last executing test programs: 9m45.184195907s ago: executing program 4 (id=5): pipe2(0x0, 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000140), 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000000c0)=0x2001) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000080), 0x74) readv(r7, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) sendmsg$kcm(r7, &(0x7f0000000900)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @private=0xa010101}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000580)="a2f3b6349ad1ac45ae340f8c1ee2a4cde8a627d4ec922b737d011d9b1c114397a856891472c6457c42978583989cfd084720a58ef59489e4b0b1e0a59fa900502643e4ac3d9d47c62cf8b88516170391b6e7872bd3f0a93bf223359b1ffd346a252a4a3b4086f92d255c976241d92e0355ddacbc008e687956054bf5d493f693a9927286c8a7bb98c2072b9e149f2fb448258366c516f04ba04cbf61ccb4e60ad5c3b898df288f548e552fb202300c8324bfb9cd06f1bb9bc013", 0xba}, {&(0x7f0000000640)="0ad31fe722cd926f123b13e4fb9d6bc32e5ec2e059d5fd4b00ce41366031193974a367570dd09d9267cdbb777ffbb30d7f1674739cd77cd0ceb10e2367f6a8ca0c064e03da137060cce331657aeceff0cbcd9fb851740af1df242a0d5ade3f5a99224ac5cdc918079a13e298d4257cb4c3410119f0d15d7797089276931cbe9dea8e2bf349a19e897520212c453addf64ba5d55ac403eab041e86200c495c344c13749276b8e0c7d96ce6603b7881c55525319ecfa1069c4f9479b62aaabc99f2363b23abf059dfe46accdb8f02309a88ae0250aed0f8e33db3a159191af68d0f0cef5396c2c7bef2b74421cfb485ebc3ded38", 0xf3}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="d0000000000000001501000009000000e96d328c845af2aa1b41ff608e40f01b76ff648d88c4ac7e61d0463d5ac436e407c919ff33c9b16acf9d9092560c2a3a173da83dc6d4743a286e4d6dae8526109260ae856484007cae45e3099a4c401297ab697fb4167aaac66296693ef0fabaaeaa1d55bf70d354a5a488c9c2c2c324ef74be534c778935c70f0a53f74ca5d2a18372a43b033e193d83affc5f4854634419f20261efe905c22a9565d1458ca0420547c911f99dbb5c8697960f50b3a5e98f1fef4e3f7b9ea8094b6721530000880000000000000006000000040000008932e72d44659d2cabd3e04efa31872a5d7f9996c3b2a8da0768ef9a4c2b7aa2660d4a16c680d38285dcc097ff6b986766665197685bf1a813635c4aa199c4c552e1935a04c2edecc31039405b8012949804ab841584120aa9f6ff0e8c543af9923f83998ec75a1a3ddc52b7d8de00"/344], 0x158}, 0xc005) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000280)='veth\x00') writev(r5, &(0x7f0000000180), 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400), 0x4) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) 9m42.436664112s ago: executing program 4 (id=13): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10000d, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x4, 0x5, 0xa, 0x3, 0x0, 0x2, 0x600, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x4, 0x80000000}, 0xea, 0x7, 0x6, 0x1, 0x8, 0xb2, 0xfffc, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x3) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0xa1, 0x0, 0x42}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000000c0)={r2, r3/1000+60000}, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f0000000280)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e61740064000000060a010400000000000000000100000008000b40000000003c000480240001800b0001007470726f78790000140002800800014000000002080003400007000000000000000001006578746864720000040002800900010073797a30"], 0xd4}}, 0x40000) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x1, 0x0, 0x0, 0x0, @broadcast}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r6 = syz_io_uring_setup(0x7464, &(0x7f0000000100)={0x0, 0x80000000, 0x200, 0x1, 0x5}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x2b, 0x4, 0x0, 0x0, 0x0, 0x200000004, 0x590, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x4, 0x6}, 0x102260, 0x10008, 0x0, 0x1, 0x7, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r8, 0x0, r8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000040)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYRES64], 0x310) 9m41.378231417s ago: executing program 4 (id=17): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x0, 0x0, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xb, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = getpgrp(r1) socket$netlink(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000c40)='./file2\x00', 0x808080, &(0x7f00000001c0), 0x2c, 0x52c, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b442, 0xa) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)=ANY=[@ANYBLOB="2c000000000b010300000000000000000200000a08000340e1ffffff0d000100727066696c74657200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) msgctl$MSG_STAT(0x0, 0xb, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026, r2}, &(0x7f0000000140)={0x0, 0x400, 0x9, 0xf036, 0x4, 0x80}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 9m37.915160389s ago: executing program 4 (id=26): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000203050000000000000000004885000208000100"], 0x1c}}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r5) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="11002dbd7000fcdbdf250200"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x181080) 9m35.086730186s ago: executing program 4 (id=30): prlimit64(0x0, 0xd, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file1\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listns(&(0x7f00000003c0)={0x20, 0x0, 0x9, 0x4000000, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000300)={[{@mblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@data_err_ignore}, {@inlinecrypt}, {@mb_optimize_scan}, {@journal_ioprio}]}, 0x3e, 0x51a, &(0x7f0000001200)="$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") perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800010025bd70007f8a47353a5b581e4309dbdf", @ANYRES32=0x0, @ANYBLOB="100804000300000008001b0000000000080028004c6f00000800290000000100"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) close(r3) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r3) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$RNDGETENTCNT(r6, 0x80045200, 0x0) 9m19.591188515s ago: executing program 32 (id=30): prlimit64(0x0, 0xd, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file1\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listns(&(0x7f00000003c0)={0x20, 0x0, 0x9, 0x4000000, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000300)={[{@mblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@data_err_ignore}, {@inlinecrypt}, {@mb_optimize_scan}, {@journal_ioprio}]}, 0x3e, 0x51a, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800010025bd70007f8a47353a5b581e4309dbdf", @ANYRES32=0x0, @ANYBLOB="100804000300000008001b0000000000080028004c6f00000800290000000100"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) close(r3) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r3) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$RNDGETENTCNT(r6, 0x80045200, 0x0) 5m55.152027016s ago: executing program 0 (id=606): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtaction={0xe98, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe84, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x29, 0x67fb, 0x7}, {0x100, 0x0, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x36b, 0xd, 0x517, 0x1, 0x802}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x11, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x5, 0x6}, {0x9, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x404}, {0xfffffff9, 0x6, 0xfffffffa, 0xc3, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x66, 0x0, 0x7, 0x8, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x1000, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0x0, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x9, 0x4, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0x1, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x0, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x400, 0x7}, {0x28000, 0xf, 0x20009, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x80000000, 0x4, 0x70a, 0x8}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x8, 0x80000001, 0x3d2, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0xffffffff, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0xc4, 0x62182213, 0x8, 0x3, 0x8f4c}, {0x36b, 0xb6, 0xfffffffd, 0x5f60be42, 0x8, 0x9}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x6, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x80000009, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x8, 0xfffffffe, 0x3ff}, {0xfffffffe, 0x800, 0x2, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x8000, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x1, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x8b59, 0x5}, {0x80000001, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x3a, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x202, 0x39, 0x9d6, 0x5}, {0xb, 0xf, 0x1, 0x5c665eda, 0x9, 0x2}, {0x0, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0xfffffffe, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x1, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x7fd}, {0x8, 0xf, 0x7, 0x3, 0x8001, 0x400}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0x7, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0004, 0x2}, {0x401b, 0x7, 0x96, 0xf2a, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0xa}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x3, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d0, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x2, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x100005, 0x6, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0x10001}, {0xb, 0xd, 0x4000009, 0x30, 0x7, 0x7}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x6, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x6, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x4}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1, 0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x6, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB="337c00000100000081"]) accept$unix(r2, &(0x7f0000001340), &(0x7f0000000340)=0xffffffbe) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 5m49.769949504s ago: executing program 0 (id=611): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0x10, 0x3, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000040)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000100090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{0x0}], 0x1, &(0x7f00000014c0)=""/45, 0x2d}}], 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001280)={0x30000010}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000000), 0x1, 0x0, 0x27}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x40404, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(r6) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d00000000002010400000000000000000a000000440001802c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000a800500010098fdffff05000340800200003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400fe8800000000000000000000000001013c0002802c00018014000300fe80000000000000000000000000003b14000400fc0200000000000000000000000000010c0002"], 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab23bdf000fdffffff32000000080017015900000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x2000c800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x34, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xcf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000001640)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES8=r4, @ANYRESDEC, @ANYRESOCT=r0, @ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r8, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) r9 = socket(0x10, 0x3, 0x0) r10 = getpid() r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r10, r11, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x1}, 0x10) 5m47.666552534s ago: executing program 0 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x60480) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xffffff8f, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x86f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) socket(0x2, 0x2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000140001032dbd7000fcdbdf250b"], 0x1c}}, 0x0) connect$tipc(r4, 0x0, 0x0) shutdown(r4, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x28, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x402}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x6c}}, 0x8000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x100, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x169) write$binfmt_aout(r8, &(0x7f0000000100)=ANY=[], 0xc8) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000000104010400000000000000000700000608005dd5fe0340000000050500010002000000080004400000000108000440002ff486e229aad23e019e20e9aa91d2f338f2fd9f9a"], 0x34}, 0x1, 0x0, 0x0, 0x6000001}, 0xc001) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x1) 5m45.689723551s ago: executing program 0 (id=621): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x4, 0x2, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10) openat$ptp0(0xffffffffffffff9c, 0x0, 0x101001, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x7, 0x1, 0x40000}, 0x1) acct(0x0) socketpair(0x23, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000200)='\xf4\x9da`yv\xa9\x97-\x94\x1c|J+0l\xe88G[\xf8kT\x97\x83_\xc8\xd7|n\x9c\xc9U\xd35\nM9\x1f\b\x00\x00\x00\x00\x00\x00\x00\x89B\xbbF.\vy\xa1\xa1\xcd\r\xd9\x8e\x06Bqj\xd6\x10\xb1d\xde\x84\x91\n\xf6\xa6X\xa2B\x04\x0f\x12J\xdfB&\x8c\xfd\xcaU*\xfd\x80\xb4o\xc2T\v\a\xebFb\x122', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x110005, 0x3, 0xfffffbff, 0x6, 0x1, 0x0, 0x7, 0x0, 0x4, 0x0, 0x1000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0xb20) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) close(r3) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r4, &(0x7f0000000200)=""/154, 0x9a, 0x100, &(0x7f0000000480)=@xdp={0x2c, 0x7, 0x0, 0x11}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000060a010400000000000000000a0000010900010073797a310000000018000480140001800b00010064796e7365740000040800800900020073797a3200000000140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 5m44.47060665s ago: executing program 0 (id=629): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x1, 0x1}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x0) ioctl$sock_SIOCOUTQ(r7, 0x5411, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0x58) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r9) 5m44.098842359s ago: executing program 0 (id=631): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x8, 0x205, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x4}, 0x104709, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffc, 0x0, 0x0, 0x2000000, 0x0, 0x40000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000500)) socketpair(0x1, 0x2, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x100, r4, 0x0, 0x0, 0x80000000}]) io_getevents(r5, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r2, 0xffffffffffffffff, 0x400000000000000) 5m43.145513711s ago: executing program 33 (id=631): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x8, 0x205, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x4}, 0x104709, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffc, 0x0, 0x0, 0x2000000, 0x0, 0x40000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000500)) socketpair(0x1, 0x2, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x100, r4, 0x0, 0x0, 0x80000000}]) io_getevents(r5, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r2, 0xffffffffffffffff, 0x400000000000000) 5m32.742266819s ago: executing program 5 (id=652): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c2000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 5m32.70346866s ago: executing program 5 (id=653): r0 = getuid() setreuid(r0, r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x4000002, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x1006, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x800, 0x6, 0x9f, 0x7, 0xffff519b, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x105, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xfd, 0xa, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x6a, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x5, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x2, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x8, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x0, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) inotify_init() removexattr(0x0, &(0x7f0000000500)=@known='system.posix_acl_default\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000200)) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f00000002c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000004000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000005"], 0xfc}}, 0x0) r7 = socket$kcm(0xf, 0x3, 0x2) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$MON_IOCQ_URB_LEN(r8, 0x9201) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r9 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r9, &(0x7f0000000580)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x7, @loopback, 0x0, 0x2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)="3f74bb33", 0x4}], 0x1}, 0x40854) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x6d, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}]}, &(0x7f0000000140)=0x10) 5m31.686668024s ago: executing program 5 (id=655): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000600)=0xfffffffe, 0x4) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000b59d0085000000860000001801"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000e40)='ns/cgroup\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x7}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xc}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', r0, 0x4000, r3}, 0x18) r8 = fsmount(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb7020000ffffff1fb50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100"], 0x18) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2d, 'cpuset'}]}, 0x8) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b00000000000010040000000b000000000000010000000025006c04073980727e0000080300000006000000000000010000000051006d07050000000000000800001400000000000000000a0100"], 0x0, 0x6a}, 0x28) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r3, 0x4, 0x42000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r3, 0x4, 0x4800) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x4eda0a90bb2acc2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc, 0x75}, 0x0, 0x0, 0x0, 0x3, 0xffc, 0x8001, 0x8000}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r5, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x388, 0x0, 0x1a0, 0xfeffffff, 0x1a0, 0x248, 0x2f0, 0x2f0, 0xffffffff, 0x2f0, 0x2f0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key=0x7fff}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @local, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000005ff070200000000000300000d020000000700000000000000f6c7634bf5691f58d25715ad43b2090000000300000001000000030000000000"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0x9, 0x32e}, 0x28) 5m26.265549563s ago: executing program 5 (id=662): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x70bd2b, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{}, {0xffff9}, {0x1, 0x0, 0x1}, {0x7}, {0x100}, {0x8}, {0x1, 0x0, 0x1}, {0x4}, {0x0, 0x0, 0x1}, {0x6}, {0x6, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {}, {0x3}, {}, {0x5}, {0x6}, {0x7, 0x0, 0x1}, {0x4}, {0x1}, {0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x2}, {0xa, 0x0, 0x1}, {0x9a7d, 0x0, 0x1}, {0xf7, 0x0, 0x1}, {0x87, 0x0, 0x1}, {0xda7e, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x7}, {0x1, 0x0, 0x1}]}]}, 0xa0}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r4, 0x0, 0x0}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@grpquota}, {@init_itable}, {@norecovery}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4be, &(0x7f0000000980)="$eJzs3MtvG0UYAPBvN4++m7SURx9Q8xIRhaRJC/TAARBIvSAhwaEcQxqq0rRFTZBoVdEUoXJE8A8ARyQkTlw4gYQQcAJxhTtCqlAvLRyQ0dq7jV0/4jgvqH8/yc7M7oxnv90de7yTdQA9q5Q9JRFbI+LXiBiqZusLlKp/bly7OPXXtYtTSZTLL/+ZVMpdv3Zxqiha1NuSZ0bSiPS9JPY2aXf2/IVTkzMz0+fy/Njc6TfHZs9fePzk6ckT0yemz0wcOXL40PhTT0480VEclxZZn8V1fc87Z/ftPvrqhy9OleO1Hz7Ptndrvr42jqrhjtptpxSlKOcWlg5Wnh9e9qv/t2yrSSf967ghLElfRGSHa6DS/4eiLxYO3lC88O7NzLeNdT9aq40EVkX22bSjYWlf9U9/XgC4TSW6OPSo4hM/+/5bPNZ0ALLOrj6bPU9X4r+RP6pr+iPNvssOV7+x97Wof1f7ly8PLdL+1og4Nv/3x9kjml6HAABYWV9n45/Hmo3/0rqxzfZ8DmU4Ig5ExM6IuCMidkXEnfk46O6IuGeJ7ZduyTeOf37e1FVgHdocEU/nc1v14780L5HczG2rxD+QvH5yZvpgvk9GYmBDlh9v08Y3z//yQat1pZrxX/bI2i/Ggvl2/NG/ob7O8cm5yWWEXOfq5Yg9/c3iT27OBGR7YHdE7Oni9bN9dvLRz/Zl6e1bGtcvHn8bKzDPVP404pHq8Z+PW+IvJNWWWs1Pjm2MmemDY8VZ0ejHn668VJsfqEnXxb+xs5g2dhtsE9nx39z0/M/jL7pBMV87u/Q2rvz2fsvvNI3HP4lj87Ul8vO/5l0gO/8Hk1cq6cF82duTc3PnxiMG8wV1yycW6hb5onwW/8iDzfv/zoh/Psnr7Y2I7CS+NyLui4j9+bbfHxEPLHJEvn/uoTfa76Euz/+43FmxNrL4j7c7/hHDSe18fReJvlPffdWq/c7e/w5XUiP5kk7e/zrdwOXsOwAAAPi/SCtz0Ek6WqRrLk7tis3pzNnZuQOleOvM8epc9XAMpMWVrqGa66Hj+bXhIj9xS/5QROyo/KfRpkp+dOrszLb1DByo3KtT1/8jTUdHq+t+b/VPL8DtY0nzaLV3B37x5cpvDLCm3K8JvUv/h96l/0Pv0v+hdzXr/5cibqzDpgBrzOc/9C79H3qX/g+9S/+HntR4S3zxQwvd3Om/kNh5dFnVVz1RHlqVV55feq2+VYo0an+0o2UiiYjumoi0fZnBDlpft0S6aJlnFtstA8v6TYwssT9PbIiITmtdWrO9WrxDJMm6vTkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsgH8DAAD//0qp3GU=") sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x40, 0x20400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1194a}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0xc091, 0x4, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x42044045}, 0x4000) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 5m22.926727872s ago: executing program 5 (id=668): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3030, 0x1, 0xbd6, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000014c0)=ANY=[@ANYBLOB="ff00000000ee0000"], 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}}, &(0x7f0000000500)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@assoc_value={r0, 0x6325}, &(0x7f00000005c0)=0x8) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x526, &(0x7f0000001100)="$eJzs3U9vG2kZAPBnJnY2abPrLHBYVmJ3xS5KIqjTbOhuhNACEoLTSoVyDyFxoyhOXMVO20QVpOIDICEESFzgxAWJD4CE+hEQUiW4I0CgClo4cCgMsj1OQ2qnierYJfn9pDfzzj8/z2tnxvPOjDwBnFtvRcR0RGRZls1ERCmfnuYl9tqludyjh3eWmyWJLLv2tySSfFrntV7Khxfz1cYi4utfjfhW8nTc+s7u+lK1WtnKx2cbG8njLNu9tLaxtFpZrWzOvxLvLby/cGXhcl/aORkRH3z5zz/83s+/8sGvP3PrD4t/nf52u4FtB9vRT+2mF1vvRUchIrZOI9iQFFotbLsy5FwAADha83j/IxHxyYiYiVKMtI7mWmaGmxkAAADQL9kXJuJx0r7+BwAAAJxNaURMxNXRcn6/70Skabncvof3Y3EhrdbqjU9npf3zBZNRTK+vVSuX83sHJqOYNMfn8ntsO+PvHhqfj4hXI+IHpfHWeHm5Vl0Z6pkPAAAAOD8utvr8Sdrp//+z1O7/AwAAAGfM5LATAAAAAE6d/j8AAACcffr/AAAAcKZd/fDDZsk6z79eubmzvV67eWmlUl8vb2wvl5drWzfKq7Xa6oNCRG3jWa9XrdVufDY2t2/PNir1xmx9Z3dxo7a92Vhc+59HYAMAAAAD9Oqb936fRMTe58bTiMiSA/OKEdnIwYULg88POD3pSRb+0+nlAQzeyLATAIbGIT2cX8VhJwAM3bP2Az1v3vlN/3MBAABOx9TH96//t0rTaD4v6b7K3uCyA05Tfv0/6bGtA2eY6/9wfnXO+7sPAM6f4lFHADoFcOalx9jUn//6f5adKCkAAKDvJlolSct5P2Ai0rRcjni59ViAJ2cFX4mI35WKL11fq1bmWlMSpwcAAAAAAAAAAAAAAAAAAAAAAAAA4JiyLImsh/bTAGO013wAAADg/0NE+pckf/7XVOmdicPnB0aTf5Vaw4i49ZNrP7q91GhszTWn/31/euPH+fR3B376AgAAAOii00/v9OMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ8ePbyz3CmDjPvgSxEx2S1+IcZaw7EoRsSFfyRROLBeEhEjfYi/dzciXusWP2mmFZN5FofjpxExPuT4F/sQH86ze839zxe7bX9pvNUadt/+Cnl5Xu3930jX+J3930iP/d/L3V4wfXrS6/d/Odsz/t2I1wvd9z+d+En+JhQOxG6Wt4/Zxm9+Y3e317zsZxFTXb9/kv1lmrXZpHBjtr6ze2ltY2m1slrZnJ+fe2/h/YUrC5dnr69VK/nfrjG+/4lf/eeo9l/oEX/ySfu7vv/vHLP9/75/++FH29XioVnF+GmWTb/d/f/vtXb8zy8eit/57vtU/nE3x6c69b12/aA3fvHbN948ov0rPdo/9oz2Tx+z/TNf++4fj7koADAA9Z3d9aVqtbJ1skoSsfccq6v0qozHC5FGnyvjMcCgS3HUMp2D2AHk85081AvxEZy4Mrx9EgAAcDqS/YP+YWcCAAAAAAAAAAAAAAAAAAAA51d9Z/TI3yc75s/RPcraui5zOObecJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCk/wYAAP//CIzIxg==") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000000280)='./file2\x00', r1, &(0x7f0000000000)='./file2\x00') r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x404, 0xfffffffd, 0x5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xfffffffffffffbff, 0x1}, 0x10ecc8, 0x1224, 0x99c2, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r4, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x7, {0xa, 0x4e24, 0x9, @private0, 0x80}}}, 0x3a) getsockopt(r4, 0x111, 0x2, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000240)=0xbd7) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0x0, 0xfff3}, {0x9, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041044}, 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1f, 0x0, &(0x7f00000001c0)) 5m7.44063622s ago: executing program 34 (id=668): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3030, 0x1, 0xbd6, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000014c0)=ANY=[@ANYBLOB="ff00000000ee0000"], 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}}, &(0x7f0000000500)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@assoc_value={r0, 0x6325}, &(0x7f00000005c0)=0x8) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x526, &(0x7f0000001100)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000000280)='./file2\x00', r1, &(0x7f0000000000)='./file2\x00') r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x404, 0xfffffffd, 0x5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xfffffffffffffbff, 0x1}, 0x10ecc8, 0x1224, 0x99c2, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r4, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x7, {0xa, 0x4e24, 0x9, @private0, 0x80}}}, 0x3a) getsockopt(r4, 0x111, 0x2, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000240)=0xbd7) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0x0, 0xfff3}, {0x9, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041044}, 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1f, 0x0, &(0x7f00000001c0)) 8.238190885s ago: executing program 6 (id=3670): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x2, 0xac0, 0xfd, 0xb0ff, 0x2, "c74192f3b7e8720700000000000010ee0800", 0x2, 0xcd3dc55}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xfd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x8) 8.176876916s ago: executing program 6 (id=3671): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xd6, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "00000080072000", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800b66cf7e6a5", 0x7}], 0x1) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xb85fc3955e481f28, 0x0) sendmsg$can_bcm(r1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000016a40)={0x0, 0x0, &(0x7f00000169c0)=[{&(0x7f0000016940)="17864d", 0x3}], 0x1}, 0x40000) 6.672545162s ago: executing program 7 (id=3676): syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2bfef011, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "d7"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xa}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) 6.399058698s ago: executing program 7 (id=3677): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x1) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x1}) close(0x3) 6.32419337s ago: executing program 7 (id=3678): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa2a, &(0x7f0000000240)="$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") r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) file_getattr(r1, 0x0, &(0x7f0000006040), 0x18, 0x1000) 6.126359395s ago: executing program 7 (id=3679): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r1, 0xc29, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) 6.056903026s ago: executing program 6 (id=3680): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x600000000000000) 5.998236507s ago: executing program 7 (id=3682): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x40000000001ffd]}, 0x8, 0x0) readv(r0, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) signalfd4(r0, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 5.177201197s ago: executing program 6 (id=3691): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 5.116612639s ago: executing program 6 (id=3693): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) 5.116142089s ago: executing program 7 (id=3694): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x1, 0x1}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x0) ioctl$sock_SIOCOUTQ(r8, 0x5411, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000040)={0x3, 'veth0\x00', {0x4}, 0x7}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000100)=0x58) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r10) 4.981667771s ago: executing program 6 (id=3697): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x1, 0x1}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x0) ioctl$sock_SIOCOUTQ(r8, 0x5411, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000040)={0x3, 'veth0\x00', {0x4}, 0x7}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000100)=0x58) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r10) 3.487178147s ago: executing program 3 (id=3713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c0002801800038010000180080001000900000004000300"], 0x48}}, 0x0) 3.382122269s ago: executing program 3 (id=3715): r0 = socket$qrtr(0x2a, 0x2, 0x0) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='user.\b', @ANYRESOCT, @ANYBLOB="d4a54f2fa13bc6e0b6c63f542f1988dc8f"], 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.324916121s ago: executing program 3 (id=3717): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1, 0xffffffffffffffff, 0x60ff}, 0xc) 3.100122896s ago: executing program 3 (id=3719): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffff80, 0x58e300cd, 0xfffffffffffffffb, 0x10000000000040, 0x9, 0xf7a}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 3.053735638s ago: executing program 3 (id=3720): write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x220, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) 2.779473754s ago: executing program 3 (id=3723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, 0x0}, 0x20) fdatasync(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x1, 0x1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x20000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="810026bd7000fedbdf25050000000800090002000000060001000b00000008000c00aa0a000008000b00040000000c0016"], 0x40}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) 2.458838422s ago: executing program 2 (id=3727): unshare(0xe060400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x11, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000140)) 2.322460255s ago: executing program 1 (id=3729): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0xae5, 0x0) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2.322305825s ago: executing program 2 (id=3730): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) sendfile(r0, r1, 0x0, 0x20000000000002) 2.299703796s ago: executing program 1 (id=3731): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183442, 0x25) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2.272741606s ago: executing program 2 (id=3732): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendfile(r1, r0, &(0x7f0000000000)=0x4, 0xffff) 2.130362079s ago: executing program 2 (id=3733): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x1, 0x1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x20000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="810026bd7000fedbdf25050000000800090002000000060001000b00000008000c00aa0a000008000b00040000000c0016"], 0x40}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) 1.612023672s ago: executing program 1 (id=3734): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1cb842, 0x104) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="01d1", 0x2, 0x10001}]) 429.63652ms ago: executing program 1 (id=3735): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) semop(0x0, &(0x7f0000000180)=[{0x1, 0xfffd}], 0x1) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) 246.420644ms ago: executing program 1 (id=3736): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffffff}, 0x10) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 234.155645ms ago: executing program 2 (id=3737): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) connect$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r1, 0x2, {0x0, 0xff, 0x1}, 0xfe}, 0x18) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000080)=0x3, 0x4) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000005c0)={0x4, 0x80, 0x0, 0x0, 0x80, 0xf8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x666c}, 0x8000, 0x7, 0x1, 0x4, 0x4, 0x8001, 0x67c}, r8, 0x4, 0xffffffffffffffff, 0x0) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r5, 0x0, 0x0, 0x41) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x2, {0x0, 0xff, 0x3}}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2000c083}, 0x20000050) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) 186.500056ms ago: executing program 1 (id=3738): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)='o', 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x20004000) 0s ago: executing program 2 (id=3739): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x58e, &(0x7f0000000bc0)="$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") sync() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') kernel console output (not intermixed with test programs): Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota [ 456.069218][ T9667] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 456.082609][ T9659] EXT4-fs (loop3): 1 truncate cleaned up [ 456.091403][ T9677] vhci_hcd vhci_hcd.3: invalid port number 254 [ 456.121150][ T9667] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1313: bg 0: block 15: invalid block bitmap [ 456.140874][ T9659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.147653][ T9667] loop2: lost filesystem error report for type 5 error -117 [ 456.153622][ T9667] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 456.161000][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 456.161027][ C1] EXT4-fs (loop2): initial error at time 1784111046: ext4_validate_block_bitmap:432 [ 456.161058][ C1] EXT4-fs (loop2): last error at time 1784111046: ext4_validate_block_bitmap:432 [ 456.196533][ T9659] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.206225][ T9667] loop2: lost filesystem error report for type 5 error -117 [ 456.212384][ T9667] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.1313: data will be lost [ 456.230913][ T28] audit: type=1400 audit(1784111047.056:1525): avc: denied { setattr } for pid=9658 comm="syz.3.1309" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 456.264641][ T9667] EXT4-fs (loop2): 1 truncate cleaned up [ 456.290901][ T9667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 456.321081][ T9667] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.1313: corrupted xattr block 31: invalid header [ 456.334906][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.369512][ T9667] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 456.406378][ T9667] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.1313: corrupted xattr block 31: invalid header [ 456.518630][ T9667] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 456.540522][ T9667] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.1313: bad symlink. [ 456.569325][ T28] audit: type=1400 audit(1784111047.386:1526): avc: denied { create } for pid=9715 comm="syz.7.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 456.651250][ T28] audit: type=1400 audit(1784111047.416:1527): avc: denied { write } for pid=9715 comm="syz.7.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 456.732634][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.191682][ T9733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1344'. [ 457.255774][ T9733] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1344'. [ 457.534519][ T9751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1353'. [ 457.579546][ T9751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1353'. [ 457.656477][ T28] audit: type=1400 audit(1784111048.466:1528): avc: denied { ioctl } for pid=9756 comm="syz.6.1355" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 457.793391][ T9765] loop6: detected capacity change from 0 to 512 [ 457.840596][ T9765] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 457.882422][ T9769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1361'. [ 458.097617][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1362'. [ 458.132501][ T9775] tun0: tun_chr_ioctl cmd 2147767506 [ 458.570447][ T9761] netlink: 'syz.2.1357': attribute type 4 has an invalid length. [ 458.903124][ T28] audit: type=1400 audit(1784111049.716:1529): avc: denied { append } for pid=9798 comm="syz.1.1371" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 460.532816][ T9827] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1382'. [ 460.559424][ T9827] unsupported nlmsg_type 40 [ 461.191351][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1397'. [ 461.225235][ T9841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9841 comm=syz.6.1390 [ 461.311619][ T9854] loop6: detected capacity change from 0 to 256 [ 461.403386][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 463.660861][ T9908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9908 comm=syz.7.1417 [ 463.997602][ T28] audit: type=1400 audit(1784111054.786:1530): avc: denied { accept } for pid=9911 comm="syz.3.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 464.663011][ T9908] loop7: detected capacity change from 0 to 256 [ 465.641852][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1420'. [ 465.651792][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1420'. [ 466.729035][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1422'. [ 467.077941][ T9929] netlink: 'syz.6.1423': attribute type 1 has an invalid length. [ 467.437981][ T9966] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1440'. [ 467.484825][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 467.700755][ T9978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9978 comm=syz.1.1446 [ 469.715268][ T9978] loop1: detected capacity change from 0 to 256 [ 472.634304][T10037] tmpfs: Bad value for 'nr_inodes' [ 472.861589][ T28] audit: type=1400 audit(1784111063.676:1531): avc: denied { write } for pid=10046 comm="syz.3.1474" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 473.073399][ T28] audit: type=1400 audit(1784111063.886:1532): avc: denied { mounton } for pid=10060 comm="syz.1.1480" path="/314/file0" dev="tmpfs" ino=1691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 473.250671][T10074] loop7: detected capacity change from 0 to 256 [ 473.340874][T10078] usb usb1: usbfs: process 10078 (syz.3.1489) did not claim interface 7 before use [ 473.468250][T10089] netlink: 'syz.7.1494': attribute type 1 has an invalid length. [ 473.507205][T10089] netlink: 131740 bytes leftover after parsing attributes in process `syz.7.1494'. [ 473.589745][ T28] audit: type=1400 audit(1784111064.406:1533): avc: denied { read } for pid=10095 comm="syz.3.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 473.902798][ T28] audit: type=1400 audit(1784111064.716:1534): avc: denied { write } for pid=10125 comm="syz.3.1512" path="socket:[26971]" dev="sockfs" ino=26971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 473.974646][T10130] loop2: detected capacity change from 0 to 256 [ 474.078681][ T28] audit: type=1400 audit(1784111064.896:1535): avc: denied { bind } for pid=10143 comm="syz.7.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 474.105331][T10142] loop3: detected capacity change from 0 to 2048 [ 474.167720][T10142] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a840c029, mo2=0003] [ 474.190349][T10142] System zones: 0-7 [ 474.196547][T10142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.252705][T10142] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1520: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 474.253528][ T28] audit: type=1400 audit(1784111065.066:1536): avc: denied { write } for pid=10139 comm="syz.3.1520" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 474.293123][T10142] EXT4-fs (loop3): Remounting filesystem read-only [ 474.320012][T10167] deleting an unspecified loop device is not supported. [ 474.335252][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.345495][ T28] audit: type=1400 audit(1784111065.156:1537): avc: denied { getopt } for pid=10168 comm="syz.6.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 474.405567][ T28] audit: type=1400 audit(1784111065.196:1538): avc: denied { connect } for pid=10172 comm="syz.2.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 474.483347][ T28] audit: type=1400 audit(1784111065.296:1539): avc: denied { getopt } for pid=10186 comm="syz.6.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 474.504308][T10185] RDS: rds_bind could not find a transport for fe80::a, load rds_tcp or rds_rdma? [ 474.631867][T10204] netlink: 'syz.2.1550': attribute type 9 has an invalid length. [ 474.639925][T10204] netlink: 'syz.2.1550': attribute type 6 has an invalid length. [ 474.650715][T10204] netlink: 'syz.2.1550': attribute type 7 has an invalid length. [ 474.669810][T10204] netlink: 'syz.2.1550': attribute type 8 has an invalid length. [ 475.742753][T10222] ieee802154 phy0 wpan0: encryption failed: -22 [ 476.121779][T10225] gre0 speed is unknown, defaulting to 1000 [ 476.740540][ T28] audit: type=1400 audit(1784111067.556:1540): avc: denied { nlmsg_read } for pid=10229 comm="syz.6.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 477.534322][T10244] netlink: 'syz.6.1565': attribute type 2 has an invalid length. [ 477.648993][T10256] loop2: detected capacity change from 0 to 1024 [ 477.674224][T10264] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 477.691823][T10256] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 477.717716][T10256] System zones: 0-1, 3-12 [ 477.727223][T10256] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.757285][T10256] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 16: comm syz.2.1571: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0 [ 477.919833][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 481.683700][T10349] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1612'. [ 481.694669][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 481.694689][ T28] audit: type=1400 audit(1784111072.496:1542): avc: denied { setattr } for pid=10347 comm="syz.3.1611" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 481.802685][ T28] audit: type=1400 audit(1784111072.556:1543): avc: denied { shutdown } for pid=10352 comm="syz.7.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 482.106502][T10403] x_tables: duplicate underflow at hook 4 [ 482.143565][T10407] loop7: detected capacity change from 0 to 256 [ 482.155037][ T28] audit: type=1400 audit(1784111072.956:1544): avc: denied { read } for pid=10408 comm="syz.2.1641" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 482.197016][T10407] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 482.219780][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1642'. [ 482.245376][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1642'. [ 482.341937][T10407] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 482.346741][ T28] audit: type=1400 audit(1784111072.976:1545): avc: denied { open } for pid=10408 comm="syz.2.1641" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 482.387458][ T28] audit: type=1400 audit(1784111072.976:1546): avc: denied { ioctl } for pid=10408 comm="syz.2.1641" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 483.486681][T10442] loop3: detected capacity change from 0 to 512 [ 483.508946][T10442] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 483.538330][T10442] EXT4-fs (loop3): mounted filesystem 007f0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.562747][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1650'. [ 483.581015][T10442] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.764393][T10462] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1659'. [ 483.773885][T10462] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1659'. [ 483.866762][ T3295] EXT4-fs (loop3): unmounting filesystem 007f0000-0000-0000-0000-000000000000. [ 483.961113][T10466] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 484.020156][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1663'. [ 484.155200][T10485] loop1: detected capacity change from 0 to 1764 [ 484.259467][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1671'. [ 484.314346][T10498] ieee802154 phy0 wpan0: encryption failed: -22 [ 484.331585][T10500] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1675'. [ 484.376969][T10500] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1675'. [ 485.550342][T10515] usb usb1: usbfs: process 10515 (syz.2.1681) did not claim interface 0 before use [ 487.365472][T10527] __nla_validate_parse: 1 callbacks suppressed [ 487.365496][T10527] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1685'. [ 487.580811][T10527] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1685'. [ 488.045812][T10531] loop7: detected capacity change from 0 to 2048 [ 488.081343][T10531] EXT4-fs: Ignoring removed nobh option [ 488.152006][T10531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.203308][T10531] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.307533][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.522723][T10562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1699'. [ 488.820397][ T28] audit: type=1400 audit(1784111079.606:1547): avc: denied { ioctl } for pid=10583 comm="syz.6.1711" path="socket:[28428]" dev="sockfs" ino=28428 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 488.900591][T10591] netlink: 'syz.6.1714': attribute type 1 has an invalid length. [ 488.938782][ T28] audit: type=1400 audit(1784111079.756:1548): avc: denied { validate_trans } for pid=10592 comm="syz.6.1716" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 489.033580][T10607] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1721'. [ 489.109982][ T28] audit: type=1400 audit(1784111079.926:1549): avc: denied { write } for pid=10615 comm="syz.7.1727" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 489.191188][ T28] audit: type=1400 audit(1784111080.006:1550): avc: denied { listen } for pid=10624 comm="syz.3.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 489.394976][T10655] netlink: zone id is out of range [ 489.422767][T10657] loop6: detected capacity change from 0 to 128 [ 489.434009][T10655] netlink: zone id is out of range [ 489.466737][T10657] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 489.516352][T10657] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 489.589238][T10674] loop2: detected capacity change from 0 to 512 [ 489.605318][ T6749] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 489.620701][T10674] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 489.629896][T10674] EXT4-fs (loop2): orphan cleanup on readonly fs [ 489.654120][T10674] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 489.665993][T10674] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 489.676360][T10674] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1756: Failed to acquire dquot type 1 [ 489.723440][T10674] loop2: lost filesystem error report for type 5 error -5 [ 489.724021][T10674] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1756: bg 0: block 40: padding at end of block bitmap is not set [ 489.731371][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 489.731389][ C0] EXT4-fs (loop2): initial error at time 1784111080: ext4_acquire_dquot:7041 [ 489.731409][ C0] EXT4-fs (loop2): last error at time 1784111080: ext4_acquire_dquot:7041 [ 489.771958][T10674] loop2: lost filesystem error report for type 5 error -117 [ 489.773426][T10674] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 489.789763][T10674] loop2: lost filesystem error report for type 5 error -117 [ 489.791314][T10674] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.1756: data will be lost [ 489.815236][T10674] EXT4-fs (loop2): 1 truncate cleaned up [ 489.845955][T10674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 489.895099][ T28] audit: type=1400 audit(1784111080.706:1551): avc: denied { getopt } for pid=10701 comm="syz.6.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 489.939552][T10707] netlink: 'syz.3.1771': attribute type 2 has an invalid length. [ 489.981633][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.001640][T10713] ieee802154 phy0 wpan0: encryption failed: -22 [ 490.189941][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1787'. [ 490.269467][T10751] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1791'. [ 490.526545][T10786] usb usb8: check_ctrlrecip: process 10786 (syz.6.1809) requesting ep 01 but needs 81 [ 490.553598][T10786] usb usb8: usbfs: process 10786 (syz.6.1809) did not claim interface 0 before use [ 490.579569][T10794] loop7: detected capacity change from 0 to 512 [ 490.596350][T10796] loop1: detected capacity change from 0 to 128 [ 490.970825][T10854] autofs4:pid:10854:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.100), cmd(0xc018937e) [ 490.971386][ T28] audit: type=1400 audit(1784111081.786:1552): avc: denied { append } for pid=10852 comm="syz.2.1842" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 490.995566][T10854] autofs4:pid:10854:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 491.054657][T10859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1844'. [ 491.093589][ T28] audit: type=1400 audit(1784111081.906:1553): avc: denied { mounton } for pid=10863 comm="syz.3.1845" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 491.177159][ T28] audit: type=1400 audit(1784111081.996:1554): avc: denied { read } for pid=10875 comm="syz.2.1851" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 491.369172][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1860'. [ 491.593255][T10910] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 494.419565][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1871'. [ 494.746453][T10939] random: crng reseeded on system resumption [ 495.380230][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 495.380252][ T28] audit: type=1400 audit(1784111085.556:1556): avc: denied { write } for pid=10936 comm="syz.2.1873" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 496.963743][T10965] loop3: detected capacity change from 0 to 512 [ 497.045662][T10965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.073445][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1881'. [ 497.265039][T10965] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.451377][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.831899][T11002] tmpfs: Bad value for 'mpol' [ 499.069013][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1899'. [ 500.028674][T11025] loop3: detected capacity change from 0 to 764 [ 500.230824][T11039] cgroup: Unexpected value for 'all' [ 500.316661][T11047] loop7: detected capacity change from 0 to 512 [ 500.362768][T11047] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 500.387470][T11047] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 500.404517][T11047] EXT4-fs (loop7): orphan cleanup on readonly fs [ 500.421906][T11047] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #13: comm syz.7.1915: iget: bad i_size value: 12154761577498 [ 500.452470][T11047] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 500.452661][T11047] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1915: couldn't read orphan inode 13 (err -117) [ 500.461886][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 500.461900][ C1] EXT4-fs (loop7): initial error at time 1784111091: ext4_orphan_get:1399: inode 13 [ 500.461949][ C1] EXT4-fs (loop7): last error at time 1784111091: ext4_orphan_get:1399: inode 13 [ 500.732464][T11047] loop7: lost filesystem error report for type 5 error -117 [ 500.734507][T11047] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 500.868783][T11047] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.1915: dx entry: limit 65535 != root limit 120 [ 500.894459][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1925'. [ 500.918265][T11047] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1915: Corrupt directory, running e2fsck is recommended [ 500.989252][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.290621][T11102] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1937'. [ 503.305732][ T28] audit: type=1400 audit(1784111094.116:1557): avc: denied { connect } for pid=11111 comm="syz.1.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 504.625992][ T28] audit: type=1400 audit(1784111095.436:1558): avc: denied { connect } for pid=11120 comm="syz.3.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 505.521216][T11153] loop1: detected capacity change from 0 to 512 [ 505.547376][T11153] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1959: bg 0: block 5: invalid block bitmap [ 505.585134][T11153] loop1: lost filesystem error report for type 5 error -117 [ 505.585363][T11153] EXT4-fs (loop1): Remounting filesystem read-only [ 505.592769][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 505.592787][ C1] EXT4-fs (loop1): initial error at time 1784111096: ext4_validate_block_bitmap:432 [ 505.592827][ C1] EXT4-fs (loop1): last error at time 1784111096: ext4_validate_block_bitmap:432 [ 505.702211][T11153] EXT4-fs (loop1): 2 truncates cleaned up [ 505.717651][T11153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.756928][ T28] audit: type=1400 audit(1784111096.566:1559): avc: denied { write } for pid=11152 comm="syz.1.1959" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 505.954576][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.038729][T11191] netlink: 'syz.7.1976': attribute type 4 has an invalid length. [ 506.051911][T11191] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1976'. [ 506.242482][T11221] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1992'. [ 506.254390][T11221] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1992'. [ 506.283435][T11221] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1992'. [ 509.175557][ T28] audit: type=1400 audit(1784111099.986:1560): avc: denied { getopt } for pid=11277 comm="syz.6.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 509.175955][T11276] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 509.322490][T11296] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2024'. [ 509.435185][T11312] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2032'. [ 509.609729][T11338] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2045'. [ 509.651274][T11343] loop3: detected capacity change from 0 to 164 [ 509.779388][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2055'. [ 509.854018][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'. [ 510.763519][ T28] audit: type=1400 audit(1784111101.576:1561): avc: denied { getopt } for pid=11389 comm="syz.1.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 510.992375][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2077'. [ 511.098901][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2086'. [ 511.122103][T11429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2086'. [ 511.183977][T11441] netlink: 'syz.2.2093': attribute type 1 has an invalid length. [ 511.334300][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2097'. [ 511.368145][ T28] audit: type=1400 audit(1784111102.186:1562): avc: denied { connect } for pid=11467 comm="syz.1.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 514.410339][T11518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2125'. [ 514.431213][T11519] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2124'. [ 514.448325][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2122'. [ 514.471769][T11522] loop6: detected capacity change from 0 to 512 [ 514.587011][T11522] ext4: Unknown parameter 'fowner>00000000000000000000' [ 514.757221][T11551] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 514.780889][T11551] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 514.912484][T11567] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.946058][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2151'. [ 515.072209][ T28] audit: type=1400 audit(1784111105.886:1563): avc: denied { append } for pid=11588 comm="syz.7.2159" name="usbmon3" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 515.116888][T11578] loop3: detected capacity change from 0 to 8192 [ 515.124083][T11591] loop1: detected capacity change from 0 to 512 [ 515.159809][T11591] EXT4-fs error (device loop1): ext4_quota_enable:7228: comm syz.1.2160: Bad quota inum: 1, type: 2 [ 515.180073][T11591] loop1: lost filesystem error report for type 5 error -117 [ 515.180248][T11591] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 515.187635][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 515.187674][ C0] EXT4-fs (loop1): initial error at time 1784111105: ext4_quota_enable:7228 [ 515.187729][ C0] EXT4-fs (loop1): last error at time 1784111105: ext4_quota_enable:7228 [ 515.228325][T11591] EXT4-fs (loop1): mount failed [ 515.408900][T11620] loop1: detected capacity change from 0 to 512 [ 515.472241][T11620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.505156][T11620] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.598389][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.156732][T11761] loop7: detected capacity change from 0 to 256 [ 517.168927][T11763] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2238'. [ 517.197681][T11763] netlink: 'syz.6.2238': attribute type 1 has an invalid length. [ 517.320697][T11770] loop1: detected capacity change from 0 to 512 [ 517.375735][T11770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.388473][T11770] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.464350][T11770] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:107: comm syz.1.2241: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 517.479075][ T28] audit: type=1400 audit(1784111108.276:1564): avc: denied { write } for pid=11769 comm="syz.1.2241" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 517.522513][T11770] EXT4-fs error (device loop1) in ext4_free_inode:363: Filesystem failed CRC [ 517.554211][T11787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2246'. [ 517.564920][ T28] audit: type=1400 audit(1784111108.276:1565): avc: denied { unlink } for pid=11769 comm="syz.1.2241" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 517.622916][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2246'. [ 517.662527][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.693941][ T28] audit: type=1400 audit(1784111108.446:1566): avc: denied { nlmsg_tty_audit } for pid=11788 comm="syz.6.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 518.739619][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2263'. [ 518.818631][T11834] loop2: detected capacity change from 0 to 1024 [ 518.843319][T11834] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 518.885949][T11834] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 518.926696][T11834] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 518.961377][T11834] EXT4-fs (loop2): orphan cleanup on readonly fs [ 518.989086][T11834] EXT4-fs error (device loop2): ext4_read_inode_bitmap:169: comm syz.2.2266: Inode bitmap for bg 0 marked uninitialized [ 519.032210][T11834] loop2: lost filesystem error report for type 5 error -117 [ 519.032401][T11834] EXT4-fs (loop2): Remounting filesystem read-only [ 519.039791][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 519.039814][ C1] EXT4-fs (loop2): initial error at time 1784111109: ext4_read_inode_bitmap:169 [ 519.039851][ C1] EXT4-fs (loop2): last error at time 1784111109: ext4_read_inode_bitmap:169 [ 519.167806][T11834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 519.278022][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.648167][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'. [ 519.713132][T11891] loop3: detected capacity change from 0 to 512 [ 519.754292][T11891] EXT4-fs: inline encryption not supported [ 519.778882][T11895] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2293'. [ 519.794311][T11891] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 519.809183][T11891] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 519.924352][T11899] loop7: detected capacity change from 0 to 8192 [ 519.934593][T11899] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 519.946868][T11891] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 519.965758][T11891] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2291: bg 0: block 248: padding at end of block bitmap is not set [ 519.980746][T11891] loop3: lost filesystem error report for type 5 error -117 [ 519.986148][T11891] Quota error (device loop3): write_blk: dquota write failed [ 519.993509][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 519.993542][ C0] EXT4-fs (loop3): last error at time 1784111110: ext4_validate_block_bitmap:441 [ 520.016989][T11891] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 520.026937][T11891] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.2291: Failed to acquire dquot type 1 [ 520.038201][T11891] loop3: lost filesystem error report for type 5 error -28 [ 520.055997][T11891] EXT4-fs (loop3): 1 truncate cleaned up [ 520.122351][T11891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 520.319373][T11891] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.2291: deleted inode referenced: 12 [ 520.392812][ T28] audit: type=1400 audit(1784111111.136:1567): avc: denied { lock } for pid=11914 comm="syz.1.2301" path="socket:[31662]" dev="sockfs" ino=31662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 520.475819][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 520.506087][ T28] audit: type=1400 audit(1784111111.136:1568): avc: denied { write } for pid=11890 comm="syz.3.2291" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 520.663420][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'. [ 522.034968][T11940] loop6: detected capacity change from 0 to 1024 [ 522.049538][T11940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.179116][T11940] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.2308: missing EA_INODE flag [ 522.201395][T11940] EXT4-fs (loop6): Remounting filesystem read-only [ 522.340091][T11957] loop7: detected capacity change from 0 to 512 [ 522.355939][T11957] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 522.391372][T11957] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2316: bg 0: block 255: padding at end of block bitmap is not set [ 522.423431][T11957] loop7: lost filesystem error report for type 5 error -117 [ 522.423625][T11957] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 522.430986][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 522.431026][ C0] EXT4-fs (loop7): initial error at time 1784111113: ext4_validate_block_bitmap:441 [ 522.431047][ C0] EXT4-fs (loop7): last error at time 1784111113: ext4_validate_block_bitmap:441 [ 522.505939][T11957] loop7: lost filesystem error report for type 5 error -117 [ 522.506290][T11957] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2316: invalid indirect mapped block 1 (level 1) [ 522.550467][T11957] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 522.550823][T11957] EXT4-fs (loop7): 1 truncate cleaned up [ 522.611588][T11957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.653164][ T28] audit: type=1400 audit(1784111113.466:1569): avc: denied { write } for pid=11956 comm="syz.7.2316" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 522.725616][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2319'. [ 522.981381][ T6749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.993134][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.483278][ T28] audit: type=1400 audit(1784111114.296:1570): avc: denied { bind } for pid=11993 comm="syz.3.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 524.267800][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2332'. [ 524.976710][T12019] netlink: 'syz.7.2336': attribute type 1 has an invalid length. [ 525.079661][T12019] netlink: 'syz.7.2336': attribute type 2 has an invalid length. [ 525.274233][T12037] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2347'. [ 525.335474][T12037] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2347'. [ 525.509329][ T28] audit: type=1400 audit(1784111116.326:1571): avc: denied { write } for pid=12050 comm="syz.3.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 528.984940][T12103] sctp: [Deprecated]: syz.2.2376 (pid 12103) Use of int in maxseg socket option. [ 528.984940][T12103] Use struct sctp_assoc_value instead [ 529.739405][ T28] audit: type=1400 audit(1784111120.366:1572): avc: denied { getopt } for pid=12108 comm="syz.6.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 529.929179][T12125] loop2: detected capacity change from 0 to 1024 [ 529.949519][T12125] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 529.962261][T12125] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 530.070777][T12139] loop3: detected capacity change from 0 to 2048 [ 530.092032][T12139] EXT4-fs: Ignoring removed mblk_io_submit option [ 530.108486][T12139] EXT4-fs: Ignoring removed mblk_io_submit option [ 530.127720][T12125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 530.141675][T12141] loop7: detected capacity change from 0 to 512 [ 530.158049][T12141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 530.172892][T12141] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 530.200247][T12139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.211125][T12141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 530.242561][T12139] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2393: bg 0: block 234: padding at end of block bitmap is not set [ 530.259452][T12141] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 530.260051][ T28] audit: type=1400 audit(1784111121.056:1573): avc: denied { write } for pid=12136 comm="syz.3.2393" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 530.269536][T12141] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 530.303281][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.313019][T12139] EXT4-fs (loop3): Remounting filesystem read-only [ 530.340270][T12156] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2399'. [ 530.355443][T12141] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 530.382781][ T28] audit: type=1400 audit(1784111121.056:1574): avc: denied { write } for pid=12136 comm="syz.3.2393" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 530.422195][T12141] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.2394: dx entry: limit 65535 != root limit 120 [ 530.439733][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.476599][T12141] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2394: Corrupt directory, running e2fsck is recommended [ 530.510257][T12170] loop1: detected capacity change from 0 to 256 [ 530.542648][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.594043][T12179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2411'. [ 530.753815][T12203] netlink: 'syz.3.2422': attribute type 1 has an invalid length. [ 530.784069][T12203] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2422'. [ 530.857762][T12217] loop6: detected capacity change from 0 to 512 [ 530.895817][T12217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.932514][T12227] loop7: detected capacity change from 0 to 512 [ 530.940633][T12217] ext4 filesystem being mounted at /361/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.941685][T12227] EXT4-fs: Ignoring removed mblk_io_submit option [ 530.982803][T12232] lo speed is unknown, defaulting to 1000 [ 530.982831][T12227] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 531.002694][T12227] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2432: attempt to clear invalid blocks 2 len 1 [ 531.023324][T12227] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 531.023468][T12227] EXT4-fs (loop7): Remounting filesystem read-only [ 531.032683][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 531.032707][ C1] EXT4-fs (loop7): initial error at time 1784111121: ext4_clear_blocks:876: inode 13 [ 531.032743][ C1] EXT4-fs (loop7): last error at time 1784111121: ext4_clear_blocks:876: inode 13 [ 531.066966][T12227] EXT4-fs (loop7): 1 truncate cleaned up [ 531.073132][T12227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.099682][ T28] audit: type=1400 audit(1784111121.906:1575): avc: denied { quotaon } for pid=12226 comm="syz.7.2432" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 531.112473][ T6749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.135256][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.174983][ T28] audit: type=1400 audit(1784111121.986:1576): avc: denied { getopt } for pid=12243 comm="syz.1.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 532.066330][T12266] loop2: detected capacity change from 0 to 1764 [ 532.210361][T12274] loop3: detected capacity change from 0 to 764 [ 533.351213][T12325] netlink: 'syz.7.2474': attribute type 1 has an invalid length. [ 533.359292][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2474'. [ 533.460243][T12335] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2476'. [ 533.512986][T12339] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2480'. [ 533.681025][T12358] netlink: 392 bytes leftover after parsing attributes in process `syz.6.2488'. [ 533.970264][ T28] audit: type=1400 audit(1784111124.786:1577): avc: denied { setattr } for pid=12395 comm="syz.7.2507" path="socket:[34852]" dev="sockfs" ino=34852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 534.075067][ T28] audit: type=1400 audit(1784111124.886:1578): avc: denied { connect } for pid=12408 comm="syz.7.2514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 534.411602][T12434] loop1: detected capacity change from 0 to 1024 [ 534.504103][T12434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.524888][ T28] audit: type=1400 audit(1784111125.336:1579): avc: denied { write } for pid=12433 comm="syz.1.2522" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 534.558306][ T28] audit: type=1400 audit(1784111125.336:1580): avc: denied { rmdir } for pid=12433 comm="syz.1.2522" name="file1" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 534.635772][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.919949][T12465] netlink: 'syz.1.2530': attribute type 1 has an invalid length. [ 534.949215][T12465] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2530'. [ 536.463022][T12501] netlink: 'syz.3.2550': attribute type 1 has an invalid length. [ 536.471190][T12501] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2550'. [ 536.480986][T12501] netlink: 'syz.3.2550': attribute type 1 has an invalid length. [ 537.055161][T12506] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2551'. [ 537.090246][T12510] loop7: detected capacity change from 0 to 512 [ 537.110420][T12510] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 537.130769][T12510] EXT4-fs (loop7): warning: maximal mount count reached, running e2fsck is recommended [ 537.219164][T12510] EXT4-fs error (device loop7): ext4_orphan_get:1399: comm syz.7.2553: inode #15: comm syz.7.2553: iget: illegal inode # [ 537.246504][T12510] loop7: lost filesystem error report for type 5 error -117 [ 537.250111][T12510] EXT4-fs (loop7): Remounting filesystem read-only [ 537.257517][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 537.257541][ C1] EXT4-fs (loop7): initial error at time 1784111128: ext4_orphan_get:1399 [ 537.257565][ C1] EXT4-fs (loop7): last error at time 1784111128: ext4_orphan_get:1399 [ 537.331571][T12510] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.372280][ T28] audit: type=1400 audit(1784111128.186:1581): avc: denied { write } for pid=12505 comm="syz.7.2553" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 537.433626][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.469711][ T28] audit: type=1400 audit(1784111128.276:1582): avc: denied { accept } for pid=12532 comm="syz.1.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 539.327290][T12564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2577'. [ 539.411778][T12571] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2580'. [ 539.753992][T12602] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2594'. [ 539.764996][T12602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.015654][ T28] audit: type=1400 audit(1784111130.826:1583): avc: denied { bind } for pid=12615 comm="syz.2.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 540.281322][T12641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2612'. [ 540.303612][T12641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2612'. [ 540.555068][T12670] tmpfs: Bad value for 'mpol' [ 540.596769][T12674] loop1: detected capacity change from 0 to 512 [ 540.754517][T12684] netlink: 'syz.3.2632': attribute type 10 has an invalid length. [ 540.763317][T12684] team0: Device bridge0 is already an upper device of the team interface [ 540.913332][T12699] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2639'. [ 540.971966][T12704] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2641'. [ 541.508139][T12741] ieee802154 phy0 wpan0: encryption failed: -22 [ 541.728263][T12756] loop3: detected capacity change from 0 to 764 [ 541.771814][T12756] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 541.916643][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2675'. [ 542.406947][T12796] loop2: detected capacity change from 0 to 764 [ 542.428536][T12796] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 542.440183][T12800] qrtr: Invalid version 0 [ 543.199740][ T28] audit: type=1400 audit(1784111134.016:1584): avc: denied { accept } for pid=12827 comm="syz.1.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 543.278523][T12830] loop7: detected capacity change from 0 to 764 [ 543.339384][T12830] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 544.142576][T12850] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.692968][T12883] Unsupported ieee802154 address type: 0 [ 544.792882][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2727'. [ 545.391260][T12926] sctp: [Deprecated]: syz.1.2746 (pid 12926) Use of int in maxseg socket option. [ 545.391260][T12926] Use struct sctp_assoc_value instead [ 545.614136][T12939] netlink: 'syz.2.2752': attribute type 2 has an invalid length. [ 545.763244][T12934] loop1: detected capacity change from 0 to 8192 [ 547.281158][T12975] usb usb7: usbfs: process 12975 (syz.7.2768) did not claim interface 0 before use [ 547.383409][T12980] netlink: 'syz.1.2770': attribute type 1 has an invalid length. [ 547.978983][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2783'. [ 548.960817][T13057] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.117043][T13068] loop6: detected capacity change from 0 to 512 [ 549.453005][T13068] EXT4-fs: inline encryption not supported [ 549.467550][T13078] loop7: detected capacity change from 0 to 512 [ 549.555354][T13068] EXT4-fs: Ignoring removed bh option [ 549.586382][T13078] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 549.597400][T13081] netlink: 'syz.1.2811': attribute type 2 has an invalid length. [ 549.619507][T13068] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.2807: corrupted in-inode xattr: invalid ea_ino [ 549.635648][T13078] EXT4-fs (loop7): 1 truncate cleaned up [ 549.641507][T13081] netlink: 'syz.1.2811': attribute type 1 has an invalid length. [ 549.662280][T13078] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.688136][T13068] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 549.688438][T13068] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2807: couldn't read orphan inode 15 (err -117) [ 549.697654][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 549.697679][ C0] EXT4-fs (loop6): initial error at time 1784111140: ext4_iget_extra_inode:5180: inode 15 [ 549.697714][ C0] EXT4-fs (loop6): last error at time 1784111140: ext4_iget_extra_inode:5180: inode 15 [ 549.779758][T13085] netlink: 352 bytes leftover after parsing attributes in process `syz.1.2812'. [ 549.817464][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.864985][T13087] autofs4:pid:13087:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b) [ 549.881655][T13068] loop6: lost filesystem error report for type 5 error -117 [ 549.882386][T13068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.019780][ T6749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.352219][ T28] audit: type=1400 audit(1784111141.166:1585): avc: denied { getopt } for pid=13108 comm="syz.3.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 550.433467][T13111] loop7: detected capacity change from 0 to 1024 [ 550.480841][T13111] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 550.547233][T13111] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 1: comm syz.7.2825: lblock 1 mapped to illegal pblock 1 (length 1) [ 550.604486][T13111] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 550.604677][T13111] Quota error (device loop7): write_blk: dquota write failed [ 550.613772][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 550.613793][ C0] EXT4-fs (loop7): initial error at time 1784111141: ext4_map_blocks:833: inode 3: block 1 [ 550.613834][ C0] EXT4-fs (loop7): last error at time 1784111141: ext4_map_blocks:833: inode 3: block 1 [ 550.926458][T13111] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 551.032423][T13111] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.2825: Failed to acquire dquot type 0 [ 551.138068][T13111] loop7: lost filesystem error report for type 5 error -117 [ 551.140079][T13111] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.2825: Freeing blocks not in datazone - block = 0, count = 4096 [ 551.293256][T13111] loop7: lost filesystem error report for type 5 error -117 [ 551.294999][T13111] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.2825: Invalid inode bitmap blk 0 in block_group 0 [ 551.442544][T13111] loop7: lost filesystem error report for type 5 error -117 [ 551.442853][T13111] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 551.557464][T13111] loop7: lost filesystem error report for type 5 error -117 [ 551.561705][T13111] EXT4-fs (loop7): 1 orphan inode deleted [ 551.611885][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2843'. [ 551.644396][T13111] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.657345][ T161] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 551.738519][ T161] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 551.741629][ T161] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 551.766693][T13154] loop3: detected capacity change from 0 to 512 [ 551.781485][T13111] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 551.814054][T13156] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2845'. [ 551.827905][T13154] EXT4-fs: Ignoring removed i_version option [ 551.841003][T13154] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 551.863688][T13154] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 551.883054][ T161] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 551.894507][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 551.894528][ C1] EXT4-fs (loop3): initial error at time 1784111142: ext4_mb_generate_buddy:1317 [ 551.894548][ C1] EXT4-fs (loop3): last error at time 1784111142: ext4_mb_generate_buddy:1317 [ 551.991922][T13162] program syz.6.2846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.008849][T13154] Quota error (device loop3): write_blk: dquota write failed [ 552.052206][T13154] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 552.101400][T13154] Quota error (device loop3): write_blk: dquota write failed [ 552.110740][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.162131][T13154] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 552.222348][T13154] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.2844: Failed to acquire dquot type 1 [ 552.286139][T13154] loop3: lost filesystem error report for type 5 error -28 [ 552.289907][T13154] EXT4-fs (loop3): 1 truncate cleaned up [ 552.367233][T13154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.397613][T13154] Quota error (device loop3): write_blk: dquota write failed [ 552.405154][ T28] audit: type=1400 audit(1784111143.216:1586): avc: denied { write } for pid=13153 comm="syz.3.2844" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 552.428588][T13154] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.2844: Failed to acquire dquot type 1 [ 552.628908][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.414244][T13201] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2866'. [ 553.425249][T13199] loop2: detected capacity change from 0 to 512 [ 553.436560][T13201] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2866'. [ 553.447093][T13199] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 553.455046][T13199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 553.463201][T13201] netlink: 31 bytes leftover after parsing attributes in process `syz.6.2866'. [ 553.974804][T13201] netlink: 'syz.6.2866': attribute type 2 has an invalid length. [ 553.982898][T13199] EXT4-fs (loop2): orphan cleanup on readonly fs [ 553.989704][T13201] netlink: 31 bytes leftover after parsing attributes in process `syz.6.2866'. [ 553.997845][T13199] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.2864: iget: bad i_size value: 12154761577498 [ 554.106732][T13199] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 554.126228][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 554.141900][ C0] EXT4-fs (loop2): initial error at time 1784111144: ext4_orphan_get:1399: inode 13 [ 554.151344][ C0] EXT4-fs (loop2): last error at time 1784111144: ext4_orphan_get:1399: inode 13 [ 554.199008][T13199] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2864: couldn't read orphan inode 13 (err -117) [ 554.254678][T13199] loop2: lost filesystem error report for type 5 error -117 [ 554.255442][T13199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 554.371808][T13199] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.2864: dx entry: limit 65535 != root limit 120 [ 554.454590][T13199] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2864: Corrupt directory, running e2fsck is recommended [ 554.636140][T13235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2881'. [ 555.559344][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.662959][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2888'. [ 556.755395][T13316] loop2: detected capacity change from 0 to 512 [ 556.778571][T13316] EXT4-fs (loop2): orphan cleanup on readonly fs [ 556.811356][T13316] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2918: EA inode hash validation failed [ 556.858217][T13316] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 556.901807][T13316] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.2918: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 556.949229][T13316] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 556.949443][T13316] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.2918: ea_inode dec ref err=-117 [ 556.958828][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 556.958853][ C0] EXT4-fs (loop2): initial error at time 1784111147: ext4_xattr_inode_update_ref:1037: inode 11 [ 556.958886][ C0] EXT4-fs (loop2): last error at time 1784111147: ext4_xattr_inode_update_ref:1037: inode 11 [ 557.265786][T13316] EXT4-fs (loop2): 1 orphan inode deleted [ 557.285516][T13316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 557.362421][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.707846][T13333] loop1: detected capacity change from 0 to 1024 [ 557.734850][T13333] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 557.776387][T13333] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 1: comm syz.1.2927: lblock 1 mapped to illegal pblock 1 (length 1) [ 557.822497][T13333] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 557.822646][T13333] __quota_error: 1 callbacks suppressed [ 557.822658][T13333] Quota error (device loop1): write_blk: dquota write failed [ 557.831941][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 557.831963][ C0] EXT4-fs (loop1): initial error at time 1784111148: ext4_map_blocks:833: inode 3: block 1 [ 557.832017][ C0] EXT4-fs (loop1): last error at time 1784111148: ext4_map_blocks:833: inode 3: block 1 [ 557.871835][T13333] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 557.889532][T13333] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.2927: Failed to acquire dquot type 0 [ 557.926188][T13342] loop2: detected capacity change from 0 to 512 [ 557.947071][T13342] EXT4-fs: Ignoring removed i_version option [ 557.956295][T13333] loop1: lost filesystem error report for type 5 error -117 [ 557.957942][T13333] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.2927: Freeing blocks not in datazone - block = 0, count = 4096 [ 557.989766][T13342] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 558.025414][T13333] loop1: lost filesystem error report for type 5 error -117 [ 558.032429][T13333] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.2927: Invalid inode bitmap blk 0 in block_group 0 [ 558.052945][ T6262] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 558.091392][T13342] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 558.106213][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 558.106749][T13333] loop1: lost filesystem error report for type 5 error -117 [ 558.112687][ C1] EXT4-fs (loop2): initial error at time 1784111148: ext4_mb_generate_buddy:1317 [ 558.112946][T13342] Quota error (device loop2): write_blk: dquota write failed [ 558.120035][ C1] [ 558.120043][ C1] EXT4-fs (loop2): last error at time 1784111148: ext4_mb_generate_buddy:1317 [ 558.155788][ T6262] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 558.155965][ T6262] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 558.179122][T13333] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 558.206983][T13333] loop1: lost filesystem error report for type 5 error -117 [ 558.207207][T13333] EXT4-fs (loop1): 1 orphan inode deleted [ 558.244152][T13358] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2936'. [ 558.252261][T13333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.256514][ T6262] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:15: Failed to release dquot type 0 [ 558.285353][T13342] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 558.287466][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2936'. [ 558.322934][T13342] Quota error (device loop2): write_blk: dquota write failed [ 558.346006][T13342] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 558.366513][T13342] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.2922: Failed to acquire dquot type 1 [ 558.456460][T13342] loop2: lost filesystem error report for type 5 error -28 [ 558.507812][T13342] EXT4-fs (loop2): 1 truncate cleaned up [ 558.568494][T13342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.709756][T13342] Quota error (device loop2): write_blk: dquota write failed [ 558.755002][T13342] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 558.765269][ T28] audit: type=1400 audit(1784111149.526:1587): avc: denied { write } for pid=13341 comm="syz.2.2922" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 558.847245][T13342] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.2922: Failed to acquire dquot type 1 [ 558.953615][T13333] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 558.999890][T13384] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2948'. [ 559.149196][T13388] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 559.358519][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.370096][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.476347][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2953'. [ 559.486956][T13398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2953'. [ 559.495938][T13398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2953'. [ 559.525488][T13404] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2958'. [ 559.537516][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2957'. [ 559.834158][T13420] loop3: detected capacity change from 0 to 1024 [ 559.883981][T13420] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 560.081100][T13420] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 1: comm syz.3.2964: lblock 1 mapped to illegal pblock 1 (length 1) [ 560.106362][T13420] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 560.106523][T13420] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.2964: Failed to acquire dquot type 0 [ 560.126901][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 560.126920][ C0] EXT4-fs (loop3): initial error at time 1784111150: ext4_map_blocks:833: inode 3: block 1 [ 560.126972][ C0] EXT4-fs (loop3): last error at time 1784111150: ext4_map_blocks:833: inode 3: block 1 [ 560.177039][T13431] loop6: detected capacity change from 0 to 512 [ 560.231377][T13431] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 560.246259][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 560.252735][ C0] EXT4-fs (loop6): initial error at time 1784111151: ext4_mb_generate_buddy:1317 [ 560.252776][T13420] loop3: lost filesystem error report for type 5 error -117 [ 560.261907][ C0] EXT4-fs (loop6): last error at time 1784111151: ext4_mb_generate_buddy:1317 [ 560.280909][T13431] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2969: invalid indirect mapped block 4278190080 (level 0) [ 560.295209][T13431] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 560.295459][T13431] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2969: invalid indirect mapped block 1 (level 1) [ 560.332033][T13431] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 560.333530][T13420] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.2964: Freeing blocks not in datazone - block = 0, count = 4096 [ 560.335968][T13431] EXT4-fs (loop6): 1 truncate cleaned up [ 560.401166][T13431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.419472][T13443] loop2: detected capacity change from 0 to 512 [ 560.435547][T13420] loop3: lost filesystem error report for type 5 error -117 [ 560.435879][T13420] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.2964: Invalid inode bitmap blk 0 in block_group 0 [ 560.457562][ T6262] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 560.483445][T13420] loop3: lost filesystem error report for type 5 error -117 [ 560.483595][T13420] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 560.504149][ T6262] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 560.504811][ T6262] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:15: Failed to release dquot type 0 [ 560.530283][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2976'. [ 560.536487][T13431] EXT4-fs error (device loop6): ext4_lookup:1777: inode #2: comm syz.6.2969: bad inode number: 1 [ 560.550174][ T6262] loop3: lost filesystem error report for type 5 error -117 [ 560.550233][T13420] loop3: lost filesystem error report for type 5 error -117 [ 560.557699][T13447] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2976'. [ 560.576470][T13443] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2975: bg 0: block 5: invalid block bitmap [ 560.593851][T13443] EXT4-fs (loop2): Remounting filesystem read-only [ 560.600440][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 560.600461][ C0] EXT4-fs (loop2): initial error at time 1784111151: ext4_validate_block_bitmap:432 [ 560.600493][ C0] EXT4-fs (loop2): last error at time 1784111151: ext4_validate_block_bitmap:432 [ 560.669409][T13420] EXT4-fs (loop3): 1 orphan inode deleted [ 560.679130][ T6749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.691258][T13420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.704362][T13443] EXT4-fs (loop2): 2 truncates cleaned up [ 560.724693][T13443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.770659][T13420] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 560.858970][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.868437][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.885691][T13457] netlink: 488 bytes leftover after parsing attributes in process `syz.7.2981'. [ 560.996239][T13466] loop7: detected capacity change from 0 to 512 [ 561.030083][T13466] EXT4-fs: Ignoring removed i_version option [ 561.066903][T13466] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 561.108006][T13466] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 561.126215][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 561.132699][ C0] EXT4-fs (loop7): initial error at time 1784111151: ext4_mb_generate_buddy:1317 [ 561.141909][ C0] EXT4-fs (loop7): last error at time 1784111151: ext4_mb_generate_buddy:1317 [ 561.152486][T13466] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.2983: Failed to acquire dquot type 1 [ 561.229878][T13466] EXT4-fs (loop7): 1 truncate cleaned up [ 561.279875][T13466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.369039][T13466] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.2983: Failed to acquire dquot type 1 [ 561.471955][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.869473][T13515] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3008'. [ 562.494180][T13523] netlink: 'syz.3.3011': attribute type 2 has an invalid length. [ 562.704617][T13541] netlink: 'syz.7.3021': attribute type 1 has an invalid length. [ 562.799259][T13548] netlink: 'syz.6.3024': attribute type 10 has an invalid length. [ 562.865391][T13548] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.902815][T13548] bond0: (slave team0): Enslaving as an active interface with an up link [ 564.732985][T13603] netlink: get zone limit has 4 unknown bytes [ 564.803702][T13609] __nla_validate_parse: 1 callbacks suppressed [ 564.803799][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3054'. [ 564.861056][T13609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3054'. [ 565.147295][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 565.147315][ T28] audit: type=1326 audit(1784111155.966:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.7.3068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 565.275110][ T28] audit: type=1326 audit(1784111156.006:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.7.3068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 565.303770][T13648] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 565.344031][T13648] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 565.384895][ T28] audit: type=1326 audit(1784111156.006:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.7.3068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 565.489183][ T28] audit: type=1326 audit(1784111156.006:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.7.3068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 565.638784][ T28] audit: type=1326 audit(1784111156.006:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.7.3068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 566.385058][T13688] loop1: detected capacity change from 0 to 512 [ 566.490391][T13688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.550791][T13688] ext4 filesystem being mounted at /645/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.629188][ T28] audit: type=1326 audit(1784111156.006:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.7.3068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 566.654861][ T28] audit: type=1326 audit(1784111156.006:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.7.3068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 566.744127][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.834819][T13695] loop6: detected capacity change from 0 to 2048 [ 566.896820][T13695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.973495][T13695] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.264472][ T28] audit: type=1326 audit(1784111156.006:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.7.3068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 567.273320][ T6749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.290764][ T28] audit: type=1326 audit(1784111156.376:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.6.3076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd35cde59 code=0x7ffc0000 [ 567.324741][ T28] audit: type=1326 audit(1784111156.376:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.6.3076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd35cde59 code=0x7ffc0000 [ 567.489395][T13707] bond0 (unregistering): Released all slaves [ 567.588271][T13714] netlink: 'syz.2.3099': attribute type 10 has an invalid length. [ 567.609802][T13715] netlink: 'syz.6.3098': attribute type 10 has an invalid length. [ 567.635081][T13714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.674630][T13718] netlink: 'syz.6.3098': attribute type 10 has an invalid length. [ 567.731587][T13715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.779127][T13715] team0: Port device netdevsim2 added [ 567.806401][T13718] team0: Port device netdevsim2 removed [ 567.849491][T13718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.862648][T13718] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 567.958693][T13726] loop1: detected capacity change from 0 to 512 [ 567.998906][T13726] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 568.057064][T13726] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 568.094513][T13726] EXT4-fs (loop1): group descriptors corrupted! [ 568.201183][T13738] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3110'. [ 568.796679][T13775] team0: Port device vlan0 added [ 568.925347][T13782] xt_connbytes: Forcing CT accounting to be enabled [ 569.597870][T13806] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 569.604537][T13806] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 569.621857][T13804] loop6: detected capacity change from 0 to 4096 [ 569.663967][T13804] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.679789][T13806] vhci_hcd vhci_hcd.0: Device attached [ 569.718940][T13807] vhci_hcd: connection closed [ 569.719558][ T6260] vhci_hcd vhci_hcd.1: stop threads [ 569.769177][ T6260] vhci_hcd vhci_hcd.1: release socket [ 569.782675][T13804] EXT4-fs (loop6): Online resizing not supported with bigalloc [ 569.806077][ T6260] vhci_hcd vhci_hcd.1: disconnect device [ 569.856719][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 569.881636][ T6749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.196531][T13818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.212578][T13818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.242508][T13818] bond0 (unregistering): (slave team0): Releasing backup interface [ 570.275229][T13818] bond0 (unregistering): (slave netdevsim2): Releasing backup interface [ 570.309008][T13818] bond0 (unregistering): Released all slaves [ 570.643206][T13830] loop1: detected capacity change from 0 to 164 [ 570.677252][T13830] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 572.192038][T13861] loop3: detected capacity change from 0 to 512 [ 572.240135][T13861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.287434][T13861] ext4 filesystem being mounted at /630/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 572.349013][T13874] netlink: 'syz.7.3172': attribute type 10 has an invalid length. [ 572.381927][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.404137][T13875] netlink: 'syz.7.3172': attribute type 10 has an invalid length. [ 572.434544][T13874] team0: Port device dummy0 added [ 572.483301][T13875] team0: Port device dummy0 removed [ 572.819359][T13900] xt_hashlimit: size too large, truncated to 1048576 [ 572.982818][T13905] loop3: detected capacity change from 0 to 4096 [ 573.010667][T13905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.082122][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 573.082143][ T28] audit: type=1400 audit(1784111163.896:1615): avc: denied { write } for pid=13904 comm="syz.3.3185" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 573.126715][T13905] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 573.219479][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.510044][T13928] netlink: 'syz.1.3194': attribute type 9 has an invalid length. [ 573.626405][ T28] audit: type=1400 audit(1784111164.446:1616): avc: denied { setopt } for pid=13932 comm="syz.6.3197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 573.735812][T13943] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3201'. [ 573.945945][ T28] audit: type=1400 audit(1784111164.756:1617): avc: denied { kexec_image_load } for pid=13952 comm="syz.3.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 574.031872][T13957] loop7: detected capacity change from 0 to 2048 [ 574.092625][T13957] loop7: p2 p3 p7 [ 574.222514][T13962] sctp: [Deprecated]: syz.6.3212 (pid 13962) Use of int in max_burst socket option. [ 574.222514][T13962] Use struct sctp_assoc_value instead [ 574.298358][ T5080] udevd[5080]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 574.301660][ T6760] udevd[6760]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 574.322353][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 574.353008][T13967] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3214'. [ 574.433910][T13971] loop6: detected capacity change from 0 to 1024 [ 574.459781][T13970] xt_hashlimit: size too large, truncated to 1048576 [ 574.487799][T13971] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 574.507655][T13975] ip6gre1: entered allmulticast mode [ 574.544369][T13971] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.566415][ T6260] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 574.599463][ T28] audit: type=1400 audit(1784111165.416:1618): avc: denied { write } for pid=13969 comm="syz.6.3216" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 574.623529][T13981] loop2: detected capacity change from 0 to 164 [ 574.671151][T13981] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 574.687258][ T6749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 574.786891][T13992] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3224'. [ 575.183585][T14018] xt_hashlimit: size too large, truncated to 1048576 [ 575.619995][T14031] xt_hashlimit: size too large, truncated to 1048576 [ 575.790675][T14052] loop2: detected capacity change from 0 to 2048 [ 575.864190][T14052] loop2: p2 p3 p7 [ 576.045958][T14058] xt_hashlimit: size too large, truncated to 1048576 [ 576.053381][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 576.194015][T14064] geneve1: entered promiscuous mode [ 576.207403][T14064] macsec1: entered allmulticast mode [ 576.225544][T14064] geneve1: entered allmulticast mode [ 576.251560][T14064] geneve1: left allmulticast mode [ 576.272781][T14064] geneve1: left promiscuous mode [ 576.429865][T14067] netlink: 'syz.6.3256': attribute type 10 has an invalid length. [ 576.472779][T14067] team0: Port device dummy0 added [ 576.487618][T14071] netlink: 'syz.6.3256': attribute type 10 has an invalid length. [ 576.524804][T14071] team0: Port device dummy0 removed [ 577.160124][T14108] netlink: 'syz.6.3275': attribute type 6 has an invalid length. [ 577.478885][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3285'. [ 577.788048][T14146] xt_hashlimit: size too large, truncated to 1048576 [ 578.496383][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.463495][T14200] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3315'. [ 580.142634][T14213] loop6: detected capacity change from 0 to 512 [ 580.213012][T14213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.299363][T14213] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.507997][ T6749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.981865][T14225] netlink: 'syz.7.3324': attribute type 29 has an invalid length. [ 581.037192][T14225] netlink: 'syz.7.3324': attribute type 29 has an invalid length. [ 581.130936][T14231] netlink: 'syz.7.3326': attribute type 1 has an invalid length. [ 581.161890][T14231] netlink: 'syz.7.3326': attribute type 1 has an invalid length. [ 581.292443][T14237] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3328'. [ 581.474680][T14248] netlink: 'syz.7.3335': attribute type 6 has an invalid length. [ 581.635406][T14255] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.3338'. [ 581.869455][T14263] loop7: detected capacity change from 0 to 1024 [ 581.912434][T14263] EXT4-fs: inline encryption not supported [ 581.932785][T14263] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 582.118495][T14263] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.3342: lblock 2 mapped to illegal pblock 2 (length 1) [ 582.178295][T14263] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 582.180166][T14263] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 582.189358][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 582.189392][ C0] EXT4-fs (loop7): initial error at time 1784111172: ext4_map_blocks:791: inode 3: block 2 [ 582.189422][ C0] EXT4-fs (loop7): last error at time 1784111172: ext4_map_blocks:791: inode 3: block 2 [ 582.366575][T14263] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.3342: Invalid inode table block 1 in block_group 0 [ 582.426322][T14263] fserror_report: 2 callbacks suppressed [ 582.426350][T14263] loop7: lost filesystem error report for type 5 error -117 [ 582.452027][T14263] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 582.519966][T14263] loop7: lost filesystem error report for type 5 error -117 [ 582.521635][T14263] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.3342: mark_inode_dirty error [ 582.561202][T14280] loop3: detected capacity change from 0 to 8192 [ 582.593946][T14263] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 582.594098][T14263] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 582.657778][T14263] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.3342: Failed to acquire dquot type 0 [ 582.697288][T14263] loop7: lost filesystem error report for type 5 error -117 [ 582.697508][T14263] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 582.749863][T14263] loop7: lost filesystem error report for type 5 error -117 [ 582.750073][T14263] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.3342: mark_inode_dirty error [ 582.808537][T14263] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 582.808712][T14263] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 582.863341][T14263] EXT4-fs (loop7): 1 orphan inode deleted [ 582.875658][T14263] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.889679][ T6260] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 582.908035][T14280] loop3: p1 p2 p3 [ 582.947244][ T6260] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 582.947387][ T6260] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 583.002547][ T6760] udevd[6760]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 583.019876][ T5080] udevd[5080]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 583.035035][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 583.068772][ T6260] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:14: Failed to release dquot type 0 [ 583.132745][T14263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.149356][T14263] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.3342: Invalid inode table block 1 in block_group 0 [ 583.210537][T14263] loop7: lost filesystem error report for type 5 error -117 [ 583.210736][T14263] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 583.210760][T14263] loop7: lost filesystem error report for type 5 error -117 [ 583.210916][T14263] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz.7.3342: mark_inode_dirty error [ 583.210938][T14263] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 583.359164][T14292] netlink: 'syz.3.3353': attribute type 12 has an invalid length. [ 583.394750][T14292] netlink: 'syz.3.3353': attribute type 29 has an invalid length. [ 583.411786][T14292] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3353'. [ 583.429851][T14292] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3353'. [ 583.750258][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3361'. [ 584.142644][T14318] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 584.322267][ T28] audit: type=1400 audit(1784111175.136:1619): avc: denied { listen } for pid=14331 comm="syz.6.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 584.427166][T14337] netlink: 'syz.2.3375': attribute type 29 has an invalid length. [ 584.475473][T14337] netlink: 'syz.2.3375': attribute type 29 has an invalid length. [ 584.482901][T14317] loop7: detected capacity change from 0 to 512 [ 584.590547][T14317] EXT4-fs warning (device loop7): read_mmp_block:110: Error -74 while reading MMP block 17 [ 584.641812][ T28] audit: type=1326 audit(1784111175.456:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14347 comm="syz.3.3381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe2428de59 code=0x0 [ 584.770367][T14357] tipc: Enabling of bearer rejected, already enabled [ 584.843910][T14361] loop2: detected capacity change from 0 to 2048 [ 584.880682][T14361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.956796][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.071168][T14375] loop7: detected capacity change from 0 to 512 [ 585.124303][T14375] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 585.175920][T14375] EXT4-fs (loop7): 1 truncate cleaned up [ 585.192504][T14384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3397'. [ 585.206625][T14375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.279821][ T28] audit: type=1400 audit(1784111176.096:1621): avc: denied { write } for pid=14373 comm="syz.7.3393" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 585.311859][T14375] EXT4-fs error (device loop7): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.7.3393: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 585.332135][ T28] audit: type=1400 audit(1784111176.116:1622): avc: denied { write } for pid=14373 comm="syz.7.3393" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 585.370868][ T28] audit: type=1400 audit(1784111176.116:1623): avc: denied { write } for pid=14373 comm="syz.7.3393" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 585.394883][T14375] EXT4-fs error (device loop7) in ext4_delete_entry:2744: Corrupt filesystem [ 585.413204][T14375] EXT4-fs warning (device loop7): ext4_rename_delete:3739: inode #2: comm syz.7.3393: Deleting old file: nlink 4, error=-117 [ 585.441270][T14391] loop2: detected capacity change from 0 to 256 [ 585.442422][ T28] audit: type=1400 audit(1784111176.116:1624): avc: denied { rename } for pid=14373 comm="syz.7.3393" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 585.521210][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.576805][T14393] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 585.694137][ T28] audit: type=1400 audit(1784111176.506:1625): avc: denied { read } for pid=14404 comm="syz.2.3407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 585.732421][T14407] loop1: detected capacity change from 0 to 512 [ 585.750122][T14407] EXT4-fs: Ignoring removed nobh option [ 585.788348][T14407] EXT4-fs (loop1): 1 orphan inode deleted [ 585.815668][T14407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.852828][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.855842][T14419] tipc: Enabling of bearer rejected, failed to enable media [ 585.872007][T14422] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3411'. [ 586.164452][T14433] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 586.221822][T14448] netlink: 'syz.6.3425': attribute type 5 has an invalid length. [ 586.236678][T14443] loop7: detected capacity change from 0 to 2048 [ 586.291896][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3427'. [ 586.313265][T14443] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.334809][T14457] 9p: Bad value for 'source' [ 586.336658][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 586.456584][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.477780][T14464] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3430'. [ 586.578062][T14472] loop7: detected capacity change from 0 to 256 [ 586.620652][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3432'. [ 586.645205][T14472] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 586.682566][T14472] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3432'. [ 586.817340][T14490] loop1: detected capacity change from 0 to 512 [ 586.855680][T14490] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 586.966249][T14490] EXT4-fs (loop1): Remounting filesystem read-only [ 586.972824][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 586.972840][ C1] EXT4-fs (loop1): initial error at time 1784111177: ext4_mb_generate_buddy:1317 [ 586.972866][ C1] EXT4-fs (loop1): last error at time 1784111177: ext4_mb_generate_buddy:1317 [ 587.032531][T14490] EXT4-fs (loop1): 1 truncate cleaned up [ 587.065036][T14490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.201872][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.281299][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 587.281316][ T28] audit: type=1400 audit(1784111178.096:1627): avc: denied { lock } for pid=14513 comm="syz.1.3452" path="socket:[42035]" dev="sockfs" ino=42035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 587.480444][T14530] netlink: 'syz.6.3460': attribute type 1 has an invalid length. [ 587.497923][T14521] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 587.538222][T14533] loop1: detected capacity change from 0 to 512 [ 587.570239][T14533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.610530][T14533] ext4 filesystem being mounted at /720/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.669483][T14542] tipc: Started in network mode [ 587.697226][T14542] tipc: Node identity 5, cluster identity 4711 [ 587.726372][T14542] tipc: Node number set to 5 [ 587.752169][ T28] audit: type=1400 audit(1784111178.566:1628): avc: denied { write } for pid=14531 comm="syz.1.3461" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 587.752197][T14542] tipc: Cannot configure node identity twice [ 587.782457][T14546] vlan2: entered promiscuous mode [ 587.805458][T14546] bridge0: entered promiscuous mode [ 587.846241][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.875910][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3469'. [ 587.958528][T14555] usb usb8: usbfs: process 14555 (syz.1.3472) did not claim interface 0 before use [ 588.129206][T14572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3480'. [ 590.781641][T14587] loop1: detected capacity change from 0 to 512 [ 590.882369][T14587] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 590.953273][ T6256] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.014889][ T6256] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.095001][ T6256] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.986461][T14609] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.031974][ T28] audit: type=1400 audit(1784111182.796:1629): avc: denied { connect } for pid=14603 comm="syz.2.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 592.157665][ T328] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.222354][ T161] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 594.442356][T14629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3494'. [ 594.698083][T14646] loop7: detected capacity change from 0 to 2048 [ 594.741467][T14646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.862523][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.938399][T14656] tipc: Enabling of bearer rejected, already enabled [ 594.939556][T14653] netlink: 'syz.1.3504': attribute type 2 has an invalid length. [ 595.207028][T14663] netlink: 'syz.2.3508': attribute type 19 has an invalid length. [ 595.246395][T14663] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.3508'. [ 596.645562][T14682] netlink: 'syz.2.3515': attribute type 4 has an invalid length. [ 596.704847][T14682] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3515'. [ 596.933516][T14691] loop3: detected capacity change from 0 to 512 [ 597.011207][T14691] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 597.525171][T14689] loop1: detected capacity change from 0 to 512 [ 597.647913][T14689] EXT4-fs warning (device loop1): read_mmp_block:110: Error -74 while reading MMP block 17 [ 597.964363][T14709] netlink: 67 bytes leftover after parsing attributes in process `syz.6.3526'. [ 598.028794][ T6260] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 598.046765][T14709] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.183631][T14709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 598.225369][T14709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 598.267815][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.274990][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.323598][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 598.394800][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3529'. [ 598.658546][T14723] netlink: 'syz.3.3531': attribute type 4 has an invalid length. [ 598.668558][T14723] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3531'. [ 598.960828][T14729] syzkaller1: tun_chr_ioctl cmd 21731 [ 599.640476][T14737] loop3: detected capacity change from 0 to 512 [ 599.702092][T14737] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 599.718631][T14741] loop6: detected capacity change from 0 to 2048 [ 599.847030][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 599.898011][T14741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.949020][T14741] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.3539: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 600.071948][ T6749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.452706][T14756] syz_tun: entered allmulticast mode [ 600.507337][T14755] syz_tun: left allmulticast mode [ 600.518685][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3542'. [ 600.979021][T14772] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 601.056294][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 601.561207][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3561'. [ 601.605419][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3561'. [ 602.295463][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3567'. [ 602.463436][T14817] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3570'. [ 603.655544][T14845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3579'. [ 604.397641][T14870] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3590'. [ 604.438284][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3589'. [ 604.627125][T14881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3593'. [ 604.920098][T14903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3602'. [ 605.049598][T14913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14913 comm=syz.2.3606 [ 606.745477][T14936] __nla_validate_parse: 1 callbacks suppressed [ 606.745513][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3609'. [ 607.232976][T14946] xt_bpf: check failed: parse error [ 607.689623][T14952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3616'. [ 610.503362][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3618'. [ 611.719619][ T28] audit: type=1400 audit(1784111202.536:1630): avc: denied { egress } for pid=14967 comm="syz.6.3620" saddr=172.20.20.10 src=34664 daddr=172.20.20.10 dest=20003 netif=lo scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 612.428972][T14970] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3620'. [ 612.448987][ T28] audit: type=1400 audit(1784111202.536:1631): avc: denied { sendto } for pid=14967 comm="syz.6.3620" saddr=172.20.20.10 src=34664 daddr=172.20.20.10 dest=20003 netif=lo scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 612.475080][ T28] audit: type=1400 audit(1784111202.536:1632): avc: denied { recv } for pid=14967 comm="syz.6.3620" saddr=172.20.20.10 src=20003 daddr=172.20.20.10 dest=34664 netif=lo scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 612.722564][T14983] loop7: detected capacity change from 0 to 512 [ 612.740248][T14983] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3625: inode has both inline data and extents flags [ 612.763130][T14983] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 612.776276][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 612.792023][ C0] EXT4-fs (loop7): initial error at time 1784111203: ext4_orphan_get:1399: inode 15 [ 612.801461][ C0] EXT4-fs (loop7): last error at time 1784111203: ext4_orphan_get:1399: inode 15 [ 613.017561][T14983] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3625: couldn't read orphan inode 15 (err -117) [ 613.080977][T14983] loop7: lost filesystem error report for type 5 error -117 [ 613.085923][T14983] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 613.340123][T14976] loop2: detected capacity change from 0 to 512 [ 613.398883][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 613.482967][T14976] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 613.594562][ T328] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 613.639243][T15006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3632'. [ 613.692283][T15010] loop2: detected capacity change from 0 to 512 [ 613.738820][ T28] audit: type=1326 audit(1784111204.546:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 613.770677][T15010] EXT4-fs: Ignoring removed i_version option [ 613.791878][T15010] EXT4-fs: Ignoring removed bh option [ 613.828443][T15010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.851159][ T28] audit: type=1326 audit(1784111204.556:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 613.890611][T15010] ext4 filesystem being mounted at /697/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 613.940112][ T28] audit: type=1326 audit(1784111204.556:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 613.985722][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.044946][ T28] audit: type=1326 audit(1784111204.546:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 614.153901][ T28] audit: type=1326 audit(1784111204.556:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 614.254841][T15037] loop7: detected capacity change from 0 to 512 [ 614.268377][ T28] audit: type=1326 audit(1784111204.556:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 614.310272][T15037] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 614.403600][T15041] loop3: detected capacity change from 0 to 512 [ 614.415470][ T28] audit: type=1326 audit(1784111204.556:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f11de59 code=0x7ffc0000 [ 614.464405][T15041] EXT4-fs: inline encryption not supported [ 614.486005][T15041] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 614.526055][ T6262] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 614.550305][T15041] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 614.593452][T15041] EXT4-fs (loop3): 1 truncate cleaned up [ 614.620077][T15041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.691975][T15052] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.736665][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3651'. [ 614.783037][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.812509][T15052] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.985838][T15052] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.112495][T15052] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.129326][T15067] loop2: detected capacity change from 0 to 512 [ 615.229349][ T6262] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.270500][T15067] EXT4-fs: Ignoring removed nobh option [ 615.317807][ T6262] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.326544][ T6262] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.352348][ T6262] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.465993][T15078] loop6: detected capacity change from 0 to 764 [ 615.621924][T15067] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 615.821728][T15067] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3655: invalid indirect mapped block 256 (level 1) [ 616.062447][T15067] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 616.076257][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 616.091935][ C1] EXT4-fs (loop2): initial error at time 1784111206: ext4_free_branches:1023: inode 13 [ 616.101611][ C1] EXT4-fs (loop2): last error at time 1784111206: ext4_free_branches:1023: inode 13 [ 616.145747][T15067] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3655: invalid indirect mapped block 2683928664 (level 1) [ 616.254092][T15067] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 616.275163][T15067] EXT4-fs (loop2): 1 truncate cleaned up [ 616.550644][T15067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.729212][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 616.729233][ T28] audit: type=1400 audit(1784111207.536:1664): avc: denied { write } for pid=15066 comm="syz.2.3655" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 616.767132][T15067] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3655: Invalid block bitmap block 3 in block_group 0 [ 616.819560][T15102] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.869310][T15102] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.883444][T15067] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3655: Invalid block bitmap block 3 in block_group 0 [ 616.944708][T15100] loop7: detected capacity change from 0 to 8192 [ 616.989357][T15067] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3655: Invalid block bitmap block 3 in block_group 0 [ 617.023172][T15100] syz.7.3668: attempt to access beyond end of device [ 617.023172][T15100] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 617.148596][T15100] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 617.324514][T15100] FAT-fs (loop7): Filesystem has been set read-only [ 617.532563][T15109] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.562708][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.632610][T15100] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 617.710824][T15100] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 617.720749][T15111] loop3: detected capacity change from 0 to 512 [ 617.802583][T15111] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 618.133445][T15111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.146929][T15111] ext4 filesystem being mounted at /708/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 618.156973][T15113] loop2: detected capacity change from 0 to 256 [ 618.188148][ T28] audit: type=1400 audit(1784111209.006:1665): avc: denied { write } for pid=15110 comm="syz.3.3673" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 618.343478][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.003568][T15129] loop7: detected capacity change from 0 to 1764 [ 619.240923][ T28] audit: type=1326 audit(1784111210.056:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15134 comm="syz.6.3680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fd35cde59 code=0x0 [ 619.330953][T15141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3683'. [ 619.356915][T15139] loop2: detected capacity change from 0 to 4096 [ 619.395938][T15139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.425103][ T28] audit: type=1400 audit(1784111210.236:1667): avc: denied { write } for pid=15138 comm="syz.2.3681" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 619.460626][T15139] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.3681: corrupted inode contents [ 619.488599][T15139] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.3681: mark_inode_dirty error [ 619.519604][ T28] audit: type=1400 audit(1784111210.296:1668): avc: denied { write } for pid=15138 comm="syz.2.3681" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 619.547462][T15139] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.3681: corrupted inode contents [ 619.588576][T15139] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.3681: mark_inode_dirty error [ 619.614785][T15139] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.3681: corrupted inode contents [ 619.642035][T15139] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.3681: mark_inode_dirty error [ 619.699041][T15139] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.3681: corrupted inode contents [ 619.747036][T15139] EXT4-fs error (device loop2): ext4_truncate:4691: inode #15: comm syz.2.3681: mark_inode_dirty error [ 619.761001][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'. [ 619.788886][T15139] EXT4-fs error (device loop2) in ext4_setattr:6172: Corrupt filesystem [ 619.827057][T15147] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.3681: corrupted inode contents [ 619.855573][T15156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3688'. [ 619.876904][ T28] audit: type=1400 audit(1784111210.696:1669): avc: denied { write } for pid=15138 comm="syz.2.3681" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 619.931623][ T3301] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 619.931896][ T3301] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 619.953531][ T28] audit: type=1400 audit(1784111210.696:1670): avc: denied { write } for pid=15138 comm="syz.2.3681" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 619.995709][ T3301] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 620.007695][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.019936][ T28] audit: type=1400 audit(1784111210.696:1671): avc: denied { rename } for pid=15138 comm="syz.2.3681" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 620.137987][T15165] loop3: detected capacity change from 0 to 764 [ 620.168277][T15163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3689'. [ 620.361730][T15178] loop2: detected capacity change from 0 to 512 [ 620.389381][T15178] EXT4-fs: inline encryption not supported [ 620.428777][T15178] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 620.438735][T15178] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3698: invalid indirect mapped block 2683928664 (level 1) [ 620.515236][T15178] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 620.515679][T15178] EXT4-fs (loop2): 1 truncate cleaned up [ 620.524869][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 620.524884][ C0] EXT4-fs (loop2): initial error at time 1784111211: ext4_free_branches:1023: inode 13 [ 620.524907][ C0] EXT4-fs (loop2): last error at time 1784111211: ext4_free_branches:1023: inode 13 [ 620.593954][T15183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3700'. [ 620.628912][T15178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.711470][ T28] audit: type=1400 audit(1784111211.526:1672): avc: denied { write } for pid=15177 comm="syz.2.3698" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 620.741839][T15178] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1803188595: comm syz.2.3698: invalid block [ 620.830268][T15178] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3698: invalid indirect mapped block 2054779762 (level 0) [ 620.944539][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.112503][T15205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3706'. [ 621.258351][T15211] program syz.2.3708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.349649][T15213] loop2: detected capacity change from 0 to 128 [ 621.414176][T15213] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 621.491549][T15213] ext4 filesystem being mounted at /716/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 621.599944][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 621.742703][T15218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3711'. [ 621.851560][T15225] loop2: detected capacity change from 0 to 512 [ 621.874415][T15225] EXT4-fs: Ignoring removed orlov option [ 621.892867][ T28] audit: type=1400 audit(1784111212.706:1673): avc: denied { setattr } for pid=15227 comm="syz.3.3715" name="QIPCRTR" dev="sockfs" ino=43845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 621.933034][T15225] EXT4-fs: Ignoring removed mblk_io_submit option [ 621.961848][T15225] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 621.987851][T15225] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.3714: attempt to clear invalid blocks 2 len 1 [ 622.059009][T15225] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 622.059400][T15225] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, [ 622.069285][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 622.069310][ C0] EXT4-fs (loop2): initial error at time 1784111212: ext4_clear_blocks:876: inode 13 [ 622.069357][ C0] EXT4-fs (loop2): last error at time 1784111212: ext4_clear_blocks:876: inode 13 [ 622.103581][T15225] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 622.147633][T15225] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3714: invalid indirect mapped block 1819239214 (level 0) [ 622.167490][T15236] loop3: detected capacity change from 0 to 512 [ 622.239710][T15225] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 622.247379][T15225] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3714: invalid indirect mapped block 1819239214 (level 1) [ 622.286923][T15225] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 622.287545][T15225] EXT4-fs (loop2): 1 truncate cleaned up [ 622.350697][T15225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.409061][T15225] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work [ 622.448533][ T28] audit: type=1400 audit(1784111213.266:1674): avc: denied { quotaon } for pid=15224 comm="syz.2.3714" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 622.511176][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.722448][T15248] loop1: detected capacity change from 0 to 8192 [ 622.725239][T15250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3726'. [ 622.750866][T15248] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 622.989885][T15261] loop1: detected capacity change from 0 to 1024 [ 623.052941][T15261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 623.076469][T15261] ext4 filesystem being mounted at /787/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.260109][T15261] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3731: bg 0: block 112: padding at end of block bitmap is not set [ 623.261377][ T28] audit: type=1400 audit(1784111214.076:1675): avc: denied { write } for pid=15260 comm="syz.1.3731" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 623.480027][ T28] audit: type=1400 audit(1784111214.286:1676): avc: denied { write } for pid=15260 comm="syz.1.3731" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 623.654650][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 624.465386][T15279] loop1: detected capacity change from 0 to 8192 [ 624.529022][T15279] syz.1.3734: attempt to access beyond end of device [ 624.529022][T15279] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 624.598301][T15279] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 624.631241][T15279] FAT-fs (loop1): Filesystem has been set read-only [ 624.660182][T15279] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 624.686434][T15279] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 625.151433][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3737'. [ 625.300594][T15292] loop2: detected capacity change from 0 to 1024 [ 625.321199][T15292] ================================================================== [ 625.329327][T15292] BUG: KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event [ 625.338233][T15292] [ 625.340578][T15292] write to 0xffff888103f934f4 of 4 bytes by task 5387 on cpu 0: [ 625.348236][T15292] fsnotify_detach_mark+0xb9/0x160 [ 625.353402][T15292] fsnotify_destroy_mark+0x6a/0x140 [ 625.358636][T15292] __se_sys_inotify_rm_watch+0xe8/0x170 [ 625.364226][T15292] __x64_sys_inotify_rm_watch+0x31/0x40 [ 625.369833][T15292] x64_sys_call+0xc88/0x3020 [ 625.374465][T15292] do_syscall_64+0x136/0x3c0 [ 625.379086][T15292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.384996][T15292] [ 625.387356][T15292] read to 0xffff888103f934f4 of 4 bytes by task 15292 on cpu 1: [ 625.394996][T15292] fsnotify_handle_inode_event+0x13d/0x230 [ 625.400835][T15292] fsnotify+0x16ae/0x1860 [ 625.405205][T15292] __fsnotify_parent+0x2f8/0x3a0 [ 625.410166][T15292] __fput+0x1e2/0x630 [ 625.414187][T15292] fput_close_sync+0xad/0x190 [ 625.418921][T15292] __x64_sys_close+0x55/0xf0 [ 625.423636][T15292] x64_sys_call+0x275d/0x3020 [ 625.428335][T15292] do_syscall_64+0x136/0x3c0 [ 625.432960][T15292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.438875][T15292] [ 625.441223][T15292] value changed: 0x00000003 -> 0x00000000 [ 625.446974][T15292] [ 625.449331][T15292] Reported by Kernel Concurrency Sanitizer on: [ 625.455513][T15292] CPU: 1 UID: 0 PID: 15292 Comm: syz.2.3739 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 625.466491][T15292] Tainted: [W]=WARN [ 625.470320][T15292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 625.480396][T15292] ================================================================== [ 625.561718][T15292] EXT4-fs: Ignoring removed orlov option [ 625.592204][T15292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.700495][T15295] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3739: bg 0: block 225: padding at end of block bitmap is not set [ 625.717823][ T28] audit: type=1400 audit(1784111216.516:1677): avc: denied { write } for pid=15291 comm="syz.2.3739" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 625.785708][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.816688][ T28] audit: type=1400 audit(1784111216.516:1678): avc: denied { write } for pid=15291 comm="syz.2.3739" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 629.216302][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!