last executing test programs: 14m2.126813532s ago: executing program 32 (id=57): add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r1, &(0x7f0000000c80)=""/265, 0x109) write$eventfd(0xffffffffffffffff, 0x0, 0x0) 11m21.653878343s ago: executing program 0 (id=886): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x100022, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c046, &(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x20000, 0x28000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x54}}, 0x0) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) 11m21.268368012s ago: executing program 0 (id=889): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x321002, 0x0) timerfd_gettime(r0, 0x0) r1 = socket(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000500)={0x1, {{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x1, [{{0x2, 0x4e20, @local}}]}, 0x110) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x4}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "fff5000000000000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xdc}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) 11m20.018102823s ago: executing program 0 (id=896): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x6001, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x8014}, 0x20000004) open$dir(0x0, 0x282882, 0xc4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10100, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000015) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x14, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc802}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x6c4}, 0x28) timerfd_gettime(r1, &(0x7f0000000280)) setns(0xc9, 0x0) socket$kcm(0x21, 0x2, 0xa) ioperm(0x3, 0x5, 0x7) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000680)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10\n', 0x8c) 11m19.586975013s ago: executing program 0 (id=900): perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000f80)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801b, &(0x7f0000000240), 0xff, 0x523, &(0x7f00000006c0)="$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") ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x4e, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r4, 0x80000001, 0x4) 11m18.839689802s ago: executing program 0 (id=907): socket$rxrpc(0x21, 0x2, 0x2) fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x3ffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000007480), 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$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") r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in6=@mcast1, 0x0, 0x3, 0xfffc, 0xfffc, 0x2}, {0x7, 0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x4, 0x9}, 0x5bf7, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@remote, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2, 0xffffffff}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r3 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 11m17.562207483s ago: executing program 0 (id=917): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x40) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80080, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x80002007}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x4a, 0x5f, 0xfe, 0x4, 0x4, 0x0, 0x3, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x110200, 0xd, 0x9, 0x7, 0x7, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(0x0, 0x1ff) epoll_pwait(r2, 0x0, 0x0, 0x7fff, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000880), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x6dfe, 0x8000, 0x5b, 0x1}, 0x10) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x4c840) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) read$char_usb(r1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 11m17.540652353s ago: executing program 33 (id=917): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x40) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80080, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x80002007}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x4a, 0x5f, 0xfe, 0x4, 0x4, 0x0, 0x3, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x110200, 0xd, 0x9, 0x7, 0x7, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(0x0, 0x1ff) epoll_pwait(r2, 0x0, 0x0, 0x7fff, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000880), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x6dfe, 0x8000, 0x5b, 0x1}, 0x10) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x4c840) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) read$char_usb(r1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 10m23.379176383s ago: executing program 3 (id=1234): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x8a400, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000540), 0x8}, 0x100100, 0x0, 0x5f76e390, 0x3, 0x8, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x4d008f47}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001803a641d", 0x2b}], 0x1, 0x0, 0x0, 0x39c}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x20002, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000001140)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, 0x0, 0x0) connect$pptp(r2, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1) 10m22.110275095s ago: executing program 3 (id=1254): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x4, 0x7832}, 0x4, 0x0, 0x10004, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfc0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) getpeername(r3, 0x0, 0x0) 10m21.711840014s ago: executing program 3 (id=1260): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x321002, 0x0) r0 = socket(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000500)={0x1, {{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x1, [{{0x2, 0x4e20, @local}}]}, 0x110) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x4}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "fff5000000000000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xdc}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 10m21.041700521s ago: executing program 3 (id=1250): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='dir0/trace_marker\x00', 0x21) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x44400, 0x0) utime(0x0, &(0x7f00000001c0)={0x6, 0x8}) r0 = socket(0x840000000002, 0x3, 0xff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xa00, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc894}, 0x20040850) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {0x0, 0xb}, {0xc, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xf}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x2000c880) mlockall(0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000640)="97452a307eb495fe223600"/28, 0x1c}], 0x16, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010101}}}], 0x20}, 0x400c804) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000001300)={0x8ca, 0x351e, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 10m20.937133473s ago: executing program 3 (id=1251): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, 0x0, 0x40) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x75751a4fd574bbc2}, 0x80) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x204}}, 0x10) bind$tipc(r5, 0x0, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x720, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8811}, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x60}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c880, &(0x7f00000006c0), 0x6, 0x25f, &(0x7f0000000840)="$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") setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) 10m19.707064053s ago: executing program 3 (id=1264): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x0, 0x0, 0x4, 0x5, 0x1, 0x10000, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) write$cgroup_subtree(r2, &(0x7f0000003100)=ANY=[], 0x10448) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x20000008}) ioctl$TCSBRKP(r4, 0x5425, 0x3) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0xfd, @private2}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)}, 0x2004c084) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) socket$packet(0x11, 0x2, 0x300) 10m19.706869253s ago: executing program 34 (id=1264): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x0, 0x0, 0x4, 0x5, 0x1, 0x10000, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) write$cgroup_subtree(r2, &(0x7f0000003100)=ANY=[], 0x10448) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x20000008}) ioctl$TCSBRKP(r4, 0x5425, 0x3) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0xfd, @private2}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)}, 0x2004c084) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) socket$packet(0x11, 0x2, 0x300) 4m5.326984086s ago: executing program 1 (id=3057): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f00000006c0)={[{@errors_remount}, {@dioread_lock}, {@auto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0xc}}, {@stripe={'stripe', 0x3d, 0xc}}, {@bh}, {@i_version}]}, 0x3, 0x456, &(0x7f0000000c80)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x802040, &(0x7f0000000340)={[{@data_err_ignore}, {@resgid}, {@abort}, {@orlov}, {@nobarrier}, {@lazytime}]}, 0x9, 0x637, &(0x7f0000001980)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88801e8050018", @ANYRES32], 0x48}}, 0x440088c4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000500)=ANY=[@ANYRES16=r1], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0c9, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 4m3.979102429s ago: executing program 1 (id=3062): socket$inet6(0x10, 0x3, 0x4) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x80000000, 0x101000) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000005c0)={0x2, &(0x7f0000000500)="e6209376283833f3866f897a24e4aa1caa94c64760435bd10116f9b2b2f554b004112ec30562ac9b72592263562e936d88807b3512f7c6f146c0ef63f342e685e7172286c8afc4c10128dcaf9787c66ef5551031d41f8c7f5023df89cf938105636fa7a548ffad5e24dc3eafa549a12f8e41730d5964d13228d71b2bb616bda86c6032060e328662b3b477f6bdcee8ad5daeb027d58d70a3ac8025d34bbe39"}) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1000001, 0x401d031, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x3f, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0xa76, 0x2, &(0x7f0000000200)={&(0x7f0000001000)}, &(0x7f0000000300)={&(0x7f0000000640)="31247bc8431f8b777d510c9d2c547ba85f2487a41bd3feeaf4fb0a40e979724b4c9ff3e06ac9e30b1398434cb30af1630115461be08289cd3e5543fab051574c8e239e9f2b1f97c57e2a8cdc8124b7d9588d6fec04090b7defb39dd7bb9cbc711e0a792637ff40e23d5c7506a8df793bb2868b5263991b6dfd8ce4459640cf5c0dd7d5850c41aa36214413a0fc10035aed22c3aa14ef3420f318a428d146d9764ab1ebde336991829932ee0454feeae123cbcb823588d7dffebbcead939459755d6b6dfab2030aa22fc9d6c145147a23ec04986c5e000000000000", 0xdb, 0x1, 0x0, 0x4}, {0x0, 0x9}}, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6e4e9a1d78ad62ceef188430800000000000000", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x7fffffff, 0x40400) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) listns(&(0x7f0000000140)={0x20, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0x4, 0x1], 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0x0, 0x80000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x5, 0x7, 0x0, 'queue0\x00', 0x240001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x0, 0x1}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1a72a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x209, 0x6, 0x0, 0x5, 0x87c, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x2711, @hyper}, 0x10) close(0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) 4m1.728196974s ago: executing program 1 (id=3067): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=r1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x4b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="591cd03907c8aed00d0d0b8072b6aef6b8e74836f7a67bec3356d7a4ba2fe8f71c1c939f24277c4e01f2566201586c62bf1a2f7c5c72d7a97bf2c57d6d471f83c0ed8fd51c1fc36a8b9de095d441e2cc3c9bb1e19569f2e828c7c111fe85582b6e5cc39da349923bf331c8bb07945e447baee6ef31f51a6f74ea0981e60d22165f5ca7245c2f0bea250961a5940507dd90f406d3c3", @ANYBLOB="0100283d7000fcdbdf250c"], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) r8 = gettid() tkill(r8, 0x2a) epoll_pwait(r2, 0x0, 0x0, 0xffff, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 4m0.156135613s ago: executing program 1 (id=3071): perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x65, 0x1, 0x10, 0x0, 0x0, 0x8, 0xf40e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x48ac}, 0x700, 0x1, 0x43a1bd76, 0x3, 0x9, 0x6, 0x8f0, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x2, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000400)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00f3098d77bd49e6c12ffd66b5d3fde00d234f9f02492af4bd23c18682e1fb834406c97b4a07b67fdc9092a8e954d98e63ba43ac855cad18cdf417ae223e4a21030000000000000013865ae99a2f2d06341971122520b4fbfe4ba8e0048022b84eaee4b30761f43220e17f6aef4c19dc36ef2dec44c0a2b512c640be4cda86"], 0x4, 0x587, &(0x7f0000000e00)="$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") sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) unshare(0x24020400) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r2, &(0x7f0000000d00)=[{&(0x7f0000000000)="e3", 0x1}, {&(0x7f0000000580)="eb", 0x1}], 0x2, 0x1) fcntl$setpipe(r1, 0x407, 0x176) sendmsg$nl_route(r0, 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x9, 0x401d031, r3, 0x0) r4 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x20, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x2, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)='veth0_to_batadv\x00', 0x7, 0x9, 0x6}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x4040840) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xb}, 0x425, 0x2df, 0x0, 0x0, 0x9, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r7, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/209, 0xd1}, {&(0x7f0000000440)=""/116, 0x74}, {&(0x7f0000000800)=""/243, 0xf3}, {&(0x7f0000000900)=""/99, 0x63}, {&(0x7f0000000a80)=""/115, 0x73}], 0x5, 0x5fae, 0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mlock(&(0x7f0000420000/0x2000)=nil, 0x2000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m58.124889953s ago: executing program 1 (id=3078): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) listen(0xffffffffffffffff, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x91}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000002c0)={r0}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000840000"], 0x18}, 0x8050) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0xa2, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00'}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, 0x0) io_submit(0x0, 0x2, &(0x7f0000000800)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfff8, r1, &(0x7f0000000340)="c68222b80fb3e5295198851ef9f8af720c42c68b3f3e50691db4f9fe5616f54a02738060d1bc0d3b6ae188d02ff465eba9b8b11cebba018fe1eee68e2fadce75107edbdbaf1044fdfcb3b034296d", 0x4e, 0xffff}, 0x0]) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[], 0x0) add_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000300), 0x0, 0xfffffffffffffffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) fcntl$setlease(r3, 0x400, 0x1) fcntl$getflags(r3, 0x401) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffe4) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 3m56.492308253s ago: executing program 1 (id=3087): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80480, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0xa8000, 0x0) ioctl$TIOCCBRK(r0, 0x5428) setresuid(0xee01, 0x0, 0x0) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$rxrpc(0x21, 0x2, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000040)='syz\x00', 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000040)='ns\x00') readlinkat(r4, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f0000000300)={[{@inode_readahead_blks}]}, 0x2, 0xbd8, &(0x7f00000083c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) r5 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f00000005c0)=""/191, 0xbf}, {&(0x7f0000000680)=""/138, 0x8a}, {&(0x7f0000000740)=""/59, 0x3b}], 0x4) io_uring_enter(r5, 0xe7f, 0xe400, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000080)=[0xcf, 0x5], 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x480, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x20008000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 3m56.491893743s ago: executing program 35 (id=3087): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80480, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0xa8000, 0x0) ioctl$TIOCCBRK(r0, 0x5428) setresuid(0xee01, 0x0, 0x0) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$rxrpc(0x21, 0x2, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000040)='syz\x00', 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000040)='ns\x00') readlinkat(r4, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f0000000300)={[{@inode_readahead_blks}]}, 0x2, 0xbd8, &(0x7f00000083c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) r5 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f00000005c0)=""/191, 0xbf}, {&(0x7f0000000680)=""/138, 0x8a}, {&(0x7f0000000740)=""/59, 0x3b}], 0x4) io_uring_enter(r5, 0xe7f, 0xe400, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000080)=[0xcf, 0x5], 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x480, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x20008000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 2m57.694621817s ago: executing program 8 (id=4241): socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/crypto\x00', 0x0, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='xprtsec\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x3b82, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000000b140100"], 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2200810, &(0x7f0000000300)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@journal_async_commit}, {@sysvgroups}, {@noblock_validity}, {@dioread_lock}, {@nogrpid}, {@auto_da_alloc}, {@grpjquota}]}, 0xfc, 0x58b, &(0x7f0000002340)="$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") creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x18, 0x1, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) write(r1, &(0x7f0000000180), 0x0) 2m57.322584366s ago: executing program 8 (id=4246): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) 2m57.061779363s ago: executing program 8 (id=4248): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xbef0, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x1912, 0x71, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) 2m56.74607679s ago: executing program 8 (id=4254): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) 2m56.640485893s ago: executing program 8 (id=4256): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0xa, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m55.626159378s ago: executing program 8 (id=4264): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65) pwrite64(r0, &(0x7f0000000100)="84fc4a", 0x3, 0x84fed1) syz_usb_connect$uac1(0x5, 0x72, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m55.563299149s ago: executing program 36 (id=4264): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65) pwrite64(r0, &(0x7f0000000100)="84fc4a", 0x3, 0x84fed1) syz_usb_connect$uac1(0x5, 0x72, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 20.419169305s ago: executing program 7 (id=5691): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x1, 0x0, 0x9, 0xd, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000002c0)) 20.262739429s ago: executing program 7 (id=5695): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000003200)='./file1\x00', 0x0, &(0x7f0000003240)=ANY=[], 0x1, 0x346, &(0x7f00000001c0)="$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") sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000100000030000005800018044000400200001000a09000000000000fe800000000000000000000000000013f8000000202002000a00000000000000ff010000000000000000000000000001000000000d000100"], 0x6c}}, 0x0) 20.151082601s ago: executing program 7 (id=5699): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 20.010367944s ago: executing program 7 (id=5706): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000096, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000a40)='./file0/../file0/../file0\x00', &(0x7f0000000a80)='./file0/../file0/../file0\x00') 19.899063997s ago: executing program 7 (id=5709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) 19.75499457s ago: executing program 7 (id=5714): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x80000000, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) 19.75493221s ago: executing program 37 (id=5714): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x80000000, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) 1.698002182s ago: executing program 2 (id=6003): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2b, 0x1, 0x1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.597767354s ago: executing program 6 (id=6006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) 1.597634454s ago: executing program 5 (id=6007): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}}, 0x34}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f4000382000000000000000010010020000126700"], 0x0) 1.597480824s ago: executing program 2 (id=6008): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000000da70bde208f6030a67bb18f4d0d0"], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0x3, 0xc}, {0x1b, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x2000c8c1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) 1.563921045s ago: executing program 6 (id=6010): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8140, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x13c1, 0x0, 0x0, 0x0, 0x46fa, 0x401, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r0}, 0x9) 1.543455526s ago: executing program 2 (id=6011): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000400)={0xd0, r1, 0x1, 0xfffffffd, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1000000}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x400}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000004}, 0xc0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6fcf, 0x4) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x2c22, @remote}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7000, 0x0, 0x3) setxattr(0x0, &(0x7f0000000100)=@random={'user.', 'a\x00'}, 0x0, 0x0, 0x0) 1.416897308s ago: executing program 6 (id=6014): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x400000, 0x25dfdbfa, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1.172450634s ago: executing program 4 (id=6017): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xa) sendmsg(0xffffffffffffffff, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='$\x00\x00\x00', 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000180)={[{@usrquota}, {@min_batch_time}, {@nombcache}]}, 0x1, 0x4c0, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000400)={0x1}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) lchown(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 1.090863416s ago: executing program 9 (id=6018): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x200000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000880)='r:s/p ./file0:0\f', 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xffff) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f00000000c0)=0x7, 0x4) writev(r0, 0x0, 0x0) 979.047428ms ago: executing program 4 (id=6019): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x15, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x38}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x42}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c010}, 0x40080) 928.85264ms ago: executing program 2 (id=6020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)={@void, @val={0x2, 0x0, 0xdd86, 0x400, 0x6, 0x4}, @mpls={[{0x1, 0x0, 0x1}, {0x42d5, 0x0, 0x1}, {0x8098}], @ipv4=@dccp={{0x5, 0x4, 0x2, 0x2e, 0x34, 0x64, 0x0, 0xff, 0x21, 0x0, @multicast2, @private=0xa010100}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x6, 0x4, "be158f", 0x57, "1550d1"}, "1c1c8fc640b655f30de4fa61606e8a2f"}}}}, 0x4a) 871.682771ms ago: executing program 4 (id=6021): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) 814.709652ms ago: executing program 9 (id=6022): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x23, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x10050, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) socket$kcm(0x2, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) socket$kcm(0x10, 0x2, 0x0) 814.437472ms ago: executing program 2 (id=6023): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$loop(0x0, 0x4, 0x12bb41) r1 = timerfd_create(0x0, 0x80800) timerfd_settime(r1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x3dc}, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000740)) 764.909713ms ago: executing program 4 (id=6024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x7}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000000)=r1) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 722.555374ms ago: executing program 2 (id=6025): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004054) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x400970, 0x1f880, 0x0, 0x48}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x3}}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0) 633.934716ms ago: executing program 5 (id=6026): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) writev(r0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet6(0xa, 0x2, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x7f, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000140)) 633.374866ms ago: executing program 9 (id=6027): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000b40)={0x100, 0xf6, 0x20}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x7, 0x4, 0x2}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 546.958518ms ago: executing program 5 (id=6028): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r1 = epoll_create(0x1e) epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0) socket$inet6(0xa, 0x800, 0x7fff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0xfffffffffffffffe, 0x9, 0x10000003, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3504, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x73, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x9011}, 0x890) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0) 546.708548ms ago: executing program 9 (id=6029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x6001, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x2, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffc, 0x7, 0x8000, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @empty, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) rename(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400042a202e6c878ba36201080002400000000074000000060a01040000000000000000020000000900010073797a30000000000900020073797a300000000048000480440001800a0001006d61746368000000340002800d00010064657667726f7570000000000800024000000000180003"], 0xfc}}, 0x0) 525.063619ms ago: executing program 6 (id=6030): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd831, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r2}, 0x8) close(r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)='%ps \x00'}, 0x20) 481.84675ms ago: executing program 4 (id=6031): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='00:02', 0x5) r2 = openat(r0, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='00:02', 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 406.861392ms ago: executing program 5 (id=6032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f00000012c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x8}}}, 0x2a) 406.393872ms ago: executing program 9 (id=6033): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x251, &(0x7f0000000900)="$eJzs2k9rXFUYB+D3pq1NU9KJ+I8WxIMu1M2lydpFgzQgBhTtCFWQ3pobHXKdCblDYERMVnXrR3AtLt0J0qWbbPwELtxINll2IV7JzGiaEiVZpBP1eTbzwjk/zns5h8NZzO5rX326tlrnq0U/prIspm7EdjzIYi6m4k/b8erLt398/t3b77+5uLx8852UlhZvzS+klK688MMHn3/74v3+5fe+u/L9xdiZ+3B3b+GXnWd3ru7+fuuTTp06der2+qlId3u9fnG3KtNKp17LU3q7Kou6TJ1uXW4cGl+teuvrg1R0V2Zn1jfKuk5Fd5DWykHq91J/Y5CKj4tON+V5nmZngkctXTr+3PY3D5om9poLd6Jpmktfx+X7MftztCJ7MmVP3cieuZM9t51d3Wua1mm2zMTY//+3hy716Yjqy832Znv0OxpfXI1OVFHG9WjFb7F/TMZG9dIbyzevp6G5uFdtjfNbm+1zh/Pz0Yq5o/Pzo3yKe9WvT4yW3dpsX4yZiAsR4/xCtOLpo/MLB/nh+ueG60/HKy89tH4erfjpo+hFFSuxnz3IfzGf0utvLafD/V8bzvsn06e8NwAApyFPfzny/Zbnfzc+yp/gffjI++p8XDs/2W8noh58tlZUVblxrGJ/R489+V9YTJ+NNv4LRUQ2PGDZ+KBNuh/FCYuJXks8JgebPulOAAAAAAAAAAAAOInH8XfCSX8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwtv0RAAD//11yztI=") mkdir(&(0x7f0000000040)='my_sys\x00', 0xd6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000600)) open(0x0, 0x181042, 0x124) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 361.568352ms ago: executing program 6 (id=6034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x2}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x24) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500002012340000401154970a0000010a0000023039d431000c"], 0x24) 175.058787ms ago: executing program 6 (id=6035): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141142, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x1000000201005) 154.950897ms ago: executing program 5 (id=6036): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x87b, @loopback, 0xe}, {0xa, 0xce1e, 0x800000d, @mcast1}, 0xffffffffffffffff, 0x1}}, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0xc, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 95.873829ms ago: executing program 5 (id=6037): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 93.492189ms ago: executing program 4 (id=6038): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3, @ANYBLOB="bfebb9bed3ff0700"], 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0) 0s ago: executing program 9 (id=6039): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) pread64(r1, 0x0, 0x0, 0xa6a) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) kernel console output (not intermixed with test programs): ithout journal. Quota mode: writeback. [ 109.484127][ T5192] loop2: detected capacity change from 0 to 512 [ 109.709465][ T5209] loop5: detected capacity change from 0 to 512 [ 109.723756][ T30] audit: type=1400 audit(1791535553.643:917): avc: denied { mounton } for pid=5207 comm="syz.5.396" path="/63/file0" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.860591][ T30] audit: type=1400 audit(1791535553.773:918): avc: denied { write } for pid=5208 comm="syz.0.408" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.260644][ T5224] scsi_strcpy_devinfo: vendor string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' is too long [ 111.359364][ T5209] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.396: corrupted in-inode xattr: invalid ea_ino [ 111.359426][ T5209] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.362390][ T5209] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.396: couldn't read orphan inode 15 (err -117) [ 111.362520][ T5209] loop5: lost filesystem error report for type 5 error -117 [ 111.411949][ T5209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.464004][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.465093][ T5209] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.594026][ T30] audit: type=1326 audit(1791535555.503:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.0.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7ab0e1d9 code=0x7ffc0000 [ 111.594135][ T30] audit: type=1326 audit(1791535555.513:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.0.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7ab0e1d9 code=0x7ffc0000 [ 111.792793][ T5233] loop1: detected capacity change from 0 to 1024 [ 111.822914][ T5233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.869201][ T5236] loop5: detected capacity change from 0 to 128 [ 112.149274][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 112.149292][ T30] audit: type=1326 audit(1791535556.073:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.0.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f6b7ab0c617 code=0x7ffc0000 [ 112.190898][ T30] audit: type=1400 audit(1791535556.103:952): avc: denied { write } for pid=5239 comm="syz.2.404" name="instances" dev="tracefs" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 112.195857][ T5233] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 112.195898][ T5233] File: /83/file1/file1 PID: 5233 Comm: syz.1.402 [ 112.213462][ T30] audit: type=1326 audit(1791535556.083:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.0.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b7aacea0e code=0x7ffc0000 [ 112.213508][ T30] audit: type=1326 audit(1791535556.143:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.0.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b7ab0de6b code=0x7ffc0000 [ 112.238812][ T30] audit: type=1326 audit(1791535556.143:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.0.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6b7aacea0e code=0x7ffc0000 [ 112.238854][ T30] audit: type=1326 audit(1791535556.163:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.0.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7ab0e1d9 code=0x7ffc0000 [ 112.258535][ T30] audit: type=1326 audit(1791535556.173:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.0.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7ab0e1d9 code=0x7ffc0000 [ 112.292598][ T30] audit: type=1326 audit(1791535556.223:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.0.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7ab0e1d9 code=0x7ffc0000 [ 112.304897][ T30] audit: type=1326 audit(1791535556.223:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.0.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7ab0e1d9 code=0x7ffc0000 [ 112.305368][ T30] audit: type=1326 audit(1791535556.223:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.0.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b7ab0e1d9 code=0x7ffc0000 [ 112.452041][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.520026][ T5246] set_capacity_and_notify: 1 callbacks suppressed [ 112.520044][ T5246] loop1: detected capacity change from 0 to 512 [ 112.523909][ T5246] EXT4-fs: Ignoring removed bh option [ 112.537032][ T5246] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 112.561640][ T5246] EXT4-fs (loop1): 1 truncate cleaned up [ 112.569089][ T5246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.347862][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.351308][ T5262] loop5: detected capacity change from 0 to 512 [ 113.380175][ T5262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.380275][ T5262] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.431060][ T5265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.411'. [ 113.517536][ T5267] loop1: detected capacity change from 0 to 1024 [ 113.522673][ T5267] EXT4-fs: Ignoring removed oldalloc option [ 113.530953][ T5267] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 113.555291][ T5267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.755401][ T5278] syzkaller0: entered promiscuous mode [ 113.755426][ T5278] syzkaller0: entered allmulticast mode [ 113.777527][ T5278] tipc: Enabled bearer , priority 0 [ 113.793263][ T5278] syzkaller0: mtu less than device minimum [ 114.555561][ T3709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.567289][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.763483][ T5275] loop0: detected capacity change from 0 to 512 [ 114.767383][ T5289] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 114.767421][ T5289] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.767491][ T5289] vhci_hcd vhci_hcd.0: Device attached [ 114.808270][ T5290] vhci_hcd: connection closed [ 114.808947][ T4807] vhci_hcd vhci_hcd.2: stop threads [ 114.808965][ T4807] vhci_hcd vhci_hcd.2: release socket [ 114.808982][ T4807] vhci_hcd vhci_hcd.2: disconnect device [ 114.832786][ T5275] EXT4-fs warning (device loop0): read_mmp_block:110: Error -74 while reading MMP block 13 [ 115.301910][ T919] tipc: Node number set to 389371430 [ 115.537712][ T5275] loop0: detected capacity change from 0 to 512 [ 115.656662][ T5304] scsi_strcpy_devinfo: vendor string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' is too long [ 115.699937][ T5302] loop2: detected capacity change from 0 to 1024 [ 115.860213][ T5302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.927449][ T5308] loop1: detected capacity change from 0 to 512 [ 115.940636][ T5308] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 115.968033][ T5308] EXT4-fs (loop1): 1 orphan inode deleted [ 115.973655][ T5308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.974239][ T5308] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.124772][ T4811] EXT4-fs error (device loop1): ext4_release_dquot:7106: comm kworker/u8:24: Failed to release dquot type 1 [ 116.237338][ T5302] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 116.237401][ T5302] File: /93/file1/file1 PID: 5302 Comm: syz.2.418 [ 116.346041][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.437328][ T5314] syzkaller0: entered promiscuous mode [ 116.437378][ T5314] syzkaller0: entered allmulticast mode [ 116.442947][ T5316] tipc: Enabled bearer , priority 0 [ 116.457239][ T5323] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 116.473703][ T5324] tipc: Resetting bearer [ 116.483669][ T5313] tipc: Resetting bearer [ 116.501769][ T5313] tipc: Disabling bearer [ 116.504575][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.639648][ T5334] loop0: detected capacity change from 0 to 512 [ 116.815244][ T5334] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 116.833094][ T5334] EXT4-fs (loop0): 1 orphan inode deleted [ 116.834465][ T5334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.834728][ T5334] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.841643][ T5332] netlink: 'syz.1.429': attribute type 2 has an invalid length. [ 117.077972][ T51] EXT4-fs error (device loop0): ext4_release_dquot:7106: comm kworker/u8:3: Failed to release dquot type 1 [ 117.562826][ T5344] loop3: detected capacity change from 0 to 128 [ 117.578607][ T5344] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.578984][ T5344] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.655638][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.689090][ T5348] loop2: detected capacity change from 0 to 512 [ 117.766625][ T5348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.792427][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.803669][ T5348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.260732][ T5348] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.307206][ T5354] loop1: detected capacity change from 0 to 1024 [ 118.309512][ T5354] EXT4-fs: Ignoring removed orlov option [ 118.322062][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 118.322081][ T30] audit: type=1400 audit(1791535562.253:1038): avc: denied { write } for pid=5347 comm="syz.2.446" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.370308][ T5354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.382287][ T30] audit: type=1400 audit(1791535562.313:1039): avc: denied { block_suspend } for pid=5350 comm="syz.0.435" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.389064][ T30] audit: type=1400 audit(1791535562.313:1040): avc: denied { bind } for pid=5347 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.484385][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.500924][ T30] audit: type=1326 audit(1791535562.433:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.0.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7ab0e1d9 code=0x7ffc0000 [ 118.501201][ T30] audit: type=1326 audit(1791535562.433:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.0.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7ab0e1d9 code=0x7ffc0000 [ 118.501371][ T30] audit: type=1326 audit(1791535562.433:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.0.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7ab0e1d9 code=0x7ffc0000 [ 118.502332][ T30] audit: type=1326 audit(1791535562.433:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.0.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7ab0e1d9 code=0x7ffc0000 [ 118.502387][ T30] audit: type=1326 audit(1791535562.433:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.0.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6b7ab0e1d9 code=0x7ffc0000 [ 118.557781][ T30] audit: type=1326 audit(1791535562.463:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.0.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7ab0e1d9 code=0x7ffc0000 [ 118.557818][ T30] audit: type=1326 audit(1791535562.463:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.0.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7ab0e1d9 code=0x7ffc0000 [ 118.747068][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.559881][ T5375] loop3: detected capacity change from 0 to 1024 [ 119.589759][ T5375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.708603][ T5377] loop1: detected capacity change from 0 to 512 [ 119.752734][ T5377] EXT4-fs warning (device loop1): read_mmp_block:110: Error -74 while reading MMP block 13 [ 119.867230][ T5375] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 119.880062][ T5375] File: /81/file1/file1 PID: 5375 Comm: syz.3.440 [ 119.889074][ T5377] loop1: detected capacity change from 0 to 512 [ 119.957979][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.182445][ T5393] scsi_strcpy_devinfo: vendor string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' is too long [ 120.719338][ T5404] FAULT_INJECTION: forcing a failure. [ 120.719338][ T5404] name failslab, interval 1, probability 0, space 0, times 0 [ 120.719433][ T5404] CPU: 1 UID: 0 PID: 5404 Comm: syz.2.447 Not tainted syzkaller #0 PREEMPT(lazy) [ 120.719469][ T5404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.719492][ T5404] Call Trace: [ 120.719500][ T5404] [ 120.719509][ T5404] __dump_stack+0x1d/0x30 [ 120.719650][ T5404] dump_stack_lvl+0x95/0xd0 [ 120.719673][ T5404] dump_stack+0x15/0x1b [ 120.719702][ T5404] should_fail_ex+0x262/0x280 [ 120.719804][ T5404] ? alloc_vfsmnt+0x2d/0x2f0 [ 120.719859][ T5404] should_failslab+0x8c/0xb0 [ 120.720043][ T5404] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 120.720170][ T5404] ? alloc_vfsmnt+0x2d/0x2f0 [ 120.720341][ T5404] alloc_vfsmnt+0x2d/0x2f0 [ 120.720381][ T5404] clone_mnt+0x30/0x5d0 [ 120.720425][ T5404] __do_loopback+0x244/0x280 [ 120.720517][ T5404] open_new_namespace+0x3a9/0xa90 [ 120.720641][ T5404] vfs_open_tree+0x24d/0x2d0 [ 120.720729][ T5404] __x64_sys_open_tree+0x5e/0xd0 [ 120.720757][ T5404] x64_sys_call+0x1d6d/0x2550 [ 120.720862][ T5404] do_syscall_64+0x112/0x360 [ 120.720930][ T5404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.720959][ T5404] RIP: 0033:0x7f919235e1d9 [ 120.720978][ T5404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.720998][ T5404] RSP: 002b:00007f9190db7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 120.721023][ T5404] RAX: ffffffffffffffda RBX: 00007f91925e5fa0 RCX: 00007f919235e1d9 [ 120.721113][ T5404] RDX: 0000000000081802 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 120.721133][ T5404] RBP: 00007f91923f5888 R08: 0000000000000000 R09: 0000000000000000 [ 120.721151][ T5404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.721168][ T5404] R13: 00007f91925e6038 R14: 00007f91925e5fa0 R15: 00007fffdb13aba8 [ 120.721195][ T5404] [ 121.206368][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.450'. [ 121.295585][ T5413] loop2: detected capacity change from 0 to 512 [ 121.702252][ T5419] loop0: detected capacity change from 0 to 256 [ 122.328915][ T5413] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 122.766501][ T5435] loop1: detected capacity change from 0 to 164 [ 123.373874][ T5443] loop0: detected capacity change from 0 to 512 [ 123.385022][ T5445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.460'. [ 123.393543][ T5443] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 123.393723][ T5443] System zones: 1-12 [ 123.409394][ T5443] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.472: missing EA_INODE flag [ 123.409425][ T5443] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 123.409580][ T5443] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.472: error while reading EA inode 12 err=-117 [ 123.409614][ T5443] loop0: lost filesystem error report for type 5 error -117 [ 123.409780][ T5443] EXT4-fs (loop0): 1 orphan inode deleted [ 123.410237][ T5443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.415222][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 123.415240][ T30] audit: type=1400 audit(1791535567.343:1117): avc: denied { write } for pid=5441 comm="syz.0.472" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.515411][ T5443] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 123.515462][ T5443] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 123.515510][ T5443] vhci_hcd vhci_hcd.0: Device attached [ 123.617007][ T5451] loop3: detected capacity change from 0 to 512 [ 123.627916][ T5451] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.632818][ T5451] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 123.633119][ T5451] EXT4-fs (loop3): orphan cleanup on readonly fs [ 123.635345][ T5451] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.459: Allocating blocks 41-42 which overlap fs metadata [ 123.635557][ T5451] loop3: lost filesystem error report for type 5 error -117 [ 123.636036][ T5451] EXT4-fs (loop3): Remounting filesystem read-only [ 123.636146][ T5451] Quota error (device loop3): write_blk: dquota write failed [ 123.636193][ T5451] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 123.636405][ T5451] EXT4-fs (loop3): 1 truncate cleaned up [ 123.637639][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 123.637696][ C0] EXT4-fs (loop3): initial error at time 1791535567: ext4_mb_mark_diskspace_used:4223 [ 123.637770][ C0] EXT4-fs (loop3): last error at time 1791535567: ext4_mb_mark_diskspace_used:4223 [ 123.639461][ T5451] EXT4-fs (loop3): pa ffff888105d61a10: logic 1, phys. 41, len 23 [ 123.665584][ T5445] loop2: detected capacity change from 0 to 1024 [ 123.670257][ T5451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.674976][ T5445] EXT4-fs: Ignoring removed oldalloc option [ 123.731433][ T5445] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 123.788850][ T5448] vhci_hcd: connection closed [ 123.789088][ T51] vhci_hcd vhci_hcd.0: stop threads [ 123.789112][ T51] vhci_hcd vhci_hcd.0: release socket [ 123.789156][ T51] vhci_hcd vhci_hcd.0: disconnect device [ 123.805854][ T5445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.901098][ T30] audit: type=1400 audit(1791535567.823:1118): avc: denied { write } for pid=5440 comm="syz.2.460" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.995313][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.035499][ T5458] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 124.072335][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.386348][ T30] audit: type=1400 audit(1791535568.313:1119): avc: denied { ioctl } for pid=5473 comm="syz.1.470" path="socket:[10932]" dev="sockfs" ino=10932 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 124.419925][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.425214][ T30] audit: type=1400 audit(1791535568.353:1120): avc: denied { watch } for pid=5473 comm="syz.1.470" path="/100" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 124.492289][ T5475] loop2: detected capacity change from 0 to 512 [ 124.509883][ T5475] EXT4-fs warning (device loop2): read_mmp_block:110: Error -74 while reading MMP block 13 [ 124.546429][ T5474] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 124.546536][ T5474] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 124.565360][ T5474] vhci_hcd vhci_hcd.0: Device attached [ 124.580752][ T5478] vhci_hcd: connection closed [ 124.581346][ T4799] vhci_hcd vhci_hcd.1: stop threads [ 124.581363][ T4799] vhci_hcd vhci_hcd.1: release socket [ 124.581421][ T4799] vhci_hcd vhci_hcd.1: disconnect device [ 124.773921][ T5475] loop2: detected capacity change from 0 to 512 [ 124.804424][ T5481] loop0: detected capacity change from 0 to 1024 [ 124.821666][ T5481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.825017][ T30] audit: type=1400 audit(1791535568.753:1121): avc: denied { write } for pid=5480 comm="syz.0.468" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.895870][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.049835][ T30] audit: type=1400 audit(1791535568.943:1122): avc: denied { ioctl } for pid=5489 comm="syz.3.475" path="/87/tracing/uprobe_events" dev="tracefs" ino=21 ioctlcmd=0x551b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 125.578721][ T5494] loop2: detected capacity change from 0 to 164 [ 126.070303][ T5501] loop1: detected capacity change from 0 to 512 [ 126.084007][ T5501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.084157][ T5501] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.436479][ T5504] loop2: detected capacity change from 0 to 512 [ 126.482334][ T5504] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.478: corrupted in-inode xattr: invalid ea_ino [ 126.482841][ T5504] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 126.484022][ T5504] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.478: couldn't read orphan inode 15 (err -117) [ 126.484061][ T5504] loop2: lost filesystem error report for type 5 error -117 [ 126.489867][ T5504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.491777][ T5504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.589340][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.888762][ T5513] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 126.889245][ T5513] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.480: corrupted in-inode xattr: e_value size too large [ 126.889272][ T5513] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 126.891687][ T5513] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.480: couldn't read orphan inode 15 (err -117) [ 126.891773][ T5513] loop1: lost filesystem error report for type 5 error -117 [ 126.894347][ T5513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.966249][ T30] audit: type=1400 audit(1791535570.833:1123): avc: denied { write } for pid=5510 comm="syz.1.480" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.114509][ T5498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.334047][ T30] audit: type=1400 audit(1791535571.263:1124): avc: denied { write } for pid=5496 comm="syz.3.476" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.338545][ T5519] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.351591][ T5519] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 127.353412][ T5519] EXT4-fs (loop2): orphan cleanup on readonly fs [ 127.361198][ T5519] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.482: Allocating blocks 41-42 which overlap fs metadata [ 127.361363][ T5519] loop2: lost filesystem error report for type 5 error -117 [ 127.363327][ T5519] EXT4-fs (loop2): Remounting filesystem read-only [ 127.365157][ T5519] EXT4-fs (loop2): 1 truncate cleaned up [ 127.368023][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 127.368085][ C0] EXT4-fs (loop2): initial error at time 1791535571: ext4_mb_mark_diskspace_used:4223 [ 127.368170][ C0] EXT4-fs (loop2): last error at time 1791535571: ext4_mb_mark_diskspace_used:4223 [ 127.370387][ T5519] EXT4-fs (loop2): pa ffff888105d61a10: logic 1, phys. 41, len 23 [ 127.382672][ T5498] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 127.384721][ T5498] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 127.385111][ T5498] EXT4-fs (loop3): This should not happen!! Data will be lost [ 127.385111][ T5498] [ 127.385243][ T5498] EXT4-fs (loop3): Total free blocks count 0 [ 127.385279][ T5498] EXT4-fs (loop3): Free/Dirty block details [ 127.385319][ T5498] EXT4-fs (loop3): free_blocks=2415919504 [ 127.385418][ T5498] EXT4-fs (loop3): dirty_blocks=48 [ 127.385499][ T5498] EXT4-fs (loop3): Block reservation details [ 127.385532][ T5498] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 127.392474][ T5519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.546855][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.549164][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.348760][ T5534] set_capacity_and_notify: 3 callbacks suppressed [ 128.348785][ T5534] loop1: detected capacity change from 0 to 1024 [ 128.384483][ T5534] EXT4-fs: Ignoring removed i_version option [ 128.386456][ T5534] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 128.386681][ T5534] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.480699][ T5534] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 128.480857][ T5534] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.482036][ T5534] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.485: Freeing blocks not in datazone - block = 0, count = 4096 [ 128.516891][ T5534] loop1: lost filesystem error report for type 5 error -117 [ 128.517681][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 128.517759][ C1] EXT4-fs (loop1): initial error at time 1791535572: ext4_free_blocks:6719 [ 128.517807][ C1] EXT4-fs (loop1): last error at time 1791535572: ext4_free_blocks:6719 [ 128.551379][ T5534] EXT4-fs (loop1): Remounting filesystem read-only [ 128.551930][ T5534] EXT4-fs (loop1): 1 orphan inode deleted [ 128.585168][ T5534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.604132][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.372406][ T5557] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.375051][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.426510][ T5559] loop5: detected capacity change from 0 to 512 [ 129.443845][ T5557] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.464069][ T5559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.464225][ T5559] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.615883][ T5557] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.646050][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 129.646073][ T30] audit: type=1400 audit(1791535573.573:1126): avc: denied { write } for pid=5564 comm="syz.1.491" name="instances" dev="tracefs" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 129.690893][ T5557] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.717673][ T30] audit: type=1400 audit(1791535573.643:1127): avc: denied { write } for pid=5564 comm="syz.1.491" name="instances" dev="tracefs" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 129.763938][ T5080] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.821820][ T5080] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.836104][ T5078] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.851083][ T4807] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.852565][ T5572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.493'. [ 129.870140][ T30] audit: type=1400 audit(1791535573.803:1128): avc: denied { write } for pid=5573 comm="syz.3.494" name="usb_gadget" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.870227][ T30] audit: type=1400 audit(1791535573.803:1129): avc: denied { add_name } for pid=5573 comm="syz.3.494" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.870328][ T30] audit: type=1400 audit(1791535573.803:1130): avc: denied { create } for pid=5573 comm="syz.3.494" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 129.874587][ T30] audit: type=1400 audit(1791535573.803:1131): avc: denied { write } for pid=5573 comm="syz.3.494" name="functions" dev="configfs" ino=11508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.892276][ T30] audit: type=1400 audit(1791535573.823:1132): avc: denied { write } for pid=5573 comm="syz.3.494" name="UDC" dev="configfs" ino=11516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 129.892419][ T30] audit: type=1400 audit(1791535573.823:1133): avc: denied { open } for pid=5573 comm="syz.3.494" path="/91/config/usb_gadget/g1/UDC" dev="configfs" ino=11516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 129.896131][ T5574] UDC core: g1: couldn't find an available UDC or it's busy [ 130.058844][ T3709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.088944][ T5581] loop1: detected capacity change from 0 to 512 [ 130.095288][ T5581] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 130.095322][ T5581] System zones: 1-12 [ 130.096652][ T5581] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.495: missing EA_INODE flag [ 130.096680][ T5581] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 130.097465][ T5581] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.495: error while reading EA inode 12 err=-117 [ 130.097496][ T5581] loop1: lost filesystem error report for type 5 error -117 [ 130.097649][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 130.097667][ C1] EXT4-fs (loop1): initial error at time 1791535574: ext4_xattr_inode_iget:437: inode 12 [ 130.097702][ C1] EXT4-fs (loop1): last error at time 1791535574: ext4_xattr_inode_iget:442 [ 130.168295][ T5581] EXT4-fs (loop1): 1 orphan inode deleted [ 130.169301][ T5581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.354864][ T5588] loop0: detected capacity change from 0 to 512 [ 130.377736][ T5588] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.384822][ T5588] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 130.385238][ T5588] EXT4-fs (loop0): orphan cleanup on readonly fs [ 130.397547][ T5588] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4223: comm syz.0.497: Allocating blocks 41-42 which overlap fs metadata [ 130.401565][ T5588] loop0: lost filesystem error report for type 5 error -117 [ 130.402696][ T5588] EXT4-fs (loop0): Remounting filesystem read-only [ 130.403355][ T5588] Quota error (device loop0): write_blk: dquota write failed [ 130.403504][ T5588] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 130.404498][ T5588] EXT4-fs (loop0): 1 truncate cleaned up [ 130.407637][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 130.407696][ C0] EXT4-fs (loop0): initial error at time 1791535574: ext4_mb_mark_diskspace_used:4223 [ 130.407768][ C0] EXT4-fs (loop0): last error at time 1791535574: ext4_mb_mark_diskspace_used:4223 [ 130.662781][ T5572] loop2: detected capacity change from 0 to 1024 [ 130.815008][ T5572] EXT4-fs: Ignoring removed oldalloc option [ 130.866113][ T5585] loop5: detected capacity change from 0 to 512 [ 131.104923][ T5572] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 131.142820][ T5585] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.143251][ T5585] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 131.181787][ T5585] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 131.186036][ T5585] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 131.186376][ T5585] System zones: 0-2, 18-18, 34-34 [ 131.217838][ T5572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.219991][ T5585] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.499: bad orphan inode 15 [ 131.220173][ T5585] loop5: lost filesystem error report for type 5 error -117 [ 131.222768][ T5585] ext4_test_bit(bit=14, block=18) = 1 [ 131.222836][ T5585] is_bad_inode(inode)=0 [ 131.222853][ T5585] NEXT_ORPHAN(inode)=2264924160 [ 131.222893][ T5585] max_ino=32 [ 131.222946][ T5585] i_nlink=0 [ 131.226167][ T5585] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.499: corrupted inode contents [ 131.226557][ T5585] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.227814][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 131.227911][ C1] EXT4-fs (loop5): initial error at time 1791535575: ext4_orphan_get:1429 [ 131.228023][ C1] EXT4-fs (loop5): last error at time 1791535575: ext4_do_update_inode:5801: inode 15 [ 131.321668][ T5585] EXT4-fs error (device loop5): ext4_dirty_inode:6736: inode #15: comm syz.5.499: mark_inode_dirty error [ 131.321785][ T5585] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.346473][ T5585] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.499: corrupted inode contents [ 131.346522][ T5585] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.369376][ T5588] EXT4-fs (loop0): pa ffff888105d61a10: logic 1, phys. 41, len 23 [ 131.370848][ T5588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.372326][ T5585] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.499: mark_inode_dirty error [ 131.372886][ T5585] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.389140][ T5585] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2965: inode #15: comm syz.5.499: mark inode dirty (error -117) [ 131.389234][ T5585] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.395529][ T5585] EXT4-fs warning (device loop5): ext4_evict_inode:288: xattr delete (err -117) [ 131.402863][ T5585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.590207][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.749338][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.781919][ T3709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.201606][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.298038][ T5607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.513'. [ 132.408690][ T5610] syzkaller0: entered promiscuous mode [ 132.408717][ T5610] syzkaller0: entered allmulticast mode [ 132.510664][ T5618] loop1: detected capacity change from 0 to 164 [ 133.471228][ T5608] loop2: detected capacity change from 0 to 1024 [ 133.479075][ T5608] EXT4-fs: Ignoring removed i_version option [ 133.495467][ T5608] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.495697][ T5608] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 133.686629][ T5625] loop2: detected capacity change from 0 to 512 [ 133.717959][ T5607] loop0: detected capacity change from 0 to 1024 [ 133.719534][ T5625] EXT4-fs (loop2): 1 truncate cleaned up [ 133.719937][ T5625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.764239][ T5607] EXT4-fs: Ignoring removed oldalloc option [ 133.845129][ T5607] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 133.908795][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.065182][ T5607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.831186][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 134.831207][ T30] audit: type=1400 audit(1791535578.763:1252): avc: denied { write } for pid=5605 comm="syz.0.513" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.887269][ T30] audit: type=1400 audit(1791535578.813:1253): avc: denied { bind } for pid=5641 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.887304][ T30] audit: type=1400 audit(1791535578.813:1254): avc: denied { node_bind } for pid=5641 comm="syz.2.511" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 134.983617][ T5644] netlink: 220 bytes leftover after parsing attributes in process `syz.3.512'. [ 134.983950][ T5644] tc_dump_action: action bad kind [ 135.015621][ T5646] loop1: detected capacity change from 0 to 512 [ 135.039887][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.075390][ T5646] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.088186][ T5646] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 135.088489][ T5646] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.105120][ T5651] netlink: 244 bytes leftover after parsing attributes in process `syz.0.515'. [ 135.133857][ T5646] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.514: Allocating blocks 41-42 which overlap fs metadata [ 135.135492][ T5646] loop1: lost filesystem error report for type 5 error -117 [ 135.138021][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 135.139110][ C1] EXT4-fs (loop1): initial error at time 1791535579: ext4_mb_mark_diskspace_used:4223 [ 135.140581][ C1] EXT4-fs (loop1): last error at time 1791535579: ext4_mb_mark_diskspace_used:4223 [ 135.169217][ T5646] EXT4-fs (loop1): Remounting filesystem read-only [ 135.170098][ T5646] Quota error (device loop1): write_blk: dquota write failed [ 135.170191][ T5646] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 135.171201][ T5646] EXT4-fs (loop1): 1 truncate cleaned up [ 135.173743][ T5646] EXT4-fs (loop1): pa ffff888105d61a10: logic 1, phys. 41, len 23 [ 135.186329][ T5646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.244639][ T5654] loop3: detected capacity change from 0 to 1024 [ 135.244923][ T5654] EXT4-fs: Ignoring removed i_version option [ 135.250966][ T5654] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.251025][ T5654] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 135.511586][ T5657] loop3: detected capacity change from 0 to 512 [ 135.527429][ T30] audit: type=1400 audit(1791535579.363:1255): avc: denied { ioctl } for pid=5641 comm="syz.2.511" path="socket:[11627]" dev="sockfs" ino=11627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.556314][ T5657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.570319][ T30] audit: type=1400 audit(1791535579.503:1256): avc: denied { write } for pid=5656 comm="syz.3.516" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.702146][ T5661] netlink: 32 bytes leftover after parsing attributes in process `syz.3.516'. [ 135.818582][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.823521][ T5661] netlink: 60 bytes leftover after parsing attributes in process `syz.3.516'. [ 135.868079][ T5661] bridge_slave_0: left allmulticast mode [ 135.868108][ T5661] bridge_slave_0: left promiscuous mode [ 135.868262][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.169053][ T5669] loop1: detected capacity change from 0 to 512 [ 136.170249][ T5671] loop2: detected capacity change from 0 to 512 [ 136.195110][ T5668] loop0: detected capacity change from 0 to 128 [ 136.196649][ T5669] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.218693][ T5669] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 136.219036][ T5669] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.221870][ T5669] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.528: Allocating blocks 41-42 which overlap fs metadata [ 136.222146][ T5669] loop1: lost filesystem error report for type 5 error -117 [ 136.222564][ T5669] EXT4-fs (loop1): Remounting filesystem read-only [ 136.222667][ T5669] Quota error (device loop1): write_blk: dquota write failed [ 136.222781][ T5669] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 136.222984][ T5669] EXT4-fs (loop1): 1 truncate cleaned up [ 136.231013][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 136.231031][ C1] EXT4-fs (loop1): initial error at time 1791535580: ext4_mb_mark_diskspace_used:4223 [ 136.231052][ C1] EXT4-fs (loop1): last error at time 1791535580: ext4_mb_mark_diskspace_used:4223 [ 136.238491][ T5668] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.273567][ T5668] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.284640][ T5671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 136.284786][ T5671] System zones: 1-12 [ 136.285527][ T5671] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.517: missing EA_INODE flag [ 136.285750][ T5671] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 136.286068][ T5671] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.517: error while reading EA inode 12 err=-117 [ 136.286172][ T5671] loop2: lost filesystem error report for type 5 error -117 [ 136.286459][ T5671] EXT4-fs (loop2): 1 orphan inode deleted [ 136.287449][ T5671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.388763][ T5669] EXT4-fs (loop1): pa ffff888105d613f0: logic 1, phys. 41, len 23 [ 136.417658][ T30] audit: type=1400 audit(1791535580.333:1257): avc: denied { write } for pid=5666 comm="syz.0.527" name="dynamic_events" dev="tracefs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 136.575496][ T3304] FAT-fs (loop0): error, invalid access to FAT (entry 0xffff0000) [ 136.575523][ T3304] FAT-fs (loop0): Filesystem has been set read-only [ 136.589195][ T3304] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.578483][ T5677] random: crng reseeded on system resumption [ 137.590462][ T5677] netlink: 'syz.1.519': attribute type 21 has an invalid length. [ 137.590594][ T5677] netlink: 128 bytes leftover after parsing attributes in process `syz.1.519'. [ 137.590759][ T5677] netlink: 'syz.1.519': attribute type 4 has an invalid length. [ 137.590834][ T5677] netlink: 'syz.1.519': attribute type 5 has an invalid length. [ 137.590875][ T5677] netlink: 3 bytes leftover after parsing attributes in process `syz.1.519'. [ 139.318803][ T5685] loop3: detected capacity change from 0 to 164 [ 139.465713][ T5706] loop1: detected capacity change from 0 to 512 [ 139.501868][ T5706] EXT4-fs: Ignoring removed bh option [ 139.503010][ T5706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.560314][ T5706] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 139.560344][ T5706] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e054e01c, mo2=0002] [ 139.560785][ T5706] System zones: 0-1, 15-15, 18-18, 34-34 [ 139.562718][ T5706] EXT4-fs (loop1): orphan cleanup on readonly fs [ 139.598711][ T5706] EXT4-fs warning (device loop1): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 139.601113][ T5706] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 139.607529][ T5706] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.524: bad orphan inode 16 [ 139.641573][ T5706] loop1: lost filesystem error report for type 5 error -117 [ 139.645301][ T5706] ext4_test_bit(bit=15, block=18) = 1 [ 139.645382][ T5706] is_bad_inode(inode)=0 [ 139.645400][ T5706] NEXT_ORPHAN(inode)=0 [ 139.645513][ T5706] max_ino=32 [ 139.645582][ T5706] i_nlink=2 [ 139.661095][ T5706] EXT4-fs mount: 4 callbacks suppressed [ 139.661185][ T5706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.791790][ T5718] netlink: 'syz.2.529': attribute type 1 has an invalid length. [ 139.833152][ T5718] bond0: (slave veth0_to_bond): making interface the new active one [ 139.834036][ T5718] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 139.919982][ T5723] loop5: detected capacity change from 0 to 512 [ 139.950227][ T5723] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.953071][ T5723] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 139.953370][ T5723] EXT4-fs (loop5): orphan cleanup on readonly fs [ 139.955965][ T5723] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4223: comm syz.5.530: Allocating blocks 41-42 which overlap fs metadata [ 139.956058][ T5723] loop5: lost filesystem error report for type 5 error -117 [ 139.956340][ T5723] EXT4-fs (loop5): Remounting filesystem read-only [ 139.956435][ T5723] __quota_error: 7 callbacks suppressed [ 139.956479][ T5723] Quota error (device loop5): write_blk: dquota write failed [ 139.956552][ T5723] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 139.956828][ T5723] EXT4-fs (loop5): 1 truncate cleaned up [ 139.957612][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 139.957632][ C1] EXT4-fs (loop5): initial error at time 1791535583: ext4_mb_mark_diskspace_used:4223 [ 139.957663][ C1] EXT4-fs (loop5): last error at time 1791535583: ext4_mb_mark_diskspace_used:4223 [ 139.959712][ T5723] EXT4-fs (loop5): pa ffff888105d613f0: logic 1, phys. 41, len 23 [ 139.966405][ T5723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.976280][ T30] audit: type=1400 audit(1791535583.913:1264): avc: denied { read } for pid=5724 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.084815][ T3709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.244955][ T5735] loop5: detected capacity change from 0 to 1024 [ 140.293759][ T5735] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 140.308586][ T5735] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.532: lblock 2 mapped to illegal pblock 2 (length 1) [ 140.308628][ T5735] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 140.308702][ T5735] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 140.308722][ T5735] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.532: lblock 0 mapped to illegal pblock 48 (length 1) [ 140.308826][ T5735] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 140.308894][ T5735] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 140.308912][ T5735] EXT4-fs error (device loop5): ext4_acquire_dquot:7070: comm syz.5.532: Failed to acquire dquot type 0 [ 140.308947][ T5735] loop5: lost filesystem error report for type 5 error -117 [ 140.309030][ T5735] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 140.309050][ T5735] loop5: lost filesystem error report for type 5 error -117 [ 140.309178][ T5735] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.532: mark_inode_dirty error [ 140.309206][ T5735] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 140.309330][ T5735] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 140.309359][ T5735] EXT4-fs (loop5): 1 orphan inode deleted [ 140.309874][ T5735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.311136][ T5706] vhci_hcd vhci_hcd.4: default hub control req: 0000 v0000 i0000 l0 [ 140.315945][ T30] audit: type=1400 audit(1791535584.243:1265): avc: denied { write } for pid=5728 comm="syz.5.532" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.320536][ T30] audit: type=1400 audit(1791535584.253:1266): avc: denied { create } for pid=5728 comm="syz.5.532" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 140.326729][ T30] audit: type=1400 audit(1791535584.253:1267): avc: denied { bind } for pid=5728 comm="syz.5.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.327398][ T30] audit: type=1400 audit(1791535584.253:1268): avc: denied { connect } for pid=5728 comm="syz.5.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.334980][ T30] audit: type=1400 audit(1791535584.263:1269): avc: denied { write } for pid=5728 comm="syz.5.532" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.664585][ T5740] loop2: detected capacity change from 0 to 1024 [ 140.822418][ T5740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 140.822647][ T5740] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.954190][ T3709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.955870][ T5078] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.955906][ T5078] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 140.956078][ T5078] EXT4-fs error (device loop5): ext4_release_dquot:7106: comm kworker/u8:25: Failed to release dquot type 0 [ 140.956104][ T5078] loop5: lost filesystem error report for type 5 error -117 [ 140.956479][ T3709] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 140.956509][ T3709] loop5: lost filesystem error report for type 5 error -117 [ 140.956590][ T3709] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 140.956659][ T3709] loop5: lost filesystem error report for type 5 error -117 [ 140.956733][ T3709] EXT4-fs error (device loop5): ext4_quota_off:7354: inode #3: comm syz-executor: mark_inode_dirty error [ 140.956763][ T3709] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 140.956875][ T3709] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 140.956981][ T3709] loop5: lost filesystem error report for type 5 error -117 [ 141.091271][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.116895][ T5744] syzkaller0: entered promiscuous mode [ 141.116918][ T5744] syzkaller0: entered allmulticast mode [ 141.189410][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 141.241215][ T5746] loop1: detected capacity change from 0 to 512 [ 141.383386][ T5746] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.534: corrupted in-inode xattr: invalid ea_ino [ 141.383627][ T5746] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.384955][ T5746] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.534: couldn't read orphan inode 15 (err -117) [ 141.385095][ T5746] loop1: lost filesystem error report for type 5 error -117 [ 141.623591][ T5746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.189256][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.538'. [ 142.365678][ T5746] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.366837][ T5757] dummy0: entered promiscuous mode [ 142.366985][ T5757] macvlan2: entered promiscuous mode [ 142.392668][ T5757] dummy0: left promiscuous mode [ 142.574339][ T5767] loop1: detected capacity change from 0 to 512 [ 142.574794][ T5767] EXT4-fs: Ignoring removed i_version option [ 142.575127][ T5767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.615341][ T5767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.615413][ T5767] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.655786][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.690184][ T5774] syzkaller0: entered promiscuous mode [ 142.690269][ T5774] syzkaller0: entered allmulticast mode [ 142.694033][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.694129][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.694596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.697400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.777513][ T5779] syzkaller0: entered promiscuous mode [ 142.783350][ T5779] syzkaller0: entered allmulticast mode [ 142.786225][ T5779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'. [ 143.449261][ T5793] loop0: detected capacity change from 0 to 1024 [ 143.900461][ T5798] loop5: detected capacity change from 0 to 512 [ 144.031673][ T5791] loop3: detected capacity change from 0 to 164 [ 144.122867][ T5793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.123058][ T5793] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.193093][ T5798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.193940][ T5798] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.220223][ T5788] syzkaller0: entered promiscuous mode [ 144.220296][ T5788] syzkaller0: entered allmulticast mode [ 145.019281][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 145.029670][ T3709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.139107][ T5809] loop0: detected capacity change from 0 to 512 [ 145.156246][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 145.192659][ T5806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'. [ 145.193710][ T5812] dummy0: entered promiscuous mode [ 145.193863][ T5812] macvlan2: entered promiscuous mode [ 145.206468][ T5809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.206537][ T5809] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.206764][ T5812] dummy0: left promiscuous mode [ 145.210474][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 145.210491][ T30] audit: type=1400 audit(1791535589.143:1270): avc: denied { write } for pid=5808 comm="syz.0.560" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.267416][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.371636][ T5818] loop2: detected capacity change from 0 to 1024 [ 145.372746][ T5818] EXT4-fs: Ignoring removed oldalloc option [ 145.374406][ T5818] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 145.387404][ T5818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.929929][ T5816] loop1: detected capacity change from 0 to 512 [ 145.947885][ T5816] EXT4-fs warning (device loop1): read_mmp_block:110: Error -74 while reading MMP block 13 [ 145.974667][ T5816] loop1: detected capacity change from 0 to 512 [ 146.206213][ T30] audit: type=1400 audit(1791535590.133:1271): avc: denied { write } for pid=5805 comm="syz.2.551" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.444778][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.540957][ T5828] loop5: detected capacity change from 0 to 512 [ 146.541392][ T5828] EXT4-fs: Ignoring removed i_version option [ 146.541819][ T5828] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.560278][ T5833] loop1: detected capacity change from 0 to 1024 [ 146.628989][ T5828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.629046][ T5828] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.652546][ T3709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.671679][ T5833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.694417][ T30] audit: type=1400 audit(1791535590.623:1272): avc: denied { write } for pid=5832 comm="syz.1.558" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.726471][ T5838] loop3: detected capacity change from 0 to 512 [ 146.770800][ T5845] syzkaller0: entered promiscuous mode [ 146.770870][ T5845] syzkaller0: entered allmulticast mode [ 146.802191][ T5849] loop2: detected capacity change from 0 to 512 [ 146.821563][ T5849] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 146.821622][ T5849] System zones: 1-12 [ 146.821987][ T5849] EXT4-fs error (device loop2): ext4_xattr_inode_iget:473: comm syz.2.562: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 146.822028][ T5849] loop2: lost filesystem error report for type 5 error -117 [ 146.822799][ T5849] EXT4-fs (loop2): 1 orphan inode deleted [ 146.823205][ T5849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.846737][ T30] audit: type=1400 audit(1791535590.773:1273): avc: denied { write } for pid=5832 comm="syz.1.558" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.847784][ T5838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.850669][ T5838] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.855472][ T5833] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 146.855515][ T5833] File: /119/file1/file1 PID: 5833 Comm: syz.1.558 [ 146.890551][ T30] audit: type=1400 audit(1791535590.813:1274): avc: denied { setattr } for pid=5848 comm="syz.2.562" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.926729][ T5849] ip_tables: iptables: counters copy to user failed while replacing table [ 146.971987][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.051391][ T5857] syzkaller0: entered promiscuous mode [ 147.051410][ T5857] syzkaller0: entered allmulticast mode [ 147.054063][ T30] audit: type=1400 audit(1791535590.973:1275): avc: denied { write } for pid=5848 comm="syz.2.562" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.054158][ T30] audit: type=1400 audit(1791535590.973:1276): avc: denied { write } for pid=5848 comm="syz.2.562" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.440341][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.168956][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.181913][ T5872] syzkaller0: entered promiscuous mode [ 149.181988][ T5872] syzkaller0: entered allmulticast mode [ 149.292498][ T5883] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.577466][ T5895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.573'. [ 149.583510][ T5892] loop2: detected capacity change from 0 to 512 [ 149.583971][ T5892] EXT4-fs: Ignoring removed i_version option [ 149.613035][ T5892] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.620385][ T5892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.620619][ T5892] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.664603][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.952860][ T5895] loop3: detected capacity change from 0 to 1024 [ 149.960903][ T5895] EXT4-fs: Ignoring removed oldalloc option [ 149.989823][ T5895] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 150.053126][ T5895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.176637][ T5890] syzkaller0: entered promiscuous mode [ 150.177863][ T5890] syzkaller0: entered allmulticast mode [ 150.220193][ T30] audit: type=1400 audit(1791535594.143:1277): avc: denied { write } for pid=5894 comm="syz.3.573" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.306432][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.484978][ T5932] netlink: 'syz.1.583': attribute type 1 has an invalid length. [ 150.516025][ T5931] tcf_pedit_act: 7 callbacks suppressed [ 150.516042][ T5931] tc action pedit offset must be on 32 bit boundaries [ 150.516052][ T5931] tc action pedit offset must be on 32 bit boundaries [ 150.516061][ T5931] tc action pedit offset must be on 32 bit boundaries [ 150.516112][ T5931] tc action pedit offset must be on 32 bit boundaries [ 150.516125][ T5931] tc action pedit offset must be on 32 bit boundaries [ 150.516189][ T5931] tc action pedit offset must be on 32 bit boundaries [ 150.516198][ T5931] tc action pedit offset must be on 32 bit boundaries [ 150.516206][ T5931] tc action pedit offset must be on 32 bit boundaries [ 150.516215][ T5931] tc action pedit offset must be on 32 bit boundaries [ 150.516224][ T5931] tc action pedit offset must be on 32 bit boundaries [ 150.516291][ T5931] 0: reclassify loop, rule prio 0, protocol 800 [ 150.640330][ T5938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.583'. [ 151.064882][ T5943] loop2: detected capacity change from 0 to 512 [ 151.093836][ T5943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.094081][ T5943] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.160659][ T5939] bond1: (slave geneve2): making interface the new active one [ 151.160885][ T5939] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 151.212996][ T5928] loop5: detected capacity change from 0 to 512 [ 151.259291][ T4811] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 151.264187][ T4811] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 151.264240][ T4811] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 151.264350][ T4811] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 151.284124][ T5947] syzkaller0: entered promiscuous mode [ 151.284146][ T5947] syzkaller0: entered allmulticast mode [ 151.778736][ T5928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.786995][ T5928] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.866365][ T5952] syzkaller0: entered promiscuous mode [ 151.866385][ T5952] syzkaller0: entered allmulticast mode [ 151.891442][ T5952] tipc: Enabled bearer , priority 0 [ 151.895367][ T5952] tipc: Resetting bearer [ 151.976100][ T5951] tipc: Resetting bearer [ 151.980600][ T5951] tipc: Disabling bearer [ 152.006887][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.238652][ T30] audit: type=1400 audit(1791535596.163:1278): avc: denied { append } for pid=5965 comm="syz.3.591" name="uprobe_events" dev="tracefs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 152.767763][ T3709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.254328][ T5976] loop2: detected capacity change from 0 to 512 [ 153.445007][ T5976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.446582][ T5976] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.721167][ T5980] syzkaller0: entered promiscuous mode [ 153.721198][ T5980] syzkaller0: entered allmulticast mode [ 153.814932][ T5999] loop3: detected capacity change from 0 to 512 [ 153.853171][ T5999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.853240][ T5999] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.006072][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.555471][ T6007] loop1: detected capacity change from 0 to 164 [ 154.911652][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.481620][ T6026] syzkaller0: entered promiscuous mode [ 155.481700][ T6026] syzkaller0: entered allmulticast mode [ 155.828928][ T6032] syzkaller0: entered promiscuous mode [ 155.829065][ T6032] syzkaller0: entered allmulticast mode [ 156.037846][ T6032] tipc: Enabled bearer , priority 0 [ 156.053631][ T6032] tipc: Resetting bearer [ 156.643855][ T6031] tipc: Resetting bearer [ 156.762074][ T6031] tipc: Disabling bearer [ 157.009900][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.611'. [ 157.011478][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.611'. [ 157.012205][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.611'. [ 157.013105][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.611'. [ 157.735291][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.627'. [ 157.955356][ T6054] syzkaller0: entered promiscuous mode [ 157.955542][ T6054] syzkaller0: entered allmulticast mode [ 157.978963][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 157.980501][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 157.981207][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 157.982106][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 157.982741][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 158.229858][ T6052] loop0: detected capacity change from 0 to 1024 [ 158.277189][ T6052] EXT4-fs: Ignoring removed oldalloc option [ 158.294506][ T6052] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 158.369588][ T6052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.441743][ T30] audit: type=1400 audit(1791535602.373:1279): avc: denied { write } for pid=6050 comm="syz.0.627" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.516017][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.709134][ T6070] loop0: detected capacity change from 0 to 512 [ 158.734362][ T6070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.734582][ T6070] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.594221][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.609864][ T6077] netlink: 'syz.2.619': attribute type 1 has an invalid length. [ 159.645032][ T6077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.671691][ T6083] loop3: detected capacity change from 0 to 164 [ 159.690118][ T6077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.731727][ T6077] bond1: (slave geneve2): making interface the new active one [ 159.732561][ T6077] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 159.769811][ T1742] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 159.770001][ T1742] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 159.770603][ T1742] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 159.770650][ T1742] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 159.771345][ T6085] loop0: detected capacity change from 0 to 512 [ 159.824674][ T6085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.824803][ T6085] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.930426][ T6083] rock: directory entry would overflow storage [ 159.930594][ T6083] rock: sig=0x4f50, size=4, remaining=3 [ 159.930624][ T6083] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 160.942885][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.069326][ T6105] loop0: detected capacity change from 0 to 512 [ 162.210707][ T6105] EXT4-fs warning (device loop0): read_mmp_block:110: Error -74 while reading MMP block 13 [ 162.670979][ T6105] loop0: detected capacity change from 0 to 512 [ 162.850708][ T6135] __nla_validate_parse: 1 callbacks suppressed [ 162.850736][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 162.852175][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 162.853367][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 162.853870][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 162.854071][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 162.989721][ T6137] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.140344][ T6141] loop2: detected capacity change from 0 to 164 [ 163.177718][ T6143] loop5: detected capacity change from 0 to 512 [ 163.182167][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.640'. [ 163.231629][ T6143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.231801][ T6143] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.362071][ T6141] rock: directory entry would overflow storage [ 163.362390][ T6141] rock: sig=0x4f50, size=4, remaining=3 [ 163.362421][ T6141] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 164.091634][ T3709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.130064][ T6159] loop0: detected capacity change from 0 to 1024 [ 164.142197][ T6159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.159803][ T30] audit: type=1400 audit(1791535608.093:1280): avc: denied { write } for pid=6158 comm="syz.0.648" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.210675][ T6140] loop1: detected capacity change from 0 to 1024 [ 164.221185][ T6140] EXT4-fs: Ignoring removed oldalloc option [ 164.228317][ T6140] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 164.284356][ T30] audit: type=1400 audit(1791535608.213:1281): avc: denied { write } for pid=6158 comm="syz.0.648" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.289901][ T6140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.403784][ T30] audit: type=1400 audit(1791535608.333:1282): avc: denied { write } for pid=6139 comm="syz.1.640" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.520734][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.650597][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.719355][ T30] audit: type=1400 audit(1791535608.643:1283): avc: denied { read } for pid=6171 comm="syz.1.651" name="trace_pipe_raw" dev="tracefs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 165.827318][ T6188] syzkaller0: entered promiscuous mode [ 165.827360][ T6188] syzkaller0: entered allmulticast mode [ 165.910416][ T6169] netlink: 32 bytes leftover after parsing attributes in process `syz.5.654'. [ 166.065704][ T6198] loop5: detected capacity change from 0 to 164 [ 166.101255][ T6198] rock: directory entry would overflow storage [ 166.101276][ T6198] rock: sig=0x4f50, size=4, remaining=3 [ 166.101366][ T6198] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 166.673849][ T6205] loop1: detected capacity change from 0 to 164 [ 167.415148][ T6215] ip6gre1: entered allmulticast mode [ 167.436941][ T6212] loop2: detected capacity change from 0 to 512 [ 167.440845][ T6212] ext4: Unknown parameter 'euid' [ 168.275596][ T6233] syzkaller0: entered promiscuous mode [ 168.275636][ T6233] syzkaller0: entered allmulticast mode [ 168.733937][ T6235] loop1: detected capacity change from 0 to 1024 [ 168.879946][ T6235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.797962][ T30] audit: type=1400 audit(1791535613.733:1284): avc: denied { write } for pid=6234 comm="syz.1.673" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.948453][ T30] audit: type=1400 audit(1791535613.883:1285): avc: denied { write } for pid=6234 comm="syz.1.673" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.140737][ T6235] syz.1.673 (6235) used greatest stack depth: 9352 bytes left [ 170.165169][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.208405][ T6257] loop1: detected capacity change from 0 to 164 [ 170.266327][ T6257] rock: directory entry would overflow storage [ 170.266374][ T6257] rock: sig=0x4f50, size=4, remaining=3 [ 170.266741][ T6257] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 170.598203][ T6271] loop3: detected capacity change from 0 to 1024 [ 170.651095][ T6271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.701370][ T30] audit: type=1400 audit(1791535614.633:1286): avc: denied { write } for pid=6263 comm="syz.3.681" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.947081][ T30] audit: type=1400 audit(1791535614.873:1287): avc: denied { write } for pid=6263 comm="syz.3.681" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.006289][ T6271] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 171.007025][ T6271] File: /130/file1/file1 PID: 6271 Comm: syz.3.681 [ 171.038887][ T6267] loop1: detected capacity change from 0 to 512 [ 171.112947][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.151817][ T6267] EXT4-fs warning (device loop1): read_mmp_block:110: Error -74 while reading MMP block 13 [ 171.840664][ T6289] ip6gre1: entered allmulticast mode [ 171.900725][ T6267] loop1: detected capacity change from 0 to 512 [ 172.163337][ T6296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.689'. [ 172.339566][ T6301] loop2: detected capacity change from 0 to 1024 [ 172.352597][ T6301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.370977][ T30] audit: type=1400 audit(1791535616.303:1288): avc: denied { write } for pid=6299 comm="syz.2.690" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.458823][ T30] audit: type=1400 audit(1791535616.393:1289): avc: denied { write } for pid=6299 comm="syz.2.690" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.535103][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.562366][ T6313] loop0: detected capacity change from 0 to 164 [ 172.580300][ T6313] rock: directory entry would overflow storage [ 172.580321][ T6313] rock: sig=0x4f50, size=4, remaining=3 [ 172.580380][ T6313] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 174.769874][ T30] audit: type=1326 audit(1791535618.703:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7556e1d9 code=0x7ffc0000 [ 174.770742][ T30] audit: type=1326 audit(1791535618.703:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7efe7556e1d9 code=0x7ffc0000 [ 174.770894][ T30] audit: type=1326 audit(1791535618.703:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7556e1d9 code=0x7ffc0000 [ 174.771132][ T30] audit: type=1326 audit(1791535618.703:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efe7556e1d9 code=0x7ffc0000 [ 174.953724][ T6361] loop2: detected capacity change from 0 to 164 [ 174.991311][ T6361] rock: directory entry would overflow storage [ 174.992762][ T6361] rock: sig=0x4f50, size=4, remaining=3 [ 174.993268][ T6361] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 175.090559][ T6343] loop3: detected capacity change from 0 to 512 [ 175.114547][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 175.114566][ T30] audit: type=1326 audit(1791535619.043:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7556e1d9 code=0x7ffc0000 [ 175.114821][ T30] audit: type=1326 audit(1791535619.043:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7556e1d9 code=0x7ffc0000 [ 175.483896][ T6355] ip6gre1: entered allmulticast mode [ 175.485567][ T6343] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 176.529302][ T30] audit: type=1400 audit(1791535620.453:1315): avc: denied { create } for pid=6389 comm="syz.3.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.117417][ T6412] netlink: 'syz.3.724': attribute type 29 has an invalid length. [ 178.861009][ T6417] loop1: detected capacity change from 0 to 164 [ 179.374019][ T6426] ip6gre2: entered promiscuous mode [ 179.374043][ T6426] ip6gre2: entered allmulticast mode [ 179.425241][ T6427] ip6gre1: entered allmulticast mode [ 179.627432][ T6445] loop0: detected capacity change from 0 to 1024 [ 180.318013][ T6445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.421554][ T30] audit: type=1400 audit(1791535624.353:1316): avc: denied { write } for pid=6444 comm="syz.0.730" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.512441][ T30] audit: type=1400 audit(1791535624.443:1317): avc: denied { write } for pid=6444 comm="syz.0.730" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.605683][ T6459] loop5: detected capacity change from 0 to 256 [ 180.749224][ T6466] loop2: detected capacity change from 0 to 512 [ 180.768767][ T6466] EXT4-fs: Ignoring removed bh option [ 180.770420][ T6466] EXT4-fs: quotafile must be on filesystem root [ 180.784761][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.859333][ T30] audit: type=1400 audit(1791535624.783:1318): avc: denied { bind } for pid=6465 comm="syz.2.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.862893][ T30] audit: type=1400 audit(1791535624.793:1319): avc: denied { listen } for pid=6465 comm="syz.2.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.968398][ T30] audit: type=1400 audit(1791535624.873:1320): avc: denied { map } for pid=6465 comm="syz.2.737" path="socket:[14696]" dev="sockfs" ino=14696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.968436][ T30] audit: type=1400 audit(1791535624.873:1321): avc: denied { read } for pid=6465 comm="syz.2.737" path="socket:[14696]" dev="sockfs" ino=14696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.169559][ T6476] loop0: detected capacity change from 0 to 164 [ 181.892265][ T6489] tipc: Enabling of bearer rejected, already enabled [ 181.893326][ T6489] syzkaller0: mtu less than device minimum [ 182.475048][ T6504] loop3: detected capacity change from 0 to 512 [ 182.670268][ T6504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.671075][ T6504] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.177586][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.717755][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.808212][ T30] audit: type=1400 audit(1791535627.743:1322): avc: denied { read } for pid=6510 comm="syz.5.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.434578][ T6517] loop0: detected capacity change from 0 to 256 [ 184.978103][ T6534] loop2: detected capacity change from 0 to 164 [ 184.988450][ T6530] loop1: detected capacity change from 0 to 512 [ 185.162145][ T6530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.162539][ T6530] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.198181][ T30] audit: type=1400 audit(1791535629.093:1323): avc: denied { write } for pid=6529 comm="syz.1.759" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.305296][ T6517] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.315847][ T6517] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.481197][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.539893][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.007653][ T30] audit: type=1400 audit(1791535629.903:1324): avc: denied { mounton } for pid=6557 comm="syz.5.767" path="/130/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 186.546610][ T6553] loop2: detected capacity change from 0 to 512 [ 186.558743][ T6548] syz.3.763 (6548) used greatest stack depth: 8968 bytes left [ 186.597658][ T6553] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 187.333942][ T6588] loop3: detected capacity change from 0 to 512 [ 187.822754][ T6588] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 187.822931][ T6588] EXT4-fs (loop3): orphan cleanup on readonly fs [ 187.823334][ T6588] EXT4-fs warning (device loop3): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 187.824901][ T6588] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 187.868682][ T6588] EXT4-fs error (device loop3): __ext4_iget:5592: inode #16: block 127754: comm syz.3.773: invalid block [ 187.868967][ T6588] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 187.871148][ T6588] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.773: couldn't read orphan inode 16 (err -117) [ 187.871237][ T6588] loop3: lost filesystem error report for type 5 error -117 [ 187.882666][ T6588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.146984][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.251398][ T6601] loop3: detected capacity change from 0 to 512 [ 188.254466][ T6601] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 188.254505][ T6601] System zones: 1-12 [ 188.254982][ T6601] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.777: missing EA_INODE flag [ 188.255011][ T6601] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 188.255103][ T6601] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.777: error while reading EA inode 12 err=-117 [ 188.255205][ T6601] loop3: lost filesystem error report for type 5 error -117 [ 188.255438][ T6601] EXT4-fs (loop3): 1 orphan inode deleted [ 188.255887][ T6601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.337737][ T30] audit: type=1400 audit(1791535632.273:1325): avc: denied { write } for pid=6600 comm="syz.3.777" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.373902][ T6601] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 188.373926][ T6601] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 188.373971][ T6601] vhci_hcd vhci_hcd.0: Device attached [ 188.623873][ T6615] capability: warning: `syz.0.781' uses deprecated v2 capabilities in a way that may be insecure [ 188.628176][ T3381] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 188.687709][ T3381] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 189.209604][ T6606] vhci_hcd: connection reset by peer [ 189.211319][ T1742] vhci_hcd vhci_hcd.3: stop threads [ 189.211401][ T1742] vhci_hcd vhci_hcd.3: release socket [ 189.211429][ T1742] vhci_hcd vhci_hcd.3: disconnect device [ 189.355928][ T6620] loop0: detected capacity change from 0 to 164 [ 189.614457][ T6632] loop2: detected capacity change from 0 to 1024 [ 189.617025][ T6632] EXT4-fs: Ignoring removed bh option [ 189.657769][ T6632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 189.658035][ T6632] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.680491][ T30] audit: type=1400 audit(1791535633.603:1326): avc: denied { read } for pid=6619 comm="syz.0.782" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.680613][ T30] audit: type=1400 audit(1791535633.603:1327): avc: denied { open } for pid=6619 comm="syz.0.782" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.691181][ T30] audit: type=1400 audit(1791535633.613:1328): avc: denied { write } for pid=6631 comm="syz.2.786" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.714173][ T30] audit: type=1400 audit(1791535633.623:1329): avc: denied { create } for pid=6619 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 189.714206][ T30] audit: type=1400 audit(1791535633.623:1330): avc: denied { ioctl } for pid=6619 comm="syz.0.782" path="socket:[15022]" dev="sockfs" ino=15022 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 189.769421][ T6632] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 3: comm syz.2.786: lblock 3 mapped to illegal pblock 3 (length 3) [ 189.770273][ T6632] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 189.770466][ T6632] EXT4-fs (loop2): This should not happen!! Data will be lost [ 189.770466][ T6632] [ 189.781952][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.864557][ T6632] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.786: lblock 3 mapped to illegal pblock 3 (length 1) [ 189.866962][ T6632] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.786: lblock 3 mapped to illegal pblock 3 (length 1) [ 189.871957][ T6632] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.786: lblock 3 mapped to illegal pblock 3 (length 1) [ 189.876694][ T6632] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.786: lblock 3 mapped to illegal pblock 3 (length 1) [ 189.881420][ T6632] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.786: lblock 3 mapped to illegal pblock 3 (length 1) [ 189.883342][ T6632] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.786: lblock 3 mapped to illegal pblock 3 (length 1) [ 189.886199][ T6632] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.786: lblock 3 mapped to illegal pblock 3 (length 1) [ 189.891737][ T6632] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.786: lblock 3 mapped to illegal pblock 3 (length 1) [ 189.908853][ T6632] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.786: lblock 3 mapped to illegal pblock 3 (length 1) [ 189.978280][ T6639] loop3: detected capacity change from 0 to 1024 [ 189.990765][ T6639] EXT4-fs (loop3): invalid inodes per group: 0 [ 190.061504][ T5078] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 190.061538][ T5078] EXT4-fs (loop2): This should not happen!! Data will be lost [ 190.061538][ T5078] [ 190.062663][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.293298][ T30] audit: type=1400 audit(1791535634.223:1331): avc: denied { checkpoint_restore } for pid=6640 comm="syz.0.788" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.434621][ T6653] loop5: detected capacity change from 0 to 2048 [ 190.451440][ T6653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.451603][ T6653] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.459488][ T6653] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.792: bg 0: block 345: padding at end of block bitmap is not set [ 190.480390][ T30] audit: type=1400 audit(1791535634.403:1332): avc: denied { write } for pid=6652 comm="syz.5.792" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.480434][ T30] audit: type=1400 audit(1791535634.403:1333): avc: denied { write } for pid=6652 comm="syz.5.792" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.615252][ T3709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.790687][ T6666] syzkaller0: entered promiscuous mode [ 190.790714][ T6666] syzkaller0: entered allmulticast mode [ 190.836311][ T6666] 0: reclassify loop, rule prio 0, protocol 700 [ 191.730823][ T6682] loop5: detected capacity change from 0 to 512 [ 191.732726][ T6675] loop3: detected capacity change from 0 to 512 [ 191.766724][ T6675] EXT4-fs: Ignoring removed oldalloc option [ 191.777467][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 191.777485][ T30] audit: type=1400 audit(1791535635.703:1337): avc: denied { create } for pid=6656 comm="syz.2.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 191.799463][ T6682] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.799: inode has both inline data and extents flags [ 191.799566][ T6682] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.801709][ T6682] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.799: couldn't read orphan inode 15 (err -117) [ 191.801852][ T6682] loop5: lost filesystem error report for type 5 error -117 [ 191.814448][ T6682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.929340][ T30] audit: type=1400 audit(1791535635.863:1338): avc: denied { setopt } for pid=6656 comm="syz.2.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 191.974118][ T6692] capability: warning: `syz.0.800' uses 32-bit capabilities (legacy support in use) [ 192.156335][ T6675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.231283][ T3409] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 192.234874][ T6698] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 192.394707][ T3709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.451164][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.736728][ T6700] loop2: detected capacity change from 0 to 1164 [ 192.807615][ T6700] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 192.937852][ T6722] loop1: detected capacity change from 0 to 1024 [ 192.950821][ T6722] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 192.953878][ T6722] JBD2: no valid journal superblock found [ 192.953953][ T6722] EXT4-fs (loop1): Could not load journal inode [ 193.247712][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 194.200912][ T3381] usb 7-1: enqueue for inactive port 0 [ 194.200968][ T3381] usb 7-1: enqueue for inactive port 0 [ 194.267737][ T3381] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 194.443311][ T6753] loop1: detected capacity change from 0 to 164 [ 194.534636][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'. [ 194.712682][ T6746] syzkaller0: entered promiscuous mode [ 194.712768][ T6746] syzkaller0: entered allmulticast mode [ 194.799028][ T6761] loop2: detected capacity change from 0 to 2048 [ 194.889793][ T6758] rock: directory entry would overflow storage [ 194.889831][ T6758] rock: sig=0x4f50, size=4, remaining=3 [ 194.889872][ T6758] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 194.899251][ T6758] netlink: 'syz.1.817': attribute type 16 has an invalid length. [ 194.899321][ T6758] netlink: 'syz.1.817': attribute type 17 has an invalid length. [ 195.031044][ T6761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.031280][ T6761] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.076715][ T6761] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.819: bg 0: block 345: padding at end of block bitmap is not set [ 195.168302][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 195.205374][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.221855][ T6758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.225915][ T6758] ip6gre1: left allmulticast mode [ 195.227665][ T30] audit: type=1400 audit(1791535639.123:1339): avc: denied { write } for pid=6760 comm="syz.2.819" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.227702][ T30] audit: type=1400 audit(1791535639.123:1340): avc: denied { unlink } for pid=6760 comm="syz.2.819" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 195.227757][ T30] audit: type=1400 audit(1791535639.123:1341): avc: denied { write } for pid=6760 comm="syz.2.819" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.227829][ T30] audit: type=1400 audit(1791535639.123:1342): avc: denied { write } for pid=6760 comm="syz.2.819" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.258394][ T6769] netlink: 'syz.2.820': attribute type 1 has an invalid length. [ 195.258446][ T6769] netlink: 220 bytes leftover after parsing attributes in process `syz.2.820'. [ 195.399684][ T6771] loop3: detected capacity change from 0 to 512 [ 195.409177][ T6771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.409353][ T6771] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.529437][ T6781] EXT4-fs warning (device loop3): verify_group_input:156: Last group not full [ 195.735948][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.788030][ T3381] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 197.332700][ T6828] loop1: detected capacity change from 0 to 512 [ 197.374478][ T6828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.374556][ T6828] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.411463][ T30] audit: type=1326 audit(1791535641.333:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68496e1d9 code=0x7ffc0000 [ 197.411846][ T30] audit: type=1326 audit(1791535641.343:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68496e1d9 code=0x7ffc0000 [ 197.411938][ T30] audit: type=1326 audit(1791535641.343:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68496e1d9 code=0x7ffc0000 [ 197.414951][ T30] audit: type=1326 audit(1791535641.343:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fd68496e1d9 code=0x7ffc0000 [ 197.416372][ T30] audit: type=1400 audit(1791535641.343:1347): avc: denied { write } for pid=6827 comm="syz.1.836" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.430133][ T30] audit: type=1400 audit(1791535641.353:1348): avc: denied { create } for pid=6827 comm="syz.1.836" name="config" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 197.434858][ T30] audit: type=1326 audit(1791535641.353:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68496e1d9 code=0x7ffc0000 [ 197.436837][ T30] audit: type=1326 audit(1791535641.353:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd68496e1d9 code=0x7ffc0000 [ 197.437269][ T30] audit: type=1326 audit(1791535641.353:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68496e1d9 code=0x7ffc0000 [ 197.438348][ T30] audit: type=1326 audit(1791535641.353:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68496e1d9 code=0x7ffc0000 [ 197.691632][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.826056][ T6835] loop0: detected capacity change from 0 to 128 [ 197.840139][ T6538] udevd[6538]: incorrect ext4 checksum on /dev/loop0 [ 197.851981][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.840'. [ 198.255539][ T6853] loop3: detected capacity change from 0 to 1024 [ 198.265357][ T6853] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 198.280701][ T6853] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.832: Invalid block bitmap block 0 in block_group 0 [ 198.280742][ T6853] loop3: lost filesystem error report for type 5 error -117 [ 198.280906][ T6853] EXT4-fs error (device loop3): ext4_acquire_dquot:7070: comm syz.3.832: Failed to acquire dquot type 0 [ 198.280936][ T6853] loop3: lost filesystem error report for type 5 error -117 [ 198.281088][ T6853] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.832: Freeing blocks not in datazone - block = 0, count = 4096 [ 198.281113][ T6853] loop3: lost filesystem error report for type 5 error -117 [ 198.281260][ T6853] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.832: Invalid inode bitmap blk 0 in block_group 0 [ 198.281366][ T6853] loop3: lost filesystem error report for type 5 error -117 [ 198.281423][ T6853] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 198.281446][ T6853] loop3: lost filesystem error report for type 5 error -117 [ 198.281647][ T6853] EXT4-fs (loop3): 1 orphan inode deleted [ 198.282099][ T6853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.290389][ T6847] netlink: 40 bytes leftover after parsing attributes in process `syz.3.832'. [ 198.307411][ T4799] EXT4-fs error (device loop3): ext4_release_dquot:7106: comm kworker/u8:18: Failed to release dquot type 0 [ 198.660311][ T6865] loop1: detected capacity change from 0 to 164 [ 198.700561][ T6866] loop2: detected capacity change from 0 to 164 [ 199.401917][ T6870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.846'. [ 199.462931][ T6870] Need at least one configuration in g1. [ 199.462968][ T6870] udc usbip-vudc.0: failed to start g1: -22 [ 199.463119][ T6870] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 199.463646][ T6870] UDC core: g1: couldn't find an available UDC or it's busy [ 199.644442][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.681165][ T6875] netlink: 'syz.1.848': attribute type 39 has an invalid length. [ 199.933933][ T6876] syzkaller0: entered promiscuous mode [ 199.933987][ T6876] syzkaller0: entered allmulticast mode [ 200.457051][ T6882] FAULT_INJECTION: forcing a failure. [ 200.457051][ T6882] name failslab, interval 1, probability 0, space 0, times 0 [ 200.457109][ T6882] CPU: 0 UID: 0 PID: 6882 Comm: syz.2.850 Not tainted syzkaller #0 PREEMPT(lazy) [ 200.457144][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 200.457162][ T6882] Call Trace: [ 200.457171][ T6882] [ 200.457181][ T6882] __dump_stack+0x1d/0x30 [ 200.457304][ T6882] dump_stack_lvl+0x95/0xd0 [ 200.457335][ T6882] dump_stack+0x15/0x1b [ 200.457363][ T6882] should_fail_ex+0x262/0x280 [ 200.457438][ T6882] ? x509_cert_parse+0xe2/0x450 [ 200.457468][ T6882] should_failslab+0x8c/0xb0 [ 200.457512][ T6882] __kmalloc_cache_noprof+0x7a/0x400 [ 200.457560][ T6882] ? x509_cert_parse+0xe2/0x450 [ 200.457592][ T6882] x509_cert_parse+0xe2/0x450 [ 200.457659][ T6882] x509_key_preparse+0x3c/0x420 [ 200.457684][ T6882] ? selinux_key_permission+0x161/0x190 [ 200.457713][ T6882] asymmetric_key_preparse+0x68/0xb0 [ 200.457773][ T6882] __key_create_or_update+0x29e/0x820 [ 200.457838][ T6882] ? key_task_permission+0x2ac/0x2c0 [ 200.457872][ T6882] key_create_or_update+0x42/0x60 [ 200.457906][ T6882] __se_sys_add_key+0x2a5/0x360 [ 200.457933][ T6882] __x64_sys_add_key+0x67/0x80 [ 200.457967][ T6882] x64_sys_call+0x1fa9/0x2550 [ 200.457993][ T6882] do_syscall_64+0x112/0x360 [ 200.458018][ T6882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.458040][ T6882] RIP: 0033:0x7f919235e1d9 [ 200.458126][ T6882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.458144][ T6882] RSP: 002b:00007f9190db7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 200.458163][ T6882] RAX: ffffffffffffffda RBX: 00007f91925e5fa0 RCX: 00007f919235e1d9 [ 200.458177][ T6882] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 200.458190][ T6882] RBP: 00007f91923f5888 R08: ffffffffffffffff R09: 0000000000000000 [ 200.458204][ T6882] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 200.458216][ T6882] R13: 00007f91925e6038 R14: 00007f91925e5fa0 R15: 00007fffdb13aba8 [ 200.458258][ T6882] [ 200.826916][ T6894] loop2: detected capacity change from 0 to 512 [ 200.884124][ T6891] syz.2.852: attempt to access beyond end of device [ 200.884124][ T6891] loop2: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 201.551254][ T6911] loop0: detected capacity change from 0 to 164 [ 202.296303][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 202.353695][ T6933] loop2: detected capacity change from 0 to 512 [ 202.426447][ T6933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.440214][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119efdc00: rx timeout, send abort [ 202.443216][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 202.443230][ T30] audit: type=1400 audit(1791535646.373:1430): avc: denied { read } for pid=2969 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 202.443288][ T30] audit: type=1400 audit(1791535646.373:1431): avc: denied { search } for pid=2969 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.443374][ T30] audit: type=1400 audit(1791535646.373:1432): avc: denied { write search } for pid=2969 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.443509][ T30] audit: type=1400 audit(1791535646.373:1433): avc: denied { add_name } for pid=2969 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.443619][ T30] audit: type=1400 audit(1791535646.373:1434): avc: denied { create } for pid=2969 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 202.443702][ T30] audit: type=1400 audit(1791535646.373:1435): avc: denied { append open } for pid=2969 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 202.443773][ T30] audit: type=1400 audit(1791535646.373:1436): avc: denied { getattr } for pid=2969 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 202.456703][ T6933] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.792664][ T30] audit: type=1400 audit(1791535646.723:1437): avc: denied { connect } for pid=6944 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 202.794052][ T30] audit: type=1400 audit(1791535646.723:1438): avc: denied { read } for pid=6944 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 202.963850][ T6945] loop0: detected capacity change from 0 to 512 [ 203.109041][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.196200][ T6945] EXT4-fs error (device loop0): ext4_xattr_inode_iget:473: comm syz.0.866: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 203.200525][ T6945] loop0: lost filesystem error report for type 5 error -117 [ 203.203288][ T6945] EXT4-fs (loop0): 1 orphan inode deleted [ 203.206873][ T6950] process 'syz.5.868' launched '/dev/fd/3' with NULL argv: empty string added [ 203.212662][ T6945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.212917][ T30] audit: type=1400 audit(1791535647.133:1439): avc: denied { execute_no_trans } for pid=6949 comm="syz.5.868" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 203.222744][ T6948] loop3: detected capacity change from 0 to 512 [ 203.271629][ T6948] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.867: corrupted in-inode xattr: invalid ea_ino [ 203.271959][ T6948] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 203.275031][ T6948] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.867: couldn't read orphan inode 15 (err -117) [ 203.275116][ T6948] loop3: lost filesystem error report for type 5 error -117 [ 203.278337][ T6948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.293017][ T6948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.327341][ T6956] loop1: detected capacity change from 0 to 512 [ 203.356796][ T6956] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 203.687404][ T6968] loop5: detected capacity change from 0 to 128 [ 203.715436][ T6968] FAT-fs (loop5): bogus number of reserved sectors [ 203.715618][ T6968] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 203.715647][ T6968] FAT-fs (loop5): Can't find a valid FAT filesystem [ 203.901464][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.034256][ T6972] loop3: detected capacity change from 0 to 128 [ 204.036384][ T6975] loop0: detected capacity change from 0 to 1024 [ 204.039936][ T6972] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.066556][ T6975] EXT4-fs: Ignoring removed bh option [ 204.071438][ T6972] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 204.094754][ T6975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.187691][ T4793] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 204.227171][ T6985] loop3: detected capacity change from 0 to 1024 [ 204.253896][ T6985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.384091][ T6985] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 204.384371][ T6985] File: /166/file1/file1 PID: 6985 Comm: syz.3.876 [ 204.415095][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.487195][ T6991] syzkaller0: entered promiscuous mode [ 204.487226][ T6991] syzkaller0: entered allmulticast mode [ 204.705308][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.213153][ T7007] syzkaller0: entered promiscuous mode [ 205.213182][ T7007] syzkaller0: entered allmulticast mode [ 205.575704][ T7018] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.577249][ T7018] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.782500][ T7018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.791452][ T7018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.849082][ T7024] set_capacity_and_notify: 1 callbacks suppressed [ 205.849124][ T7024] loop2: detected capacity change from 0 to 164 [ 205.849629][ T7024] iso9660: Unknown parameter 'ÿÿÿÿÿÿ .ÃNÛBþO' [ 205.993277][ T7023] tipc: Enabled bearer , priority 0 [ 206.009430][ T4799] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.011258][ T4799] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.011304][ T4799] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.011371][ T4799] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.052755][ T7027] loop1: detected capacity change from 0 to 512 [ 206.081815][ T7027] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 206.084187][ T7027] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 206.084582][ T7027] EXT4-fs (loop1): orphan cleanup on readonly fs [ 206.086716][ T7027] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.887: Allocating blocks 41-42 which overlap fs metadata [ 206.086943][ T7027] loop1: lost filesystem error report for type 5 error -117 [ 206.087250][ T7027] EXT4-fs (loop1): Remounting filesystem read-only [ 206.087593][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 206.087708][ C0] EXT4-fs (loop1): initial error at time 1791535650: ext4_mb_mark_diskspace_used:4223 [ 206.087776][ C0] EXT4-fs (loop1): last error at time 1791535650: ext4_mb_mark_diskspace_used:4223 [ 206.091016][ T7027] EXT4-fs (loop1): 1 truncate cleaned up [ 206.096175][ T7027] EXT4-fs (loop1): pa ffff888107b602a0: logic 1, phys. 41, len 23 [ 206.105140][ T7027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 206.178961][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.548673][ T7041] loop2: detected capacity change from 0 to 8192 [ 206.549957][ T7041] vfat: Unknown parameter '0x0000000000000004' [ 206.672530][ T7042] loop1: detected capacity change from 0 to 512 [ 206.741240][ T7042] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 206.742418][ T7042] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.890: corrupted in-inode xattr: e_value size too large [ 206.742490][ T7042] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 206.743723][ T7042] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.890: couldn't read orphan inode 15 (err -117) [ 206.743845][ T7042] loop1: lost filesystem error report for type 5 error -117 [ 206.747549][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 206.747571][ C1] EXT4-fs (loop1): initial error at time 1791535650: ext4_iget_extra_inode:5210: inode 15 [ 206.747612][ C1] EXT4-fs (loop1): last error at time 1791535650: ext4_orphan_get:1408 [ 206.841082][ T7042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.224514][ T3388] tipc: Node number set to 2789125135 [ 207.335914][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.375771][ T7033] loop3: detected capacity change from 0 to 128 [ 207.439849][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.440345][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.459674][ T7033] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 207.492421][ T7033] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 207.673727][ T7061] loop2: detected capacity change from 0 to 512 [ 207.703234][ T7061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.703310][ T7061] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.732898][ T7061] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.897: iget: bad i_size value: 2533274857506816 [ 207.751609][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 207.751627][ T30] audit: type=1400 audit(1791535651.673:1451): avc: denied { setattr } for pid=7060 comm="syz.2.897" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 207.751672][ T30] audit: type=1400 audit(1791535651.683:1452): avc: denied { append } for pid=7060 comm="syz.2.897" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 207.765914][ T3305] FAT-fs (loop3): error, invalid access to FAT (entry 0xffff0000) [ 207.765985][ T3305] FAT-fs (loop3): Filesystem has been set read-only [ 207.806359][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.815734][ T3305] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 207.865865][ T30] audit: type=1400 audit(1791535651.793:1453): avc: denied { bind } for pid=7067 comm="syz.2.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 208.212894][ T7072] loop0: detected capacity change from 0 to 512 [ 208.262041][ T7072] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 208.262195][ T7072] EXT4-fs (loop0): orphan cleanup on readonly fs [ 208.262377][ T7072] EXT4-fs warning (device loop0): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 208.262549][ T7072] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 208.263393][ T7072] EXT4-fs error (device loop0): __ext4_iget:5592: inode #16: block 127754: comm syz.0.900: invalid block [ 208.263480][ T7072] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 208.264674][ T7072] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.900: couldn't read orphan inode 16 (err -117) [ 208.264802][ T7072] loop0: lost filesystem error report for type 5 error -117 [ 208.288726][ T7072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.127141][ T7088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.167692][ T7106] ip6gre2: entered promiscuous mode [ 209.167714][ T7106] ip6gre2: entered allmulticast mode [ 209.211593][ T4807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.211639][ T4807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 209.294388][ T7102] loop5: detected capacity change from 0 to 128 [ 209.309493][ T4807] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.309529][ T4807] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 209.367357][ T4807] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.367427][ T4807] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 209.555399][ T4807] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.555435][ T4807] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 209.564012][ T7102] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 209.571139][ T7102] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 209.696127][ T4807] bridge_slave_1: left promiscuous mode [ 209.696299][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.729738][ T7113] printk: console [ttyS0] disabled [ 887.122281][T24243] printk: console [ttyS0] enabled [ 887.369647][T24259] ================================================================== [ 887.369692][T24259] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 887.369741][T24259] [ 887.369747][T24259] read-write to 0xffff888142d6cfe0 of 8 bytes by interrupt on cpu 1: [ 887.369768][T24259] __xa_clear_mark+0xf5/0x1e0 [ 887.369800][T24259] __folio_end_writeback+0xe7/0x530 [ 887.369833][T24259] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 887.369859][T24259] folio_end_writeback+0x1c/0x70 [ 887.369885][T24259] bh_end_async_write+0x1a6/0x250 [ 887.369918][T24259] bio_endio+0x390/0x570 [ 887.369951][T24259] blk_update_request+0x33a/0x710 [ 887.369995][T24259] blk_mq_end_request+0x26/0x50 [ 887.370027][T24259] lo_complete_rq+0x98/0x130 [ 887.370049][T24259] blk_done_softirq+0x77/0xb0 [ 887.370071][T24259] handle_softirqs+0xcc/0x2a0 [ 887.370093][T24259] run_ksoftirqd+0x1c/0x30 [ 887.370121][T24259] smpboot_thread_fn+0x32f/0x520 [ 887.370147][T24259] kthread+0x223/0x270 [ 887.370172][T24259] ret_from_fork+0x146/0x330 [ 887.370210][T24259] ret_from_fork_asm+0x1a/0x30 [ 887.370240][T24259] [ 887.370246][T24259] read to 0xffff888142d6cfe0 of 8 bytes by task 24259 on cpu 0: [ 887.370262][T24259] xas_find_marked+0x211/0x650 [ 887.370285][T24259] filemap_get_folios_tag+0xf7/0x400 [ 887.370313][T24259] filemap_write_and_wait_range+0x1f5/0x370 [ 887.370343][T24259] sync_blockdev+0x35/0x50 [ 887.370383][T24259] sync_filesystem+0x168/0x190 [ 887.370410][T24259] generic_shutdown_super+0x4c/0x220 [ 887.370437][T24259] kill_block_super+0x2d/0xb0 [ 887.370470][T24259] deactivate_locked_super+0x73/0x180 [ 887.370499][T24259] deactivate_super+0x9a/0xb0 [ 887.370528][T24259] cleanup_mnt+0x2c3/0x340 [ 887.370555][T24259] __cleanup_mnt+0x19/0x20 [ 887.370580][T24259] task_work_run+0x130/0x1a0 [ 887.370609][T24259] do_exit+0x4a4/0x1510 [ 887.370643][T24259] do_group_exit+0xfe/0x140 [ 887.370680][T24259] get_signal+0xe07/0xf10 [ 887.370715][T24259] arch_do_signal_or_restart+0x96/0x480 [ 887.370751][T24259] exit_to_user_mode_loop+0x15d/0x8c0 [ 887.370796][T24259] do_syscall_64+0x212/0x360 [ 887.370823][T24259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.370844][T24259] [ 887.370848][T24259] value changed: 0x0000000000000011 -> 0x0000000000000000 [ 887.370861][T24259] [ 887.370865][T24259] Reported by Kernel Concurrency Sanitizer on: [ 887.370878][T24259] CPU: 0 UID: 0 PID: 24259 Comm: syz.9.6033 Not tainted syzkaller #0 PREEMPT(lazy) [ 887.370911][T24259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 887.370924][T24259] ================================================================== [ 887.446589][T24279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6038'. [ 887.446672][T24279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6038'. [ 887.985939][T19760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.675080][T19783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.095289][T19783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.227934][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.338402][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.439082][T19760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.516343][T19783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.516456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.589500][T19760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.448859][T19783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.710299][T19760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.717541][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 895.861176][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.981250][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog