T10147] loop2: detected capacity change from 0 to 1024 [ 218.198353][T10147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 218.199169][ T28] audit: type=1400 audit(1786423390.848:2525): avc: denied { listen } for pid=10112 comm="syz.6.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 218.213863][T10147] EXT4-fs: inline encryption not supported [ 218.252175][T10147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 218.295211][T10147] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.318415][T10151] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1951'. [ 218.342731][ T28] audit: type=1400 audit(1786423391.088:2526): avc: denied { connect } for pid=10155 comm="syz.6.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 218.366906][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1952'. [ 218.433248][ T28] audit: type=1400 audit(1786423391.125:2527): avc: denied { write } for pid=10146 comm="syz.2.1949" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.505801][T10163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1953'. [ 218.528352][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 218.648443][T10171] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.682662][ T28] audit: type=1400 audit(1786423391.393:2528): avc: denied { write } for pid=10170 comm="syz.5.1956" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.840031][T10187] sch_fq: defrate 2 ignored. [ 218.976022][T10189] EXT4-fs: inline encryption not supported [ 219.014441][T10189] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 219.034787][T10197] set_capacity_and_notify: 3 callbacks suppressed [ 219.034803][T10197] loop7: detected capacity change from 0 to 512 [ 219.058503][T10189] EXT4-fs (loop2): orphan cleanup on readonly fs [ 219.065150][T10189] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1964: inode #15: comm syz.2.1964: iget: illegal inode # [ 219.088449][T10197] EXT4-fs (loop7): orphan cleanup on readonly fs [ 219.105091][T10197] Quota error (device loop7): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 219.120158][T10189] loop2: lost filesystem error report for type 5 error -117 [ 219.125837][T10189] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1964: couldn't read orphan inode 15 (err -117) [ 219.133308][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 219.133359][ C1] EXT4-fs (loop2): initial error at time 1786423391: ext4_orphan_get:1399 [ 219.133424][ C1] EXT4-fs (loop2): last error at time 1786423391: ext4_orphan_get:1399 [ 219.171385][ T28] audit: type=1326 audit(1786423391.800:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10202 comm="syz.8.1970" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6512de0d9 code=0x0 [ 219.185228][T10197] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 219.245672][T10189] loop2: lost filesystem error report for type 5 error -117 [ 219.258824][T10189] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 219.258904][T10197] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 219.278896][T10197] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1968: couldn't read orphan inode 26 (err -116) [ 219.298421][T10189] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 219.315709][T10197] loop7: lost filesystem error report for type 5 error -116 [ 219.315894][T10197] EXT4-fs (loop7): Remounting filesystem read-only [ 219.329824][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 219.329850][ C0] EXT4-fs (loop7): initial error at time 1786423391: ext4_orphan_get:1404 [ 219.329881][ C0] EXT4-fs (loop7): last error at time 1786423391: ext4_orphan_get:1404 [ 219.356124][T10189] EXT4-fs error (device loop2): ext4_lookup:1785: comm syz.2.1964: inode #15: comm syz.2.1964: iget: illegal inode # [ 219.376584][T10189] EXT4-fs error (device loop2): ext4_lookup:1785: comm syz.2.1964: inode #15: comm syz.2.1964: iget: illegal inode # [ 219.452802][T10220] loop5: detected capacity change from 0 to 256 [ 219.775149][T10239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.997193][ T28] audit: type=1326 audit(1786423392.603:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10238 comm="syz.7.1984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb461ae0d9 code=0x7ffc0000 [ 220.208395][ T28] audit: type=1326 audit(1786423392.640:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10238 comm="syz.7.1984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb461ae0d9 code=0x7ffc0000 [ 220.875002][T10251] FAULT_INJECTION: forcing a failure. [ 220.875002][T10251] name failslab, interval 1, probability 0, space 0, times 0 [ 220.922299][T10251] CPU: 0 UID: 0 PID: 10251 Comm: syz.8.1986 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 220.922336][T10251] Tainted: [W]=WARN [ 220.922344][T10251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.922428][T10251] Call Trace: [ 220.922433][T10251] [ 220.922441][T10251] __dump_stack+0x1d/0x30 [ 220.922467][T10251] dump_stack_lvl+0x95/0xd0 [ 220.922487][T10251] dump_stack+0x15/0x1b [ 220.922579][T10251] should_fail_ex+0x25e/0x270 [ 220.922676][T10251] should_failslab+0x8c/0xb0 [ 220.922696][T10251] __kmalloc_noprof+0xd4/0x4a0 [ 220.922715][T10251] ? iovec_from_user+0x84/0x200 [ 220.922809][T10251] ? iovec_from_user+0x84/0x200 [ 220.922835][T10251] iovec_from_user+0x84/0x200 [ 220.922854][T10251] __import_iovec+0xf3/0x530 [ 220.922920][T10251] ? kstrtoull+0x111/0x140 [ 220.922946][T10251] import_iovec+0x60/0x80 [ 220.922964][T10251] vfs_writev+0xf6/0x8b0 [ 220.922990][T10251] ? get_pid_task+0x92/0xc0 [ 220.923017][T10251] do_writev+0xe9/0x210 [ 220.923040][T10251] __x64_sys_writev+0x45/0x50 [ 220.923063][T10251] x64_sys_call+0x1c0c/0x3020 [ 220.923091][T10251] do_syscall_64+0x136/0x3c0 [ 220.923193][T10251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.923259][T10251] RIP: 0033:0x7fb6512de0d9 [ 220.923272][T10251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.923299][T10251] RSP: 002b:00007fb64fd37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 220.923324][T10251] RAX: ffffffffffffffda RBX: 00007fb651565fa0 RCX: 00007fb6512de0d9 [ 220.923339][T10251] RDX: 10000000000000e1 RSI: 0000200000000780 RDI: 0000000000000003 [ 220.923356][T10251] RBP: 00007fb64fd37090 R08: 0000000000000000 R09: 0000000000000000 [ 220.923366][T10251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.923377][T10251] R13: 00007fb651566038 R14: 00007fb651565fa0 R15: 00007fffb3a13928 [ 220.923395][T10251] [ 222.521344][T10294] loop7: detected capacity change from 0 to 512 [ 222.539948][T10294] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.590041][T10294] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.661052][T10294] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.2001: corrupted xattr block 6: invalid header [ 222.683441][T10294] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 222.733835][T10313] __nla_validate_parse: 1 callbacks suppressed [ 222.733847][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2001'. [ 222.780843][T10294] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.2001: corrupted xattr block 6: invalid header [ 222.857689][T10294] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 223.432366][T10355] loop5: detected capacity change from 0 to 512 [ 223.497621][T10355] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2023: inode has both inline data and extents flags [ 223.515024][T10355] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 223.515216][T10355] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2023: couldn't read orphan inode 15 (err -117) [ 223.524385][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 223.524406][ C1] EXT4-fs (loop5): initial error at time 1786423395: ext4_orphan_get:1399: inode 15 [ 223.524434][ C1] EXT4-fs (loop5): last error at time 1786423395: ext4_orphan_get:1399: inode 15 [ 223.739777][T10358] loop8: detected capacity change from 0 to 512 [ 223.747526][T10358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.764685][T10355] loop5: lost filesystem error report for type 5 error -117 [ 223.785308][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 223.785330][ T28] audit: type=1400 audit(1786423396.103:2633): avc: denied { write } for pid=10352 comm="syz.5.2023" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.888648][T10358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 224.897458][T10358] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 225.049595][T10358] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.2025: Allocating blocks 41-42 which overlap fs metadata [ 225.098043][T10358] loop8: lost filesystem error report for type 5 error -117 [ 225.100775][T10358] EXT4-fs (loop8): Remounting filesystem read-only [ 225.114888][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 225.114931][ C1] EXT4-fs (loop8): initial error at time 1786423397: ext4_mb_mark_diskspace_used:4222 [ 225.114994][ C1] EXT4-fs (loop8): last error at time 1786423397: ext4_mb_mark_diskspace_used:4222 [ 225.151175][ T28] audit: type=1400 audit(1786423397.368:2634): avc: denied { read } for pid=10361 comm="syz.2.2026" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 225.208737][T10358] Quota error (device loop8): write_blk: dquota write failed [ 225.217016][T10358] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 225.227072][T10358] Quota error (device loop8): write_blk: dquota write failed [ 225.235031][T10358] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 225.250113][T10358] EXT4-fs (loop8): 1 truncate cleaned up [ 225.250397][ T28] audit: type=1400 audit(1786423397.368:2635): avc: denied { open } for pid=10361 comm="syz.2.2026" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 225.250444][ T28] audit: type=1326 audit(1786423397.368:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10361 comm="syz.2.2026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ad205e0d9 code=0x0 [ 225.307588][T10369] loop5: detected capacity change from 0 to 164 [ 225.899842][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2030'. [ 225.960179][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2030'. [ 226.028567][T10378] netlink: 'syz.5.2030': attribute type 6 has an invalid length. [ 226.126996][ T68] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.163513][ T68] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.454276][ T68] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.494221][ T68] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.644936][T10395] loop8: detected capacity change from 0 to 512 [ 227.670195][T10395] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.728285][T10395] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.788092][T10395] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.2036: corrupted xattr block 6: invalid header [ 227.802538][T10395] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 227.829147][T10395] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.2036: corrupted xattr block 6: invalid header [ 227.867932][T10395] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 227.899740][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2036'. [ 229.115745][ T7919] EXT4-fs unmount: 16 callbacks suppressed [ 229.115759][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.223327][T10428] loop7: detected capacity change from 0 to 512 [ 229.266531][T10428] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 229.291517][T10431] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 229.309088][T10428] System zones: 1-12 [ 229.324274][T10428] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.2046: error while reading EA inode 32 err=-116 [ 229.380747][T10428] loop7: lost filesystem error report for type 5 error -117 [ 229.380989][T10428] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.2046: error while reading EA inode 32 err=-116 [ 229.388395][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 229.388412][ C0] EXT4-fs (loop7): initial error at time 1786423401: ext4_xattr_inode_iget:446 [ 229.388439][ C0] EXT4-fs (loop7): last error at time 1786423401: ext4_xattr_inode_iget:446 [ 229.470385][T10443] loop2: detected capacity change from 0 to 256 [ 229.502404][T10445] blkio.reset_stats is deprecated [ 229.509833][ T28] audit: type=1400 audit(1786423401.384:2637): avc: denied { ioctl } for pid=10444 comm="syz.8.2054" path="socket:[27588]" dev="sockfs" ino=27588 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 229.550823][T10428] loop7: lost filesystem error report for type 5 error -117 [ 229.551131][T10428] EXT4-fs (loop7): 1 orphan inode deleted [ 229.567079][T10449] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2055'. [ 229.584744][ T28] audit: type=1400 audit(1786423401.421:2638): avc: denied { read } for pid=10444 comm="syz.8.2054" path="socket:[27588]" dev="sockfs" ino=27588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 229.616846][T10428] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.686746][T10428] SET target dimension over the limit! [ 229.746986][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.926203][T10451] loop8: detected capacity change from 0 to 8192 [ 231.718850][T10493] No such timeout policy "syz1" [ 231.746479][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2069'. [ 231.860238][T10501] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2072'. [ 231.912882][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2072'. [ 232.075068][T10518] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2078'. [ 232.176456][ T28] audit: type=1400 audit(1786423403.839:2639): avc: denied { accept } for pid=10521 comm="syz.8.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 232.378118][T10531] syzkaller0: entered promiscuous mode [ 232.383648][T10531] syzkaller0: entered allmulticast mode [ 232.446559][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2083'. [ 232.510252][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2083'. [ 232.519359][T10544] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 232.613830][ T28] audit: type=1400 audit(1786423404.255:2640): avc: denied { write } for pid=10528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.687881][ T28] audit: type=1400 audit(1786423404.319:2641): avc: denied { write } for pid=10553 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.830551][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2091'. [ 232.895083][ T28] audit: type=1400 audit(1786423404.513:2642): avc: denied { read } for pid=10561 comm="syz.6.2090" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 232.949776][ T28] audit: type=1400 audit(1786423404.513:2643): avc: denied { open } for pid=10561 comm="syz.6.2090" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 233.005649][ T28] audit: type=1400 audit(1786423404.550:2644): avc: denied { ioctl } for pid=10561 comm="syz.6.2090" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 233.013834][T10573] bridge2: entered promiscuous mode [ 233.065315][T10573] bridge2: entered allmulticast mode [ 233.234301][T10585] netlink: 'syz.5.2097': attribute type 2 has an invalid length. [ 233.556501][T10606] loop5: detected capacity change from 0 to 512 [ 233.563251][T10606] EXT4-fs: inline encryption not supported [ 233.569267][T10602] loop8: detected capacity change from 0 to 512 [ 233.584683][T10606] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.595074][T10608] loop2: detected capacity change from 0 to 512 [ 233.606823][T10608] ext4: Unknown parameter 'uid<00000000000000000000' [ 233.645048][T10606] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 233.659654][T10606] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2106: bg 0: block 248: padding at end of block bitmap is not set [ 233.659760][T10602] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.683309][T10606] loop5: lost filesystem error report for type 5 error -117 [ 233.683531][T10606] Quota error (device loop5): write_blk: dquota write failed [ 233.690901][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 233.690921][ C0] EXT4-fs (loop5): last error at time 1786423405: ext4_validate_block_bitmap:441 [ 233.715158][T10606] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 233.725048][T10606] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.2106: Failed to acquire dquot type 1 [ 233.730509][T10602] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 233.736558][T10606] loop5: lost filesystem error report for type 5 error -28 [ 233.763475][T10606] EXT4-fs (loop5): 1 truncate cleaned up [ 233.765528][T10602] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.786702][T10602] EXT4-fs (loop8): Invalid default hash set in the superblock [ 233.787247][T10606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 233.845424][ T3960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 233.903760][T10627] loop7: detected capacity change from 0 to 256 [ 233.923183][T10627] syz.7.2113: attempt to access beyond end of device [ 233.923183][T10627] loop7: rw=8912896, sector=1800, nr_sectors = 20 limit=256 [ 233.947526][T10627] syz.7.2113: attempt to access beyond end of device [ 233.947526][T10627] loop7: rw=8388608, sector=1800, nr_sectors = 8 limit=256 [ 234.029710][T10645] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2120'. [ 234.492286][T10653] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2121'. [ 234.568068][T10659] loop2: detected capacity change from 0 to 512 [ 234.580640][T10659] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 234.592609][T10659] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.2124: bad orphan inode 131083 [ 234.608916][T10659] loop2: lost filesystem error report for type 5 error -117 [ 234.613314][T10659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.645962][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.790770][T10667] loop7: detected capacity change from 0 to 512 [ 234.799382][T10667] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 234.817517][T10667] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #11: comm syz.7.2128: corrupted in-inode xattr: invalid ea_ino [ 234.831340][T10667] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 234.831505][T10667] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2128: couldn't read orphan inode 11 (err -117) [ 234.841911][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 234.859086][ C1] EXT4-fs (loop7): initial error at time 1786423406: ext4_iget_extra_inode:5180: inode 11 [ 234.869041][ C1] EXT4-fs (loop7): last error at time 1786423406: ext4_iget_extra_inode:5180: inode 11 [ 234.885274][T10670] loop8: detected capacity change from 0 to 512 [ 234.895785][T10670] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.902684][T10667] loop7: lost filesystem error report for type 5 error -117 [ 234.903122][T10667] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.936252][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.963086][T10670] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.993903][T10670] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.003081][T10674] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 235.003081][T10674] Please contact the netfilter-devel mailing list or update your nftables rules. [ 235.026742][T10670] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.2125: corrupted xattr block 6: invalid header [ 235.055450][T10670] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 235.072671][T10670] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.2125: corrupted xattr block 6: invalid header [ 235.086063][T10670] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 235.120585][T10689] loop7: detected capacity change from 0 to 512 [ 235.137546][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.148726][T10689] EXT4-fs: Ignoring removed mblk_io_submit option [ 235.172654][T10695] xt_hashlimit: size too large, truncated to 1048576 [ 235.184804][T10689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.246943][T10689] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.276545][T10689] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.2134: corrupted xattr block 6: invalid header [ 235.326132][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2134'. [ 235.339955][T10689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 235.355342][T10689] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.2134: corrupted xattr block 6: invalid header [ 235.382621][T10689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 235.463173][T10707] netlink: 'syz.8.2139': attribute type 3 has an invalid length. [ 235.822897][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.882437][T10714] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2140'. [ 235.934444][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.998399][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.021617][T10722] loop8: detected capacity change from 0 to 128 [ 236.166604][T10722] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 236.193866][T10726] FAULT_INJECTION: forcing a failure. [ 236.193866][T10726] name failslab, interval 1, probability 0, space 0, times 0 [ 236.220772][T10722] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.232655][T10726] CPU: 1 UID: 0 PID: 10726 Comm: syz.5.2146 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 236.232687][T10726] Tainted: [W]=WARN [ 236.232730][T10726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.232744][T10726] Call Trace: [ 236.232751][T10726] [ 236.232759][T10726] __dump_stack+0x1d/0x30 [ 236.232797][T10726] dump_stack_lvl+0x95/0xd0 [ 236.232818][T10726] dump_stack+0x15/0x1b [ 236.232839][T10726] should_fail_ex+0x25e/0x270 [ 236.232874][T10726] should_failslab+0x8c/0xb0 [ 236.232913][T10726] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 236.233003][T10726] ? dup_task_struct+0x5a/0x6a0 [ 236.233027][T10726] ? dup_task_struct+0x5a/0x6a0 [ 236.233049][T10726] dup_task_struct+0x5a/0x6a0 [ 236.233119][T10726] copy_process+0x5a0/0x2310 [ 236.233141][T10726] ? kstrtoull+0x111/0x140 [ 236.233177][T10726] ? kstrtouint_from_user+0xa8/0xf0 [ 236.233259][T10726] ? __rcu_read_unlock+0x4e/0x70 [ 236.233283][T10726] kernel_clone+0x1c0/0x5f0 [ 236.233311][T10726] __x64_sys_clone+0x143/0x180 [ 236.233342][T10726] x64_sys_call+0x1222/0x3020 [ 236.233370][T10726] do_syscall_64+0x136/0x3c0 [ 236.233423][T10726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.233449][T10726] RIP: 0033:0x7f21f4e0e0d9 [ 236.233466][T10726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.233483][T10726] RSP: 002b:00007f21f3866fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 236.233505][T10726] RAX: ffffffffffffffda RBX: 00007f21f5095fa0 RCX: 00007f21f4e0e0d9 [ 236.233537][T10726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 236.233550][T10726] RBP: 00007f21f3867090 R08: 0000000000000000 R09: 0000000000000000 [ 236.233630][T10726] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 236.233643][T10726] R13: 00007f21f5096038 R14: 00007f21f5095fa0 R15: 00007fff977f1478 [ 236.233665][T10726] [ 236.498874][T10731] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2144'. [ 236.607053][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 236.607067][ T28] audit: type=1400 audit(1786423408.082:2647): avc: denied { read } for pid=10721 comm="syz.8.2144" dev="sockfs" ino=30149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 236.670965][ T7919] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.846565][ T28] audit: type=1400 audit(1786423408.082:2648): avc: denied { bind } for pid=10732 comm="syz.7.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 237.301247][T10740] loop8: detected capacity change from 0 to 512 [ 237.326164][T10740] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 237.383095][T10740] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 237.402047][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 237.408507][ C1] EXT4-fs (loop8): initial error at time 1786423408: ext4_mb_generate_buddy:1317 [ 237.417666][ C1] EXT4-fs (loop8): last error at time 1786423408: ext4_mb_generate_buddy:1317 [ 237.427035][ T28] audit: type=1400 audit(1786423408.082:2649): avc: denied { connect } for pid=10732 comm="syz.7.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 237.451390][T10740] EXT4-fs (loop8): 1 truncate cleaned up [ 237.459422][T10740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.472617][ T28] audit: type=1400 audit(1786423408.261:2650): avc: denied { read } for pid=10728 comm="syz.2.2147" dev="sockfs" ino=30168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 237.701710][T10763] netlink: 'syz.7.2151': attribute type 10 has an invalid length. [ 237.737136][T10763] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 238.708467][T10851] loop6: detected capacity change from 0 to 512 [ 238.715473][T10851] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.738299][T10853] syzkaller1: entered promiscuous mode [ 238.743796][T10853] syzkaller1: entered allmulticast mode [ 238.750631][T10853] syzkaller1: left promiscuous mode [ 238.762800][T10851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.776006][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.785808][T10853] syzkaller1: left allmulticast mode [ 238.810451][T10851] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.821222][T10855] loop5: detected capacity change from 0 to 512 [ 238.863831][T10851] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.2155: corrupted xattr block 6: invalid header [ 238.866586][T10855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.891818][T10862] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2158'. [ 238.906369][T10851] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 238.917962][T10851] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.2155: corrupted xattr block 6: invalid header [ 238.931559][T10851] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 238.962504][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2155'. [ 238.995154][ T28] audit: type=1400 audit(1786423410.502:2651): avc: denied { write } for pid=10854 comm="syz.5.2157" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.080160][ T28] audit: type=1400 audit(1786423410.502:2652): avc: denied { create } for pid=10854 comm="syz.5.2157" name=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 239.119074][T10855] SELinux: context truncated [ 239.138285][T10855] SELinux: invalid ocon [ 239.171001][T10875] loop8: detected capacity change from 0 to 512 [ 239.189975][T10875] EXT4-fs: Ignoring removed i_version option [ 239.202856][T10877] loop2: detected capacity change from 0 to 512 [ 239.225309][T10875] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 239.244566][T10877] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.2163: Unrecognised inode hash code 255 [ 239.246015][T10875] EXT4-fs (loop8): orphan cleanup on readonly fs [ 239.261417][T10877] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2163: Corrupt directory, running e2fsck is recommended [ 239.263647][T10855] SELinux: failed to load policy [ 239.284930][T10875] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 239.308450][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 239.314955][ C1] EXT4-fs (loop8): initial error at time 1786423410: ext4_mb_generate_buddy:1317 [ 239.324111][ C1] EXT4-fs (loop8): last error at time 1786423410: ext4_mb_generate_buddy:1317 [ 239.336217][T10875] Quota error (device loop8): write_blk: dquota write failed [ 239.348972][T10875] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 239.358194][T10875] Quota error (device loop8): write_blk: dquota write failed [ 239.365725][T10875] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 239.368019][ T3960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.375682][T10875] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.2164: Failed to acquire dquot type 1 [ 239.395943][T10875] loop8: lost filesystem error report for type 5 error -28 [ 239.396139][T10875] EXT4-fs (loop8): 1 truncate cleaned up [ 239.411674][T10875] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 239.446109][T10877] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 239.456429][T10877] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2163: corrupted in-inode xattr: invalid ea_ino [ 239.470148][T10877] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 239.471532][T10877] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2163: couldn't read orphan inode 15 (err -117) [ 239.480710][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 239.480730][ C0] EXT4-fs (loop2): initial error at time 1786423410: ext4_iget_extra_inode:5180: inode 15 [ 239.480779][ C0] EXT4-fs (loop2): last error at time 1786423410: ext4_iget_extra_inode:5180: inode 15 [ 239.521336][T10877] loop2: lost filesystem error report for type 5 error -117 [ 239.522062][T10877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.533010][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.590329][ T4404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.611428][T10877] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 239.709616][T10895] loop7: detected capacity change from 0 to 512 [ 239.782580][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.818720][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2174'. [ 239.923258][T10910] loop5: detected capacity change from 0 to 512 [ 239.932391][T10910] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 239.962488][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2170'. [ 239.972008][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2170'. [ 239.982340][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2170'. [ 240.249957][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2170'. [ 240.697686][T10930] __nla_validate_parse: 2 callbacks suppressed [ 240.697703][T10930] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2180'. [ 240.715682][T10928] loop2: detected capacity change from 0 to 512 [ 240.735480][T10928] EXT4-fs: Ignoring removed mblk_io_submit option [ 240.823119][T10928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.878836][T10928] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.914702][T10926] loop6: detected capacity change from 0 to 1024 [ 240.930818][T10928] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.2179: corrupted xattr block 6: invalid header [ 240.968122][T10928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 240.987847][T10928] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.2179: corrupted xattr block 6: invalid header [ 241.021125][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2179'. [ 241.041062][T10928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 241.429081][T10952] loop7: detected capacity change from 0 to 8192 [ 241.508102][T10952] loop7: p1 p2 p3 p4 [ 241.562844][T10952] loop7: p2 start 201326592 is beyond EOD, truncated [ 241.578650][T10952] loop7: p3 start 36132 is beyond EOD, truncated [ 241.595816][T10970] netlink: 'syz.5.2186': attribute type 49 has an invalid length. [ 241.605187][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.630667][T10952] loop7: p4 start 167772160 is beyond EOD, truncated [ 241.639345][T10970] gre0: entered promiscuous mode [ 241.661856][T10975] loop5: detected capacity change from 0 to 1024 [ 241.671305][T10975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.680637][T10970] gre0: entered allmulticast mode [ 241.723231][T10975] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 241.742302][T10975] System zones: 0-1, 3-12 [ 241.756310][T10975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.841482][T10986] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 241.860364][T10987] can: request_module (can-proto-4) failed. [ 241.868054][ T3591] udevd[3591]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 241.881016][T10989] netlink: 'syz.2.2190': attribute type 21 has an invalid length. [ 241.895562][ T3960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.906046][T10989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2190'. [ 242.065699][T11000] netlink: 'syz.2.2193': attribute type 21 has an invalid length. [ 242.216694][T11005] netlink: 'syz.5.2194': attribute type 13 has an invalid length. [ 242.516491][T11011] EXT4-fs: Ignoring removed bh option [ 242.606463][T11011] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 242.649446][T11011] EXT4-fs (loop2): 1 truncate cleaned up [ 242.662182][T11011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.939168][T11017] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.946280][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.980776][T11017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.028385][T11017] ext4 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.070524][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 243.070536][ T28] audit: type=1400 audit(1786423414.367:2783): avc: denied { write } for pid=11020 comm="syz.8.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.100454][T11021] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2199'. [ 243.115214][T11017] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.2197: corrupted xattr block 6: invalid header [ 243.161086][T11017] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 243.175853][T11021] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2199'. [ 243.196041][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2197'. [ 243.227217][T11017] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.2197: corrupted xattr block 6: invalid header [ 243.268491][T11017] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 243.492828][T11030] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.838860800.133495060), cmd(2) [ 243.760142][ T3960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.965638][ T28] audit: type=1400 audit(1786423415.209:2784): avc: denied { map } for pid=11039 comm="syz.7.2205" path="socket:[30501]" dev="sockfs" ino=30501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 244.039525][ T28] audit: type=1400 audit(1786423415.209:2785): avc: denied { read } for pid=11039 comm="syz.7.2205" path="socket:[30501]" dev="sockfs" ino=30501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 244.260346][T11045] tipc: Enabling of bearer rejected, media not registered [ 244.639577][T11047] set_capacity_and_notify: 2 callbacks suppressed [ 244.639669][T11047] loop7: detected capacity change from 0 to 2048 [ 244.852461][T11047] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.917250][T11047] EXT4-fs error (device loop7): ext4_find_extent:904: inode #2: comm syz.7.2207: inode has invalid extent depth: 8 [ 244.995397][T11047] EXT4-fs (loop7): Remounting filesystem read-only [ 245.121389][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.253522][ T28] audit: type=1326 audit(1786423416.411:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.5.2210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4e0e0d9 code=0x7ffc0000 [ 245.351575][ T28] audit: type=1326 audit(1786423416.411:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.5.2210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4e0e0d9 code=0x7ffc0000 [ 245.400597][ T28] audit: type=1326 audit(1786423416.438:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.5.2210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f21f4e0e0d9 code=0x7ffc0000 [ 245.455171][T11054] žÿ: renamed from team_slave_1 [ 245.478632][ T28] audit: type=1326 audit(1786423416.438:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.5.2210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4e0e0d9 code=0x7ffc0000 [ 245.680514][ T28] audit: type=1326 audit(1786423416.438:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.5.2210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4e0e0d9 code=0x7ffc0000 [ 245.766032][ T28] audit: type=1326 audit(1786423416.438:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.5.2210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21f4dce90e code=0x7ffc0000 [ 245.846526][ T28] audit: type=1326 audit(1786423416.438:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.5.2210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4e0e0d9 code=0x7ffc0000 [ 246.033709][T11072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2215'. [ 246.342405][T11081] FAULT_INJECTION: forcing a failure. [ 246.342405][T11081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.400735][T11081] CPU: 0 UID: 0 PID: 11081 Comm: syz.7.2219 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 246.400823][T11081] Tainted: [W]=WARN [ 246.400832][T11081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.400849][T11081] Call Trace: [ 246.400857][T11081] [ 246.400867][T11081] __dump_stack+0x1d/0x30 [ 246.400900][T11081] dump_stack_lvl+0x95/0xd0 [ 246.400918][T11081] dump_stack+0x15/0x1b [ 246.400934][T11081] should_fail_ex+0x25e/0x270 [ 246.401015][T11081] should_fail+0xb/0x20 [ 246.401043][T11081] should_fail_usercopy+0x1a/0x20 [ 246.401112][T11081] _copy_from_iter+0xcc/0xe70 [ 246.401150][T11081] ? rep_movs_alternative+0x4a/0xa0 [ 246.401173][T11081] ? _copy_from_iter+0x13b/0xe70 [ 246.401284][T11081] copy_page_from_iter+0x15d/0x1f0 [ 246.401303][T11081] skb_copy_datagram_from_iter+0x22d/0x480 [ 246.401332][T11081] tun_get_user+0xc1d/0x2820 [ 246.401424][T11081] ? _parse_integer_limit+0x177/0x1a0 [ 246.401535][T11081] ? _parse_integer+0x27/0x40 [ 246.401567][T11081] ? ref_tracker_alloc+0x1eb/0x2f0 [ 246.401657][T11081] tun_chr_write_iter+0x15a/0x210 [ 246.401763][T11081] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 246.401788][T11081] vfs_write+0x57d/0x990 [ 246.401816][T11081] ksys_write+0xdc/0x1a0 [ 246.401894][T11081] __x64_sys_write+0x40/0x50 [ 246.401917][T11081] x64_sys_call+0x27e1/0x3020 [ 246.401944][T11081] do_syscall_64+0x136/0x3c0 [ 246.402039][T11081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.402066][T11081] RIP: 0033:0x7ffb4616e90e [ 246.402080][T11081] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 246.402096][T11081] RSP: 002b:00007ffb44c06fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.402113][T11081] RAX: ffffffffffffffda RBX: 00007ffb44c076c0 RCX: 00007ffb4616e90e [ 246.402129][T11081] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 00000000000000c8 [ 246.402184][T11081] RBP: 00007ffb44c07090 R08: 0000000000000000 R09: 0000000000000000 [ 246.402198][T11081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.402212][T11081] R13: 00007ffb46436038 R14: 00007ffb46435fa0 R15: 00007fff0d8e6508 [ 246.402233][T11081] [ 247.443352][T11086] loop7: detected capacity change from 0 to 512 [ 247.486542][T11086] EXT4-fs (loop7): 1 truncate cleaned up [ 247.496493][T11086] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.610721][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.677726][T11090] loop7: detected capacity change from 0 to 512 [ 247.717556][T11090] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 247.730895][T11092] loop8: detected capacity change from 0 to 512 [ 247.759571][T11090] System zones: 1-12 [ 247.765313][T11092] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.789144][T11090] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.2221: error while reading EA inode 32 err=-116 [ 247.831229][T11092] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.850219][T11090] loop7: lost filesystem error report for type 5 error -117 [ 247.850566][T11090] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.2221: error while reading EA inode 32 err=-116 [ 247.857921][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 247.857936][ C0] EXT4-fs (loop7): initial error at time 1786423418: ext4_xattr_inode_iget:446 [ 247.857953][ C0] EXT4-fs (loop7): last error at time 1786423418: ext4_xattr_inode_iget:446 [ 247.904042][T11092] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.943028][T11092] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.2222: corrupted xattr block 6: invalid header [ 247.957289][T11097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2223'. [ 247.991073][T11092] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 248.023109][T11100] ================================================================== [ 248.025157][T11092] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.2222: corrupted xattr block 6: invalid header [ 248.031306][T11100] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 248.052056][T11100] [ 248.054396][T11100] write to 0xffff88810984d808 of 8 bytes by task 11098 on cpu 0: [ 248.057404][T11090] loop7: lost filesystem error report for type 5 error -117 [ 248.062122][T11100] mas_wr_store_entry+0x33c0/0x5a90 [ 248.062161][T11100] mas_store_prealloc+0x421/0x670 [ 248.079682][T11100] commit_merge+0x69f/0x720 [ 248.081853][T11090] EXT4-fs (loop7): 1 orphan inode deleted [ 248.084214][T11100] vma_expand+0x2ce/0x430 [ 248.094302][T11100] vma_merge_new_range+0x295/0x310 [ 248.099476][T11100] mmap_region+0x109c/0x20c0 [ 248.104093][T11100] do_mmap+0x970/0xbc0 [ 248.108177][T11100] vm_mmap_pgoff+0x183/0x2d0 [ 248.109448][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2222'. [ 248.112783][T11100] ksys_mmap_pgoff+0xc1/0x310 [ 248.124829][T11090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.126308][T11100] x64_sys_call+0x14df/0x3020 [ 248.142962][T11100] do_syscall_64+0x136/0x3c0 [ 248.147577][T11100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.152607][T11092] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 248.153481][T11100] [ 248.153489][T11100] read to 0xffff88810984d808 of 8 bytes by task 11100 on cpu 1: [ 248.153507][T11100] mtree_range_walk+0x1aa/0x480 [ 248.177222][T11100] mas_walk+0x1ac/0x340 [ 248.181421][T11100] lock_vma_under_rcu+0xc9/0x210 [ 248.186395][T11100] do_user_addr_fault+0x237/0x1060 [ 248.191536][T11100] exc_page_fault+0x62/0xa0 [ 248.196050][T11100] asm_exc_page_fault+0x26/0x30 [ 248.200927][T11100] [ 248.203284][T11100] value changed: 0x00007f0ad0a75fff -> 0x00007f0ad0a54fff [ 248.210395][T11100] [ 248.212726][T11100] Reported by Kernel Concurrency Sanitizer on: [ 248.218888][T11100] CPU: 1 UID: 0 PID: 11100 Comm: syz.2.2224 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 248.229853][T11100] Tainted: [W]=WARN [ 248.233679][T11100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.243743][T11100] ================================================================== [ 248.271640][T11105] FAULT_INJECTION: forcing a failure. [ 248.271640][T11105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.285978][T11105] CPU: 0 UID: 0 PID: 11105 Comm: syz.7.2221 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 248.286015][T11105] Tainted: [W]=WARN [ 248.286047][T11105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.286058][T11105] Call Trace: [ 248.286064][T11105] [ 248.286070][T11105] __dump_stack+0x1d/0x30 [ 248.286146][T11105] dump_stack_lvl+0x95/0xd0 [ 248.286201][T11105] dump_stack+0x15/0x1b [ 248.286220][T11105] should_fail_ex+0x25e/0x270 [ 248.286255][T11105] should_fail+0xb/0x20 [ 248.286281][T11105] should_fail_usercopy+0x1a/0x20 [ 248.286331][T11105] _copy_from_user+0x1c/0xb0 [ 248.286355][T11105] do_ipt_set_ctl+0x42a/0x970 [ 248.286445][T11105] nf_setsockopt+0x199/0x1b0 [ 248.286511][T11105] ip_setsockopt+0x102/0x110 [ 248.286539][T11105] udp_setsockopt+0x89/0xa0 [ 248.286622][T11105] sock_common_setsockopt+0x69/0x80 [ 248.286648][T11105] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 248.286724][T11105] __sys_setsockopt+0x184/0x200 [ 248.286754][T11105] __x64_sys_setsockopt+0x64/0x80 [ 248.286825][T11105] x64_sys_call+0x2327/0x3020 [ 248.286866][T11105] do_syscall_64+0x136/0x3c0 [ 248.286924][T11105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.286953][T11105] RIP: 0033:0x7ffb461ae0d9 [ 248.286973][T11105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.286998][T11105] RSP: 002b:00007ffb44be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 248.287025][T11105] RAX: ffffffffffffffda RBX: 00007ffb46436090 RCX: 00007ffb461ae0d9 [ 248.287042][T11105] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 248.287073][T11105] RBP: 00007ffb44be6090 R08: 0000000000000280 R09: 0000000000000000 [ 248.287090][T11105] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.287108][T11105] R13: 00007ffb46436128 R14: 00007ffb46436090 R15: 00007fff0d8e6508 [ 248.287135][T11105] [ 248.535738][ T4454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.660366][ T7919] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.318171][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 252.318185][ T28] audit: type=1400 audit(1786423422.961:2820): avc: denied { write } for pid=11108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.353079][ T28] audit: type=1400 audit(1786423422.988:2821): avc: denied { write } for pid=11119 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.240759][ T28] audit: type=1400 audit(1786423424.726:2822): avc: denied { write } for pid=11122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.270999][ T28] audit: type=1400 audit(1786423424.753:2823): avc: denied { write } for pid=11133 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1