last executing test programs: 1m45.855208972s ago: executing program 1 (id=388): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 1m44.356161676s ago: executing program 1 (id=396): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x8000, 0x40024e, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x3938700}, 0x1, 0x20, 0x1}) r4 = eventfd2(0x5, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000240)=r4, 0x1) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/89, 0x1001) r7 = syz_clone3(&(0x7f00000006c0)={0x100080, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) process_vm_writev(r7, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/95, 0x5f}, {0x0}], 0x2, &(0x7f0000001f00)=[{&(0x7f0000000740)=""/253, 0xfd}], 0x1, 0x0) capset(0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4048800) 1m44.032373292s ago: executing program 1 (id=398): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) flock(0xffffffffffffffff, 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 1m40.254323957s ago: executing program 1 (id=405): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xec9, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x10134, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") write(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r1 = getpid() syz_pidfd_open(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 1m39.889257815s ago: executing program 1 (id=411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x9, 0xa08b, 0x1, 0x3ff, 0x5, 0x6, 0x6, 0x4, 0x1, 0x892c, 0x7, 0xffffffb2, 0xeaec, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x8, 0x1013f6, 0x81, 0x53, 0x14, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x5, 0x1, 0x200003, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x8b68, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0x8, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8080, 0x8, 0x6, 0xa, 0xfa, 0x7, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x62, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x4, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x0, 0x1000, 0x1, 0xffff, 0x3, 0x9, 0x7474, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x7, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x207, 0x4c28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x0, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x7, 0xe, 0xe459, 0x7ff, 0xc4, 0x80, 0x44, 0x0, 0x9, 0x0, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x7, 0x20001, 0x8, 0x8, 0x1, 0x15b9, 0x4, 0xff, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x7a94, 0x7, 0x6, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20000800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1m39.524474463s ago: executing program 1 (id=414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1m39.290162604s ago: executing program 32 (id=414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 3.729742676s ago: executing program 5 (id=865): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet(0x2, 0x3, 0x2) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 3.226693551s ago: executing program 0 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, 0x0, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000200), &(0x7f0000000280)=@udp=r5, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r4, &(0x7f0000000380), 0x0}, 0x20) unshare(0x2040400) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2e, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6, r3}, 0x10) 3.110123907s ago: executing program 4 (id=875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xe147, 0x2, 0x20000000, 0x101, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 2.929504536s ago: executing program 4 (id=877): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rename(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='./file1\x00') uname(&(0x7f0000000040)=""/114) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r5, r5, 0x0, 0xe3aa6ea) sendfile(r2, r2, 0x0, 0xe3aa6ea) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 2.498365917s ago: executing program 2 (id=878): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) write(r2, &(0x7f0000000100)="9d33a9417116ee3794", 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x188202, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x2400c8d4) bind$inet6(r3, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x9, @mcast2, 0x8}}, [0x8, 0x81, 0xf, 0x5, 0xa37, 0x3, 0x9937, 0x6, 0x20000000, 0x10000, 0x2, 0x5, 0x3, 0xe, 0xcbb]}, 0x0) read(r4, &(0x7f0000000280)=""/142, 0x8e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xa) epoll_create1(0x0) 2.495070487s ago: executing program 5 (id=888): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x42, 0x4, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x10, 0x8000, 0x0, 0x7}}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x4002b94, 0x1, 0x7, 0x57}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./bus\x00'}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.320206025s ago: executing program 2 (id=879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x8, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x80005, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x1, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0xfffffffc, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x80000000}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x1, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffff9, 0x1, 0xfffffffc, 0x2}, {0x8, 0x2, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4006, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x1, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x21, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x6, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x4, 0x7}, {0x1, 0x2, 0x4010, 0xffffffb1, 0x0, 0x751e}, {0xffed, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0xffffffff}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.315606826s ago: executing program 5 (id=880): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x54) 2.302942106s ago: executing program 3 (id=881): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.299599797s ago: executing program 0 (id=892): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_emit_ethernet(0x47, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x11, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x11, 0x0, @opaque="0300000070e185af60"}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@allocspi={0x174, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in6=@private1, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x2}, {0x10000000, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@proto={0x5, 0x19, 0x33}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@multicast1, 0x0, 0x2}}, @algo_auth={0x48, 0x1, {{'xxhash64-generic\x00'}}}]}, 0x174}}, 0x0) mmap(&(0x7f0000277000/0x4000)=nil, 0x4000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) 2.160371883s ago: executing program 5 (id=882): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0x0, 0x0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x237, &(0x7f00000000c0)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x7a, 0x0, @fd=r5, 0x100000001, 0x0, 0x0, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.155637213s ago: executing program 3 (id=883): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001040)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae359e2b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef02705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0deb8de9aeac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3feff5bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9b86ec19670ea43b7f596b347d8b9116506356d0279d21f6a0cab3056c27dec074e8dac12c1d99afcd84f82a47a0cb5093c7a221f7fb624e2f6e9eeca4e5050fc3be50bbdc62d41333b4243336a5590e49658a10b5c8624eb2410d68e64f230fdcf4689495c0bf62403c2eaad20d1d8fb185ebefac64aa0eb1d36ccacf61ec28b4ec24dba53f21ed5c5f727cccb0d614884908957138d2c30560e88f128af21ccc9fd64d229f35b2f76d0ee9e25f9e4390a55a8600449774ca116e3ba523c9c5d39abcf09a36127c17fc6194711f20307ead0d5bbbe2aa3f677156b8856411a8045159df771ac3e3d5828e359c24a59d65e92f4112fb6825536751f82e9d55e89853a03c693d418c4d2cccb61c6f60ad304a68d15fc20edaec9af4725f47c8e1724cffbd1716a7873716d278ee6f138a462f4fb30484c58b4863eef743c7862f63d32b06d816200840b901ce060f7062f23b4191e18383b622bb0bda5c4663f5a05b38b13590a5caaed9951305232", 0x345}, {&(0x7f0000002b40)="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", 0x26e}], 0x2}, 0x8400) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000003ac0)="64cc", 0x2}], 0x1}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x1, &(0x7f0000000180)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000002180)={0x0, 0x3938700}, &(0x7f00000021c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x0, {0x1, 0x3, "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", 0xf, 0x7, 0x1, 0xdd, 0xd, 0x4, 0x3, 0x1}}}, 0x128) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4812, &(0x7f0000000280)={[{@usrjquota}, {@resgid}, {@norecovery}, {@oldalloc}, {@grpjquota}], [{@smackfsdef={'smackfsdef', 0x3d, 'norecovery'}}]}, 0x8, 0x5fb, &(0x7f0000000ac0)="$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") 2.058142288s ago: executing program 4 (id=884): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) wait4(0x0, 0x0, 0xe000000b, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_open_dev$loop(0x0, 0x7, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x6, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r4, 0x2afd, 0x308b, 0xc, 0x0, 0x0) 2.039849349s ago: executing program 2 (id=896): setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) syz_usb_connect$midi(0x2, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000cc35372d853e2fc862f66f22c82eb466507fdbe587532b27e0093ab0af"]}) socket$packet(0x11, 0x3, 0x300) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) flistxattr(r0, &(0x7f00000000c0)=""/17, 0x11) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x1d) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.959571283s ago: executing program 3 (id=885): socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000d00)={'\x00', 0x2, 0x74, 0x3, 0x3ea0, 0x5, 0x0}) capset(&(0x7f0000000d80)={0x19980330, r6}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000c40)={0x73622a85, 0x0, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x7, 0x20000000) 1.62001445s ago: executing program 5 (id=886): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "428a79fbb1e8b899", "387d9947e697619f9f132c89a5a0dd4adcaec1020a36b640f1c146b1b98d3a84", "b22b27b0", "00faefffff00"}, 0x38) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x3ff}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0xc4}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8924, &(0x7f0000000080)) socket$inet6(0x10, 0x2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r5, r3, 0x0) 1.41388636s ago: executing program 0 (id=887): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000540)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001040)="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", 0x345}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccdc590724ff6caa85320f9d5beea2370b8c0533c19422c9097a7164651ad9d8f9cca4ea7815e53fd9c42eab1cb76b451cd3b18cf31c16d01731efd1506b844f52d2f173c825a7f8814ada5f6361a48f20250df6b98965d0c85f3df3b72b2ac49f3ed52e6fa30d7d3d54d95e8bd13ec2ed4883feb3b778d624ff0c1a3ec900671acd0ff00edc7b96d1cad51fba25565c67ce0e62302dbff8f68c0de8330c44704b2f019a7afc753538ed61f3744f286735af18a8f5e7ae3", 0x26e}], 0x2}, 0x8400) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000003ac0)="64cc", 0x2}], 0x1}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x1, &(0x7f0000000180)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000002180)={0x0, 0x3938700}, &(0x7f00000021c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x0, {0x1, 0x3, "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", 0xf, 0x7, 0x1, 0xdd, 0xd, 0x4, 0x3, 0x1}}}, 0x128) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4812, &(0x7f0000000280)={[{@usrjquota}, {@resgid}, {@norecovery}, {@oldalloc}, {@grpjquota}], [{@smackfsdef={'smackfsdef', 0x3d, 'norecovery'}}]}, 0x8, 0x5fb, &(0x7f0000000ac0)="$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") 1.281819536s ago: executing program 4 (id=889): bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.197728721s ago: executing program 0 (id=890): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000180)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1.193480351s ago: executing program 3 (id=902): socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x106200, 0x10006, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x2f, 0xff, 0x14}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) 284.378715ms ago: executing program 0 (id=891): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) write(r2, &(0x7f0000000100)="9d33a9417116ee3794", 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x188202, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x2400c8d4) bind$inet6(r3, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x9, @mcast2, 0x8}}, [0x8, 0x81, 0xf, 0x5, 0xa37, 0x3, 0x9937, 0x6, 0x20000000, 0x10000, 0x2, 0x5, 0x3, 0xe, 0xcbb]}, 0x0) read(r4, &(0x7f0000000280)=""/142, 0x8e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xa) epoll_create1(0x0) 283.861955ms ago: executing program 5 (id=893): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") open(0x0, 0x14927e, 0x6) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x1, 0x22f}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xab6e67d80d01c4af, &(0x7f0000000540)=0x1, 0x0, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 283.510015ms ago: executing program 2 (id=894): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x54) 283.185125ms ago: executing program 3 (id=895): socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x106200, 0x10006, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x2f, 0xff, 0x14}, 0x2c) 282.845895ms ago: executing program 4 (id=897): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000100)="b9ff03316844", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = socket$kcm(0x22, 0x2, 0x21) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300001800000000000000000000000400030000000000fdffffffffffffff07000000000000000000000000000000050006006c0000000a00000000000000fc010000000000000000000000001700000000000000000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000060000000005000500008000000a00000000000000ff01000000000000000000000000000100000000000000000200130001"], 0xc0}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80044944, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 142.867793ms ago: executing program 3 (id=898): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3800010, &(0x7f00000003c0)={[{@errors_remount}, {@nodioread_nolock}], [{@subj_type={'subj_type', 0x3d, 'euid'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_eq}, {@obj_type={'obj_type', 0x3d, '/}'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}, 0x1, 0x524, &(0x7f0000001640)="$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") stat(&(0x7f0000005e80)='./file0\x00', 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@nouser_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"ae36c6e51542a17e2e98db1d43c4be6c", 0x0, 0x0, {0x8, 0xb6}, {0x92, 0x10001}, 0x3, [0x5, 0x1, 0xfffffffffffffff8, 0x0, 0x2, 0x3, 0x401, 0xffff, 0x0, 0xfffffffffffffff9, 0x3, 0x81, 0xfffffffffffffff8, 0x2, 0x1, 0x5]}) prlimit64(0x0, 0xb, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0xa, 0x18, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0x2}]}}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000a00)="c7", 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x20044800) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) stat(&(0x7f0000005f40)='./file0\x00', 0x0) 140.105303ms ago: executing program 2 (id=909): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x54) 71.113826ms ago: executing program 2 (id=899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x3}, [], {0x10, 0x2}}, 0x24, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0x0, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x67f, 0x64, 0x0, 0x0) 70.177216ms ago: executing program 0 (id=900): setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x80, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0xfff, 0x7, 0x88}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000540)="32bc9d44c9632e8ba128fd4b425567803dd37fc59de3014ed501d6ad3bffd6f7f0a89777de89c83f0afbb783cc924af9fc103d42a9de6d2b34502b2ffaa8707b8c2d4b8afeb65412a0be8fccacafc035527951d52c0ec034191396b8d60fa66992687d387b9d8f57b5b7d7a0b7c0854b628e9546", 0x0, 0x101, r3}, 0x38) syz_open_procfs(0xffffffffffffffff, &(0x7f00000024c0)='net/udplite\x00') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 0s ago: executing program 4 (id=901): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x4dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0xb3c13000) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz7ENwjAUBNBLSEAwCzUzsEDmiViHwShp6fjIUeiogeK9wtJZd5YcfuqYbbLL/p3n5DDksqZHVVXfjx+G3a2d5yFJLZI+yZhs2oOLdlH305RubbVdqvKseSlM12/8EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+3SsAAP//iicZfA==") r4 = dup(r1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0xe, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc0) memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) kernel console output (not intermixed with test programs): 1 limit=128 [ 93.288379][ T4858] Buffer I/O error on dev loop0, logical block 2067, async page read [ 93.296558][ T4858] syz.0.333: attempt to access beyond end of device [ 93.296558][ T4858] loop0: rw=8388608, sector=2068, nr_sectors = 1 limit=128 [ 93.310651][ T4858] Buffer I/O error on dev loop0, logical block 2068, async page read [ 93.318921][ T4858] syz.0.333: attempt to access beyond end of device [ 93.318921][ T4858] loop0: rw=8388608, sector=2069, nr_sectors = 1 limit=128 [ 93.332690][ T4858] Buffer I/O error on dev loop0, logical block 2069, async page read [ 93.340881][ T4858] syz.0.333: attempt to access beyond end of device [ 93.340881][ T4858] loop0: rw=8388608, sector=2070, nr_sectors = 1 limit=128 [ 93.354749][ T4858] Buffer I/O error on dev loop0, logical block 2070, async page read [ 93.363030][ T4858] syz.0.333: attempt to access beyond end of device [ 93.363030][ T4858] loop0: rw=8388608, sector=2071, nr_sectors = 1 limit=128 [ 93.376767][ T4858] Buffer I/O error on dev loop0, logical block 2071, async page read [ 93.384864][ T4858] syz.0.333: attempt to access beyond end of device [ 93.384864][ T4858] loop0: rw=8388608, sector=2072, nr_sectors = 1 limit=128 [ 93.398561][ T4858] Buffer I/O error on dev loop0, logical block 2072, async page read [ 93.406741][ T4858] syz.0.333: attempt to access beyond end of device [ 93.406741][ T4858] loop0: rw=8388608, sector=2065, nr_sectors = 1 limit=128 [ 93.420448][ T4858] Buffer I/O error on dev loop0, logical block 2065, async page read [ 93.428650][ T4858] Buffer I/O error on dev loop0, logical block 2066, async page read [ 93.660048][ T4861] process 'syz.2.335' launched '/dev/fd/8' with NULL argv: empty string added [ 93.930621][ T4840] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.937903][ T4840] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.030873][ T4840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.052210][ T4840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.065484][ T4906] loop4: detected capacity change from 0 to 8192 [ 94.186360][ T4030] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.207602][ T4030] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.234470][ T4030] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.243771][ T4903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'. [ 94.253190][ T4030] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.319504][ T4903] loop0: detected capacity change from 0 to 512 [ 94.357118][ T4903] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.395557][ T4903] EXT4-fs (loop0): 1 truncate cleaned up [ 94.440799][ T4903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.553588][ T4915] ip6erspan0: entered allmulticast mode [ 94.579757][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.673836][ T4919] loop2: detected capacity change from 0 to 1024 [ 94.691760][ T4919] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 94.702951][ T4919] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 94.724903][ T4919] EXT4-fs (loop2): invalid journal inode [ 94.730857][ T4919] EXT4-fs (loop2): can't get journal size [ 94.832736][ T4919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.858112][ T4919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.338'. [ 94.935651][ T4919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.338'. [ 95.072164][ T4919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.338'. [ 95.600956][ T4926] netlink: 'syz.0.340': attribute type 4 has an invalid length. [ 95.710410][ T4928] loop0: detected capacity change from 0 to 512 [ 95.732881][ T4928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.967059][ T4933] tipc: Enabled bearer , priority 0 [ 95.987073][ T4933] syzkaller0: entered promiscuous mode [ 95.992831][ T4933] syzkaller0: entered allmulticast mode [ 96.052800][ T4933] tipc: Resetting bearer [ 96.071109][ T4932] tipc: Resetting bearer [ 96.097819][ T4932] tipc: Disabling bearer [ 96.124997][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.203335][ T4935] syzkaller0: entered promiscuous mode [ 96.208930][ T4935] syzkaller0: entered allmulticast mode [ 96.363674][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.532111][ T4940] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4940 comm=syz.0.346 [ 96.633505][ T4943] loop1: detected capacity change from 0 to 128 [ 96.654883][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 96.654928][ T28] audit: type=1400 audit(1774260422.463:1159): avc: denied { watch } for pid=4942 comm="syz.0.358" path="/69" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.871313][ T28] audit: type=1400 audit(1774260422.663:1160): avc: denied { connect } for pid=4945 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.943923][ T4950] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 96.951801][ T4950] FAT-fs (loop1): Filesystem has been set read-only [ 96.958728][ T4950] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 96.966608][ T4950] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 97.710612][ T4944] syz.0.358 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 97.733277][ T4944] CPU: 0 UID: 0 PID: 4944 Comm: syz.0.358 Tainted: G W syzkaller #0 PREEMPT(full) [ 97.733316][ T4944] Tainted: [W]=WARN [ 97.733325][ T4944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.733340][ T4944] Call Trace: [ 97.733364][ T4944] [ 97.733372][ T4944] __dump_stack+0x1d/0x30 [ 97.733409][ T4944] dump_stack_lvl+0x95/0xd0 [ 97.733435][ T4944] dump_stack+0x15/0x1b [ 97.733491][ T4944] dump_header+0x80/0x240 [ 97.733516][ T4944] oom_kill_process+0x295/0x350 [ 97.733594][ T4944] out_of_memory+0x97d/0xb80 [ 97.733764][ T4944] try_charge_memcg+0x62e/0xa10 [ 97.733805][ T4944] obj_cgroup_charge_pages+0x23/0xc0 [ 97.733895][ T4944] __memcg_kmem_charge_page+0x9e/0x170 [ 97.733969][ T4944] __alloc_frozen_pages_noprof+0x18a/0x360 [ 97.734004][ T4944] alloc_pages_mpol+0xb3/0x260 [ 97.734037][ T4944] alloc_pages_noprof+0x8f/0x130 [ 97.734108][ T4944] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 97.734145][ T4944] __kvmalloc_node_noprof+0x3d4/0x650 [ 97.734196][ T4944] ? futex_hash_allocate+0x190/0x9d0 [ 97.734267][ T4944] ? futex_hash_allocate+0x190/0x9d0 [ 97.734295][ T4944] futex_hash_allocate+0x190/0x9d0 [ 97.734345][ T4944] ? cap_task_prctl+0x13f/0x6e0 [ 97.734373][ T4944] futex_hash_prctl+0xd8/0xf0 [ 97.734402][ T4944] __se_sys_prctl+0xa3d/0x13f0 [ 97.734516][ T4944] __x64_sys_prctl+0x67/0x80 [ 97.734544][ T4944] x64_sys_call+0x2533/0x3020 [ 97.734635][ T4944] do_syscall_64+0x12c/0x370 [ 97.734689][ T4944] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 97.734720][ T4944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.734746][ T4944] RIP: 0033:0x7ff51dd9c799 [ 97.734766][ T4944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.734785][ T4944] RSP: 002b:00007ff51c7ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 97.734850][ T4944] RAX: ffffffffffffffda RBX: 00007ff51e015fa0 RCX: 00007ff51dd9c799 [ 97.734865][ T4944] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 97.734879][ T4944] RBP: 00007ff51de32c99 R08: 0000000000000000 R09: 0000000000000000 [ 97.734894][ T4944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.734978][ T4944] R13: 00007ff51e016038 R14: 00007ff51e015fa0 R15: 00007ffe9a0127d8 [ 97.734998][ T4944] [ 97.976853][ T4944] memory: usage 182660kB, limit 307200kB, failcnt 312 [ 97.983909][ T4944] memory+swap: usage 183012kB, limit 9007199254740988kB, failcnt 0 [ 97.991966][ T4944] kmem: usage 182228kB, limit 9007199254740988kB, failcnt 0 [ 97.999950][ T4944] Memory cgroup stats for /syz0: [ 98.000133][ T4944] cache 0 [ 98.008150][ T4944] rss 4096 [ 98.011282][ T4944] shmem 0 [ 98.014731][ T4944] mapped_file 0 [ 98.018217][ T4944] dirty 0 [ 98.021249][ T4944] writeback 0 [ 98.035563][ T4944] workingset_refault_anon 2090 [ 98.040576][ T4944] workingset_refault_file 117 [ 98.046145][ T4944] swap 364544 [ 98.049862][ T4944] swapcached 385024 [ 98.053941][ T4944] pgpgin 74329 [ 98.057414][ T4944] pgpgout 74324 [ 98.060921][ T4944] pgfault 91537 [ 98.064846][ T4944] pgmajfault 301 [ 98.068617][ T4944] inactive_anon 0 [ 98.072459][ T4944] active_anon 16384 [ 98.076703][ T4944] inactive_file 0 [ 98.080404][ T4944] active_file 0 [ 98.085269][ T4944] unevictable 0 [ 98.088831][ T4944] hierarchical_memory_limit 314572800 [ 98.094678][ T4944] hierarchical_memsw_limit 9223372036854771712 [ 98.100993][ T4944] total_cache 0 [ 98.104875][ T4944] total_rss 4096 [ 98.108471][ T4944] total_shmem 0 [ 98.111970][ T4944] total_mapped_file 0 [ 98.116388][ T4944] total_dirty 0 [ 98.119890][ T4944] total_writeback 0 [ 98.123907][ T4944] total_workingset_refault_anon 2090 [ 98.129280][ T4944] total_workingset_refault_file 117 [ 98.134856][ T4944] total_swap 364544 [ 98.138706][ T4944] total_swapcached 385024 [ 98.143318][ T4944] total_pgpgin 74329 [ 98.147457][ T4944] total_pgpgout 74324 [ 98.151566][ T4944] total_pgfault 91537 [ 98.156488][ T4944] total_pgmajfault 301 [ 98.160798][ T4944] total_inactive_anon 0 [ 98.165218][ T4944] total_active_anon 16384 [ 98.169612][ T4944] total_inactive_file 0 [ 98.182412][ T4944] total_active_file 0 [ 98.187439][ T4944] total_unevictable 0 [ 98.192104][ T4944] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.358,pid=4942,uid=0 [ 98.222702][ T4956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.231790][ T4944] Memory cgroup out of memory: Killed process 4944 (syz.0.358) total-vm:96212kB, anon-rss:1244kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 98.245805][ T4956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.301958][ T4944] syz.0.358 (4944) used greatest stack depth: 8640 bytes left [ 98.566913][ T4967] netlink: 44 bytes leftover after parsing attributes in process `syz.4.355'. [ 98.913474][ T4972] No such timeout policy "syz0" [ 100.580521][ T28] audit: type=1326 audit(1774260426.383:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4985 comm="syz.3.360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x0 [ 101.285701][ T28] audit: type=1400 audit(1774260426.963:1162): avc: denied { read write } for pid=4991 comm="syz.2.361" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.906362][ T28] audit: type=1400 audit(1774260426.963:1163): avc: denied { open } for pid=4991 comm="syz.2.361" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 102.227461][ T28] audit: type=1400 audit(1774260426.963:1164): avc: denied { ioctl } for pid=4991 comm="syz.2.361" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 102.745526][ T5020] syzkaller0: entered promiscuous mode [ 102.751059][ T5020] syzkaller0: entered allmulticast mode [ 103.003692][ T5034] netlink: 56 bytes leftover after parsing attributes in process `syz.3.373'. [ 103.369196][ T28] audit: type=1400 audit(1774260429.173:1165): avc: denied { map } for pid=5035 comm="syz.0.374" path="socket:[9499]" dev="sockfs" ino=9499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.437546][ T5037] netlink: 'syz.0.374': attribute type 4 has an invalid length. [ 105.144049][ T28] audit: type=1326 audit(1774260430.943:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 105.312103][ T28] audit: type=1326 audit(1774260430.943:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 105.332948][ T3433] IPVS: starting estimator thread 0... [ 105.348311][ T5064] loop2: detected capacity change from 0 to 1024 [ 105.355258][ T5064] EXT4-fs: Ignoring removed oldalloc option [ 105.373482][ T5064] ext2: Unknown parameter 'smackfsdef' [ 105.379171][ T28] audit: type=1326 audit(1774260430.943:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 106.356165][ T28] audit: type=1326 audit(1774260430.983:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 106.380435][ T28] audit: type=1326 audit(1774260430.983:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 106.459889][ T28] audit: type=1326 audit(1774260430.983:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 106.483941][ T5060] IPVS: using max 2736 ests per chain, 136800 per kthread [ 106.491585][ T28] audit: type=1326 audit(1774260430.983:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 106.787740][ T5083] loop0: detected capacity change from 0 to 1024 [ 106.796522][ T5083] EXT4-fs: Ignoring removed orlov option [ 106.814745][ T5083] EXT4-fs: Ignoring removed bh option [ 106.849952][ T5083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.229477][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 107.229539][ T28] audit: type=1400 audit(1774260433.033:1192): avc: denied { add_name } for pid=5076 comm="syz.0.386" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.258850][ T5094] ip6tnl1: entered promiscuous mode [ 107.294270][ T5094] ip6tnl1: entered allmulticast mode [ 107.551500][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 108.134014][ T28] audit: type=1326 audit(1774260433.943:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 108.181765][ T28] audit: type=1326 audit(1774260433.963:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 108.226730][ T28] audit: type=1326 audit(1774260433.973:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 108.270714][ T5109] loop2: detected capacity change from 0 to 4096 [ 108.274173][ T28] audit: type=1326 audit(1774260433.973:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 108.353007][ T28] audit: type=1326 audit(1774260433.973:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 108.377185][ T28] audit: type=1326 audit(1774260433.973:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 108.400813][ T28] audit: type=1326 audit(1774260433.983:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f36f232c502 code=0x7ffc0000 [ 108.426058][ T28] audit: type=1326 audit(1774260434.013:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f36f22ecfce code=0x7ffc0000 [ 108.430672][ T5109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.482127][ T23] IPVS: starting estimator thread 0... [ 108.497670][ T28] audit: type=1326 audit(1774260434.043:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f36f232c5c7 code=0x7ffc0000 [ 108.592164][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.601478][ T5117] IPVS: using max 2496 ests per chain, 124800 per kthread [ 108.629830][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.718680][ T5126] lo: Caught tx_queue_len zero misconfig [ 108.733145][ T5126] netem: incorrect gi model size [ 108.753276][ T5126] netem: change failed [ 108.847649][ T5131] loop2: detected capacity change from 0 to 512 [ 108.864758][ T5131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.295860][ T5143] bond3: left promiscuous mode [ 109.819325][ T5143] loop4: detected capacity change from 0 to 1024 [ 110.183137][ T5143] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 110.194098][ T5143] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 110.203983][ T5143] EXT4-fs (loop4): invalid journal inode [ 110.209827][ T5143] EXT4-fs (loop4): can't get journal size [ 110.335770][ T5143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.013184][ T5143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.401'. [ 112.368571][ T5151] loop1: detected capacity change from 0 to 128 [ 112.431714][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.465352][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 112.465371][ T28] audit: type=1400 audit(1774260438.273:1284): avc: denied { mounton } for pid=5150 comm="syz.1.405" path="/96/file0/file0" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 112.696388][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.727222][ T28] audit: type=1326 audit(1774260438.533:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 112.796633][ T28] audit: type=1326 audit(1774260438.533:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 112.867188][ T5173] loop4: detected capacity change from 0 to 128 [ 113.257501][ T28] audit: type=1326 audit(1774260438.533:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 113.281133][ T28] audit: type=1326 audit(1774260438.533:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 113.319638][ T28] audit: type=1326 audit(1774260438.533:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 113.583323][ T28] audit: type=1326 audit(1774260438.533:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 113.728088][ T28] audit: type=1326 audit(1774260438.533:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 113.806231][ T28] audit: type=1326 audit(1774260438.533:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 113.928905][ T28] audit: type=1326 audit(1774260438.533:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 114.044442][ T4041] bridge_slave_1: left allmulticast mode [ 114.044535][ T4041] bridge_slave_1: left promiscuous mode [ 114.044706][ T4041] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.076096][ T4041] bridge_slave_0: left allmulticast mode [ 114.076125][ T4041] bridge_slave_0: left promiscuous mode [ 114.076452][ T4041] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.205794][ T4041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.263587][ T4041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.283119][ T4041] bond0 (unregistering): Released all slaves [ 114.309384][ T4041] bond1 (unregistering): (slave dummy0): Releasing active interface [ 114.323495][ T4041] bond1 (unregistering): Released all slaves [ 114.365435][ T5218] loop4: detected capacity change from 0 to 1024 [ 114.372401][ T5218] EXT4-fs: Ignoring removed oldalloc option [ 114.388531][ T4041] tipc: Left network mode [ 114.398685][ T5218] ext2: Unknown parameter 'smackfsdef' [ 114.418941][ T4041] hsr_slave_0: left promiscuous mode [ 114.429451][ T4041] hsr_slave_1: left promiscuous mode [ 114.448951][ T4041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.466370][ T4041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.559363][ T4041] team0 (unregistering): Port device team_slave_1 removed [ 114.573127][ T4041] team0 (unregistering): Port device team_slave_0 removed [ 114.701123][ T5184] chnl_net:caif_netlink_parms(): no params data found [ 114.765522][ T5246] loop4: detected capacity change from 0 to 512 [ 114.803577][ T5248] netlink: 68 bytes leftover after parsing attributes in process `syz.2.430'. [ 114.867428][ T5184] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.880870][ T5246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.915647][ T5184] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.923066][ T5248] netlink: 32 bytes leftover after parsing attributes in process `syz.2.430'. [ 115.035974][ T5184] bridge_slave_0: entered allmulticast mode [ 115.053294][ T5268] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 115.104482][ T5184] bridge_slave_0: entered promiscuous mode [ 115.193659][ T5268] SELinux: failed to load policy [ 115.199676][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.267640][ T5184] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.332100][ T5184] bridge_slave_1: entered allmulticast mode [ 115.338805][ T5184] bridge_slave_1: entered promiscuous mode [ 115.367990][ T5184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.378711][ T5184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.399864][ T5184] team0: Port device team_slave_0 added [ 115.406460][ T5184] team0: Port device team_slave_1 added [ 115.422407][ T5184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.424376][ T5275] loop2: detected capacity change from 0 to 164 [ 115.438208][ T5184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.477417][ T5184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.489716][ T5184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.496816][ T5184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.523265][ T5184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.551003][ T5275] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 115.569158][ T5275] netlink: 'syz.2.423': attribute type 21 has an invalid length. [ 115.583027][ T5275] netlink: 128 bytes leftover after parsing attributes in process `syz.2.423'. [ 115.585621][ T5184] hsr_slave_0: entered promiscuous mode [ 115.611936][ T5184] hsr_slave_1: entered promiscuous mode [ 115.632426][ T5184] debugfs: 'hsr0' already exists in 'hsr' [ 115.644938][ T5184] Cannot create hsr debugfs directory [ 115.705605][ T5275] netlink: 'syz.2.423': attribute type 4 has an invalid length. [ 115.734712][ T5275] netlink: 'syz.2.423': attribute type 5 has an invalid length. [ 115.742469][ T5275] netlink: 3 bytes leftover after parsing attributes in process `syz.2.423'. [ 116.237233][ T5291] loop2: detected capacity change from 0 to 8192 [ 116.336550][ T5184] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.376541][ T5184] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.399773][ T5184] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.416137][ T5184] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.425242][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.733845][ T5314] netlink: 'syz.2.425': attribute type 1 has an invalid length. [ 116.741801][ T5314] netlink: 'syz.2.425': attribute type 2 has an invalid length. [ 116.933084][ T5184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.963477][ T5184] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.992237][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.999404][ T4041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.028688][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.035886][ T4041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.116900][ T5184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.141656][ T5328] loop2: detected capacity change from 0 to 512 [ 117.149088][ T5184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.168518][ T5328] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 117.187794][ T5328] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 117.193532][ T5334] loop4: detected capacity change from 0 to 1024 [ 117.203528][ T5334] EXT4-fs: Ignoring removed oldalloc option [ 117.209839][ T5334] ext2: Unknown parameter 'smackfsdef' [ 117.233041][ T5328] EXT4-fs (loop2): 1 truncate cleaned up [ 117.240065][ T5328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.319834][ T5328] tipc: Enabled bearer , priority 10 [ 117.354976][ T5184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.538085][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 117.538103][ T28] audit: type=1400 audit(1774260443.343:1401): avc: denied { create } for pid=5327 comm="syz.2.428" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 117.700767][ T5328] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 117.922019][ T28] audit: type=1400 audit(1774260443.473:1402): avc: denied { accept } for pid=5339 comm="syz.4.432" lport=53165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.123363][ T5360] netlink: 44 bytes leftover after parsing attributes in process `syz.3.434'. [ 118.172962][ T5360] netlink: 43 bytes leftover after parsing attributes in process `syz.3.434'. [ 118.180396][ T5184] veth0_vlan: entered promiscuous mode [ 118.182042][ T5360] netlink: 'syz.3.434': attribute type 5 has an invalid length. [ 118.193155][ T5184] veth1_vlan: entered promiscuous mode [ 118.252979][ T5360] netlink: 43 bytes leftover after parsing attributes in process `syz.3.434'. [ 118.253181][ T5184] veth0_macvtap: entered promiscuous mode [ 118.270576][ T5184] veth1_macvtap: entered promiscuous mode [ 118.282202][ T5184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.297965][ T5184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.394500][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.394976][ T28] audit: type=1400 audit(1774260444.203:1403): avc: denied { mounton } for pid=5184 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 118.420484][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.449155][ T28] audit: type=1400 audit(1774260444.213:1404): avc: denied { allowed } for pid=5365 comm="syz.4.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.473865][ T4041] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.492789][ T3478] tipc: Node number set to 541853170 [ 118.502801][ T4041] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.541387][ T28] audit: type=1400 audit(1774260444.343:1405): avc: denied { name_bind } for pid=5369 comm="syz.5.415" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 118.565734][ T5357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.434'. [ 118.936515][ T28] audit: type=1400 audit(1774260444.613:1406): avc: denied { connect } for pid=5373 comm="syz.3.437" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.958776][ T28] audit: type=1400 audit(1774260444.613:1407): avc: denied { setopt } for pid=5373 comm="syz.3.437" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.163431][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.319039][ T28] audit: type=1326 audit(1774260446.113:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 120.666476][ T5387] netlink: 'syz.0.441': attribute type 21 has an invalid length. [ 120.697782][ T5383] loop5: detected capacity change from 0 to 8192 [ 120.812822][ T5387] netlink: 132 bytes leftover after parsing attributes in process `syz.0.441'. [ 121.294026][ T28] audit: type=1326 audit(1774260446.113:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 121.320227][ T28] audit: type=1326 audit(1774260446.113:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 121.673168][ T5398] netlink: 'syz.5.439': attribute type 1 has an invalid length. [ 121.681117][ T5398] netlink: 'syz.5.439': attribute type 2 has an invalid length. [ 122.120937][ T5406] loop0: detected capacity change from 0 to 128 [ 123.213369][ T5420] loop5: detected capacity change from 0 to 256 [ 125.741994][ T5420] FAT-fs (loop5): Directory bread(block 64) failed [ 125.748693][ T5420] FAT-fs (loop5): Directory bread(block 65) failed [ 125.755689][ T5420] FAT-fs (loop5): Directory bread(block 66) failed [ 125.762330][ T5420] FAT-fs (loop5): Directory bread(block 67) failed [ 125.768888][ T5420] FAT-fs (loop5): Directory bread(block 68) failed [ 125.775433][ T5420] FAT-fs (loop5): Directory bread(block 69) failed [ 125.782040][ T5420] FAT-fs (loop5): Directory bread(block 70) failed [ 125.788723][ T5420] FAT-fs (loop5): Directory bread(block 71) failed [ 125.795495][ T5420] FAT-fs (loop5): Directory bread(block 72) failed [ 125.802116][ T5420] FAT-fs (loop5): Directory bread(block 73) failed [ 126.891075][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 126.891090][ T28] audit: type=1326 audit(1774260452.693:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 126.955016][ T28] audit: type=1326 audit(1774260452.693:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 126.980314][ T28] audit: type=1326 audit(1774260452.693:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 127.011740][ T5441] loop2: detected capacity change from 0 to 1024 [ 127.018611][ T28] audit: type=1326 audit(1774260452.693:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 127.043541][ T5441] EXT4-fs: Ignoring removed oldalloc option [ 127.057945][ T5441] ext2: Unknown parameter 'smackfsdef' [ 127.102313][ T28] audit: type=1326 audit(1774260452.693:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 127.300205][ T28] audit: type=1326 audit(1774260452.693:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 127.339294][ T28] audit: type=1326 audit(1774260452.693:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 128.211164][ T5465] syzkaller0: entered promiscuous mode [ 128.229002][ T5465] syzkaller0: entered allmulticast mode [ 130.276121][ T5491] netlink: 'syz.3.461': attribute type 1 has an invalid length. [ 130.454854][ T5501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.461'. [ 130.500849][ T28] audit: type=1400 audit(1774260456.293:1424): avc: denied { setopt } for pid=5502 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.609997][ T5496] bond3: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 130.723607][ T5500] veth3: entered promiscuous mode [ 130.734950][ T5500] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 130.746489][ T5501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.753277][ T4064] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 130.811709][ T5519] netlink: 104 bytes leftover after parsing attributes in process `syz.0.466'. [ 130.832815][ T5519] loop0: detected capacity change from 0 to 128 [ 130.851593][ T5519] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 130.888180][ T2745] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 130.910932][ T5533] loop4: detected capacity change from 0 to 1024 [ 130.919959][ T5519] FAT-fs (loop0): Filesystem has been set read-only [ 130.927105][ T5533] EXT4-fs: Ignoring removed oldalloc option [ 130.937808][ T5519] bio_check_eod: 51528 callbacks suppressed [ 130.937824][ T5519] syz.0.466: attempt to access beyond end of device [ 130.937824][ T5519] loop0: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 130.951057][ T5533] ext2: Unknown parameter 'smackfsdef' [ 131.003145][ T5519] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 131.029945][ T5519] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 131.136766][ T5519] syz.0.466: attempt to access beyond end of device [ 131.136766][ T5519] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 131.136880][ T5519] syz.0.466: attempt to access beyond end of device [ 131.136880][ T5519] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 131.136925][ T5519] syz.0.466: attempt to access beyond end of device [ 131.136925][ T5519] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 131.136977][ T5519] syz.0.466: attempt to access beyond end of device [ 131.136977][ T5519] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 131.137068][ T5519] syz.0.466: attempt to access beyond end of device [ 131.137068][ T5519] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 131.137163][ T5519] syz.0.466: attempt to access beyond end of device [ 131.137163][ T5519] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 131.137204][ T5519] syz.0.466: attempt to access beyond end of device [ 131.137204][ T5519] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 131.137301][ T5519] syz.0.466: attempt to access beyond end of device [ 131.137301][ T5519] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 131.137343][ T5519] syz.0.466: attempt to access beyond end of device [ 131.137343][ T5519] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 133.660572][ T5554] loop5: detected capacity change from 0 to 512 [ 133.858441][ T5571] loop4: detected capacity change from 0 to 128 [ 134.014860][ T5554] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.470: couldn't read orphan inode 26 (err -116) [ 134.036869][ T5554] loop5: lost filesystem error report for type 5 error -116 [ 134.056396][ T5561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 134.060340][ T5554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.097385][ T5561] loop2: detected capacity change from 0 to 512 [ 134.115297][ T5561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.151339][ T5554] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.227824][ T5554] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.470: corrupted inode contents [ 134.281053][ T5554] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #3: comm syz.5.470: mark_inode_dirty error [ 134.335900][ T5554] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.470: bg 0: block 64: padding at end of block bitmap is not set [ 134.366193][ T5581] loop7: detected capacity change from 0 to 16384 [ 134.374789][ T5561] EXT4-fs (loop2): 1 truncate cleaned up [ 134.381809][ T5561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.401321][ T5554] Quota error (device loop5): write_blk: dquota write failed [ 134.441040][ T5554] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 134.454221][ T5554] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.470: Failed to acquire dquot type 0 [ 134.509848][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.544437][ T5554] syz.5.470 (5554) used greatest stack depth: 8392 bytes left [ 134.572061][ T28] audit: type=1326 audit(1774260460.373:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 134.604229][ T5184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.621055][ T28] audit: type=1326 audit(1774260460.373:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 134.692598][ T28] audit: type=1326 audit(1774260460.373:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 134.791358][ T28] audit: type=1326 audit(1774260460.373:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 134.885985][ T28] audit: type=1326 audit(1774260460.373:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 134.974488][ T28] audit: type=1326 audit(1774260460.373:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 135.038314][ T28] audit: type=1326 audit(1774260460.373:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 135.067646][ T5601] loop5: detected capacity change from 0 to 1024 [ 135.079064][ T5601] EXT4-fs: Ignoring removed oldalloc option [ 135.103115][ T5601] ext2: Unknown parameter 'smackfsdef' [ 135.185136][ T28] audit: type=1326 audit(1774260460.373:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 135.322248][ T5607] loop4: detected capacity change from 0 to 128 [ 135.445625][ T5607] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.458720][ T5607] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.266981][ T5615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 136.529926][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.537321][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.549164][ T5621] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.489'. [ 136.595311][ T5621] netlink: zone id is out of range [ 136.617084][ T5621] netlink: zone id is out of range [ 136.672165][ T5621] netlink: zone id is out of range [ 136.692888][ T5621] netlink: zone id is out of range [ 136.706576][ T5618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.723886][ T5621] netlink: zone id is out of range [ 136.729980][ T5621] netlink: zone id is out of range [ 136.740866][ T5621] netlink: zone id is out of range [ 136.758493][ T5618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.785170][ T5621] netlink: zone id is out of range [ 136.804365][ T5621] netlink: zone id is out of range [ 136.824545][ T5621] netlink: zone id is out of range [ 136.885279][ T4064] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.955683][ T4064] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.021950][ T4064] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.037065][ T5631] loop2: detected capacity change from 0 to 512 [ 137.050053][ T5631] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.493: inode has both inline data and extents flags [ 137.063569][ T5631] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.068488][ T5631] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.493: couldn't read orphan inode 15 (err -117) [ 137.070793][ T4064] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.077681][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 137.077700][ C1] EXT4-fs (loop2): initial error at time 1774260462: ext4_orphan_get:1391: inode 15 [ 137.114247][ C1] EXT4-fs (loop2): last error at time 1774260462: ext4_orphan_get:1391: inode 15 [ 137.133261][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.143037][ T5631] loop2: lost filesystem error report for type 5 error -117 [ 137.166118][ T5631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.342502][ T5642] vlan2: entered promiscuous mode [ 137.368798][ T5642] vlan2: entered allmulticast mode [ 137.380228][ T5642] hsr_slave_1: entered allmulticast mode [ 137.454934][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 137.649859][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.391343][ T5661] loop2: detected capacity change from 0 to 8192 [ 138.453267][ T5661] loop2: p1 p2 p4 < > [ 138.462609][ T5661] loop2: partition table partially beyond EOD, truncated [ 138.476510][ T5661] loop2: p1 start 100663296 is beyond EOD, truncated [ 138.485221][ T5661] loop2: p2 size 131840 extends beyond EOD, truncated [ 138.493382][ T5661] loop2: p4 start 117440516 is beyond EOD, truncated [ 138.577729][ T5666] xt_hashlimit: size too large, truncated to 1048576 [ 138.663854][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 139.034911][ T5665] loop4: detected capacity change from 0 to 164 [ 139.173413][ T5665] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 139.324166][ T5683] loop2: detected capacity change from 0 to 1024 [ 139.333313][ T5683] EXT4-fs: Ignoring removed oldalloc option [ 139.348710][ T5683] ext2: Unknown parameter 'smackfsdef' [ 139.415758][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 139.415784][ T28] audit: type=1326 audit(1774260465.223:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5664 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 139.505046][ T5690] loop2: detected capacity change from 0 to 1024 [ 139.516800][ T5690] EXT4-fs: Ignoring removed orlov option [ 139.536425][ T5690] EXT4-fs: Ignoring removed bh option [ 139.618352][ T5690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.791965][ T5694] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.911720][ T28] audit: type=1400 audit(1774260466.713:1560): avc: denied { create } for pid=5708 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 140.934345][ T5709] veth0_to_team: entered promiscuous mode [ 140.940753][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 140.952968][ T28] audit: type=1400 audit(1774260466.743:1561): avc: denied { ioctl } for pid=5708 comm="syz.0.519" path="socket:[12676]" dev="sockfs" ino=12676 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.980478][ T5709] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 140.991035][ T5709] block device autoloading is deprecated and will be removed. [ 141.003859][ T28] audit: type=1400 audit(1774260466.743:1562): avc: denied { write } for pid=5708 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 141.005851][ T5709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 141.044680][ T28] audit: type=1400 audit(1774260466.763:1563): avc: denied { getopt } for pid=5708 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.092497][ T5712] 9p: Bad value for 'source' [ 141.097843][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.177645][ T5731] loop0: detected capacity change from 0 to 512 [ 142.186255][ T5731] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 142.336953][ T5731] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 142.458862][ T5731] EXT4-fs (loop0): 1 truncate cleaned up [ 142.506509][ T5731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.088302][ T5731] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 143.154607][ T5740] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=5740 comm=syz.0.527 [ 143.253351][ T5747] syzkaller0: entered promiscuous mode [ 143.258910][ T5747] syzkaller0: entered allmulticast mode [ 143.313798][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.419971][ T5749] loop4: detected capacity change from 0 to 1024 [ 143.453482][ T5749] EXT4-fs: Ignoring removed orlov option [ 143.484642][ T5749] EXT4-fs: Ignoring removed bh option [ 143.601322][ T5749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.933300][ T28] audit: type=1400 audit(1774260469.743:1564): avc: denied { write } for pid=5762 comm="syz.0.533" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.933354][ T5763] random: crng reseeded on system resumption [ 143.933403][ T28] audit: type=1400 audit(1774260469.743:1565): avc: denied { open } for pid=5762 comm="syz.0.533" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 144.016720][ T5766] loop0: detected capacity change from 0 to 512 [ 144.076541][ T5766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.110318][ T28] audit: type=1400 audit(1774260469.913:1566): avc: denied { ioctl } for pid=5762 comm="syz.0.533" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 144.137925][ T5763] Restarting kernel threads ... [ 144.163005][ T5763] Done restarting kernel threads. [ 144.216009][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.257178][ T5771] syzkaller0: entered promiscuous mode [ 144.262868][ T5771] syzkaller0: entered allmulticast mode [ 144.340121][ T5772] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.547'. [ 144.395334][ T5772] net_ratelimit: 332 callbacks suppressed [ 144.395476][ T5772] netlink: zone id is out of range [ 144.408957][ T5772] netlink: zone id is out of range [ 144.434520][ T5772] netlink: zone id is out of range [ 144.441141][ T5772] netlink: zone id is out of range [ 144.447030][ T5772] netlink: zone id is out of range [ 144.464174][ T5772] netlink: zone id is out of range [ 144.480790][ T5772] netlink: zone id is out of range [ 144.487328][ T5772] netlink: zone id is out of range [ 144.503313][ T5772] netlink: zone id is out of range [ 144.513407][ T5772] netlink: zone id is out of range [ 144.822216][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.991656][ T5783] loop4: detected capacity change from 0 to 2048 [ 145.027249][ T5783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.052212][ T28] audit: type=1326 audit(1774260470.853:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.4.539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4894b2c799 code=0x0 [ 145.499927][ T5796] syzkaller0: entered promiscuous mode [ 145.506288][ T5796] syzkaller0: entered allmulticast mode [ 146.270561][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.720337][ T5823] loop5: detected capacity change from 0 to 1024 [ 146.740925][ T5823] EXT4-fs: Ignoring removed orlov option [ 146.766214][ T5823] EXT4-fs: Ignoring removed bh option [ 146.787452][ T5823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.816407][ T5811] loop0: detected capacity change from 0 to 1024 [ 146.891678][ T5830] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.553'. [ 146.914999][ T5811] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 147.091276][ T5811] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 147.123651][ T5811] EXT4-fs error (device loop0): ext4_get_journal_inode:5863: comm syz.0.549: inode #4294967295: comm syz.0.549: iget: illegal inode # [ 147.201032][ T28] audit: type=1326 audit(1774260473.003:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 147.213186][ T5811] loop0: lost filesystem error report for type 5 error -117 [ 147.245549][ T5811] EXT4-fs (loop0): no journal found [ 147.250574][ T28] audit: type=1326 audit(1774260473.003:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 147.253789][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 147.265132][ T28] audit: type=1326 audit(1774260473.043:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 147.283368][ C0] EXT4-fs (loop0): initial error at time 1774260473: ext4_get_journal_inode:5863 [ 147.317633][ T28] audit: type=1326 audit(1774260473.043:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 147.324349][ C0] EXT4-fs (loop0): last error at time 1774260473: ext4_get_journal_inode:5863 [ 147.397001][ T28] audit: type=1326 audit(1774260473.043:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 147.399350][ T5811] EXT4-fs (loop0): can't get journal size [ 147.422998][ T28] audit: type=1326 audit(1774260473.043:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 147.506698][ T28] audit: type=1326 audit(1774260473.153:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 147.565497][ T5811] EXT4-fs (loop0): failed to initialize system zone (-22) [ 147.585747][ T5811] EXT4-fs (loop0): mount failed [ 147.604959][ T28] audit: type=1326 audit(1774260473.153:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 147.656515][ T28] audit: type=1326 audit(1774260473.173:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 147.898257][ T5841] 9p: Bad value for 'source' [ 147.966413][ T5184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.835682][ T5854] loop5: detected capacity change from 0 to 512 [ 148.842397][ T5854] EXT4-fs: Ignoring removed nobh option [ 148.934121][ T5857] loop0: detected capacity change from 0 to 128 [ 150.109801][ T5854] EXT4-fs (loop5): orphan cleanup on readonly fs [ 150.133553][ T5854] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.560: EA inode hash validation failed [ 150.225450][ T5854] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 150.406934][ T5854] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.560: corrupted inode contents [ 150.483053][ T5854] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.502929][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 150.518730][ C1] EXT4-fs (loop5): initial error at time 1774260476: ext4_do_update_inode:5569: inode 15 [ 150.528903][ C1] EXT4-fs (loop5): last error at time 1774260476: ext4_do_update_inode:5569: inode 15 [ 150.566250][ T5854] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.560: mark_inode_dirty error [ 150.599790][ T5854] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.600004][ T5854] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.560: corrupted inode contents [ 150.662396][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 150.662443][ T28] audit: type=1400 audit(1774260476.463:1664): avc: denied { ioctl } for pid=5870 comm="syz.3.566" path="socket:[12861]" dev="sockfs" ino=12861 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 150.719778][ T5854] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.722282][ T5854] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.560: mark_inode_dirty error [ 150.778567][ T5854] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.779606][ T5854] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.560: mark inode dirty (error -117) [ 150.855196][ T5854] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.855509][ T5854] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 150.912253][ T5854] EXT4-fs (loop5): 1 orphan inode deleted [ 150.936066][ T5854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 150.988405][ T5878] loop4: detected capacity change from 0 to 512 [ 151.042319][ T5878] FAT-fs (loop4): Directory bread(block 199916) failed [ 151.055206][ T5878] FAT-fs (loop4): Directory bread(block 199917) failed [ 151.066195][ T28] audit: type=1400 audit(1774260476.863:1665): avc: denied { bind } for pid=5851 comm="syz.5.560" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.090725][ T5870] delete_channel: no stack [ 151.091094][ T5878] FAT-fs (loop4): Directory bread(block 199918) failed [ 151.104443][ T5878] FAT-fs (loop4): Directory bread(block 199919) failed [ 151.114462][ T5878] FAT-fs (loop4): Directory bread(block 199920) failed [ 151.122296][ T5878] FAT-fs (loop4): Directory bread(block 199921) failed [ 151.136101][ T5878] FAT-fs (loop4): Directory bread(block 199922) failed [ 151.147557][ T5878] FAT-fs (loop4): Directory bread(block 199923) failed [ 151.158950][ T28] audit: type=1400 audit(1774260476.963:1666): avc: denied { getopt } for pid=5851 comm="syz.5.560" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.289268][ T5891] syzkaller0: entered promiscuous mode [ 151.345661][ T5891] syzkaller0: entered allmulticast mode [ 151.367501][ T5898] loop2: detected capacity change from 0 to 512 [ 151.396708][ T5898] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 151.428840][ T5898] loop2: detected capacity change from 0 to 512 [ 151.444400][ T5184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.467862][ T5898] ext4: Unknown parameter 'nouser_xattr' [ 152.122483][ T5910] loop4: detected capacity change from 0 to 512 [ 152.182002][ T5910] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.574: inode has both inline data and extents flags [ 152.211626][ T5910] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 152.211790][ T5910] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.574: couldn't read orphan inode 15 (err -117) [ 152.221252][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 152.221269][ C0] EXT4-fs (loop4): initial error at time 1774260478: ext4_orphan_get:1391: inode 15 [ 152.221312][ C0] EXT4-fs (loop4): last error at time 1774260478: ext4_orphan_get:1391: inode 15 [ 152.273993][ T5917] net_ratelimit: 674 callbacks suppressed [ 152.274020][ T5917] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 152.363116][ T5910] loop4: lost filesystem error report for type 5 error -117 [ 152.364550][ T5910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.403179][ T5912] capability: warning: `syz.0.576' uses 32-bit capabilities (legacy support in use) [ 152.672993][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.158361][ T28] audit: type=1400 audit(1774260478.963:1667): avc: denied { write } for pid=5930 comm="syz.4.579" lport=57312 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 153.183229][ T28] audit: type=1400 audit(1774260478.963:1668): avc: denied { mounton } for pid=5930 comm="syz.4.579" path="/112/file0" dev="tmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.366220][ T5938] syzkaller0: entered promiscuous mode [ 153.371765][ T5938] syzkaller0: entered allmulticast mode [ 153.461270][ T5942] loop5: detected capacity change from 0 to 1024 [ 153.499040][ T5942] EXT4-fs: Ignoring removed orlov option [ 153.550394][ T5942] EXT4-fs: Ignoring removed bh option [ 153.608993][ T5942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.696670][ T28] audit: type=1400 audit(1774260479.503:1669): avc: denied { setattr } for pid=5936 comm="syz.5.582" path="/24/file1" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.863366][ T5942] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 154.021769][ T5947] loop4: detected capacity change from 0 to 1024 [ 154.045180][ T5947] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 154.058644][ T5947] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 154.070995][ T5947] EXT4-fs error (device loop4): ext4_get_journal_inode:5863: comm syz.4.584: inode #4294967295: comm syz.4.584: iget: illegal inode # [ 154.087863][ T5947] loop4: lost filesystem error report for type 5 error -117 [ 154.092938][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 154.106780][ C0] EXT4-fs (loop4): initial error at time 1774260479: ext4_get_journal_inode:5863 [ 154.115932][ C0] EXT4-fs (loop4): last error at time 1774260479: ext4_get_journal_inode:5863 [ 154.134062][ T5947] EXT4-fs (loop4): no journal found [ 154.143555][ T5947] EXT4-fs (loop4): can't get journal size [ 154.162002][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 154.180044][ T5947] EXT4-fs (loop4): failed to initialize system zone (-22) [ 154.197706][ T5947] EXT4-fs (loop4): mount failed [ 154.216239][ T5184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.536678][ T5956] bridge1: port 1(veth5) entered blocking state [ 154.543783][ T5956] bridge1: port 1(veth5) entered disabled state [ 154.559579][ T5956] veth5: entered allmulticast mode [ 154.569580][ T5956] veth5: entered promiscuous mode [ 154.617225][ T5959] bridge1: port 2(veth0_to_bond) entered blocking state [ 154.633082][ T5959] bridge1: port 2(veth0_to_bond) entered disabled state [ 154.640357][ T5959] veth0_to_bond: entered allmulticast mode [ 154.654260][ T5959] veth0_to_bond: entered promiscuous mode [ 154.679646][ T5966] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 154.694429][ T5966] bond2: (slave lo): Enslaving as an active interface with an up link [ 154.703066][ T5966] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 154.727605][ T5961] vlan2: entered allmulticast mode [ 154.733906][ T5961] ip6gretap0: entered allmulticast mode [ 154.739853][ T5961] bridge1: port 3(vlan2) entered blocking state [ 154.746537][ T5961] bridge1: port 3(vlan2) entered disabled state [ 154.753766][ T5961] vlan2: entered promiscuous mode [ 154.758899][ T5961] ip6gretap0: entered promiscuous mode [ 154.778044][ T5966] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 154.867392][ T5971] random: crng reseeded on system resumption [ 154.900145][ T5971] loop4: detected capacity change from 0 to 512 [ 154.906826][ T5976] loop2: detected capacity change from 0 to 8192 [ 154.929420][ T5971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.950381][ T5971] Restarting kernel threads ... [ 154.956003][ T5971] Done restarting kernel threads. [ 155.194692][ T5991] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 155.203395][ T5991] netlink: 'syz.2.591': attribute type 2 has an invalid length. [ 155.223746][ T28] audit: type=1400 audit(1774260481.023:1670): avc: denied { write } for pid=5988 comm="syz.0.595" path="socket:[13061]" dev="sockfs" ino=13061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 155.330042][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.846183][ T6001] loop0: detected capacity change from 0 to 512 [ 155.856610][ T5984] loop5: detected capacity change from 0 to 1024 [ 155.877806][ T6001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.886725][ T5984] EXT4-fs: Ignoring removed bh option [ 155.901305][ T6001] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.935115][ T5984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.963213][ T5984] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.061583][ T28] audit: type=1400 audit(1774260481.863:1671): avc: denied { remove_name } for pid=5983 comm="syz.5.593" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.061730][ T5995] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.593: lblock 0 mapped to illegal pblock 0 (length 6) [ 156.451610][ T5995] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 156.470810][ T5995] EXT4-fs (loop5): This should not happen!! Data will be lost [ 156.470810][ T5995] [ 156.517818][ T5995] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.593: bg 0: block 112: padding at end of block bitmap is not set [ 156.914220][ T59] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 157.003110][ T59] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 157.033461][ T59] EXT4-fs (loop5): This should not happen!! Data will be lost [ 157.033461][ T59] [ 157.057589][ T5184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 157.151063][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.266316][ T6072] loop0: detected capacity change from 0 to 512 [ 157.304404][ T6072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.327977][ T6072] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.349657][ T6074] syzkaller0: entered promiscuous mode [ 157.355808][ T6074] syzkaller0: entered allmulticast mode [ 157.468005][ T6066] loop2: detected capacity change from 0 to 1024 [ 157.537489][ T6083] loop4: detected capacity change from 0 to 512 [ 157.544988][ T6083] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.555325][ T6083] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 157.563504][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.565652][ T6066] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 157.686347][ T6066] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 158.578507][ T6066] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: comm syz.2.602: inode #4294967295: comm syz.2.602: iget: illegal inode # [ 158.594398][ T6066] loop2: lost filesystem error report for type 5 error -117 [ 158.612920][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 158.626737][ C1] EXT4-fs (loop2): initial error at time 1774260484: ext4_get_journal_inode:5863 [ 158.635884][ C1] EXT4-fs (loop2): last error at time 1774260484: ext4_get_journal_inode:5863 [ 159.047307][ T6066] EXT4-fs (loop2): no journal found [ 159.058620][ T6066] EXT4-fs (loop2): can't get journal size [ 159.070599][ T6066] EXT4-fs (loop2): failed to initialize system zone (-22) [ 159.078999][ T6066] EXT4-fs (loop2): mount failed [ 161.050596][ T6098] netlink: 224 bytes leftover after parsing attributes in process `syz.2.611'. [ 161.068406][ T28] audit: type=1400 audit(1774260486.873:1672): avc: denied { read } for pid=6097 comm="syz.2.611" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 161.148378][ T28] audit: type=1400 audit(1774260486.873:1673): avc: denied { open } for pid=6097 comm="syz.2.611" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 161.432145][ T6106] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 161.454393][ T28] audit: type=1400 audit(1774260487.263:1674): avc: denied { getopt } for pid=6107 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.478548][ T28] audit: type=1326 audit(1774260487.283:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 161.511010][ T6106] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.522117][ T28] audit: type=1326 audit(1774260487.283:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 161.556798][ T6114] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6114 comm=syz.3.616 [ 161.572287][ T6111] bond4: (slave gretap1): making interface the new active one [ 161.579971][ T28] audit: type=1326 audit(1774260487.283:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 161.604931][ T6111] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 161.630399][ T28] audit: type=1326 audit(1774260487.283:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 161.681290][ T28] audit: type=1326 audit(1774260487.283:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 161.739650][ T28] audit: type=1326 audit(1774260487.283:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 161.788622][ T28] audit: type=1326 audit(1774260487.283:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 161.964429][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 161.971383][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 161.979841][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 161.986282][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 161.992789][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 161.999354][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 162.005993][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 162.012579][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 162.159900][ T6133] io-wq is not configured for unbound workers [ 163.206271][ T6152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.398024][ T6158] tipc: Enabling of bearer rejected, failed to enable media [ 163.501026][ T6152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.445445][ T6178] loop2: detected capacity change from 0 to 1024 [ 164.470405][ T6178] EXT4-fs: inline encryption not supported [ 164.489809][ T6178] EXT4-fs: Ignoring removed nobh option [ 164.518796][ T6178] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 164.537170][ T6178] System zones: 0-1, 3-12 [ 164.543490][ T6178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.927966][ T6198] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 164.948406][ T6198] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 166.438989][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.001709][ T6227] loop4: detected capacity change from 0 to 512 [ 167.019194][ T6227] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.647: invalid indirect mapped block 256 (level 2) [ 167.045209][ T6227] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 167.053265][ T6229] syzkaller0: entered promiscuous mode [ 167.054624][ T6225] loop2: detected capacity change from 0 to 512 [ 167.063235][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 167.063393][ C1] EXT4-fs (loop4): initial error at time 1774260492: ext4_free_branches:1023: inode 11 [ 167.063772][ C1] EXT4-fs (loop4): last error at time 1774260492: ext4_free_branches:1023: inode 11 [ 167.076558][ T6229] syzkaller0: entered allmulticast mode [ 167.087154][ T6227] EXT4-fs (loop4): 2 truncates cleaned up [ 167.118492][ T6227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.180824][ T6225] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 168.154356][ T6183] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 168.210781][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 168.229263][ T6242] loop5: detected capacity change from 0 to 512 [ 168.237395][ T6225] EXT4-fs (loop2): 1 truncate cleaned up [ 168.256980][ T6227] bond0: option min_links: invalid value (18446744072127363710) [ 168.269633][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 168.269651][ T28] audit: type=1400 audit(1774260494.063:1700): avc: denied { create } for pid=6241 comm="syz.5.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 168.299883][ T6225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.312637][ T6227] bond0: option min_links: allowed values 0 - 2147483647 [ 168.339260][ T6246] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 168.349778][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.592285][ T28] audit: type=1400 audit(1774260494.393:1701): avc: denied { setopt } for pid=6241 comm="syz.5.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.670650][ T28] audit: type=1400 audit(1774260494.473:1702): avc: denied { sqpoll } for pid=6241 comm="syz.5.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 168.808979][ T6267] veth0_to_team: entered promiscuous mode [ 168.820325][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 168.845162][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.856396][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 168.872091][ T6266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.893221][ T6266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.901481][ T6266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.909415][ T6266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.079985][ T6275] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 169.118521][ T6275] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 169.126482][ T6277] netlink: 14 bytes leftover after parsing attributes in process `syz.3.661'. [ 169.357941][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.416637][ T6290] GUP no longer grows the stack in syz.5.662 (6290): 200000006000-200000009000 (200000004000) [ 169.427288][ T6290] CPU: 1 UID: 0 PID: 6290 Comm: syz.5.662 Tainted: G W syzkaller #0 PREEMPT(full) [ 169.427322][ T6290] Tainted: [W]=WARN [ 169.427328][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.427392][ T6290] Call Trace: [ 169.427401][ T6290] [ 169.427410][ T6290] __dump_stack+0x1d/0x30 [ 169.427438][ T6290] dump_stack_lvl+0x95/0xd0 [ 169.427463][ T6290] dump_stack+0x15/0x1b [ 169.427487][ T6290] fixup_user_fault+0x4fb/0x550 [ 169.427757][ T6290] fault_in_user_writeable+0x5c/0xc0 [ 169.427784][ T6290] futex_lock_pi+0x60b/0x7e0 [ 169.427885][ T6290] ? __pfx_futex_wake_mark+0x10/0x10 [ 169.427912][ T6290] do_futex+0x21f/0x380 [ 169.428023][ T6290] __se_sys_futex+0x2f6/0x370 [ 169.428079][ T6290] ? xfd_validate_state+0x45/0xf0 [ 169.428110][ T6290] __x64_sys_futex+0x78/0x90 [ 169.428143][ T6290] x64_sys_call+0x24ab/0x3020 [ 169.428247][ T6290] do_syscall_64+0x12c/0x370 [ 169.428273][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.428293][ T6290] RIP: 0033:0x7fc8ddabc799 [ 169.428386][ T6290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.428407][ T6290] RSP: 002b:00007fc8dc4cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.428504][ T6290] RAX: ffffffffffffffda RBX: 00007fc8ddd36180 RCX: 00007fc8ddabc799 [ 169.428520][ T6290] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 169.428536][ T6290] RBP: 00007fc8ddb52c99 R08: 0000000000000000 R09: 0000000000000082 [ 169.428551][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.428564][ T6290] R13: 00007fc8ddd36218 R14: 00007fc8ddd36180 R15: 00007ffd1c785348 [ 169.428584][ T6290] [ 169.797460][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.814821][ T6277] bond0 (unregistering): Released all slaves [ 169.841616][ T6287] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 169.975969][ T6300] loop4: detected capacity change from 0 to 1024 [ 170.004408][ T6300] EXT4-fs: Ignoring removed oldalloc option [ 170.180691][ T6300] ext2: Unknown parameter 'smackfsdef' [ 171.207832][ T6317] veth0_to_team: entered promiscuous mode [ 171.214167][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 171.218732][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 171.240745][ T6321] loop4: detected capacity change from 0 to 512 [ 171.248925][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.672'. [ 171.259525][ T4039] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.268452][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 171.278236][ T4039] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.297901][ T6321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.342517][ T6317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.349987][ T6321] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.364777][ T6317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.379271][ T6324] bridge0: entered promiscuous mode [ 171.393020][ T6324] macvlan2: entered promiscuous mode [ 171.422400][ T4039] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.445171][ T4039] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.834372][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.906520][ T6339] loop2: detected capacity change from 0 to 1024 [ 171.956258][ T6339] EXT4-fs: Ignoring removed oldalloc option [ 171.998020][ T6339] ext2: Unknown parameter 'smackfsdef' [ 172.170955][ T6341] loop4: detected capacity change from 0 to 1024 [ 172.187646][ T6341] EXT4-fs: test_dummy_encryption option not supported [ 172.314454][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'. [ 172.445583][ T28] audit: type=1400 audit(1774260498.253:1703): avc: denied { name_connect } for pid=6345 comm="syz.5.680" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 172.611009][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.685'. [ 172.633090][ T6353] loop2: detected capacity change from 0 to 4096 [ 172.633103][ T6357] bond0: option lp_interval: invalid value (0) [ 172.633125][ T6357] bond0: option lp_interval: allowed values 1 - 2147483647 [ 172.654898][ T6353] EXT4-fs: Ignoring removed bh option [ 172.938530][ T28] audit: type=1400 audit(1774260498.743:1704): avc: denied { create } for pid=6361 comm="syz.5.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 172.992771][ T28] audit: type=1400 audit(1774260498.783:1705): avc: denied { bind } for pid=6361 comm="syz.5.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 173.175962][ T6353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.501684][ T6371] __nla_validate_parse: 1 callbacks suppressed [ 173.501711][ T6371] netlink: 51 bytes leftover after parsing attributes in process `syz.5.687'. [ 173.870693][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'. [ 173.908731][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.919466][ T28] audit: type=1400 audit(1774260499.713:1706): avc: denied { setopt } for pid=6382 comm="syz.3.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 173.975586][ T28] audit: type=1400 audit(1774260499.713:1707): avc: denied { bind } for pid=6382 comm="syz.3.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.135757][ T6395] tipc: Enabled bearer , priority 10 [ 174.145385][ T6395] tipc: Enabled bearer , priority 0 [ 174.212465][ T28] audit: type=1326 audit(1774260500.003:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 174.287365][ T28] audit: type=1326 audit(1774260500.003:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 174.311255][ T28] audit: type=1326 audit(1774260500.003:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 174.335806][ T28] audit: type=1326 audit(1774260500.003:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 174.403056][ T28] audit: type=1326 audit(1774260500.003:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 174.493529][ T28] audit: type=1326 audit(1774260500.003:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 174.583709][ T28] audit: type=1326 audit(1774260500.003:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 174.675435][ T28] audit: type=1326 audit(1774260500.003:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 174.761013][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 174.797034][ T6403] syzkaller0: entered promiscuous mode [ 174.802662][ T6403] syzkaller0: entered allmulticast mode [ 176.631434][ T6383] syz.3.690 (6383) used greatest stack depth: 7224 bytes left [ 177.071721][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 177.259906][ T6426] loop4: detected capacity change from 0 to 512 [ 177.388353][ T6426] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 177.580124][ T6426] EXT4-fs (loop4): 1 truncate cleaned up [ 177.681784][ T6426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.788588][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 177.902460][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 178.029332][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.593094][ T6451] netlink: 'syz.3.710': attribute type 10 has an invalid length. [ 178.611069][ T6451] hsr0: entered promiscuous mode [ 178.765606][ T6458] syzkaller0: entered promiscuous mode [ 178.805471][ T6458] syzkaller0: entered allmulticast mode [ 179.836338][ T6473] syzkaller0: entered promiscuous mode [ 179.866759][ T6473] syzkaller0: entered allmulticast mode [ 179.903090][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.719'. [ 179.944747][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.719'. [ 180.296615][ T6471] loop2: detected capacity change from 0 to 512 [ 180.332659][ T6471] EXT4-fs: Ignoring removed nobh option [ 180.845058][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 180.845102][ T28] audit: type=1400 audit(1774260506.203:1815): avc: denied { setopt } for pid=6475 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 180.905176][ T6484] tipc: Enabling of bearer rejected, failed to enable media [ 180.923154][ T28] audit: type=1326 audit(1774260506.683:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 181.001973][ T6471] EXT4-fs (loop2): orphan cleanup on readonly fs [ 181.029932][ T6471] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.718: EA inode hash validation failed [ 181.055390][ T6471] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.718: corrupted inode contents [ 181.068432][ T6471] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.072917][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 181.088704][ C0] EXT4-fs (loop2): initial error at time 1774260506: ext4_do_update_inode:5569: inode 15 [ 181.098672][ C0] EXT4-fs (loop2): last error at time 1774260506: ext4_do_update_inode:5569: inode 15 [ 181.113450][ T6471] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.718: mark_inode_dirty error [ 181.157658][ T6471] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.161303][ T6471] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.718: corrupted inode contents [ 181.196112][ T28] audit: type=1326 audit(1774260506.683:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 181.227916][ T28] audit: type=1326 audit(1774260506.683:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 181.256444][ T6471] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.257134][ T28] audit: type=1326 audit(1774260506.683:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 181.298024][ T28] audit: type=1326 audit(1774260506.683:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 181.323861][ T28] audit: type=1326 audit(1774260506.683:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 181.347633][ T28] audit: type=1326 audit(1774260506.683:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 181.363208][ T6471] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.718: mark_inode_dirty error [ 181.388410][ T28] audit: type=1326 audit(1774260506.683:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 181.477957][ T6471] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.480027][ T6471] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.718: mark inode dirty (error -117) [ 181.482021][ T28] audit: type=1326 audit(1774260507.193:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.4.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4894b2c799 code=0x7ffc0000 [ 181.526014][ T6471] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.530599][ T6471] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 181.678344][ T6471] EXT4-fs (loop2): 1 orphan inode deleted [ 181.712133][ T6471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 182.282273][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.468743][ T6588] loop2: detected capacity change from 0 to 512 [ 182.499106][ T6588] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 182.578224][ T6588] EXT4-fs (loop2): 1 truncate cleaned up [ 182.587633][ T6588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.684564][ T6610] loop5: detected capacity change from 0 to 512 [ 184.206693][ T6625] syzkaller0: entered promiscuous mode [ 184.208239][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.212345][ T6625] syzkaller0: entered allmulticast mode [ 184.355605][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'. [ 184.509090][ T6639] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 184.612859][ T6640] loop2: detected capacity change from 0 to 4096 [ 184.668876][ T6640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.488948][ T6648] loop5: detected capacity change from 0 to 8192 [ 185.539480][ T6648] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.118553][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 186.118570][ T28] audit: type=1400 audit(1774260511.923:1891): avc: denied { append } for pid=6651 comm="syz.0.746" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.186030][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.463966][ T6665] syzkaller0: entered promiscuous mode [ 186.513882][ T6665] syzkaller0: entered allmulticast mode [ 186.685976][ T6672] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 186.720630][ T28] audit: type=1326 audit(1774260512.523:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ddabc799 code=0x7ffc0000 [ 186.760901][ T28] audit: type=1326 audit(1774260512.523:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ddabc799 code=0x7ffc0000 [ 186.789524][ T28] audit: type=1326 audit(1774260512.553:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8ddabc799 code=0x7ffc0000 [ 186.852933][ T28] audit: type=1326 audit(1774260512.553:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ddabc799 code=0x7ffc0000 [ 186.951336][ T28] audit: type=1326 audit(1774260512.553:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ddabc799 code=0x7ffc0000 [ 186.991509][ T28] audit: type=1326 audit(1774260512.553:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc8ddabc799 code=0x7ffc0000 [ 187.033137][ T28] audit: type=1326 audit(1774260512.553:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ddabc799 code=0x7ffc0000 [ 187.074439][ T28] audit: type=1326 audit(1774260512.553:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc8ddabc799 code=0x7ffc0000 [ 187.101848][ T6687] loop4: detected capacity change from 0 to 1024 [ 187.113572][ T28] audit: type=1326 audit(1774260512.553:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ddabc799 code=0x7ffc0000 [ 187.127181][ T6687] EXT4-fs: Ignoring removed oldalloc option [ 187.192982][ T6687] ext2: Unknown parameter 'smackfsdef' [ 187.674410][ T10] IPVS: starting estimator thread 0... [ 187.784080][ T6706] IPVS: using max 2688 ests per chain, 134400 per kthread [ 187.841156][ T6708] netlink: 56 bytes leftover after parsing attributes in process `syz.5.763'. [ 187.929569][ T6708] netlink: 1 bytes leftover after parsing attributes in process `syz.5.763'. [ 187.964230][ T6708] syzkaller0: entered promiscuous mode [ 187.978275][ T6708] syzkaller0: entered allmulticast mode [ 191.274002][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 191.274029][ T28] audit: type=1326 audit(1774260517.083:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 191.726535][ T28] audit: type=1326 audit(1774260517.483:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 191.836179][ T28] audit: type=1326 audit(1774260517.483:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 191.866138][ T28] audit: type=1326 audit(1774260517.483:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 191.943070][ T28] audit: type=1326 audit(1774260517.483:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 191.977948][ T28] audit: type=1326 audit(1774260517.483:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 192.002176][ T28] audit: type=1326 audit(1774260517.483:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 192.039293][ T6761] loop4: detected capacity change from 0 to 1024 [ 192.046646][ T6761] EXT4-fs: Ignoring removed oldalloc option [ 192.052855][ T6761] ext2: Unknown parameter 'smackfsdef' [ 192.148829][ T28] audit: type=1326 audit(1774260517.493:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 192.172456][ T28] audit: type=1326 audit(1774260517.493:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 192.196118][ T28] audit: type=1326 audit(1774260517.493:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 193.051701][ T6774] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 193.150763][ T6777] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 193.215703][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.782'. [ 193.258340][ T6774] bond1: entered promiscuous mode [ 193.263965][ T6774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.279718][ T6780] vlan2: entered promiscuous mode [ 193.365336][ T6780] bond0: entered promiscuous mode [ 193.370469][ T6780] bond_slave_0: entered promiscuous mode [ 193.395806][ T6780] bond_slave_1: entered promiscuous mode [ 193.403926][ T6780] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 193.744764][ T6793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=6793 comm=syz.3.786 [ 194.175680][ T6845] netlink: 76 bytes leftover after parsing attributes in process `syz.5.789'. [ 194.265310][ T6845] syzkaller0: entered promiscuous mode [ 194.324013][ T6845] syzkaller0: entered allmulticast mode [ 194.396229][ T6849] tc action pedit 'at' offset 3357 out of bounds [ 194.402648][ T6849] tc action pedit 'at' offset 3357 out of bounds [ 194.409060][ T6849] tc action pedit 'at' offset 3357 out of bounds [ 194.415544][ T6849] tc action pedit 'at' offset 3357 out of bounds [ 194.421888][ T6849] tc action pedit 'at' offset 3357 out of bounds [ 194.428513][ T6849] tc action pedit 'at' offset 3357 out of bounds [ 194.435219][ T6849] tc action pedit 'at' offset 3357 out of bounds [ 194.441555][ T6849] tc action pedit 'at' offset 3357 out of bounds [ 194.447982][ T6849] tc action pedit 'at' offset 3357 out of bounds [ 194.454452][ T6849] tc action pedit 'at' offset 3357 out of bounds [ 194.460880][ T6849] 0: reclassify loop, rule prio 0, protocol 800 [ 194.841103][ T6867] netlink: 76 bytes leftover after parsing attributes in process `syz.5.792'. [ 194.875087][ T6867] syzkaller0: entered promiscuous mode [ 194.893086][ T6867] syzkaller0: entered allmulticast mode [ 194.915430][ T6867] tc action pedit offset must be on 32 bit boundaries [ 194.922276][ T6867] tc action pedit offset must be on 32 bit boundaries [ 194.929177][ T6867] tc action pedit offset must be on 32 bit boundaries [ 194.936107][ T6867] tc action pedit offset must be on 32 bit boundaries [ 194.942966][ T6867] tc action pedit offset must be on 32 bit boundaries [ 194.949741][ T6867] tc action pedit offset must be on 32 bit boundaries [ 194.956581][ T6867] tc action pedit offset must be on 32 bit boundaries [ 194.963441][ T6867] tc action pedit offset must be on 32 bit boundaries [ 194.970311][ T6867] tc action pedit offset must be on 32 bit boundaries [ 194.977180][ T6867] tc action pedit offset must be on 32 bit boundaries [ 194.984088][ T6867] TC_ACT_REPEAT abuse ? [ 194.996667][ T6862] loop4: detected capacity change from 0 to 512 [ 195.141211][ T6862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.202249][ T6886] syzkaller0: entered promiscuous mode [ 195.212048][ T6862] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.230906][ T6886] syzkaller0: entered allmulticast mode [ 195.247402][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.5.793'. [ 195.280399][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.5.793'. [ 195.635028][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.700025][ T6907] syzkaller0: entered promiscuous mode [ 195.705753][ T6907] syzkaller0: entered allmulticast mode [ 196.640161][ T6921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6921 comm=syz.4.802 [ 197.346236][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 197.346278][ T28] audit: type=1326 audit(1774260523.153:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 197.384716][ T28] audit: type=1326 audit(1774260523.153:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 198.153754][ T6947] loop2: detected capacity change from 0 to 1024 [ 198.247450][ T6951] syzkaller0: entered promiscuous mode [ 198.257635][ T6947] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 198.292849][ T6951] syzkaller0: entered allmulticast mode [ 198.312368][ T6947] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 198.358260][ T28] audit: type=1326 audit(1774260523.153:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 198.358420][ T6947] EXT4-fs (loop2): invalid journal inode [ 198.381722][ T28] audit: type=1326 audit(1774260523.153:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 198.381767][ T28] audit: type=1326 audit(1774260523.153:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 198.444269][ T28] audit: type=1326 audit(1774260523.183:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 198.624654][ T6947] EXT4-fs (loop2): can't get journal size [ 198.648506][ T28] audit: type=1326 audit(1774260523.183:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 199.064907][ T6947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.150918][ T28] audit: type=1326 audit(1774260523.183:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 199.191228][ T6969] netlink: 56 bytes leftover after parsing attributes in process `syz.4.813'. [ 199.196168][ T28] audit: type=1326 audit(1774260523.183:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 199.200775][ T6969] netlink: 1 bytes leftover after parsing attributes in process `syz.4.813'. [ 199.266061][ T28] audit: type=1326 audit(1774260523.183:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f35fecac799 code=0x7ffc0000 [ 199.323848][ T6969] syzkaller0: entered promiscuous mode [ 199.337755][ T6969] syzkaller0: entered allmulticast mode [ 199.719465][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.745290][ T6977] netlink: 52 bytes leftover after parsing attributes in process `syz.4.815'. [ 200.943354][ T7009] loop2: detected capacity change from 0 to 1024 [ 200.960328][ T7009] EXT4-fs: Ignoring removed oldalloc option [ 200.970861][ T7009] ext2: Unknown parameter 'smackfsdef' [ 201.403981][ T7012] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=7012 comm=syz.3.825 [ 202.449726][ T7033] loop4: detected capacity change from 0 to 1024 [ 203.068134][ T7033] EXT4-fs: Ignoring removed oldalloc option [ 203.193016][ T7033] ext2: Unknown parameter 'smackfsdef' [ 203.293192][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 203.293209][ T28] audit: type=1326 audit(1774260529.073:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 203.385810][ T7043] syzkaller0: entered promiscuous mode [ 203.391351][ T7043] syzkaller0: entered allmulticast mode [ 203.427423][ T28] audit: type=1326 audit(1774260529.073:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 203.473734][ T7048] tcf_pedit_act: 22 callbacks suppressed [ 203.473754][ T7048] tc action pedit offset must be on 32 bit boundaries [ 203.486218][ T7048] tc action pedit offset must be on 32 bit boundaries [ 203.493061][ T7048] tc action pedit offset must be on 32 bit boundaries [ 203.499849][ T7048] tc action pedit offset must be on 32 bit boundaries [ 203.506635][ T7048] tc action pedit offset must be on 32 bit boundaries [ 203.513504][ T7048] tc action pedit offset must be on 32 bit boundaries [ 203.520275][ T7048] tc action pedit offset must be on 32 bit boundaries [ 203.527175][ T7048] tc action pedit offset must be on 32 bit boundaries [ 203.534128][ T7048] tc action pedit offset must be on 32 bit boundaries [ 203.540985][ T7048] tc action pedit offset must be on 32 bit boundaries [ 203.547844][ T7048] 0: reclassify loop, rule prio 0, protocol 800 [ 203.599618][ T7046] loop5: detected capacity change from 0 to 2048 [ 203.717259][ T28] audit: type=1326 audit(1774260529.073:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 204.137455][ T28] audit: type=1326 audit(1774260529.073:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 204.237261][ T28] audit: type=1326 audit(1774260529.073:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 204.315519][ T28] audit: type=1326 audit(1774260529.073:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 204.391134][ T28] audit: type=1326 audit(1774260529.073:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 204.417413][ T7046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.438736][ T28] audit: type=1326 audit(1774260529.073:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 204.569327][ T28] audit: type=1326 audit(1774260529.073:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 204.673465][ T7067] netlink: 48 bytes leftover after parsing attributes in process `syz.5.836'. [ 204.682474][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.5.836'. [ 205.001289][ T7069] syzkaller0: entered promiscuous mode [ 205.071057][ T7069] syzkaller0: entered allmulticast mode [ 205.090397][ T28] audit: type=1326 audit(1774260529.073:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51dd9c799 code=0x7ffc0000 [ 205.195560][ T5184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.227591][ T7064] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.263251][ T7064] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.358748][ T7064] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.373158][ T7064] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.672313][ T7064] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.692210][ T7064] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.749311][ T7064] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.749444][ T7064] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.882814][ T4051] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.883284][ T4051] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.890293][ T4051] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.890342][ T4051] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.912574][ T4051] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.912715][ T4051] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.922452][ T7087] loop2: detected capacity change from 0 to 1024 [ 205.980399][ T7087] EXT4-fs: Ignoring removed oldalloc option [ 205.980429][ T7087] ext2: Unknown parameter 'smackfsdef' [ 206.024545][ T4041] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.024647][ T4041] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.768372][ T9] IPVS: starting estimator thread 0... [ 206.862954][ T7098] IPVS: using max 2640 ests per chain, 132000 per kthread [ 207.928498][ T7114] loop2: detected capacity change from 0 to 512 [ 208.112709][ T7114] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.181126][ T7114] EXT4-fs (loop2): 1 truncate cleaned up [ 208.215858][ T7114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.328850][ T7131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7131 comm=syz.4.856 [ 208.402111][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 208.402140][ T28] audit: type=1326 audit(1774260534.203:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 208.509867][ T28] audit: type=1326 audit(1774260534.243:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 208.570316][ T28] audit: type=1326 audit(1774260534.243:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 208.606208][ T28] audit: type=1326 audit(1774260534.243:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 208.640795][ T28] audit: type=1326 audit(1774260534.243:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 208.664836][ T28] audit: type=1326 audit(1774260534.253:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 208.688810][ T28] audit: type=1326 audit(1774260534.253:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 208.716327][ T28] audit: type=1326 audit(1774260534.253:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 208.739666][ T7165] loop4: detected capacity change from 0 to 512 [ 208.756890][ T7165] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 208.765065][ T28] audit: type=1326 audit(1774260534.253:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 208.779681][ T7165] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 208.789096][ T28] audit: type=1326 audit(1774260534.253:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f232c799 code=0x7ffc0000 [ 208.814128][ T7165] EXT4-fs (loop4): 1 truncate cleaned up [ 208.846940][ T7165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.910919][ T7165] tipc: Enabled bearer , priority 10 [ 208.940005][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.991269][ T7175] block device autoloading is deprecated and will be removed. [ 209.009918][ T7179] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 209.064577][ T7176] loop5: detected capacity change from 0 to 512 [ 209.084440][ T7176] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 209.104502][ T7176] EXT4-fs (loop5): mount failed [ 209.147449][ T7179] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=7179 comm=syz.4.863 [ 209.239379][ T7191] ªªªªªª: renamed from vlan0 (while UP) [ 209.262565][ T7192] loop0: detected capacity change from 0 to 1024 [ 209.269716][ T7192] EXT4-fs: Ignoring removed oldalloc option [ 209.276241][ T7192] ext2: Unknown parameter 'smackfsdef' [ 209.300540][ T7196] sock: sock_set_timeout: `syz.3.870' (pid 7196) tries to set negative timeout [ 209.313766][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.350991][ T7200] loop2: detected capacity change from 0 to 1024 [ 209.364707][ T7200] EXT4-fs: Ignoring removed oldalloc option [ 209.384063][ T7200] ext2: Unknown parameter 'smackfsdef' [ 209.941482][ T7217] loop4: detected capacity change from 0 to 512 [ 210.006248][ T7217] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 210.042166][ T7217] EXT4-fs (loop4): 1 truncate cleaned up [ 210.057030][ T7217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.353923][ T7227] netlink: 76 bytes leftover after parsing attributes in process `syz.2.879'. [ 210.374802][ T7227] syzkaller0: entered promiscuous mode [ 210.380802][ T7227] syzkaller0: entered allmulticast mode [ 210.406001][ T7227] tcf_pedit_act: 7 callbacks suppressed [ 210.406017][ T7227] tc action pedit offset must be on 32 bit boundaries [ 210.486874][ T7231] loop0: detected capacity change from 0 to 512 [ 210.547698][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.551071][ T7231] FAT-fs (loop0): Directory bread(block 199916) failed [ 210.577440][ T7231] FAT-fs (loop0): Directory bread(block 199917) failed [ 210.596959][ T7231] FAT-fs (loop0): Directory bread(block 199918) failed [ 210.607133][ T7231] FAT-fs (loop0): Directory bread(block 199919) failed [ 210.620298][ T7231] FAT-fs (loop0): Directory bread(block 199920) failed [ 210.626810][ T7241] vlan2: entered promiscuous mode [ 210.651518][ T7231] FAT-fs (loop0): Directory bread(block 199921) failed [ 210.660441][ T7231] FAT-fs (loop0): Directory bread(block 199922) failed [ 210.670916][ T7231] FAT-fs (loop0): Directory bread(block 199923) failed [ 210.684185][ T7241] vlan2: entered allmulticast mode [ 210.689400][ T7241] hsr_slave_1: entered allmulticast mode [ 210.725059][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 211.254846][ T7245] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 211.288052][ T7260] loop0: detected capacity change from 0 to 1024 [ 211.311242][ T7260] EXT4-fs: Ignoring removed oldalloc option [ 211.317508][ T7260] ext2: Unknown parameter 'smackfsdef' [ 211.537169][ T7262] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.546230][ T7262] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.558038][ T7262] bridge0: entered allmulticast mode [ 211.577996][ T7269] bridge_slave_1: left allmulticast mode [ 211.591948][ T7269] bridge_slave_1: left promiscuous mode [ 211.598679][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.044440][ T7269] bridge_slave_0: left allmulticast mode [ 212.050293][ T7269] bridge_slave_0: left promiscuous mode [ 212.056098][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.320949][ T7273] loop5: detected capacity change from 0 to 512 [ 212.342311][ T7273] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 212.367841][ T7273] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 212.392203][ T7273] EXT4-fs (loop5): 1 truncate cleaned up [ 212.400882][ T7273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.673477][ T7287] delete_channel: no stack [ 212.724223][ T7310] netlink: 14 bytes leftover after parsing attributes in process `syz.4.901'. [ 212.754182][ T7307] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 212.851607][ T7310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.916846][ T7310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.926394][ T7305] ================================================================== [ 212.934526][ T7305] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 212.943438][ T7305] [ 212.945782][ T7305] write to 0xffff8881050bf8e8 of 8 bytes by task 7295 on cpu 1: [ 212.953521][ T7305] shmem_file_splice_read+0x470/0x600 [ 212.959113][ T7305] splice_direct_to_actor+0x26e/0x670 [ 212.964507][ T7305] do_splice_direct+0x119/0x1a0 [ 212.969371][ T7305] do_sendfile+0x382/0x650 [ 212.973816][ T7305] __x64_sys_sendfile64+0x105/0x150 [ 212.979039][ T7305] x64_sys_call+0x2dc4/0x3020 [ 212.983744][ T7305] do_syscall_64+0x12c/0x370 [ 212.988364][ T7305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.994362][ T7305] [ 212.996700][ T7305] write to 0xffff8881050bf8e8 of 8 bytes by task 7305 on cpu 0: [ 213.004353][ T7305] shmem_file_splice_read+0x470/0x600 [ 213.009766][ T7305] splice_direct_to_actor+0x26e/0x670 [ 213.015150][ T7305] do_splice_direct+0x119/0x1a0 [ 213.020019][ T7305] do_sendfile+0x382/0x650 [ 213.024547][ T7305] __x64_sys_sendfile64+0x105/0x150 [ 213.029781][ T7305] x64_sys_call+0x2dc4/0x3020 [ 213.034569][ T7305] do_syscall_64+0x12c/0x370 [ 213.039263][ T7305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.045166][ T7305] [ 213.047493][ T7305] value changed: 0x0000000000002d51 -> 0x0000000000002d52 [ 213.054594][ T7305] [ 213.056918][ T7305] Reported by Kernel Concurrency Sanitizer on: [ 213.063114][ T7305] CPU: 0 UID: 0 PID: 7305 Comm: syz.3.898 Tainted: G W syzkaller #0 PREEMPT(full) [ 213.073881][ T7305] Tainted: [W]=WARN [ 213.077681][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.088171][ T7305] ================================================================== [ 213.107949][ T7310] bond0 (unregistering): Released all slaves [ 213.128489][ T7312] loop4: detected capacity change from 0 to 8192 [ 213.443003][ T3399] syz1: Port: 1 Link DOWN [ 213.497921][ T5184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.