last executing test programs: 8.432105872s ago: executing program 1 (id=820): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) lseek(r3, 0x3, 0x1) r5 = memfd_create(&(0x7f0000000740)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x9) fallocate(r5, 0x0, 0x0, 0x400001) fcntl$addseals(r5, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000580)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@discard}, {@errors_continue}, {@sb={'sb', 0x3d, 0x5d9}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier}]}, 0x1, 0xbcf, &(0x7f00000014c0)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0xf1) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) io_uring_setup(0xefe, 0x0) 8.236650198s ago: executing program 1 (id=822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x401, 0x7ab8}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000600)=""/156, 0x9c}], 0x4}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8c0}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x4000040) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x6}, &(0x7f0000000300)=0x8) mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1, r0}, 0xc) 8.17345849s ago: executing program 0 (id=823): setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x11d, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, r1, 0x411, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc081}, 0x804) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x1004094, &(0x7f0000000100)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg(r2, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000140)="ead2dc0c9c64e15433e9438df542", 0xe}, {&(0x7f0000000180)="b38b58082b9129f710bcac6b948a87ba74d54cf307f46e0bc790239626dcca9a2a9f797b8f8ddc50845145713463878750f60bb52aea35df4bc1383f7b8064e709b2926be7b6867af8bba5b191c5082ae4980fcdcb248083ffcb5e93a6829865af8e", 0x62}, {&(0x7f0000000200)="967d8f725cc4abb0a46bbf054262b93636b3bc2358fff7a4e238f119752ec2e26e8c329d", 0x24}, {&(0x7f0000000440)}, {&(0x7f0000000600)}, {&(0x7f00000006c0)="496fdbf6ab1f9011cce8c9f487548ee38cd959ac3b731e8598a28d688657b2dc477f0c8ffae76a91de8cfbf59447ac5726fa7dc721247902793615202922dd68eed8ba07371b0410f0c61299dcf226d807a1cb77c135418fdbcec04ba784a1a846beb2cf9b149a0d6938a753e9aec747429e431ddb1942f65826f2438fa7fb7edc53c9fbe356851727cd10965a2735747066739303dba46c0d58b31d5a76aa04c9b639ac351c426c722aefb302603ca359a33ab9bb1b6edb111f4f398db617748b56ab41862e9b6348162739b6b1acb1277d390a2d6c6a922eb950688d548563a81acda2c42168fcabc4c6", 0xeb}, {&(0x7f00000007c0)="75fc2ec0445b5385a0be82da463212172090", 0x12}, {&(0x7f0000000800)="f597c38fdbed3ffa1ab14da45d46f3f4fcfd9edff93d2276e1603048ace4a5015c5aa327acbcc0b170d27997452895cd48f6061b242289472face66ebf2f2f1b851200343a679f3030fbc77f5aea85607a8f296c49436be57b319b87baed3daeec722b421f4afcc2670caa0deb7e37147ed85e7bdfeeb4702483f70086178b78f65a783ad276ddcda20e4d2767461c5101cc09f78cd3b3de70aae2b2381770271deabfbb36840710e9b3456a5719ae3703d397ca6ae13aeac740ae919aae99d6a83cbf7372cf6410a52beea72347c727db921634ca3530a6e0309602abdfd7a99f4579708f5189a590f0d524b6aec2184ad11b6e2a0438eba7774b86497271cb719348e3df53f270f7f6ea1a00b220a3911d2fe1ad1ba8c44493f0a35cd67ec18c8967b3d5755784ad2c2c4432ec2020f00d90fdc51961640819e5fef6f6bb987cc37bce0a6294ca8e535a5864099f0a123031904506506825b8505563e7c3de0db50348f2e1e6f94d01894d63026d493ee75996d3fed7f7b8fb5357651279b4dca0fdd77d5825c9914ea6d46875ef46802d757c4ac23cf0677f0073006ee7e7c8c3024a8767a27329172f835a7ed622f7b9fe59c9a0bcaf63d2610db199b8f154dfecd9c1c2082c2d57e8aa10760262d18c93448a999d75a6ff52231c94ad3abade6dbba0d78ee3c33aa6410675961055d562bcdd027b7858925011c81052fcd106ed89493c248724352d62fbd5c81c0cf7c2e34728691aa9ada796cc27305aadbe899a73dcd5f82dd2e7760604f14b6350abd0af81391dd1ebac8fcb881fb806753fea143a168f254d75398396b53e72c3f58de62bf32cd30f6e112d836e94a1d5bf0c7e84016a19725cae9c56dbbfdbac95fd851557c7597e4a35310903c9a3e10f065394af47c93293997ffadfc1abe3bc21fa069f547677bd6603979174588062afe4e9f36dec2ffe5b5d85cf6277f1304b8ef34c1da5c49fea70982cc39523fc1ea4c56224bc0ee04d8ce8ae36cab25accc775322db024576ec19beff8bd4ac665bb68674083f427ba6a39e5af06c3d6f98f53b5fe8ea5ecdf59779cb4fb14919940e512642b9efda72b764755d069d1576b8426ebc7d3c7c81194ab7159cb6a34b3ab380e459854cade934f0becc4f354d0a483b529c3d49356dead9190ddc13a213827ca0da710633d8da0698922e369ee4d26bd0670d3beabf56126d1bba7d5e1d99bea22be2a6fc34e2600b1d1b76d28274846fd0a16b8841a176749435f6b72dd9905f486c37c22512af4d733dfd420b4f9b861af31898f3b935c8526b1c6838ed12ea8d0d0216fa2a2a3a48a11a7b6345118253d8562422164dc177b3a222d74ec9a1f2e1202ecdde16baaeeb9d01c7bbc1b201065455f059d8ad6c78ad824ed3fc37b57f9c0e3b0e2702632c71128f859cfc0836827285220ad73090e5d6031c7df16bd28475d2f9a946ef96e5a39fd9475378dabae41e3689b35bd42921a74b15442af7dd73f13f77dfdec10f5ce5020df0e98bc705e8bce09ea5a7f932c5e8847efd005db08edef0366f3999e3c9cb07f5d5eb9d973908a726f76ab2ca512d54af334d2cf9373116d1d939eeefd4af34598ca54f797f4a8d4bf3b6c2b49fd1f7519e5801cbd76657ab8f4130fecabfa6bf1a0168e0441093069161ef40f36441e05d6e8b41f4479061f7ab498f177bba53e16e1fda5de3744796397902cb89e6b8b82eb21b81ee13f89ad78bf38853c46186a64430cf0a7854cb9f50d64cbc3864eb3a9e4403ec7496d92e984dec441b53b39bdfd5774243af088e2abfb1b6646ffbfdec6adf8b4989fa3549c51ad4f6ca4b5a799df8af32fb76a1712209c22508317da3797ef19334e90890a084ca161799a1e3f732f0bb4c7c351cc5d3691a4d4355227a9443bd5cdc0530ee7e25c16ecdcaf5e53a5a2ea17f78cda834e01dc1d5a06e450bae65bdb41ce17b1ccfe9c1ebafde3633fe46b3988c85199355939dded95328ae6009598b28f3ccfcdb34939ee79d7fb6b07f658792e3448137608120203531ca5aa93524c800d4135f44a8ed99593a9806a4bc1c64f95718d61dd636885a54cccdee91630d1bfb775ff9c75a13a703ccf862a82e818ea9cd28b30ccdbe6869537", 0x5ee}, {&(0x7f0000001800)="aa7d42c8cb874c21945257baf3f459d062aab7c31edb6a0cd0f3934d061ec638b16ec757fd1d4b4df85cdce16616327102d93e218211d572158eef6b6a61c1983572c05619720776a047dcbb783847654a85c6d3a65bfcf95e03ffa302de59a66146918d28c59afc0d3c55be43a379b5c5b123b6888f276d782fa2f31777687924e42fc97e42d665acc8a80109049254a4f2", 0x92}, {0x0}], 0xa, &(0x7f00000019c0)=[{0x68, 0x10b, 0x7, "7ba284f000d647816f95e14c8145bd186ddbf803f8746f077f17fd8575cdf3cd15869e0a219dd0c74dd3ae78e0743394177ac615bf904e9eb84a7cb9e55c2e2dd76827dc3b50cdbb18997c16fc7fcfd64a"}, {0x18, 0x117, 0x8, "e8c2c22319d3e5"}, {0x10, 0x118}, {0xc0, 0xff, 0x2800000, "6fba0dc2042a79cefc48d98059193d7a6e95411375056a996e7375bb8a0a03631f11f492149f0cdb5d80b4a38ccf2f7befd3de13a457570b6fb6d85f876cc362f758066592abf6290e50a8357c3728e8c758d48f5eb668266bb076de35d9598b596764d67ea11caf520a896009b6647ff58d51f7fcec5380109e4795a6f0c7712ed8d3120a51545a069bb3f2b3d33868062b9d57762401cb5d27775430218563a1374c29c8cea81789aea581ce"}, {0x58, 0x10c, 0x9, "5a5eb36e6ce6c56e1022a0714ffbb4c6fabc349d4874c7595c140876bf6ff32e402204e8530ee049836961ce2236363006802758e349a7a8c9acad0a8ad65bb252053e54e3"}], 0x1a8}, 0xc091) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) 8.010503305s ago: executing program 1 (id=825): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x206a02, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004000}, 0x8000) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(r2, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r2, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e65, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 8.009821465s ago: executing program 2 (id=826): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc0, 0x8}, 0x143, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000ac0)={0x3, 0x80, 0x8, 0x6, 0x3, 0x6, 0x0, 0x10, 0x10, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xf, 0x1, @perf_bp={&(0x7f0000000a80), 0x8}, 0x814, 0x8b, 0xb, 0x6, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x355c, 0x0, 0x9f8}) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x106900, 0x10) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x68, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x4, 0xca, 0x0, 0x1000, {[@generic={0x0, 0x2}]}}}}}}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') write$cgroup_type(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000a00)={0x0, 0x1, 0x0, 0x0, &(0x7f00000009c0)=[0x4]}, 0x20) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x2, 0xa9, 0x7fffffffffffffff, 0x1000000000000, 0xfffffffffffffff5, 0x0, 0x7fff, 0x400005}) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) syz_clone3(&(0x7f0000002800)={0x200000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200), {0x8}, &(0x7f00000005c0)=""/234, 0xea, &(0x7f0000001340)=""/4096, &(0x7f00000027c0), 0x0, {r3}}, 0x58) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x9, 0xc64}, 0x10096, 0x0, 0x800000, 0x1, 0x5, 0x2, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x4000000) 7.283503248s ago: executing program 1 (id=829): r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0xa, 0x4, 0x0, 0x0, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x60}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000699000/0x3000)=nil, 0x3000, 0x65) 7.282396837s ago: executing program 0 (id=839): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x206a02, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_BEARER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004000}, 0x8000) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(r2, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r2, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e65, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 6.912514409s ago: executing program 3 (id=831): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, 0x0) 6.824379651s ago: executing program 3 (id=832): connect$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x2001fe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x3}, 0x20) syz_emit_ethernet(0x2a, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x10, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x401, 0x4, 0x0, 0x5d72}, 0x14) truncate(0x0, 0x8da6) read(0xffffffffffffffff, &(0x7f0000000980)=""/4084, 0xff4) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0xc) socket(0x2, 0x2, 0x1) 6.823052801s ago: executing program 2 (id=833): linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x90a3b4a3e4f91378) unshare(0x6a040000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x80042, 0x1bd) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x4008, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1]) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000200], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000f44c64cffd15b72f00000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) kcmp(r5, 0xffffffffffffffff, 0x5, r3, r3) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 6.650240977s ago: executing program 3 (id=834): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x6, 0x5}, 0x0, 0x0, 0xfffffffa, 0x6, 0x6, 0xc9, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, r0, 0x7d691000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x4000d}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xf500, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6.522385571s ago: executing program 4 (id=835): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x81, 0xffffffff, 0x8, 0x400000000008, 0x20005, 0x0, 0x0, 0x5, 0x0, 0x80000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000340)={0x12}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000000)={0xa0028010}) 6.436896453s ago: executing program 2 (id=836): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x100, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sync() openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) socket$kcm(0x29, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x10200, 0x0, 0x100, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040840}, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x20000000002, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x2000, 0x0) 6.421884584s ago: executing program 0 (id=837): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$eJzs3M9rHGUYB/DHTdrUxPxQa7WC9MVe9DIkOXhRkCApSBeUthFaQZiajS4Zd0NmCayI0ZNXL/4BXsWjN0G86SUe/Bu85eLRgzrSnbY2djVotRPD53PZh33nC8+7s7zwLvvO/gsfv7O5UWYb+SBaD7wYra2IyV9SpGjFLR/Es89/8+1Tl69eu7jSbq9eSunCypWl51JKc+e+ev29z5/+ejDz2hdzX07F3sIb+z8u/7B3Zu/s/q9X3u6WqVumXn+Q8nS93x/k14tOWu+Wm1lKrxadvOykbq/sbB8Y3yj6W1vDlPfWZ6e3tjtlmfLeMG12hmnQT4PtYcrfyru9lGVZmp0O7sXaZz9VVRVRVSfiZFRVVT0Y09GKh2I25mI+FuLheCQejdPxWJyJx+OJODu6qum+AQAAAAAAAAAAAAAAAAAA4HgZd/5/5q7z/59EjDv/f67h5gEAAAAAAAAAAAAAAAAAAOCYuHz12sWVdnv1UkqnIoqPdtZ21urXenxlI7pRRCcWYz5+jtHp/1pdn4z26mIaWYgPi92b+d2dtYmD+aXR4wTuyl94ub26VOfTwfxUTN+ZX475OD0+v/yH/PlR/lQ8c/6OfBbz8f2b0Y8i1uNG9vf8+0spvfRK+3b+u7167usN3hcAAAD4N2XptrH79yz7s/E6f9jvAzf214tj9/eT8eRks3Mnohy+u5kXRWe78eJWR/U7uxFxRBr7x0UrIo5AG39RnDj0mpkGGvt0JuIe4hMHvkhH4nP+PxaHrRwT/+m6xP1x86ZPNd0HAAAAAAAAAAAAf8/9+Dth03MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAQAA//+siMjP") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) fallocate(r3, 0x0, 0x0, 0x8800000) socket(0x1, 0x5, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) sendfile(r4, r4, 0x0, 0xe3aa6ea) 6.154879732s ago: executing program 1 (id=838): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x100, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sync() openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) socket$kcm(0x29, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x10200, 0x0, 0x100, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040840}, 0x0) ptrace$setregs(0xd, 0x0, 0x20000000002, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x300, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x2000, 0x0) 3.978842248s ago: executing program 3 (id=840): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x206a02, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004000}, 0x8000) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(r2, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r2, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e65, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3.90921185s ago: executing program 4 (id=841): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x100, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sync() openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) socket$kcm(0x29, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x10200, 0x0, 0x100, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040840}, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x20000000002, &(0x7f0000000040)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x300, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x2000, 0x0) 3.90825702s ago: executing program 2 (id=842): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) r6 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x4d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) 3.390581716s ago: executing program 0 (id=843): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, 0x0) 2.141401095s ago: executing program 3 (id=844): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x6, 0x5}, 0x0, 0x0, 0xfffffffa, 0x6, 0x6, 0xc9, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, r0, 0x7d691000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x4000d}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xf500, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 1.991614659s ago: executing program 2 (id=845): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)="e4", 0x1, 0xc00) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) socket$nl_audit(0x10, 0x3, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlockall(0x7) munlockall() 1.827646114s ago: executing program 4 (id=846): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[], 0xa, 0x2e6, &(0x7f0000000780)="$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") creat(0x0, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1ab000000000000000032000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4800) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x78) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x3f}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) r5 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x8}, 0x1c) 874.507983ms ago: executing program 0 (id=847): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) socket$igmp(0x2, 0x3, 0x2) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12014101000000106e059b01400001020301090224000101d3a000090400030103010607092711883257bc61e86b98eb15ae21"], &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x8a01b6fc6709557f, 0xb0, 0x0, 0x3, 0xef, 0x67}, 0x21, &(0x7f0000000280)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x9, 0x0, 0xd, [0x30, 0xff3fc0, 0xfff0, 0x30]}]}}) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{0x0}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000240)=""/23, 0x0, 0x17, 0x0, 0x54c62f6a, 0x10000}, 0x28) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r4, 0x0, 0x65) pread64(0xffffffffffffffff, 0x0, 0x0, 0x151) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c000280140005000000000000000000000000000000000205"], 0x60}}, 0x0) 874.109133ms ago: executing program 4 (id=848): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100010000000000000000008500000075000000850000001100000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) pipe2$9p(0x0, 0x0) unshare(0x60000600) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) sync() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) syz_open_procfs(r1, &(0x7f0000000180)='smaps\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) rename(0x0, &(0x7f0000000100)='./file0\x00') bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) unshare(0x28040680) syz_mount_image$ext4(&(0x7f0000001040)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20800406, &(0x7f0000001300)={[{@resgid}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0xffc}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000000b00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE7Nmdmfa3XZ3u91CK+znk0z7PDPPvHyfmWd2Zp/ZCaBjDWV/koj+iPglIgYq2doCQ5V/169emPzz6oXJJEqlF/5IyuWuXb0wWRQt5tucZ4bTiPTtJHbXWe/MufMnJ6anp87m+dHZU6+Nzpw7//CJUxPHp45PnR4/fPjQwbHHHh1/pKU4Li4zPYvr2q43z+zZeeSl956dLMXL332cbW9/Pr06jorBltbbzFAMRSm3MLan/Pf+VS/9v2VLRPTm6WTDOm8MLeuKiGx3dZfb/0B0xcLOG4hn3prPfLVOGwjcNNln07YlY7vy/+n85xdwO0q0cehQxSd+dv9bDGt5/bHerjyZ/Z0qx389H354rlI3aXYvO1i5Y+9qMP//64zrW0iWBpZZf39EHJ376/1siLrfQzSRtFwSAGDeF9n1z0P1rv/SmmubrXkfymBE7I+I7RHxv4jYEel8mTsi4s4Vrn9oUX7p9c9PG1e4yBXJrv8ez/u2iqEypYgrmc9tKcffnbxyYnrqQF4nw9Hdm+XHmqzjy6d/frfRtKGq679syNZfXAvm2/H7ht7aeY5NzE6sIuQaVy5FEhvqxZ/M9wRkNbAzIna1sfyszk48+NGeLL1189Lpy8ffxA3oZyp9GPFAZf/PxaL4C0llTY36J0f7YnrqwGhxVCz1/Y+Xn6/Od1ela+Lvay2mvnaDrePKpYhNdY//PP6iGRT9tTN5/uv+ltdx+dd3Gt7TLN3/SRydqy6RH/8bF6otO/57khfL6Z583BsTs7NnxyI+z0fUjB9fWFqRL8pn8Q/vq42/cl+cZue4fz7I59sdEdlBfFdE3B0Re/Ntvyci7o2IfU3i//ap+15tXkNtHv83QBb/sWb7P2Iwqe6vbyPRdfKbzxqtv7Xz36FyajgfU33+62mw3FY3cLX1BwAAALeCtNwHnaQjVc9vF3bEpnT6zMzs/qF4/fSxSl/1YHSnxTddA1Xfh47l3w0X+fFF+YMRsa38pNHGcn5k8sz0lnWKGajYXNX+K+eCNB0ZqUz7rdFDL8DtY0X9aNUPnX3y6Y3fGGBN+b0mdC7tHzqX9g+dS/uHzlWv/V+MuL4OmwKssXY//xc/MADccko176cEOor7f+hc2j90pKU/ic9ft5KdE9r/yf/09iOreWPAzU+UBtqfPRpPmlv5ArtaK1y8/aLlJbdWOIkowkmbxFUnEenCmL/zt0mWx3RXyvS0vqlrn0iXLfPEcrXRvaJ3YvTVqY29eaI3IlpdzsU1q9XiDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//Flvq9A==") quotactl$Q_QUOTAON(0xdd131043b4a5f816, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00') 746.861707ms ago: executing program 1 (id=849): socket(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000034b52266000000000600000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa10000000000000701"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@nombcache}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb59171e3664ffcfc, @perf_config_ext={0x4000000000005, 0x7}, 0x2005, 0x0, 0x3f04, 0x0, 0xffffffffffffffff, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) 531.553374ms ago: executing program 4 (id=850): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f00000001c0)=0x3, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_vs\x00') epoll_create1(0x0) prctl$PR_GET_TIMERSLACK(0x1e) preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000100)=""/201, 0xc9}], 0x1, 0x9, 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000100)={0xb, 0x1, {0x3, 0x2, 0x3, 0x0, 0x440f}, 0x3}) sendmmsg$inet6(r0, &(0x7f0000002640)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x80000001, @ipv4={'\x00', '\xff\xff', @local}, 0xfffff69d}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="0b064299103d9360f25361ebca44bf33e562b78ded9881d6b338915bb909959bd9522451b8866cd56c72ed5084ec992f0768011d099ed9b00d601cca81642cc5f6cbb5bc5091d2b09ff6bdf319cf7b7c29a4f90c1792c4d7", 0x58}, {&(0x7f0000000100)="c4e90f59a632c9ed1d12a7af0669294ea3c15c4501ac90bc68bbab7f9d0167283e41ce6e04b3e854cbdb7c05e43f8047e20802a1849abc13a1ed83e15e64eb5db36d677d86712b65608e5fb14c49637d40a50f73633ea55e56c619f82c0ebff8169053c4a4", 0x65}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="ab9a59418290582ba3b1a7d900aa1dd772014f3b8160ea353ccbdfa2928357eed92a0b1952d90edd073587fe44d500d86eeaf1395103a736c6a287d853", 0x3d}, {&(0x7f0000000900)="a10963d5516128c797affcb640c9c0b96d4c4f1fd791c0a81a72dd949ccea212a8ed622aba9c30ac9828534a23c15907a5556d12030ff65719cdabe7a63bd10efc628608400ed49ea90085009de5f61e8669", 0x52}], 0x5, &(0x7f0000000380)}}, {{&(0x7f0000000780)={0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000000800)=[{0x0}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e20, 0x8001, @private0, 0x1}, 0x1c, &(0x7f0000002480)=[{&(0x7f0000000880)="c2a4b572e7be78dfffac94fe25a4f753c8405c6e873330b828cd0834a1bae754cd089cbf5c91e217d8f2bc", 0x2b}, {&(0x7f0000002380)="6598d7878ad473fb994f2d41329f74be5aa1e8837820f1e94c1e2028b7d0283bf8f1aba740908f485307c67000b1bfdcc384dc394a4e36284e68ffe86efe264b7939fa0be6df413114a272c483fae4d33e1942b629beea05110f4cbaa01fc856b8987cb6f40c350d3b32", 0x6a}], 0x2, &(0x7f00000024c0)=ANY=[@ANYBLOB], 0x180}}], 0x4, 0xc040) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x0, r1, r1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x8000000000000001}, {0x4, 0x7fffffffffffffff, 0x0, 0x7}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@mcast2}}, @algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x158}}, 0x48080) 102.747447ms ago: executing program 0 (id=851): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5423, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r3 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0xb0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 100.332197ms ago: executing program 3 (id=852): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x81, 0xffffffff, 0x8, 0x400000000008, 0x20005, 0x0, 0x0, 0x5, 0x0, 0x80000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000340)={0x12}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000000)={0xa0028010}) 27.868799ms ago: executing program 2 (id=853): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x100, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sync() openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) socket$kcm(0x29, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x10200, 0x0, 0x100, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040840}, 0x0) ptrace$setregs(0xd, 0x0, 0x20000000002, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x300, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x2000, 0x0) 0s ago: executing program 4 (id=854): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x206a02, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004000}, 0x8000) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(r2, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r2, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e65, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): 03.309567][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.389096][ T4397] loop2: detected capacity change from 0 to 512 [ 103.435758][ T4397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.448589][ T4397] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.450067][ T4393] loop4: detected capacity change from 0 to 512 [ 103.495501][ T4408] loop1: detected capacity change from 0 to 1024 [ 103.521863][ T4393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.536444][ T4408] EXT4-fs: Mount option(s) incompatible with ext3 [ 103.543464][ T4393] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.558229][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.623424][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.644049][ T4408] loop1: detected capacity change from 0 to 512 [ 103.659643][ T4418] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 103.668966][ T28] audit: type=1400 audit(1782156453.041:492): avc: denied { mac_admin } for pid=4417 comm="syz.4.223" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.671904][ T4408] EXT4-fs: test_dummy_encryption option not supported [ 103.795746][ T4418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 103.811331][ T4418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 104.072196][ T4304] Bluetooth: hci0: command 0x1003 tx timeout [ 104.072219][ T3549] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.281436][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 104.363951][ T4442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.228'. [ 104.428260][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 104.537952][ T4443] loop1: detected capacity change from 0 to 512 [ 104.641952][ T4443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.736139][ T4443] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.865113][ T4443] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.230: bg 0: block 217: padding at end of block bitmap is not set [ 104.957602][ T4443] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 105.164339][ T4445] loop3: detected capacity change from 0 to 1024 [ 105.202279][ T4445] EXT4-fs: Ignoring removed bh option [ 105.222186][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.234532][ T4445] EXT4-fs: Ignoring removed bh option [ 105.265933][ T4445] EXT4-fs: dax option not supported [ 105.476995][ T4463] loop4: detected capacity change from 0 to 512 [ 105.500595][ T4445] loop3: detected capacity change from 0 to 512 [ 105.687940][ T4463] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.233: bg 0: block 169: padding at end of block bitmap is not set [ 105.777369][ T4463] loop4: lost filesystem error report for type 5 error -117 [ 105.777728][ T4463] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.233: Failed to acquire dquot type 0 [ 105.785136][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 105.785153][ C0] EXT4-fs (loop4): initial error at time 1782156455: ext4_validate_block_bitmap:441 [ 105.785210][ C0] EXT4-fs (loop4): last error at time 1782156455: ext4_validate_block_bitmap:441 [ 105.986465][ T4463] loop4: lost filesystem error report for type 5 error -117 [ 105.986939][ T4463] EXT4-fs (loop4): 1 truncate cleaned up [ 106.001198][ T4463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.014097][ T4463] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.295154][ T4481] loop2: detected capacity change from 0 to 1024 [ 106.357078][ T4481] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.456265][ T4481] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.239: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 106.588145][ T4481] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 106.588502][ T4481] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.239: couldn't read orphan inode 11 (err -117) [ 106.597730][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 106.597752][ C1] EXT4-fs (loop2): initial error at time 1782156455: ext4_ext_check_inode:521: inode 11 [ 106.597788][ C1] EXT4-fs (loop2): last error at time 1782156455: ext4_ext_check_inode:521: inode 11 [ 106.702752][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.719980][ T4481] loop2: lost filesystem error report for type 5 error -117 [ 106.735724][ T4481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.778591][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 106.778606][ T28] audit: type=1400 audit(1782156455.957:511): avc: denied { mount } for pid=4485 comm="syz.1.241" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 107.071869][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.303494][ T4498] vfat: Unknown parameter '' [ 107.333081][ T4499] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.389541][ T4499] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.244: invalid indirect mapped block 32768 (level 2) [ 107.403985][ T4499] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 107.406256][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 107.423743][ C1] EXT4-fs (loop0): initial error at time 1782156456: ext4_free_branches:1023: inode 16 [ 107.434486][ C1] EXT4-fs (loop0): last error at time 1782156456: ext4_free_branches:1023: inode 16 [ 107.449520][ T4499] EXT4-fs (loop0): 1 orphan inode deleted [ 107.455974][ T4499] EXT4-fs (loop0): 1 truncate cleaned up [ 107.470243][ T4499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.601699][ T28] audit: type=1400 audit(1782156456.630:512): avc: denied { mounton } for pid=4491 comm="syz.0.244" path="/48/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.128828][ T4505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.424140][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.495454][ T4519] set_capacity_and_notify: 3 callbacks suppressed [ 108.495525][ T4519] loop2: detected capacity change from 0 to 512 [ 108.525751][ T4514] loop1: detected capacity change from 0 to 1024 [ 108.541123][ T4519] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.250: bg 0: block 169: padding at end of block bitmap is not set [ 108.560032][ T4514] EXT4-fs: Ignoring removed bh option [ 108.578501][ T4514] EXT4-fs: Ignoring removed bh option [ 108.592473][ T4519] loop2: lost filesystem error report for type 5 error -117 [ 108.592714][ T4519] Quota error (device loop2): write_blk: dquota write failed [ 108.600234][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 108.600258][ C1] EXT4-fs (loop2): initial error at time 1782156457: ext4_validate_block_bitmap:441 [ 108.600284][ C1] EXT4-fs (loop2): last error at time 1782156457: ext4_validate_block_bitmap:441 [ 108.638964][ T4514] EXT4-fs: dax option not supported [ 108.666990][ T4519] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 108.692846][ T4519] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.250: Failed to acquire dquot type 0 [ 108.714738][ T4519] loop2: lost filesystem error report for type 5 error -117 [ 108.715635][ T4519] EXT4-fs (loop2): 1 truncate cleaned up [ 108.739072][ T4519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.757452][ T4514] loop1: detected capacity change from 0 to 512 [ 108.764568][ T4519] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.793200][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.823037][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.970394][ T4523] loop0: detected capacity change from 0 to 512 [ 109.019424][ T4523] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.101139][ T4523] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 109.128860][ T4523] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.251: bg 0: block 248: padding at end of block bitmap is not set [ 109.145344][ T4523] loop0: lost filesystem error report for type 5 error -117 [ 109.147064][ T4523] Quota error (device loop0): write_blk: dquota write failed [ 109.154606][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 109.154713][ C1] EXT4-fs (loop0): last error at time 1782156458: ext4_validate_block_bitmap:441 [ 109.253056][ T4523] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 109.290569][ T4523] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.251: Failed to acquire dquot type 1 [ 109.330800][ T4523] loop0: lost filesystem error report for type 5 error -28 [ 109.340963][ T4523] EXT4-fs (loop0): 1 truncate cleaned up [ 109.398517][ T4523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 109.532874][ T4523] EXT4-fs (loop0): shut down requested (1) [ 109.545709][ T28] audit: type=1400 audit(1782156458.540:513): avc: denied { write } for pid=4522 comm="syz.0.251" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.568595][ T28] audit: type=1400 audit(1782156458.549:514): avc: denied { read } for pid=2960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 109.613906][ T4523] syz.0.251 (4523) used greatest stack depth: 8128 bytes left [ 109.621529][ T28] audit: type=1400 audit(1782156458.549:515): avc: denied { search } for pid=2960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.644389][ T28] audit: type=1400 audit(1782156458.549:516): avc: denied { write search } for pid=2960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.761980][ T4543] loop3: detected capacity change from 0 to 1024 [ 109.769112][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 110.625691][ T4543] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.648706][ T4543] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.255: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 110.902309][ T4543] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.902491][ T4543] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.255: couldn't read orphan inode 11 (err -117) [ 110.923429][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 110.923447][ C0] EXT4-fs (loop3): initial error at time 1782156459: ext4_ext_check_inode:521: inode 11 [ 110.923498][ C0] EXT4-fs (loop3): last error at time 1782156459: ext4_ext_check_inode:521: inode 11 [ 111.679496][ T4543] loop3: lost filesystem error report for type 5 error -117 [ 111.680008][ T4543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.074192][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.626865][ T4557] loop2: detected capacity change from 0 to 256 [ 112.722123][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 112.722139][ T28] audit: type=1400 audit(1782156461.523:523): avc: denied { mounton } for pid=4560 comm="syz.0.263" path="/51/file0" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.814245][ T28] audit: type=1400 audit(1782156461.561:524): avc: denied { create } for pid=4560 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.953552][ T4561] loop0: detected capacity change from 0 to 512 [ 113.008832][ T4567] loop3: detected capacity change from 0 to 128 [ 113.019300][ T4561] EXT4-fs error (device loop0): ext4_get_journal_inode:5900: comm syz.0.263: inode #1792: comm syz.0.263: iget: illegal inode # [ 113.037852][ T4567] vfat: Unknown parameter '' [ 113.046542][ T4561] loop0: lost filesystem error report for type 5 error -117 [ 113.047219][ T4561] EXT4-fs (loop0): Remounting filesystem read-only [ 113.054833][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 113.054863][ C0] EXT4-fs (loop0): initial error at time 1782156461: ext4_get_journal_inode:5900 [ 113.054940][ C0] EXT4-fs (loop0): last error at time 1782156461: ext4_get_journal_inode:5900 [ 113.144591][ T4561] EXT4-fs (loop0): no journal found [ 113.159671][ T4561] EXT4-fs (loop0): can't get journal size [ 113.178608][ T4561] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 113.194531][ T4561] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 113.195757][ T4569] loop4: detected capacity change from 0 to 1024 [ 113.220116][ T4561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.246902][ T4569] EXT4-fs: Ignoring removed bh option [ 113.262715][ T4569] EXT4-fs: Ignoring removed bh option [ 113.274931][ T4561] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.288106][ T4569] EXT4-fs: dax option not supported [ 113.380278][ T4561] sctp: [Deprecated]: syz.0.263 (pid 4561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.380278][ T4561] Use struct sctp_sack_info instead [ 113.405920][ T4569] loop4: detected capacity change from 0 to 512 [ 113.468799][ T28] audit: type=1400 audit(1782156462.206:525): avc: denied { create } for pid=4576 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 113.613724][ T4579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.649721][ T28] audit: type=1400 audit(1782156462.393:526): avc: denied { map } for pid=4578 comm="syz.4.269" path="/47/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.672539][ T28] audit: type=1400 audit(1782156462.393:527): avc: denied { execute } for pid=4578 comm="syz.4.269" path="/47/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.895523][ T4587] sctp: [Deprecated]: syz.0.271 (pid 4587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.895523][ T4587] Use struct sctp_sack_info instead [ 113.964880][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.011392][ T4583] sctp: [Deprecated]: syz.0.271 (pid 4583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.011392][ T4583] Use struct sctp_sack_info instead [ 114.167215][ T28] audit: type=1400 audit(1782156462.870:528): avc: denied { write } for pid=4582 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.326813][ T4593] usb usb8: check_ctrlrecip: process 4593 (syz.4.272) requesting ep 01 but needs 81 [ 115.051059][ T28] audit: type=1326 audit(1782156463.693:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="syz.1.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f897ae3ce59 code=0x0 [ 116.333970][ T3376] IPVS: starting estimator thread 0... [ 116.355317][ T4605] syzkaller0: entered promiscuous mode [ 116.379056][ T4605] syzkaller0: entered allmulticast mode [ 116.427617][ T4605] tipc: Started in network mode [ 116.439728][ T4613] set_capacity_and_notify: 1 callbacks suppressed [ 116.439747][ T4613] loop4: detected capacity change from 0 to 512 [ 116.450592][ T4608] IPVS: using max 2448 ests per chain, 122400 per kthread [ 116.454712][ T4605] tipc: Node identity 62dc42e6000a, cluster identity 4711 [ 116.482467][ T4605] tipc: Enabled bearer , priority 0 [ 116.527663][ T4613] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 116.566452][ T4604] tipc: Resetting bearer [ 116.585049][ T4613] EXT4-fs (loop4): 1 orphan inode deleted [ 116.593728][ T4604] tipc: Disabling bearer [ 116.601764][ T4613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.623686][ T4613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.808684][ T28] audit: type=1400 audit(1782156465.330:530): avc: denied { ioctl } for pid=4612 comm="syz.4.278" path="socket:[8543]" dev="sockfs" ino=8543 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.839553][ T4613] bond0: (slave bond_slave_1): Releasing backup interface [ 116.989043][ T28] audit: type=1400 audit(1782156465.498:531): avc: denied { mounton } for pid=4612 comm="syz.4.278" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 117.027024][ T4630] loop4: detected capacity change from 0 to 128 [ 117.112502][ T4630] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.204792][ T4615] netlink: 10 bytes leftover after parsing attributes in process `syz.2.279'. [ 117.246504][ T4630] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.286702][ T4624] loop0: detected capacity change from 0 to 1024 [ 117.298377][ T28] audit: type=1400 audit(1782156465.798:532): avc: denied { wake_alarm } for pid=4614 comm="syz.2.279" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.395241][ T4624] EXT4-fs: Ignoring removed bh option [ 117.461752][ T4624] EXT4-fs: Ignoring removed bh option [ 117.483624][ T4627] loop3: detected capacity change from 0 to 1024 [ 117.517736][ T4624] EXT4-fs: dax option not supported [ 117.576762][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.617769][ T4627] EXT4-fs: Mount option(s) incompatible with ext3 [ 117.778375][ T4624] loop0: detected capacity change from 0 to 512 [ 117.822612][ T4636] netlink: 128 bytes leftover after parsing attributes in process `syz.4.285'. [ 117.976885][ T4638] netlink: 'syz.4.285': attribute type 25 has an invalid length. [ 118.003259][ T4627] loop3: detected capacity change from 0 to 512 [ 118.019400][ T4638] netlink: 'syz.4.285': attribute type 3 has an invalid length. [ 118.043783][ T4627] EXT4-fs: test_dummy_encryption option not supported [ 118.069897][ T4638] netlink: 132 bytes leftover after parsing attributes in process `syz.4.285'. [ 118.268627][ T4640] loop0: detected capacity change from 0 to 512 [ 118.283864][ T4640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.293498][ T4640] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.307829][ T4640] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 118.589410][ T4640] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 118.658022][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 118.682555][ T4640] EXT4-fs (loop0): 1 truncate cleaned up [ 118.747602][ T4651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 118.770786][ T4640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.828685][ T4651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.292'. [ 119.029993][ T4640] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 4: comm syz.0.289: lblock 0 mapped to illegal pblock 4 (length 1) [ 119.121716][ T4640] EXT4-fs (loop0): Remounting filesystem read-only [ 119.145269][ T4653] loop1: detected capacity change from 0 to 8192 [ 119.170921][ T4640] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.183420][ T4653] vfat: Unknown parameter '­Jÿ f»]@EÉXU›}˘¦';Œe$ÙöyäûéHß´ÌJ8”i`‚AsYð?Ó’' [ 119.420529][ T4661] loop1: detected capacity change from 0 to 1764 [ 119.490210][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 119.490222][ T28] audit: type=1400 audit(1782156467.845:534): avc: denied { accept } for pid=4660 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.525173][ T4661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.566818][ T4661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.627291][ T28] audit: type=1400 audit(1782156467.873:535): avc: denied { read write } for pid=4660 comm="syz.1.295" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.749014][ T28] audit: type=1400 audit(1782156467.873:536): avc: denied { open } for pid=4660 comm="syz.1.295" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.867036][ T28] audit: type=1400 audit(1782156467.873:537): avc: denied { ioctl } for pid=4660 comm="syz.1.295" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.007897][ T4657] loop3: detected capacity change from 0 to 512 [ 120.180813][ T4657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.194689][ T4657] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.365944][ T28] audit: type=1400 audit(1782156468.668:538): avc: denied { write } for pid=4671 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.394554][ T28] audit: type=1400 audit(1782156468.687:539): avc: denied { read } for pid=4671 comm="syz.0.297" path="socket:[9255]" dev="sockfs" ino=9255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.394585][ T28] audit: type=1400 audit(1782156468.687:540): avc: denied { ioctl } for pid=4671 comm="syz.0.297" path="socket:[9250]" dev="sockfs" ino=9250 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.627586][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.713845][ T4680] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 120.728940][ T4680] bond1 (unregistering): Released all slaves [ 122.134739][ T4680] set_capacity_and_notify: 1 callbacks suppressed [ 122.134754][ T4680] loop3: detected capacity change from 0 to 512 [ 122.268010][ T4680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.293091][ T4680] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.429546][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.615637][ T4696] loop4: detected capacity change from 0 to 1024 [ 122.626193][ T4691] loop0: detected capacity change from 0 to 1024 [ 122.650681][ T4696] EXT4-fs: Mount option(s) incompatible with ext3 [ 122.667372][ T4691] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.786143][ T4696] loop4: detected capacity change from 0 to 512 [ 122.798577][ T4691] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.300: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 122.817436][ T4691] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 122.818343][ T4696] EXT4-fs: test_dummy_encryption option not supported [ 122.820955][ T4691] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.300: couldn't read orphan inode 11 (err -117) [ 122.828450][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 122.828680][ C1] EXT4-fs (loop0): initial error at time 1782156470: ext4_ext_check_inode:521: inode 11 [ 122.861981][ T4691] loop0: lost filesystem error report for type 5 error -117 [ 122.865774][ C1] EXT4-fs (loop0): last error at time 1782156470: ext4_ext_check_inode:521: inode 11 [ 123.000786][ T4691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.721332][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.998399][ T4722] futex_wake_op: syz.2.309 tries to shift op by 144; fix this program [ 126.328658][ T28] audit: type=1400 audit(1782156474.206:541): avc: denied { mount } for pid=4720 comm="syz.4.310" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.696463][ T4734] loop4: detected capacity change from 0 to 128 [ 126.704932][ T28] audit: type=1400 audit(1782156474.543:542): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.739892][ T4734] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.796422][ T4734] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.206523][ T4740] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 127.262994][ T4740] bond1 (unregistering): Released all slaves [ 127.448621][ T28] audit: type=1400 audit(1782156475.291:543): avc: denied { shutdown } for pid=4744 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.882934][ T28] audit: type=1400 audit(1782156475.703:544): avc: denied { setopt } for pid=4746 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 128.095832][ T28] audit: type=1400 audit(1782156475.890:545): avc: denied { read } for pid=3017 comm="dhcpcd" name="n27" dev="tmpfs" ino=3469 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.203282][ T12] bridge_slave_1: left allmulticast mode [ 128.252189][ T12] bridge_slave_1: left promiscuous mode [ 128.282238][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.288791][ T28] audit: type=1400 audit(1782156475.890:546): avc: denied { open } for pid=3017 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=3469 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.328059][ T12] bridge_slave_0: left allmulticast mode [ 128.328980][ T28] audit: type=1400 audit(1782156475.890:547): avc: denied { getattr } for pid=3017 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=3469 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.353298][ T12] bridge_slave_0: left promiscuous mode [ 128.387587][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.390356][ T28] audit: type=1400 audit(1782156476.161:548): avc: denied { read } for pid=4762 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.461960][ T28] audit: type=1400 audit(1782156476.161:549): avc: denied { read open } for pid=4762 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.541771][ T4767] loop1: detected capacity change from 0 to 512 [ 128.548178][ T28] audit: type=1400 audit(1782156476.161:550): avc: denied { getattr } for pid=4762 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.583618][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.666093][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.708635][ T12] bond0 (unregistering): Released all slaves [ 128.731406][ T3017] 8021q: adding VLAN 0 to HW filter on device eth3 [ 128.770057][ T12] tipc: Left network mode [ 128.817553][ T12] hsr_slave_0: left promiscuous mode [ 128.838015][ T12] hsr_slave_1: left promiscuous mode [ 128.846937][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.872298][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.064982][ T12] team0 (unregistering): Port device team_slave_1 removed [ 129.095146][ T12] team0 (unregistering): Port device team_slave_0 removed [ 129.189769][ T4751] netlink: 10 bytes leftover after parsing attributes in process `syz.0.319'. [ 129.202404][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2 [ 129.268322][ T4807] netlink: 40 bytes leftover after parsing attributes in process `syz.1.322'. [ 129.279585][ T4804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 129.573745][ T4828] loop0: detected capacity change from 0 to 256 [ 129.677212][ T4828] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.736449][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1 [ 129.893958][ T4755] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.903200][ T4755] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.911044][ T4755] bridge_slave_0: entered allmulticast mode [ 129.918373][ T4755] bridge_slave_0: entered promiscuous mode [ 129.963249][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.971022][ T4755] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.979435][ T4755] bridge_slave_1: entered allmulticast mode [ 129.987584][ T4755] bridge_slave_1: entered promiscuous mode [ 130.311763][ T4836] loop1: detected capacity change from 0 to 8192 [ 130.476221][ T4755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.526272][ T4755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.414177][ T4842] loop0: detected capacity change from 0 to 512 [ 131.456381][ T4755] team0: Port device team_slave_0 added [ 131.474156][ T4842] EXT4-fs (loop0): 1 orphan inode deleted [ 131.487217][ T4755] team0: Port device team_slave_1 added [ 131.503087][ T4842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.548589][ T4755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.560538][ T4842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.589490][ T4755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.679688][ T4755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.706007][ T4842] bond0: (slave bond_slave_1): Releasing backup interface [ 131.734172][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 131.734196][ T28] audit: type=1400 audit(1782156479.304:565): avc: denied { write } for pid=4843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.767343][ T4842] loop0: detected capacity change from 0 to 128 [ 131.781223][ T4755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.795742][ T4755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.879956][ T4842] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.894318][ T4755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.923895][ T4842] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.014798][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 132.029814][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.043938][ T4755] hsr_slave_0: entered promiscuous mode [ 132.064237][ T4755] hsr_slave_1: entered promiscuous mode [ 132.072111][ T4864] loop2: detected capacity change from 0 to 8192 [ 132.083132][ T4755] debugfs: 'hsr0' already exists in 'hsr' [ 132.089181][ T4864] vfat: Unknown parameter '0xffffffffffffffff' [ 132.115330][ T4755] Cannot create hsr debugfs directory [ 132.265513][ T28] audit: type=1400 audit(1782156479.510:566): avc: denied { write } for pid=4862 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.307319][ T28] audit: type=1400 audit(1782156479.669:567): avc: denied { create } for pid=4863 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.391705][ T28] audit: type=1400 audit(1782156479.921:568): avc: denied { write } for pid=4872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.441985][ T28] audit: type=1400 audit(1782156479.959:569): avc: denied { write } for pid=4883 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.555697][ T28] audit: type=1400 audit(1782156480.071:570): avc: denied { write } for pid=4887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.618176][ T4755] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.626917][ T4755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.641512][ T4755] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.667154][ T28] audit: type=1400 audit(1782156480.174:571): avc: denied { write } for pid=4899 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.729781][ T28] audit: type=1400 audit(1782156480.220:572): avc: denied { bind } for pid=4903 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.856728][ T4755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.928437][ T4755] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 133.041894][ T4755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.113915][ T28] audit: type=1400 audit(1782156480.230:573): avc: denied { listen } for pid=4903 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.145591][ T4755] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 133.199363][ T4755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.220097][ T4919] syz.4.334 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 133.234226][ T28] audit: type=1400 audit(1782156480.230:574): avc: denied { read } for pid=4903 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.305795][ T4919] loop4: detected capacity change from 0 to 1024 [ 133.552317][ T4919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.649181][ T4919] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.737070][ T4755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.787927][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.824895][ T4755] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.857622][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.864728][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.902311][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.909454][ T3443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.383353][ T4755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.488511][ T4984] GUP no longer grows the stack in syz.4.337 (4984): 200000004000-200000007000 (200000002000) [ 134.509266][ T4984] CPU: 1 UID: 0 PID: 4984 Comm: syz.4.337 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 134.509302][ T4984] Tainted: [W]=WARN [ 134.509311][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.509331][ T4984] Call Trace: [ 134.509337][ T4984] [ 134.509346][ T4984] __dump_stack+0x1d/0x30 [ 134.509370][ T4984] dump_stack_lvl+0x95/0xd0 [ 134.509390][ T4984] dump_stack+0x15/0x1b [ 134.509411][ T4984] __get_user_pages+0x1b27/0x1f10 [ 134.509491][ T4984] ? __rcu_read_unlock+0x4e/0x70 [ 134.509519][ T4984] get_user_pages_remote+0x1d5/0x6b0 [ 134.509553][ T4984] __access_remote_vm+0x156/0x4d0 [ 134.509643][ T4984] access_remote_vm+0x32/0x40 [ 134.509680][ T4984] proc_pid_cmdline_read+0x334/0x710 [ 134.509743][ T4984] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 134.509783][ T4984] vfs_readv+0x417/0x6d0 [ 134.509820][ T4984] __x64_sys_preadv+0xfd/0x1c0 [ 134.509861][ T4984] x64_sys_call+0x2915/0x3020 [ 134.509890][ T4984] do_syscall_64+0x136/0x3c0 [ 134.509918][ T4984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.509944][ T4984] RIP: 0033:0x7f59bb2dce59 [ 134.509963][ T4984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.509984][ T4984] RSP: 002b:00007f59b9d37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 134.510061][ T4984] RAX: ffffffffffffffda RBX: 00007f59bb555fa0 RCX: 00007f59bb2dce59 [ 134.510086][ T4984] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 000000000000000b [ 134.510102][ T4984] RBP: 00007f59bb372e6f R08: 00000000fffffff9 R09: 0000000000000000 [ 134.510119][ T4984] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 134.510135][ T4984] R13: 00007f59bb556038 R14: 00007f59bb555fa0 R15: 00007ffd98854158 [ 134.510159][ T4984] [ 134.519835][ T4755] veth0_vlan: entered promiscuous mode [ 134.732617][ T4944] loop2: detected capacity change from 0 to 512 [ 134.765399][ T4755] veth1_vlan: entered promiscuous mode [ 134.815601][ T4937] netlink: 10 bytes leftover after parsing attributes in process `syz.1.335'. [ 134.839402][ T4944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.867024][ T4755] veth0_macvtap: entered promiscuous mode [ 134.876496][ T4944] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.887538][ T4755] veth1_macvtap: entered promiscuous mode [ 134.908975][ T4994] loop4: detected capacity change from 0 to 512 [ 134.927060][ T4994] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.934266][ T4994] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.975019][ T4994] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 134.983353][ T4755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.995805][ T4994] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 135.014052][ T4755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.028225][ T4994] EXT4-fs (loop4): 1 truncate cleaned up [ 135.044599][ T4994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.049491][ T3443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.066027][ T4994] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz.4.338: lblock 0 mapped to illegal pblock 4 (length 1) [ 135.081609][ T3443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.090531][ T4994] EXT4-fs (loop4): Remounting filesystem read-only [ 135.098830][ T3443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.117703][ T3443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.131684][ T4994] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.267383][ T5023] tipc: Started in network mode [ 135.272803][ T3443] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.281660][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.290704][ T5023] tipc: Node identity 8e78d9be1478, cluster identity 4711 [ 135.298437][ T5023] tipc: Enabled bearer , priority 0 [ 135.327460][ T5026] loop0: detected capacity change from 0 to 512 [ 135.337253][ T5023] syzkaller0: entered promiscuous mode [ 135.354795][ T5023] syzkaller0: entered allmulticast mode [ 135.361647][ T5033] loop2: detected capacity change from 0 to 1764 [ 135.514192][ T5033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.620082][ T5023] tipc: Resetting bearer [ 135.632456][ T5026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.648887][ T5033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.712890][ T5022] tipc: Resetting bearer [ 135.740113][ T5022] tipc: Disabling bearer [ 135.864584][ T5026] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.031436][ T5056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.046844][ T5056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.134922][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.169500][ T5066] loop0: detected capacity change from 0 to 128 [ 136.274059][ T5066] loop0: detected capacity change from 0 to 128 [ 136.300084][ T5066] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.314583][ T5066] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.453760][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.566221][ T5074] loop0: detected capacity change from 0 to 512 [ 136.617059][ T5074] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.345: bad orphan inode 13 [ 136.659838][ T5074] loop0: lost filesystem error report for type 5 error -117 [ 136.660490][ T5074] ext4_test_bit(bit=12, block=4) = 1 [ 136.668006][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 136.668070][ C0] EXT4-fs (loop0): initial error at time 1782156483: ext4_orphan_get:1425 [ 136.668165][ C0] EXT4-fs (loop0): last error at time 1782156483: ext4_orphan_get:1425 [ 136.744934][ T5074] is_bad_inode(inode)=0 [ 136.749532][ T5074] NEXT_ORPHAN(inode)=0 [ 136.753968][ T5074] max_ino=32 [ 136.757507][ T5074] i_nlink=1 [ 136.764771][ T5074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.766339][ T5079] loop3: detected capacity change from 0 to 256 [ 136.859889][ T5079] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.903849][ T5074] syzkaller0: entered promiscuous mode [ 136.920134][ T5074] syzkaller0: entered allmulticast mode [ 136.961229][ T5079] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 136.980747][ T5079] FAT-fs (loop3): Filesystem has been set read-only [ 137.076451][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.291353][ T5079] No such timeout policy "syz1" [ 137.426039][ T3549] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.475007][ T5087] loop0: detected capacity change from 0 to 1024 [ 137.530695][ T5087] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 137.540779][ T5087] System zones: 0-1, 3-36 [ 137.551602][ T5087] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.360: bad orphan inode 134217728 [ 137.575196][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 137.575212][ T28] audit: type=1400 audit(1782156484.757:614): avc: denied { write } for pid=5094 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.628803][ T5087] loop0: lost filesystem error report for type 5 error -117 [ 137.656075][ T5087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.852268][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.859501][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.967161][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.260550][ T5104] loop3: detected capacity change from 0 to 512 [ 138.476962][ T5104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.493144][ T5104] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.636281][ T5104] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 139.262601][ T5111] SELinux: Context system_u:object is not valid (left unmapped). [ 139.371204][ T28] audit: type=1400 audit(1782156486.357:615): avc: denied { relabelto } for pid=5105 comm="syz.4.356" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 139.402932][ T5104] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 139.432182][ T5109] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.504848][ T5104] EXT4-fs (loop3): 1 truncate cleaned up [ 139.639289][ T5109] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.651839][ T28] audit: type=1400 audit(1782156486.357:616): avc: denied { associate } for pid=5105 comm="syz.4.356" name="cgroup.procs" dev="cgroup" ino=249 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 139.929091][ T5104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.701632][ T5104] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.354: lblock 0 mapped to illegal pblock 4 (length 1) [ 140.759275][ T5121] set_capacity_and_notify: 1 callbacks suppressed [ 140.759303][ T5121] loop1: detected capacity change from 0 to 1024 [ 140.773658][ T5121] EXT4-fs: Ignoring removed orlov option [ 140.824788][ T5121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.915193][ T5104] EXT4-fs (loop3): Remounting filesystem read-only [ 140.934792][ T5118] loop2: detected capacity change from 0 to 1024 [ 140.986943][ T5120] : renamed from bond_slave_1 [ 141.021718][ T5118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 141.061792][ T5104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.079701][ T5118] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.132967][ T28] audit: type=1400 audit(1782156488.087:617): avc: denied { write } for pid=5117 comm="syz.2.358" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.159773][ T5118] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.358: lblock 3 mapped to illegal pblock 3 (length 1) [ 141.221804][ T5133] loop4: detected capacity change from 0 to 128 [ 141.239922][ T5118] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 141.258333][ T28] audit: type=1400 audit(1782156488.190:618): avc: denied { watch watch_reads } for pid=5117 comm="syz.2.358" path="/71/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.298891][ T5133] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 54) [ 141.333289][ T5133] FAT-fs (loop4): Filesystem has been set read-only [ 141.340429][ T5118] EXT4-fs (loop2): This should not happen!! Data will be lost [ 141.340429][ T5118] [ 141.381657][ T5133] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 54) [ 141.542783][ T28] audit: type=1400 audit(1782156488.480:619): avc: denied { write } for pid=5142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.644604][ T5157] loop3: detected capacity change from 0 to 128 [ 141.654113][ T28] audit: type=1400 audit(1782156488.583:620): avc: denied { write } for pid=5156 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.689481][ T5157] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.841167][ T28] audit: type=1400 audit(1782156488.761:621): avc: denied { write } for pid=5159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.912525][ T28] audit: type=1400 audit(1782156488.817:622): avc: denied { write } for pid=5172 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.938306][ T5157] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.938469][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.950732][ T3296] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 142.010685][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 142.828636][ T5189] vti0: entered promiscuous mode [ 142.834281][ T5189] vti0: entered allmulticast mode [ 145.123640][ T5202] loop3: detected capacity change from 0 to 128 [ 145.211725][ T5202] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.280834][ T5202] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.495256][ T5200] netlink: 256 bytes leftover after parsing attributes in process `syz.0.373'. [ 145.650723][ T28] audit: type=1400 audit(1782156492.315:623): avc: denied { execute } for pid=5195 comm="syz.0.373" dev="tmpfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.520042][ T5221] xt_socket: unknown flags 0x58 [ 147.525400][ T28] audit: type=1400 audit(1782156494.074:624): avc: denied { bind } for pid=5220 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.569470][ T28] audit: type=1400 audit(1782156494.092:625): avc: denied { bind } for pid=5220 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 147.606255][ T28] audit: type=1400 audit(1782156494.139:626): avc: denied { write } for pid=5220 comm="syz.2.380" path="socket:[10193]" dev="sockfs" ino=10193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 148.668848][ T5234] loop3: detected capacity change from 0 to 1764 [ 148.675635][ T5234] iso9660: Unknown parameter 'euid' [ 150.024541][ T28] audit: type=1400 audit(1782156495.627:627): avc: denied { ioctl } for pid=5235 comm="syz.1.384" path="socket:[10576]" dev="sockfs" ino=10576 ioctlcmd=0x5880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.289513][ T5236] loop1: detected capacity change from 0 to 512 [ 151.131704][ T5236] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 151.446224][ T5238] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 151.805455][ T5238] bond1 (unregistering): Released all slaves [ 151.813346][ T5236] EXT4-fs (loop1): 1 truncate cleaned up [ 151.835871][ T5236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.541302][ T5256] loop3: detected capacity change from 0 to 512 [ 152.551709][ T5256] ext4: Unknown parameter 'nodi' [ 152.576913][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.737146][ T5258] xfrm1: entered allmulticast mode [ 152.807575][ T5255] loop0: detected capacity change from 0 to 512 [ 152.832328][ T5255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.852986][ T5255] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.049992][ T28] audit: type=1400 audit(1782156499.237:628): avc: denied { mount } for pid=5264 comm="syz.3.391" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 153.104271][ T28] audit: type=1400 audit(1782156499.293:629): avc: denied { setopt } for pid=5266 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 153.203701][ T5270] loop3: detected capacity change from 0 to 128 [ 153.213018][ T5270] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.231412][ T5270] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.951768][ T5285] loop1: detected capacity change from 0 to 1024 [ 153.958883][ T5285] EXT4-fs: Ignoring removed bh option [ 153.966310][ T28] audit: type=1400 audit(1782156500.079:630): avc: denied { nlmsg_read } for pid=5278 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.898805][ T5285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 154.911567][ T5285] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.928015][ T5285] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.388: lblock 3 mapped to illegal pblock 3 (length 1) [ 154.946821][ T5285] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 154.959175][ T5285] EXT4-fs (loop1): This should not happen!! Data will be lost [ 154.959175][ T5285] [ 155.141524][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.172558][ T28] audit: type=1400 audit(1782156500.837:631): avc: denied { mount } for pid=5279 comm="syz.3.397" name="/" dev="ramfs" ino=10628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 155.262790][ T28] audit: type=1400 audit(1782156500.996:632): avc: denied { write } for pid=5274 comm="syz.1.388" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.397985][ T5295] loop2: detected capacity change from 0 to 512 [ 155.592964][ T5295] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 155.617640][ T5295] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 155.633094][ T5295] EXT4-fs (loop2): 1 truncate cleaned up [ 155.847821][ T5295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.084938][ T3295] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 156.192183][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.254987][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.656274][ T5311] loop2: detected capacity change from 0 to 512 [ 156.670723][ T5311] EXT4-fs: inline encryption not supported [ 156.687853][ T5311] EXT4-fs: journaled quota format not specified [ 158.828168][ T5327] loop3: detected capacity change from 0 to 128 [ 158.853155][ T28] audit: type=1400 audit(1782156504.663:633): avc: denied { create } for pid=5323 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 158.933444][ T5334] loop0: detected capacity change from 0 to 4096 [ 158.942798][ T5330] loop2: detected capacity change from 0 to 128 [ 158.950203][ T5330] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.063087][ T5330] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 159.076688][ T5334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.223441][ T5332] loop3: detected capacity change from 0 to 2048 [ 159.245787][ T28] audit: type=1400 audit(1782156504.915:634): avc: denied { read } for pid=5331 comm="syz.3.411" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.246247][ T5335] Set syz1 is full, maxelem 65536 reached [ 159.288243][ T28] audit: type=1400 audit(1782156504.915:635): avc: denied { open } for pid=5331 comm="syz.3.411" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.314598][ T28] audit: type=1400 audit(1782156505.065:636): avc: denied { ioctl } for pid=5331 comm="syz.3.411" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.358373][ T28] audit: type=1400 audit(1782156505.130:637): avc: denied { write } for pid=5333 comm="syz.0.410" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.487012][ T5345] bond2: option primary: mode dependency failed, not supported in mode broadcast(3) [ 159.523528][ T5345] bond2 (unregistering): Released all slaves [ 160.701824][ T5354] loop2: detected capacity change from 0 to 512 [ 160.785928][ T5354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.848734][ T5354] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.166508][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.196432][ T5363] loop3: detected capacity change from 0 to 512 [ 161.217246][ T5363] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 161.233283][ T5363] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 161.242124][ T5363] EXT4-fs (loop3): 1 truncate cleaned up [ 161.253207][ T5363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.301952][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.530767][ T28] audit: type=1400 audit(1782156507.169:638): avc: denied { setopt } for pid=5367 comm="syz.1.418" lport=44 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.573079][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.608285][ T5370] loop0: detected capacity change from 0 to 4096 [ 161.620408][ T5370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.752116][ T28] audit: type=1400 audit(1782156507.375:639): avc: denied { write } for pid=5369 comm="syz.0.417" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.168600][ T5385] loop3: detected capacity change from 0 to 8192 [ 162.313515][ T28] audit: type=1400 audit(1782156507.834:640): avc: denied { setattr } for pid=5369 comm="syz.0.417" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.371340][ T5370] netlink: 56 bytes leftover after parsing attributes in process `syz.0.417'. [ 162.382566][ T28] audit: type=1400 audit(1782156507.927:641): avc: denied { write } for pid=5369 comm="syz.0.417" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.907626][ T5396] loop2: detected capacity change from 0 to 512 [ 162.923040][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.947300][ T5396] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 164.266809][ T5402] loop0: detected capacity change from 0 to 128 [ 164.275913][ T5402] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.297053][ T5402] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.121452][ T5416] loop0: detected capacity change from 0 to 1764 [ 165.128135][ T5416] iso9660: Bad value for 'uid' [ 165.132991][ T5416] iso9660: Bad value for 'uid' [ 165.812339][ T5424] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 165.834159][ T5424] bond1 (unregistering): Released all slaves [ 166.208873][ T28] audit: type=1400 audit(1782156511.547:642): avc: denied { bind } for pid=5420 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.257832][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 166.286547][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.343154][ T5423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.452403][ T5431] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 166.500486][ T5431] bond1 (unregistering): Released all slaves [ 166.609841][ T5426] loop3: detected capacity change from 0 to 512 [ 166.645125][ T5426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.708867][ T5426] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.526064][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.627746][ T5431] loop0: detected capacity change from 0 to 512 [ 167.639112][ T5431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.664685][ T5431] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.213784][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.846332][ T28] audit: type=1400 audit(1782156514.007:643): avc: denied { ioctl } for pid=5465 comm="syz.0.439" path="socket:[10880]" dev="sockfs" ino=10880 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.098410][ T5466] loop0: detected capacity change from 0 to 512 [ 169.214423][ T5466] EXT4-fs error (device loop0): ext4_quota_enable:7228: comm syz.0.439: Bad quota inum: 1, type: 2 [ 169.349526][ T5466] loop0: lost filesystem error report for type 5 error -117 [ 169.358347][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 169.372153][ C1] EXT4-fs (loop0): initial error at time 1782156514: ext4_quota_enable:7228 [ 169.380921][ C1] EXT4-fs (loop0): last error at time 1782156514: ext4_quota_enable:7228 [ 169.391886][ T5466] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 169.543740][ T5466] EXT4-fs (loop0): mount failed [ 170.319806][ T5466] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 171.022118][ T5466] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.030424][ T5466] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.429495][ T5496] loop3: detected capacity change from 0 to 1024 [ 171.464176][ T5496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 171.560377][ T5494] syzkaller0: entered promiscuous mode [ 171.588472][ T5496] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.658945][ T5494] syzkaller0: entered allmulticast mode [ 171.762465][ T5505] futex_wake_op: syz.0.450 tries to shift op by 144; fix this program [ 172.607998][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 172.794426][ T5511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.804918][ T5511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.825487][ T5511] netlink: 'syz.2.453': attribute type 5 has an invalid length. [ 172.842965][ T5511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 174.664027][ T28] audit: type=1326 audit(1782156519.376:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bb2dce59 code=0x0 [ 179.159372][ T28] audit: type=1400 audit(2000000004.097:645): avc: denied { getopt } for pid=5563 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.210583][ T28] audit: type=1400 audit(2000000004.097:646): avc: denied { ioctl } for pid=5563 comm="syz.3.468" path="socket:[11967]" dev="sockfs" ino=11967 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 180.218700][ T5583] tipc: Started in network mode [ 180.224059][ T5583] tipc: Node identity ac14140f, cluster identity 4711 [ 180.231577][ T5583] tipc: New replicast peer: 255.255.255.255 [ 180.238629][ T5583] tipc: Enabled bearer , priority 10 [ 181.438732][ T4020] tipc: Node number set to 2886997007 [ 181.793918][ T5593] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 181.901291][ T5593] bond1 (unregistering): Released all slaves [ 181.908674][ T5594] netlink: 64 bytes leftover after parsing attributes in process `syz.3.477'. [ 182.801145][ T5607] netlink: 176 bytes leftover after parsing attributes in process `syz.0.480'. [ 183.201416][ T28] audit: type=1400 audit(2000000007.848:647): avc: denied { create } for pid=5608 comm="syz.3.481" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 183.221985][ T28] audit: type=1400 audit(2000000007.857:648): avc: denied { write } for pid=5608 comm="syz.3.481" name="file0" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 183.244449][ T28] audit: type=1400 audit(2000000007.857:649): avc: denied { open } for pid=5608 comm="syz.3.481" path="/36/file0" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 183.277589][ T28] audit: type=1400 audit(2000000007.876:650): avc: denied { ioctl } for pid=5608 comm="syz.3.481" path="/36/file0" dev="tmpfs" ino=213 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 183.354971][ T28] audit: type=1400 audit(2000000007.941:651): avc: denied { lock } for pid=5608 comm="syz.3.481" path="socket:[12108]" dev="sockfs" ino=12108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 185.397059][ T5628] syz_tun: entered allmulticast mode [ 185.407268][ T28] audit: type=1400 audit(2000000009.877:652): avc: denied { unlink } for pid=4755 comm="syz-executor" name="file0" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 185.474486][ T5630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 185.484934][ T5628] IPv6: addrconf: prefix option has invalid lifetime [ 185.492203][ T5628] IPv6: addrconf: prefix option has invalid lifetime [ 185.523454][ T5630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.484'. [ 185.541154][ T5633] x_tables: duplicate underflow at hook 2 [ 186.446641][ T28] audit: type=1400 audit(2000000010.916:653): avc: denied { mount } for pid=5638 comm="syz.2.489" name="/" dev="hugetlbfs" ino=11118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 186.481505][ T5639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.489'. [ 186.490660][ T5639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.489'. [ 186.551523][ T28] audit: type=1400 audit(2000000011.019:654): avc: denied { create } for pid=5638 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 187.046063][ T5647] bridge0: port 1(macvlan2) entered blocking state [ 187.058757][ T5647] bridge0: port 1(macvlan2) entered disabled state [ 187.076504][ T5647] macvlan2: entered allmulticast mode [ 187.088558][ T5647] ip6gretap0: entered allmulticast mode [ 187.101652][ T5647] macvlan2: entered promiscuous mode [ 187.120558][ T5647] bridge0: port 1(macvlan2) entered blocking state [ 187.127205][ T5647] bridge0: port 1(macvlan2) entered forwarding state [ 187.851603][ T5661] capability: warning: `syz.3.494' uses deprecated v2 capabilities in a way that may be insecure [ 188.054728][ T5670] loop0: detected capacity change from 0 to 128 [ 188.073115][ T28] audit: type=1400 audit(2000000012.431:655): avc: denied { name_connect } for pid=5666 comm="syz.1.497" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 188.172473][ T5674] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 188.248253][ T5674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.267508][ T28] audit: type=1400 audit(2000000012.618:656): avc: denied { append } for pid=5667 comm="syz.0.498" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 188.434661][ T5685] netlink: 'syz.3.502': attribute type 24 has an invalid length. [ 188.442617][ T5674] bond1: (slave gretap1): making interface the new active one [ 188.448932][ T5685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 188.460928][ T5674] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 188.470738][ T5685] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 189.523404][ T5694] loop2: detected capacity change from 0 to 256 [ 190.554554][ T28] audit: type=1326 audit(2000000014.592:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.3.503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1b6e4ce59 code=0x0 [ 191.600426][ T5713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.511'. [ 191.654379][ T5713] 9p: Bad value for 'wfdno' [ 192.086078][ T28] audit: type=1400 audit(2000000016.182:658): avc: denied { ioctl } for pid=5720 comm="syz.2.523" path="socket:[11253]" dev="sockfs" ino=11253 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 192.115486][ T5721] ªªªªªª: renamed from vlan0 (while UP) [ 192.126158][ T28] audit: type=1400 audit(2000000016.229:659): avc: denied { getopt } for pid=5726 comm="syz.4.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.224219][ T5732] futex_wake_op: syz.3.513 tries to shift op by 144; fix this program [ 192.442411][ T5736] loop2: detected capacity change from 0 to 4096 [ 192.568381][ T5736] EXT4-fs: inline encryption not supported [ 192.580059][ T5736] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 192.939488][ T5740] vlan3: entered promiscuous mode [ 192.944876][ T5740] hsr0: entered promiscuous mode [ 192.949982][ T5740] vlan3: entered allmulticast mode [ 192.955382][ T5740] hsr0: entered allmulticast mode [ 192.960453][ T5740] hsr_slave_0: entered allmulticast mode [ 192.966655][ T5740] hsr_slave_1: entered allmulticast mode [ 193.032189][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'. [ 193.041353][ T5748] hsr_slave_0: left promiscuous mode [ 193.047222][ T5748] hsr_slave_1: left promiscuous mode [ 193.656681][ T28] audit: type=1400 audit(2000000017.650:660): avc: denied { remount } for pid=5750 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 193.800299][ T5760] netlink: 'syz.3.525': attribute type 9 has an invalid length. [ 193.814597][ T5760] netlink: 'syz.3.525': attribute type 7 has an invalid length. [ 193.823301][ T5760] netlink: 'syz.3.525': attribute type 8 has an invalid length. [ 193.939183][ T28] audit: type=1326 audit(2000000017.894:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.0.521" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feef875ce59 code=0x0 [ 194.081133][ T28] audit: type=1400 audit(2000000017.987:662): avc: denied { create } for pid=5757 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 194.168780][ T28] audit: type=1400 audit(2000000017.987:663): avc: denied { ioctl } for pid=5757 comm="syz.3.525" path="socket:[12412]" dev="sockfs" ino=12412 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 194.491718][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 194.700452][ T5772] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 194.715584][ T5773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 194.765177][ T28] audit: type=1400 audit(2000000018.698:664): avc: denied { watch watch_reads } for pid=5768 comm="syz.3.528" path="/47" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 195.031272][ T5777] loop3: detected capacity change from 0 to 512 [ 195.071057][ T28] audit: type=1400 audit(2000000018.988:665): avc: denied { mount } for pid=5778 comm="syz.2.531" name="/" dev="autofs" ino=12461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 195.101983][ T5777] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.149938][ T5777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.195599][ T5777] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.212461][ T28] audit: type=1400 audit(2000000019.119:666): avc: denied { execstack } for pid=5788 comm="syz.1.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 195.351613][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.504146][ T5796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.538'. [ 195.515561][ T5793] loop2: detected capacity change from 0 to 4096 [ 195.541856][ T5793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.594140][ T5804] loop3: detected capacity change from 0 to 512 [ 195.627382][ T5804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.642858][ T5804] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.854508][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.977736][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 195.977751][ T28] audit: type=1400 audit(2000000019.821:687): avc: denied { create } for pid=5819 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 196.014578][ T28] audit: type=1400 audit(2000000019.858:688): avc: denied { write } for pid=5819 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 196.302392][ T28] audit: type=1326 audit(2000000020.139:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.0.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef875ce59 code=0x7ffc0000 [ 196.347252][ T28] audit: type=1326 audit(2000000020.139:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.0.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef875ce59 code=0x7ffc0000 [ 196.372577][ T28] audit: type=1326 audit(2000000020.157:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.0.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef875ce59 code=0x7ffc0000 [ 196.380364][ T3398] IPVS: starting estimator thread 0... [ 196.398290][ T28] audit: type=1326 audit(2000000020.157:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.0.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef875ce59 code=0x7ffc0000 [ 196.430585][ T28] audit: type=1326 audit(2000000020.157:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.0.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef875ce59 code=0x7ffc0000 [ 196.449626][ T5803] syz.3.537 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 196.508433][ T28] audit: type=1326 audit(2000000020.157:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.0.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7feef875ce59 code=0x7ffc0000 [ 196.535845][ T5803] CPU: 1 UID: 0 PID: 5803 Comm: syz.3.537 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 196.535915][ T5803] Tainted: [W]=WARN [ 196.535921][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 196.535934][ T5803] Call Trace: [ 196.535940][ T5803] [ 196.535946][ T5803] __dump_stack+0x1d/0x30 [ 196.535990][ T5803] dump_stack_lvl+0x95/0xd0 [ 196.536043][ T5803] dump_stack+0x15/0x1b [ 196.536061][ T5803] dump_header+0x80/0x240 [ 196.536083][ T5803] oom_kill_process+0x295/0x350 [ 196.536112][ T5803] out_of_memory+0x981/0xbc0 [ 196.536161][ T5803] try_charge_memcg+0x621/0xa00 [ 196.536198][ T5803] charge_memcg+0x6d/0x120 [ 196.536247][ T5803] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 196.536277][ T5803] swap_cache_alloc_folio+0x47b/0x5e0 [ 196.536310][ T5803] swap_cluster_readahead+0x2b1/0x460 [ 196.536351][ T5803] swapin_readahead+0xd8/0x8a0 [ 196.536444][ T5803] ? _raw_spin_unlock+0x9/0x30 [ 196.536471][ T5803] ? swap_put_entries_cluster+0x49c/0x4c0 [ 196.536502][ T5803] ? __entry_text_end+0x11258/0x102179 [ 196.536530][ T5803] ? __rcu_read_unlock+0x4e/0x70 [ 196.536594][ T5803] ? swap_cache_get_folio+0x1f7/0x200 [ 196.536624][ T5803] do_swap_page+0x2a2/0x1ec0 [ 196.536654][ T5803] ? __css_rstat_updated+0xbb/0x280 [ 196.536694][ T5803] ? __rcu_read_lock+0x36/0x50 [ 196.536719][ T5803] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 196.536748][ T5803] handle_mm_fault+0xb3c/0x2da0 [ 196.536837][ T5803] do_user_addr_fault+0x634/0x1060 [ 196.536870][ T5803] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 196.536908][ T5803] ? trace_page_fault_user+0x1f/0xa0 [ 196.536938][ T5803] exc_page_fault+0x62/0xa0 [ 196.536971][ T5803] asm_exc_page_fault+0x26/0x30 [ 196.537070][ T5803] RIP: 0033:0x7fa1b6d1a7e1 [ 196.537096][ T5803] Code: ff e8 23 80 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 69 3d be ae ed 00 e8 03 00 00 48 8d 1d bf b7 3a 00 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f [ 196.537135][ T5803] RSP: 002b:00007ffe83c17450 EFLAGS: 00010206 [ 196.537180][ T5803] RAX: 000000000002e0ca RBX: 00007fa1b70c5fa0 RCX: 000000000002de60 [ 196.537195][ T5803] RDX: 000000000000026a RSI: 00007ffe83c17430 RDI: 00000000000003e8 [ 196.537210][ T5803] RBP: 00007fa1b70c7da0 R08: 0000000024dae8cc R09: 3fffffffffffffff [ 196.537233][ T5803] R10: 4000000000000000 R11: 0000000000000246 R12: 000000000002e0e7 [ 196.537333][ T5803] R13: 00007fa1b70c609c R14: 000000000002e01b R15: 00007fa1b70c6090 [ 196.537355][ T5803] [ 196.537517][ T5803] memory: usage 307200kB, limit 307200kB, failcnt 476 [ 196.571608][ T28] audit: type=1326 audit(2000000020.157:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.0.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef875ce59 code=0x7ffc0000 [ 196.608792][ T5830] IPVS: using max 2400 ests per chain, 120000 per kthread [ 196.654658][ T28] audit: type=1326 audit(2000000020.157:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.0.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef875ce59 code=0x7ffc0000 [ 196.658338][ T5803] memory+swap: usage 319312kB, limit 9007199254740988kB, failcnt 0 [ 196.947544][ T5837] loop2: detected capacity change from 0 to 1764 [ 196.950097][ T5803] kmem: usage 2036kB, limit 9007199254740988kB, failcnt 0 [ 196.959193][ T5837] iso9660: Bad value for 'sbsector' [ 196.995495][ T5803] Memory cgroup stats for /syz3: [ 196.995733][ T5803] cache 8192 [ 197.027199][ T5803] rss 0 [ 197.031768][ T5803] shmem 0 [ 197.038016][ T5803] mapped_file 0 [ 197.055498][ T5803] dirty 0 [ 197.069126][ T5803] writeback 0 [ 197.179209][ T5803] workingset_refault_anon 65 [ 197.198250][ T5803] workingset_refault_file 274 [ 197.202981][ T5803] swap 12402688 [ 197.206576][ T5803] swapcached 12673024 [ 197.228788][ T5803] pgpgin 150704 [ 197.232281][ T5803] pgpgout 150701 [ 197.235844][ T5803] pgfault 154133 [ 197.239388][ T5803] pgmajfault 34 [ 197.243242][ T5803] inactive_anon 0 [ 197.247911][ T5803] active_anon 4096 [ 197.251972][ T5803] inactive_file 0 [ 197.255650][ T5803] active_file 8192 [ 197.259418][ T5803] unevictable 0 [ 197.263208][ T5803] hierarchical_memory_limit 314572800 [ 197.268734][ T5803] hierarchical_memsw_limit 9223372036854771712 [ 197.275686][ T5803] total_cache 8192 [ 197.279648][ T5803] total_rss 0 [ 197.283563][ T5803] total_shmem 0 [ 197.287157][ T5803] total_mapped_file 0 [ 197.291291][ T5803] total_dirty 0 [ 197.295668][ T5803] total_writeback 0 [ 197.299521][ T5803] total_workingset_refault_anon 65 [ 197.305114][ T5803] total_workingset_refault_file 274 [ 197.310774][ T5803] total_swap 12402688 [ 197.315398][ T5803] total_swapcached 12673024 [ 197.320057][ T5803] total_pgpgin 150704 [ 197.351852][ T5803] total_pgpgout 150701 [ 197.356001][ T5803] total_pgfault 154133 [ 197.360377][ T5803] total_pgmajfault 34 [ 197.364695][ T5803] total_inactive_anon 0 [ 197.369309][ T5803] total_active_anon 4096 [ 197.373671][ T5803] total_inactive_file 0 [ 197.378277][ T5803] total_active_file 8192 [ 197.383193][ T5803] total_unevictable 0 [ 197.387212][ T5803] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.537,pid=5803,uid=0 [ 197.404871][ T5803] Memory cgroup out of memory: Killed process 5803 (syz.3.537) total-vm:96348kB, anon-rss:1232kB, file-rss:22428kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 197.593689][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.614501][ T5857] loop2: detected capacity change from 0 to 128 [ 197.697294][ T5853] loop0: detected capacity change from 0 to 512 [ 197.706994][ T5857] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.746645][ T5853] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 197.758391][ T5857] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.781777][ T5853] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #17: comm syz.0.551: corrupted in-inode xattr: e_name out of bounds [ 197.817708][ T5853] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 197.819979][ T5853] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.551: couldn't read orphan inode 17 (err -117) [ 197.829336][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 197.829411][ C1] EXT4-fs (loop0): initial error at time 2000000021: ext4_iget_extra_inode:5180: inode 17 [ 197.829606][ C1] EXT4-fs (loop0): last error at time 2000000021: ext4_iget_extra_inode:5180: inode 17 [ 197.945992][ T5853] loop0: lost filesystem error report for type 5 error -117 [ 197.952090][ T5853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.131576][ T5853] EXT4-fs (loop0): shut down requested (0) [ 198.194716][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.422490][ T5866] loop3: detected capacity change from 0 to 512 [ 198.904719][ T5871] netlink: 14 bytes leftover after parsing attributes in process `syz.1.555'. [ 199.305956][ T5871] bond0 (unregistering): Released all slaves [ 199.478203][ T5866] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 199.487252][ T5866] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.553: corrupted in-inode xattr: e_value size too large [ 199.501562][ T5866] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 199.501721][ T5866] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.553: couldn't read orphan inode 15 (err -117) [ 199.511414][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 199.511441][ C1] EXT4-fs (loop3): initial error at time 2000000023: ext4_iget_extra_inode:5180: inode 15 [ 199.511474][ C1] EXT4-fs (loop3): last error at time 2000000023: ext4_iget_extra_inode:5180: inode 15 [ 200.415312][ T5882] loop0: detected capacity change from 0 to 512 [ 200.477986][ T5882] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.558: inode has both inline data and extents flags [ 200.539375][ T5866] loop3: lost filesystem error report for type 5 error -117 [ 200.540036][ T5866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.544779][ T5882] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 200.564638][ T5882] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.558: couldn't read orphan inode 15 (err -117) [ 200.585569][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 200.585622][ C0] EXT4-fs (loop0): initial error at time 2000000024: ext4_orphan_get:1399: inode 15 [ 200.585659][ C0] EXT4-fs (loop0): last error at time 2000000024: ext4_orphan_get:1399: inode 15 [ 200.610767][ T5882] loop0: lost filesystem error report for type 5 error -117 [ 200.815181][ T5882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.901887][ T5882] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.119329][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.137539][ T5888] netlink: 'syz.0.560': attribute type 4 has an invalid length. [ 201.177048][ T5888] loop0: detected capacity change from 0 to 128 [ 201.346042][ T5885] loop2: detected capacity change from 0 to 512 [ 201.393661][ T5890] ALSA: seq fatal error: cannot create timer (-22) [ 201.405054][ T5885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.418385][ T5885] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.531733][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.715173][ T5896] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 201.858765][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 201.858856][ T28] audit: type=1400 audit(2000000025.330:753): avc: denied { read write } for pid=5908 comm="syz.3.566" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 201.872786][ T5909] netlink: 388 bytes leftover after parsing attributes in process `syz.4.564'. [ 201.912685][ T5902] loop2: detected capacity change from 0 to 512 [ 201.948984][ T28] audit: type=1400 audit(2000000025.330:754): avc: denied { open } for pid=5908 comm="syz.3.566" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 201.973655][ T5902] EXT4-fs: Ignoring removed i_version option [ 202.002717][ T5910] loop3: detected capacity change from 0 to 256 [ 202.026686][ T5902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.052519][ T5910] vfat: Unknown parameter 'mountinfo' [ 202.070769][ T5902] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.114004][ T5910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'. [ 202.250885][ T28] audit: type=1400 audit(2000000025.695:755): avc: denied { write } for pid=5897 comm="syz.2.561" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.279204][ T5919] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 202.319092][ T5902] xt_hashlimit: size too large, truncated to 1048576 [ 202.654841][ T5915] loop0: detected capacity change from 0 to 1024 [ 203.060196][ T28] audit: type=1400 audit(2000000026.453:756): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 203.309805][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.392442][ T5926] 9p: Bad value for 'rfdno' [ 203.411839][ T5915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.456077][ T5926] tipc: Enabled bearer , priority 0 [ 203.496387][ T5926] syzkaller0: entered promiscuous mode [ 203.527170][ T5926] syzkaller0: entered allmulticast mode [ 203.545863][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.593209][ T28] audit: type=1400 audit(2000000026.958:757): avc: denied { lock } for pid=5935 comm="syz.0.572" path="socket:[12663]" dev="sockfs" ino=12663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.669717][ T28] audit: type=1400 audit(2000000026.958:758): avc: denied { connect } for pid=5935 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.691277][ T5924] tipc: Resetting bearer [ 203.717842][ T5924] tipc: Disabling bearer [ 203.776704][ T5939] usb usb8: usbfs: process 5939 (syz.0.573) did not claim interface 0 before use [ 203.843350][ T28] audit: type=1400 audit(2000000027.182:759): avc: denied { read } for pid=5940 comm="syz.2.574" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.704820][ T5971] loop0: detected capacity change from 0 to 512 [ 204.863393][ T5971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.003808][ T5971] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.351847][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.426143][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.447576][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.514927][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 205.616164][ T5985] team0: Port device team_slave_0 removed [ 207.396295][ T28] audit: type=1400 audit(2000000030.419:760): avc: denied { watch watch_reads } for pid=5997 comm="syz.0.589" path="/120/file1" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 207.447297][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 207.566104][ T6004] xt_cgroup: xt_cgroup: no path or classid specified [ 207.576822][ T6004] hub 8-0:1.0: USB hub found [ 207.584067][ T6004] hub 8-0:1.0: 8 ports detected [ 207.625049][ T28] audit: type=1400 audit(2000000030.727:761): avc: denied { execute } for pid=6002 comm="syz.3.591" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 207.674143][ T28] audit: type=1400 audit(2000000030.727:762): avc: denied { read } for pid=6002 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.546298][ T28] audit: type=1400 audit(2000000031.588:763): avc: denied { read } for pid=6012 comm="syz.1.592" name="file1" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 208.727752][ T28] audit: type=1400 audit(2000000031.588:764): avc: denied { watch } for pid=6012 comm="syz.1.592" path="/113/file1" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 208.792192][ T28] audit: type=1400 audit(2000000031.607:765): avc: denied { unlink } for pid=6012 comm="syz.1.592" name="file1" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 209.256687][ T6029] loop2: detected capacity change from 0 to 256 [ 209.311418][ T6029] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.727970][ T28] audit: type=1400 audit(2000000032.682:766): avc: denied { read } for pid=6027 comm="syz.1.598" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 210.301529][ T28] audit: type=1400 audit(2000000033.225:767): avc: denied { mounton } for pid=6037 comm="syz.1.600" path="/proc/396/task" dev="proc" ino=12823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 210.826669][ T6043] loop3: detected capacity change from 0 to 1764 [ 210.842445][ T6043] iso9660: Bad value for 'sbsector' [ 210.909311][ T6049] loop3: detected capacity change from 0 to 128 [ 210.927283][ T6049] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 210.931302][ T6050] netlink: 'syz.0.601': attribute type 10 has an invalid length. [ 210.948680][ T6050] netlink: 168 bytes leftover after parsing attributes in process `syz.0.601'. [ 210.959466][ T6049] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 210.984527][ T6050] loop0: detected capacity change from 0 to 128 [ 211.029313][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 211.902577][ T6063] loop0: detected capacity change from 0 to 1024 [ 211.928560][ T6063] ext4: Unknown parameter 'uid' [ 211.961357][ T28] audit: type=1400 audit(2000000034.787:768): avc: denied { open } for pid=6060 comm="syz.0.607" path="/123/file1" dev="tmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 212.065763][ T6066] loop0: detected capacity change from 0 to 512 [ 212.092912][ T6066] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 212.101339][ T6066] EXT4-fs (loop0): orphan cleanup on readonly fs [ 212.108192][ T6066] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 212.123635][ T6066] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 212.130980][ T6066] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #16: comm syz.0.608: corrupted xattr block 31: invalid header [ 212.144820][ T6066] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 212.145215][ T6066] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 212.154424][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 212.154474][ C1] EXT4-fs (loop0): initial error at time 2000000034: ext4_xattr_delete_inode:2972: inode 16 [ 212.154562][ C1] EXT4-fs (loop0): last error at time 2000000034: ext4_xattr_delete_inode:2972: inode 16 [ 212.198096][ T6066] EXT4-fs (loop0): 1 orphan inode deleted [ 212.219853][ T28] audit: type=1400 audit(2000000035.012:769): avc: denied { accept } for pid=6069 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 212.248443][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'. [ 212.268001][ T6066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.412343][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.462658][ T6077] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 212.518980][ T6081] netlink: 'syz.4.614': attribute type 21 has an invalid length. [ 212.528428][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.575142][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 212.638760][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 212.679174][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.703111][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.733238][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.745904][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.918586][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.942503][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.438299][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 213.438316][ T28] audit: type=1400 audit(2000000036.162:772): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 213.798199][ T6111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6111 comm=syz.3.623 [ 213.810777][ T6111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6111 comm=syz.3.623 [ 213.823648][ T6111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6111 comm=syz.3.623 [ 213.836417][ T6111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6111 comm=syz.3.623 [ 213.849583][ T6111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6111 comm=syz.3.623 [ 213.862234][ T6111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6111 comm=syz.3.623 [ 213.874861][ T6111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6111 comm=syz.3.623 [ 213.887347][ T6111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6111 comm=syz.3.623 [ 213.899852][ T6111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6111 comm=syz.3.623 [ 213.912390][ T6111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6111 comm=syz.3.623 [ 214.404398][ T6130] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 214.576742][ T6134] loop0: detected capacity change from 0 to 128 [ 214.592660][ T6134] EXT4-fs: test_dummy_encryption option not supported [ 215.499341][ T6142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.526572][ T6142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.597448][ T28] audit: type=1400 audit(2000000038.173:773): avc: denied { name_bind } for pid=6141 comm="syz.0.634" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 215.709063][ T6146] loop0: detected capacity change from 0 to 764 [ 215.721108][ T6146] iso9660: Unknown parameter '' [ 216.696207][ T6161] loop0: detected capacity change from 0 to 512 [ 216.853843][ T6161] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.638: corrupted inode contents [ 216.867719][ T6161] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 216.868983][ T6161] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.638: mark_inode_dirty error [ 216.878399][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 216.878487][ C1] EXT4-fs (loop0): initial error at time 2000000039: ext4_do_update_inode:5742: inode 16 [ 216.878637][ C1] EXT4-fs (loop0): last error at time 2000000039: ext4_do_update_inode:5742: inode 16 [ 216.917695][ T6161] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 216.925052][ T6161] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.638: corrupted inode contents [ 216.946778][ T6161] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 216.948520][ T6161] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.638: mark_inode_dirty error [ 216.970749][ T6161] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 216.979121][ T6161] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.638: corrupted inode contents [ 217.000559][ T6161] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 217.003397][ T6161] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 217.021826][ T6161] loop0: lost filesystem error report for type 5 error -117 [ 217.022993][ T6161] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.638: corrupted inode contents [ 217.042714][ T6161] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 217.045807][ T6161] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.638: mark_inode_dirty error [ 217.066624][ T6161] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 217.067962][ T6161] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 217.086584][ T6161] loop0: lost filesystem error report for type 5 error -117 [ 217.090158][ T6161] EXT4-fs (loop0): 1 truncate cleaned up [ 217.108160][ T6161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.121861][ T6161] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.481821][ T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 217.493621][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 1 [ 218.329968][ T28] audit: type=1400 audit(2000000040.605:774): avc: denied { setopt } for pid=6168 comm="syz.1.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 218.728022][ T6167] loop2: detected capacity change from 0 to 512 [ 218.756358][ T6167] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 219.397455][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.494133][ T6180] loop2: detected capacity change from 0 to 128 [ 219.510730][ T6180] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 219.542343][ T6180] FAT-fs (loop2): Filesystem has been set read-only [ 219.601323][ T6180] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 219.996718][ T6197] loop3: detected capacity change from 0 to 512 [ 220.016712][ T6197] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.649: iget: bad i_size value: 38620345925642 [ 220.121611][ T6197] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.124126][ T6197] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.649: couldn't read orphan inode 15 (err -117) [ 220.133345][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 220.133369][ C1] EXT4-fs (loop3): initial error at time 2000000042: ext4_orphan_get:1399: inode 15 [ 220.133397][ C1] EXT4-fs (loop3): last error at time 2000000042: ext4_orphan_get:1399: inode 15 [ 220.181251][ T6197] loop3: lost filesystem error report for type 5 error -117 [ 220.182381][ T6197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.383262][ T6197] syzkaller0: entered promiscuous mode [ 220.389231][ T6197] syzkaller0: entered allmulticast mode [ 221.032127][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.049224][ T6208] loop0: detected capacity change from 0 to 128 [ 221.111060][ T6208] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 221.142433][ T6208] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 222.461018][ T6232] loop0: detected capacity change from 0 to 128 [ 222.490378][ T6232] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 54) [ 222.511697][ T6232] FAT-fs (loop0): Filesystem has been set read-only [ 222.544864][ T6232] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 54) [ 223.091979][ T6242] xfrm1: entered allmulticast mode [ 227.227757][ T6267] No such timeout policy "syz1" [ 227.802483][ T6271] vti0: entered promiscuous mode [ 227.807483][ T6271] vti0: entered allmulticast mode [ 228.194092][ T6273] loop3: detected capacity change from 0 to 512 [ 228.225410][ T6273] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 228.266935][ T6273] EXT4-fs (loop3): orphan cleanup on readonly fs [ 228.273897][ T6273] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 228.289063][ T6273] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 228.301198][ T6273] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #16: comm syz.3.672: corrupted xattr block 31: invalid header [ 228.377387][ T6286] xt_cgroup: xt_cgroup: no path or classid specified [ 229.298752][ T6273] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 229.299143][ T6273] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 229.308449][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 229.308485][ C1] EXT4-fs (loop3): initial error at time 2000000050: ext4_xattr_delete_inode:2972: inode 16 [ 229.308572][ C1] EXT4-fs (loop3): last error at time 2000000050: ext4_xattr_delete_inode:2972: inode 16 [ 229.467696][ T6273] EXT4-fs (loop3): 1 orphan inode deleted [ 229.497398][ T6273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.594745][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.624192][ T6301] loop3: detected capacity change from 0 to 128 [ 230.642850][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 230.723361][ T6301] EXT4-fs: test_dummy_encryption option not supported [ 235.369280][ T6350] xt_socket: unknown flags 0x58 [ 236.275937][ T6361] netlink: 'syz.4.695': attribute type 10 has an invalid length. [ 236.347301][ T6363] process 'syz.4.695' launched '/dev/fd/8' with NULL argv: empty string added [ 236.506830][ T28] audit: type=1400 audit(2000000057.723:775): avc: denied { execute_no_trans } for pid=6360 comm="syz.4.695" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 236.727675][ T6361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.746222][ T28] audit: type=1400 audit(2000000057.929:776): avc: denied { shutdown } for pid=6364 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.857088][ T6361] team0: Failed to send port change of device netdevsim2 via netlink (err -105) [ 236.871045][ T6361] team0: Failed to send options change via netlink (err -105) [ 236.879202][ T6361] team0: Port device netdevsim2 added [ 236.887222][ T49] team0: Failed to send port change of device netdevsim2 via netlink (err -105) [ 237.184795][ T6386] netlink: 6 bytes leftover after parsing attributes in process `syz.3.705'. [ 237.229615][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 237.262648][ T6386] netlink: 'syz.3.705': attribute type 10 has an invalid length. [ 237.487305][ T6386] team0: Device wg2 is of different type [ 239.225736][ T28] audit: type=1400 audit(2000000060.286:777): avc: denied { getopt } for pid=6475 comm="syz.0.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.427338][ T6483] tipc: Started in network mode [ 239.437192][ T6484] netlink: 'syz.4.715': attribute type 5 has an invalid length. [ 239.446498][ T6483] tipc: Node identity ac14140f, cluster identity 4711 [ 239.462393][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 239.472142][ T6483] tipc: New replicast peer: 255.255.255.255 [ 239.478846][ T6483] tipc: Enabled bearer , priority 10 [ 239.494621][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 239.514150][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.592403][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.113817][ T6508] loop3: detected capacity change from 0 to 1024 [ 240.885394][ T35] tipc: Node number set to 2886997007 [ 241.023109][ T6508] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 241.314985][ T6508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.776683][ T28] audit: type=1400 audit(2000000062.269:778): avc: denied { setattr } for pid=6495 comm="syz.3.717" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 241.801909][ T28] audit: type=1400 audit(2000000062.269:779): avc: denied { write } for pid=6495 comm="syz.3.717" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 241.883762][ T28] audit: type=1400 audit(2000000062.278:780): avc: denied { open } for pid=6495 comm="syz.3.717" path="/81/file1/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 242.572630][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.633934][ T6534] loop3: detected capacity change from 0 to 512 [ 244.493297][ T28] audit: type=1400 audit(2000000065.216:781): avc: denied { bind } for pid=6547 comm="syz.1.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 245.357155][ T6580] netlink: 'syz.3.740': attribute type 1 has an invalid length. [ 245.372943][ T6580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.487353][ T6580] bond1: (slave gretap1): making interface the new active one [ 245.497604][ T6580] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 245.546268][ T6578] netlink: 176 bytes leftover after parsing attributes in process `syz.1.739'. [ 245.603617][ T6453] Bluetooth: hci0: Frame reassembly failed (-84) [ 245.880654][ T6597] tipc: Started in network mode [ 245.886095][ T6597] tipc: Node identity ac14140f, cluster identity 4711 [ 245.893476][ T6597] tipc: New replicast peer: 255.255.255.255 [ 245.899949][ T6597] tipc: Enabled bearer , priority 10 [ 247.089922][ T4020] tipc: Node number set to 2886997007 [ 247.752784][ T4304] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 247.759000][ T3549] Bluetooth: hci0: command 0x1003 tx timeout [ 247.845033][ T6639] tipc: New replicast peer: 255.255.255.255 [ 247.854299][ T6639] tipc: Enabled bearer , priority 10 [ 248.204535][ T28] audit: type=1400 audit(2000000068.677:782): avc: denied { read } for pid=6642 comm="syz.0.761" lport=46854 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 249.018305][ T6665] loop3: detected capacity change from 0 to 1024 [ 249.043679][ T6665] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 249.046244][ T3376] tipc: Node number set to 2583747006 [ 249.063117][ T6665] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 249.158499][ T6665] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.768: Failed to acquire dquot type 0 [ 249.180658][ T6665] loop3: lost filesystem error report for type 5 error -5 [ 249.181207][ T6665] EXT4-fs (loop3): 1 truncate cleaned up [ 249.188388][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 249.188411][ C0] EXT4-fs (loop3): initial error at time 2000000069: ext4_acquire_dquot:7041 [ 249.188437][ C0] EXT4-fs (loop3): last error at time 2000000069: ext4_acquire_dquot:7041 [ 249.234245][ T6665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.486786][ T6680] netlink: 56 bytes leftover after parsing attributes in process `syz.4.773'. [ 249.554082][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.907997][ T6687] loop3: detected capacity change from 0 to 512 [ 249.925771][ T6687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.938925][ T6687] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.026397][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.399793][ T6714] loop3: detected capacity change from 0 to 512 [ 250.444125][ T6714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.479425][ T6714] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.067642][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.386529][ T6731] vti0: entered promiscuous mode [ 251.391726][ T6731] vti0: entered allmulticast mode [ 251.601305][ T6736] netlink: 'syz.1.787': attribute type 10 has an invalid length. [ 251.748760][ T6736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.765855][ T6736] team0: Port device netdevsim2 added [ 251.819018][ T6734] Process accounting resumed [ 251.854570][ T11] IPVS: starting estimator thread 0... [ 251.893708][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'. [ 251.954126][ T6751] IPVS: using max 2448 ests per chain, 122400 per kthread [ 252.084601][ T6761] loop3: detected capacity change from 0 to 512 [ 252.104484][ T6761] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.799: inode has both inline data and extents flags [ 252.132055][ T6761] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 252.132281][ T6761] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.799: couldn't read orphan inode 15 (err -117) [ 252.141463][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 252.141493][ C0] EXT4-fs (loop3): initial error at time 2000000072: ext4_orphan_get:1399: inode 15 [ 252.141525][ C0] EXT4-fs (loop3): last error at time 2000000072: ext4_orphan_get:1399: inode 15 [ 252.240172][ T6761] loop3: lost filesystem error report for type 5 error -117 [ 252.241797][ T6761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.627954][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.692123][ T6770] ªªªªªª: renamed from vlan0 (while UP) [ 252.705478][ T6768] loop3: detected capacity change from 0 to 1024 [ 252.742018][ T6768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 252.775239][ T6768] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.800980][ T28] audit: type=1400 audit(2000000072.989:783): avc: denied { write } for pid=6767 comm="syz.3.800" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.824487][ T6768] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.800: lblock 3 mapped to illegal pblock 3 (length 1) [ 252.839190][ T6768] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 252.851958][ T6768] EXT4-fs (loop3): This should not happen!! Data will be lost [ 252.851958][ T6768] [ 252.889591][ T6768] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.800: Freeing blocks not in datazone - block = 3, count = 1 [ 252.890160][ T28] audit: type=1400 audit(2000000073.064:784): avc: denied { ioctl } for pid=6767 comm="syz.3.800" path="/94/file1/file1" dev="loop3" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 252.955375][ T4755] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 252.970819][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 253.722568][ T6806] blktrace: Concurrent blktraces are not allowed on loop4 [ 254.149115][ T6805] netlink: 56 bytes leftover after parsing attributes in process `syz.1.810'. [ 254.274322][ T6809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.811'. [ 254.330010][ T6812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.812'. [ 254.350641][ T6812] 9p: Bad value for 'rfdno' [ 254.400316][ T28] audit: type=1400 audit(2000000074.476:785): avc: denied { ioctl } for pid=6813 comm="syz.3.814" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 254.526892][ T6826] ªªªªªª: renamed from vlan0 [ 254.773302][ T6822] loop3: detected capacity change from 0 to 512 [ 254.810288][ T6822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.829126][ T6822] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.935724][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.045693][ T6849] loop3: detected capacity change from 0 to 4096 [ 255.076120][ T6849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.105222][ T28] audit: type=1400 audit(2000000075.131:786): avc: denied { write } for pid=6847 comm="syz.3.824" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.215181][ T28] audit: type=1400 audit(2000000075.131:787): avc: denied { read } for pid=6847 comm="syz.3.824" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 255.413112][ T28] audit: type=1400 audit(2000000075.421:788): avc: denied { write } for pid=6847 comm="syz.3.824" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.479286][ T6849] netlink: 56 bytes leftover after parsing attributes in process `syz.3.824'. [ 255.570102][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.716520][ T6862] mmap: syz.3.830 (6862) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 256.368364][ T6879] loop3: detected capacity change from 0 to 1024 [ 256.428418][ T6879] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 256.445682][ T6879] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 256.455383][ T6879] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.834: Failed to acquire dquot type 0 [ 256.466782][ T6879] loop3: lost filesystem error report for type 5 error -5 [ 256.474234][ T6879] EXT4-fs (loop3): 1 truncate cleaned up [ 256.481588][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 256.481612][ C1] EXT4-fs (loop3): initial error at time 2000000076: ext4_acquire_dquot:7041 [ 256.481638][ C1] EXT4-fs (loop3): last error at time 2000000076: ext4_acquire_dquot:7041 [ 256.578528][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'. [ 256.595068][ T6879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.014498][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.889380][ T6913] loop3: detected capacity change from 0 to 1024 [ 260.925473][ T6913] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 260.967643][ T6913] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 260.987915][ T6913] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.844: Failed to acquire dquot type 0 [ 260.999443][ T6913] loop3: lost filesystem error report for type 5 error -5 [ 261.008956][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 261.022613][ C1] EXT4-fs (loop3): initial error at time 2000000080: ext4_acquire_dquot:7041 [ 261.031408][ C1] EXT4-fs (loop3): last error at time 2000000080: ext4_acquire_dquot:7041 [ 261.064158][ T6913] EXT4-fs (loop3): 1 truncate cleaned up [ 261.070354][ T6913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.297662][ T11] page_pool_release_retry() stalled pool shutdown: id 34, 51 inflight 60 sec [ 261.846591][ T6924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.846'. [ 262.104537][ T6930] netlink: 'syz.0.847': attribute type 5 has an invalid length. [ 262.126589][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'. [ 262.910084][ T4755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.215793][ T6948] ================================================================== [ 263.223921][ T6948] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 263.231466][ T6948] [ 263.233782][ T6948] read-write to 0xffff888237c26528 of 1 bytes by task 6950 on cpu 0: [ 263.241846][ T6948] folio_add_lru+0xa4/0x250 [ 263.246363][ T6948] shmem_get_folio_gfp+0x7cc/0xd90 [ 263.251474][ T6948] shmem_fault+0xf6/0x250 [ 263.255847][ T6948] handle_mm_fault+0x167a/0x2da0 [ 263.260888][ T6948] __get_user_pages+0x129c/0x1f10 [ 263.265934][ T6948] __mm_populate+0x242/0x390 [ 263.270528][ T6948] vm_mmap_pgoff+0x23b/0x2d0 [ 263.275125][ T6948] ksys_mmap_pgoff+0xc1/0x310 [ 263.279836][ T6948] x64_sys_call+0x14df/0x3020 [ 263.284523][ T6948] do_syscall_64+0x136/0x3c0 [ 263.289109][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.295000][ T6948] [ 263.297313][ T6948] read to 0xffff888237c26528 of 1 bytes by task 6948 on cpu 1: [ 263.304844][ T6948] __lru_add_drain_all+0x17e/0x450 [ 263.309950][ T6948] lru_cache_disable+0x1f/0x30 [ 263.314711][ T6948] __se_sys_mbind+0x6cd/0xdd0 [ 263.319386][ T6948] __x64_sys_mbind+0x78/0x90 [ 263.323975][ T6948] x64_sys_call+0x2b72/0x3020 [ 263.328649][ T6948] do_syscall_64+0x136/0x3c0 [ 263.333233][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.339120][ T6948] [ 263.341430][ T6948] value changed: 0x00 -> 0x01 [ 263.346093][ T6948] [ 263.348399][ T6948] Reported by Kernel Concurrency Sanitizer on: [ 263.354537][ T6948] CPU: 1 UID: 0 PID: 6948 Comm: syz.2.853 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 263.366264][ T6948] Tainted: [W]=WARN [ 263.370069][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 263.380211][ T6948] ==================================================================