last executing test programs: 15.488679819s ago: executing program 0 (id=422): getresuid(&(0x7f0000000f80), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000001340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r1, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_notify(r1, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000380)=@other={'lock', ' ', 'mem'}, 0x9) ftruncate(r3, 0x5) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)) 15.280753064s ago: executing program 4 (id=424): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$gtp(0x0, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f"}, 0xd) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x842, 0x4}, 0x10) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @empty, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400), 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r5}, 0x8) 15.131783568s ago: executing program 4 (id=426): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xd, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xd0}]}, 0x0, 0x101, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00', r2}, 0x18) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44004) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/UV7c/0vjvvz5t/zvrmIOZTAi7o6I3RFxT0TsiYh7I/K290fEA6uM5/b+T3pllR+5rKz/91wxt7W4/1f2/mKwp6jtzPPvS45P12sHi//JcPRtyepjy6zjmxd//qTdsub+X/bI1l/2BYs4rvS2DNBNTcxN5J3SDrh6MWJf71L5JzdnApKI2BsR+1b20bvKwvQTX+5v1+jO+S+jA/NMC19k6c1n+c9HS/6lpHl+cvq2+cnRrVGvHRwt94rb/fjTpdfarX9V+XfA1VrjuWn7tzYZTJrna2dXvo5Lv37U9p7mP+7/aX/yRj7PXJ673puYmzszFtGfHM3ri14fv/Xesl62z/b/4QNLH/+7i/dk+T8YEdlO/FBEPBwRjxSxPxoRj0XEgWXy//6F9svK/COtaPtfjJha8vx3c/9v2f4rL/Sc/O7rduv/d9v/cF4aLl7Jz393sFQ42emiNcDV/O8AAADg/yLNvwOfpCM3y2k6MtL4Dv+euCutz8zOPXl85p3TU43vyg9GX1qOdA0U46H16XptLJkvPrExPjpejBWX46WHinHjT3u25fWRyZn6VMW5Q7fb3ub4z/zeU3V0wBrbtuSr4/3rHghQgdZ59HRx9cKr4WQAm5Xfa0P3usPxn65XHMD6c/2H7rXU8X+hpW4uADYn13/oXo5/6FLpt1VHAFTI9R+60mp+17+Gha0bI4xqCht1o+SFiLKQboh4FNaoUPWZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CQAA//9Chukd") r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) r6 = memfd_secret(0x80000) readahead(r6, 0x7, 0x0) socket(0xf, 0x800, 0x5e0) sendto$inet6(r5, &(0x7f0000000640)="eddd7f572482e709eca02bc6", 0xc, 0x10, &(0x7f0000000680)={0xa, 0x4e21, 0x100, @ipv4={'\x00', '\xff\xff', @remote}, 0xb}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x78}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4e}, @jmp={0x5, 0x0, 0x9}], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) 12.6588354s ago: executing program 1 (id=430): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900180003", 0x29}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xeb, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x0, @perf_config_ext={0xe, 0x66c}, 0x106101, 0x8, 0xfffffffe, 0x6, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}, 0x0) socket$kcm(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r3 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r3}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000000300189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 12.445053526s ago: executing program 1 (id=432): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x20044045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfff, 0x1}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x1, 0x300) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f00000004c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @local, 0x34623824}}, 0x24) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@usrquota}]}, 0xfe, 0x475, &(0x7f0000001600)="$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") unshare(0x24060400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r5 = syz_io_uring_setup(0x186, &(0x7f0000000280)={0x0, 0xfcb0, 0x13100, 0x3, 0x124}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x20, {0x5, 0x9}, 0x2}, 0x1) 12.443760916s ago: executing program 0 (id=443): perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x9, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x5}, 0x8084, 0x9e, 0x400, 0x7, 0x477f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) getpgid(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b88a3e378c88efcf", 0x1c}], 0x1}, 0x880) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r6, 0x89f1, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$eJzs3M9rE1sUwPHzkrwmTWmTB48HT1APutFNaOPCpQZpQQwotSnqQpjaiYaMSZkJlYjYbMStf0dx6U5Q/4FuxI17d0UQ3HQhjnRm0k7atEk1v0q/Hyj3ZM493NtkWs4MZDbvvHpcLjqZolGTSEIlItKQLZH0dhT4KxgjXjwmYQ25OPH98+nbd+/dyOXzs/Oqc7mFS1lVnTr77smz1+c+1CYW30y9jctG+v7mt+yXjbGN/zd/LjwqOVpytFKtqaFL1WrNWLJMXS455YzqLcs0HFNLFce0W/JFq7qyUlejsjyZXLFNx1GjUteyWddaVWt2XY2HRqmimUxGJ5NygkVEYl1MK6zPzxu5A9NutKebQt+Ntzto27lG+2RhfQB7AgAAI+bw/t/v9Q/u//OL/niU/v+/zv2/CP1/nzRaXnXo/3FcXQ6f/badM5LB328r+n8AAAAAAAAAAAAAAAAAAAAAAI6DLddNua6b2h6DQ97ruIgkRMQN8kPeJvok/Pm7oZ8On/+VIW0XPRb64l5CxHq5Wlgt+KOfzxWlJJaYMi0p+eGdDwE/nruen51WT1reW2tB/dpqISrxZn1Tul39mX9m/Hptrf9bkuH1s5KSf9uvn21bPyYXzofqM5KSjw+kKpYse+f1bv3zGdVrN/N76se9eQfo5uEaAAAAAACMjIzu2Hf97uW9CQnZn/frQ/cHXNddO+z+wJ7r65ic4ioaAAAAAICBcOpPy4ZlmfZvBHER+YPy3geuKzL8bURlNN6N1uCqiIzANgYVJETEP6Lt5sQ6lH/dKe9qUbeLOTER2Q6iI/H+dA6G/Z8JAAAAQK/tNv1HKPr0oo87AgAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5On2eWDN+ftSzcQh5aHlogP/BQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAR8isAAP//RZUcDw==") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='/dev/ptmx\x00') recvmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000940)=""/196, 0xc4}], 0x2, &(0x7f00000000c0)=""/40, 0x28}, 0x40010001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010007201000"}) 11.410012142s ago: executing program 4 (id=433): r0 = epoll_create1(0x80000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000b00)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x485, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYBLOB, @ANYRESOCT=r3], 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x102802, 0x31, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x28203) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, 0x0, 0x4000080) epoll_pwait(r0, &(0x7f00000024c0)=[{}], 0x1, 0x81, 0x0, 0x0) 10.662841251s ago: executing program 3 (id=434): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000100)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@bsdgroups}, {@usrquota}, {@stripe={'stripe', 0x3d, 0xe}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000240)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f40)={0x0}, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000001000)={0x5, 0x80, 0x1b, 0x9, 0x6, 0x81, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000fc0)}, 0x5020, 0xe, 0x5, 0x8, 0x2, 0x9, 0x9, 0x0, 0x75c, 0x0, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000ec0)={0x0, 0x80, 0xff, 0x81, 0xff, 0x4, 0x0, 0xea3331e, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100), 0x9}, 0x81, 0x9b8, 0x3, 0x3, 0x3fbc0, 0x100, 0x0, 0x0, 0x1ff, 0x0, 0x9}, r2, 0x1, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet_mptcp(0x2, 0x1, 0x106) futex(&(0x7f0000000a80)=0x2, 0x3, 0x2, 0x0, 0xfffffffffffffffe, 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) writev(r6, &(0x7f0000000240)=[{&(0x7f0000002400)="aac481", 0x3}], 0x1) capset(&(0x7f0000000040)={0x20080522}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000400)={0x1, 0x4, 0xb10}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x6, 0x1f7c, 0x9}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6bde2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000012c0)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x0, 0x2, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) 10.515230685s ago: executing program 1 (id=435): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x59, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x30, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x1, [0x5]}, &(0x7f0000000400)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 10.476896676s ago: executing program 0 (id=437): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = dup2(r5, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$sock_ifreq(r8, 0x89b0, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}) write$UHID_INPUT(r8, &(0x7f0000002080)={0x7, {"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", 0x1000}}, 0x1006) 10.369823538s ago: executing program 2 (id=438): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000467000000080000000100962cbf0385a39b235b58cb6bce8f07000080", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40804) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x5, 0x3, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0xa38, 0x6, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, r0, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000200)}, 0x20) fstat(r5, &(0x7f0000000540)) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001140100"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x20004810) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8800) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d30, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xf, 0x80}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x2, 0x300) 10.077923296s ago: executing program 3 (id=439): openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c3aa00830b00000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(r0, 0x5, &(0x7f0000000280)={0x1ff, 0x3}, &(0x7f0000000340)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r5, 0x29, 0xcf, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r7, &(0x7f0000001600)=[{&(0x7f0000000100)=""/201, 0xc9}], 0x1, 0x9, 0x8) 9.90216855s ago: executing program 2 (id=440): bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x6, 0x53, &(0x7f00000006c0)=""/83, 0x1e00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[r2], &(0x7f0000000800)=[{0x2, 0x4, 0x2, 0x2}, {0x4, 0x1, 0xb, 0xa}, {0x2, 0x4, 0x4, 0xc}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ec0)={r4, 0x0, 0x1e, 0x1, &(0x7f0000000900)="c773aad19470fa9013e5ec3b7eb68dbde9d90c6ac7d1a507992309a27b3a", &(0x7f0000000940)=""/1, 0x7b, 0x0, 0x0, 0xe5, &(0x7f0000000dc0), &(0x7f0000001dc0)="0671c3c121577884be984fe49e973cb00be1354dd93c01fe652bfb5e4c78d1e51d82522886e78edc5cf5c621e0e800c800d5dc48fee210216c1a99a27a1cac8dc6b115b22cb771bc7e4cf29eb1a88bd13f6a567a91640784a1b41ee4485e9509f96e482a3032ceea7c68d72403ef9616357a44490f6343d08bf2d62af6c359e0d69364ca519c5d2a03834e4c02bb46fd8246d4b49c01cdd3f390bff80d71cd37e34f36c6611a750878586d2d872e9e7c1d7897f3a76356aa72f9d90b224931c6f77b3d69a8d5ac6de0f36094833851d3af01aca0c85b6f9ede3c4b8253bdf8b475e08a3cc1", 0x3, 0x0, 0x4}, 0x50) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids '], 0x6) 8.834797147s ago: executing program 4 (id=441): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000240), 0x9, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, 0x0, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x28, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 8.233782442s ago: executing program 0 (id=442): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet(0x2, 0x2, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fd) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.482154311s ago: executing program 3 (id=444): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x2000001ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000013c0)=@urb_type_iso={0x0, {0x7}, 0x80000001, 0x1, &(0x7f00000002c0)="b2dd312ae8121ad9701302fb60", 0xd, 0x6, 0x1, 0x1, 0x800, 0x6, 0x0, [{0x3, 0xfff}]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') futex_waitv(&(0x7f0000009e80)=[{0x4, 0x0, 0x6}, {0x4, 0x0}], 0x2, 0x0, 0x0, 0x1) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}, {0x0}, {0x0}, {0x0}], 0x4, 0x6c, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x11, 0x148, 0x260, 0x0, 0x300, 0x2a8, 0x2a8, 0x300, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x200, 0x260, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x3, 0x6, 0x6, 0x8, 0x6e69}}, @common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x10, 0x8, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x4, 0x6, 0x6, 0x5, 0x6], 0x1}, {0xffffffffffffffff, [0x1, 0x6, 0x7, 0xe, 0x4, 0x3], 0x1, 0x6}}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}, 0x8}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x24, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x1000, 0xd99d}}]}]}}}]}, 0x70}}, 0x8c814) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000180)=0x4) sendto$packet(r2, 0x0, 0x0, 0x830, &(0x7f0000000440)={0x11, 0x8100, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) r7 = socket(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x18, 0x31, 0x1, 0x20000000, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r9, 0x0, 0x0, 0x3a, 0x5) sched_getparam(0x0, &(0x7f0000000000)) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000080)={0x0, 0x10}) 7.187695279s ago: executing program 2 (id=445): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000bd500020050000009500000000000000fd46b8bf205bdf98befdb91c2d4c692a71d2986fab4a5c7a86797603a63345279b399d0a05854dd249fb29c5733a5da15635eb4a4bc54f0ec8416a312410958d29835ce6ee71a46d38e7ea78133aa5cac3047b50f028ded627a14b36b4a5f185ca15076bad27577cda8bcf7d5e068648c82c9bd6ec5f92c2b54c09718a12b3749b1ada6f05a20427070b6a34416197391b1c63ecfc50266aaaa5559a1cd81c5a756e163e583636246381c41110b9b298f0306ed2de54e1a89a79a8ae068f4eb6e55dd6a71ea7b468f6a62c25a02d7952b930f65b9327db37108a9fda"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdfff9ff00000008000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb5d57b70af3d2b6b95f0633b269b0e6d64a4e16a6b295c96bdf493711c2d6eed50906f92504314b12b4719c24ff9c27e0a71232b51316"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 7.069989562s ago: executing program 3 (id=446): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f0000001340)={0x8, 0x8fc4, 0x9, 0xb, 0x0, 0x6, 0x7c, 0x3}) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x890b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x4000010) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f0000001400)=ANY=[@ANYBLOB='(\x00', @ANYRES16, @ANYBLOB="0807000300d6bf8c35ae5caa73c3aa38e804ce74b8dfea4a810e0dfc234c9682bd456800000000000000", @ANYRES32=r3, @ANYBLOB="0c009900f30000006d000000"], 0x28}}, 0x4010) mprotect(&(0x7f000071b000/0x3000)=nil, 0x3000, 0x6) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000013c0), 0x3, 0x4) ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x1) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0xa8000) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5c00000012006b6d373be35c6e17aa31046a876c1d0000007ea60864160af26508001dc0c3000200340031009ee517d34460bc24eab556a745251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc0) syz_io_uring_setup(0x1d72, &(0x7f00000002c0)={0x0, 0x613b, 0x800, 0x0, 0x213}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 6.759582879s ago: executing program 1 (id=447): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) set_mempolicy(0x4005, 0x0, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000006980), 0x0, 0x45833af92e4b39ff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x931aabbf574a3c29, @perf_config_ext={0xfffffffffffffffc}, 0x104000, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) memfd_create(&(0x7f0000000200)='}-@\'$-\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0200f300fa"], 0x9) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(0xffffffffffffffff, 0x1) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="d035744442", 0x5}], 0x1}, 0x4048081) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000004000000040000"], 0x50) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) socket$nl_route(0x10, 0x3, 0x0) 6.100871426s ago: executing program 2 (id=448): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) write$binfmt_aout(r5, 0x0, 0xfdef) sendto$inet6(r5, &(0x7f00000002c0)="d26a73ebcca96c4283ae924458b7898a7e", 0x11, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") 6.100628736s ago: executing program 4 (id=449): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000300)=0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400010000000900020073797a31000000000500010007000000050005000a00000014000780"], 0x60}}, 0x44040880) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, &(0x7f0000000180)={0x6, 0x4, 0x47ca1859}) creat(&(0x7f0000000040)='./bus\x00', 0x0) close(r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000001940)=""/10, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x17, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="d58b33c4b59886544c97c774e1802bf995f93415e6087744c8f9afd7e564146e384b4b898b37b5cf0e085a2c2517066ac07394bbfa8546ab7b09cdf89ffd569f72a40086c1b24f4dbdc56cc84613004607b53ff327f94de1a7abdc05d2a2178634abb3b5219fb6cc9571e52f777963d7d52e9dbe62738136ed74ce6c64512e0394d1a1b2011385a651bdc4256e43e3048ab33415186d1ce7a272732924b5d405d1bbef984f4582bf09556b83cf3aa315803041b6c9f7cb8f526801bc5033e9691ce4cc2a036c4fd44fb8580c12f54c6a103b42568053de11"], 0x310) r6 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) 6.100209096s ago: executing program 1 (id=458): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet(0x2, 0x2, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fd) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.099667526s ago: executing program 0 (id=450): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@private=0xa010102, 0x0, 0x0, 0x4e20, 0x400, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x1, 0x2, 0x1}, {{@in=@empty, 0x4d4, 0x32}, 0xa, @in=@loopback, 0x3504, 0x1, 0x0, 0x0, 0x6, 0xfffffffd, 0x2}}, 0xe8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x0, 0xf, 0x2, 0x5, 0x3e3d, 0x800, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18) sendmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) writev(r7, 0x0, 0x0) 4.111348637s ago: executing program 3 (id=451): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000467000000080000000100962cbf0385a39b235b58cb6bce8f07000080", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40804) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x5, 0x3, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0xa38, 0x6, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, r0, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000200)}, 0x20) fstat(r4, &(0x7f0000000540)) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001140100"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x20004810) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8800) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d30, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xf, 0x80}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x2, 0x300) 2.008012729s ago: executing program 4 (id=452): symlink(0x0, &(0x7f0000000040)='./file0/../file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb6, 0x1, 0xffffffbc, 0x333}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x1, 0x2000000, 0x0, &(0x7f00000014c0)=[{0x0}], 0x0}, 0x20) unshare(0x6a040000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4c814) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) preadv(r2, &(0x7f0000003840)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x6, 0xa) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sync() getpgrp(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) get_mempolicy(0x0, 0x0, 0x1, &(0x7f000051f000/0x2000)=nil, 0x2) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) 1.049536154s ago: executing program 2 (id=453): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$inet_sctp(r1, &(0x7f0000000480)={&(0x7f0000000180)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="8617d34dcce4a9008f1095a70a5f1e9e437c0ea5be1532336b32d2eb8feeec9044b3e592e71bd402af4d7fb772ab48228821881e196250bf", 0x38}], 0x1, &(0x7f00000003c0)=[@authinfo={0x18, 0x84, 0x6, {0x10}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xffffffff}}, @init={0x18, 0x84, 0x0, {0x9, 0xa000, 0x9, 0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @init={0x18, 0x84, 0x0, {0x7, 0x7, 0x800, 0x9}}, @authinfo={0x18, 0x84, 0x6, {0x7ff}}], 0x90, 0x40058c4}, 0x8001) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d80)={0x6, 0x13, &(0x7f0000001180)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xd4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @generic={0x1a, 0xf, 0x2, 0x35d, 0x7ff}], &(0x7f0000001240)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001c40)=""/4096, 0x40f00, 0x55, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000002c40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000002c80)={0x1, 0x6, 0x8, 0xffffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002cc0)=[r1, r1, r1, r1, r1, r1], &(0x7f0000002d00)=[{0x5, 0x2, 0x4, 0xc}, {0x0, 0x1, 0x6, 0xb}, {0x3, 0x2, 0x10, 0x4}, {0x5, 0x3, 0x5}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffef6, 0x4, @perf_bp={0x0, 0x1}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0xc, 0x475}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r4, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r5, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) write(r6, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f00000010c0)=r2, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r7 = semget$private(0x0, 0x5, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$sock_proto_private(r8, 0x89e0, 0x0) semctl$IPC_STAT(r7, 0x0, 0x12, &(0x7f0000000300)=""/160) perf_event_open(&(0x7f0000001100)={0x6, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x39, 0xc8052, 0x1a, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x11aeeb, 0x0, 0x7fffffff, 0x5, 0x9, 0xa0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 773.619121ms ago: executing program 2 (id=454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x7ffffffe) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000, 0x8}, 0x1048a, 0x4000, 0x8010ffe, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00'}, 0x94) ioprio_set$pid(0x2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40180}, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r6, r6, 0x0, 0xe3aa6ea) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x100000001, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x100, 0x25dfdbfd, {0x25}}, 0x14}}, 0x6048800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x68}}, 0x0) 173.030336ms ago: executing program 0 (id=455): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ff, 0xffffffffffff4b1e}, 0x106200, 0x10004, 0x20ca, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x1000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe800000000000000000bbfe"], 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x4, 0x3a, ')', 0x3a, 'auto_da_alloc', 0x3a, './file0', 0x3a, [0x4f, 0x43, 0x50]}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) io_uring_setup(0x5741, &(0x7f00000001c0)={0x0, 0x7c27, 0x0, 0x1040, 0x1fb}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r3, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1000000000000048) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) close_range(r4, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={r2, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) 326.81µs ago: executing program 3 (id=456): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xbf2, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x6, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x5, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x49, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0x80000d}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x853}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x7f, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x5, 0x10000, 0x6, 0x4}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x9, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1d, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x49, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x3, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x7, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x81, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31000000000800"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x4, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f0000000140)='GPL\x00', 0xe}, 0x94) sendfile(r4, r3, 0x0, 0x7ffff000) 0s ago: executing program 1 (id=457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x59, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x30, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x1, [0x5]}, &(0x7f0000000400)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): ty change from 0 to 512 [ 70.704612][ T4089] EXT4-fs (loop4): 1 orphan inode deleted [ 70.720074][ T4089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.890558][ T4089] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.031395][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 1 [ 71.147533][ T4096] loop3: detected capacity change from 0 to 512 [ 71.172903][ T4096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.185564][ T4096] ext4 filesystem being mounted at /28/fi supports timestamps until 2038-01-19 (0x7fffffff) [ 71.767904][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.900510][ T4106] netlink: 'syz.2.146': attribute type 13 has an invalid length. [ 71.962658][ T4108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 72.026209][ T3444] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.037539][ T3444] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.054715][ T3444] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.072697][ T3444] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.176531][ T4112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.145'. [ 72.219019][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.396564][ T4112] loop3: detected capacity change from 0 to 1024 [ 72.399781][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.416547][ T4112] EXT4-fs: Ignoring removed orlov option [ 73.430168][ T4112] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 73.722354][ T4112] System zones: 0-1, 3-12 [ 73.753476][ T4112] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.388563][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 74.388579][ T28] audit: type=1400 audit(1777395181.900:603): avc: denied { create } for pid=4111 comm="syz.3.145" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 74.441652][ T4134] loop0: detected capacity change from 0 to 512 [ 74.890825][ T4134] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 74.907544][ T4134] EXT4-fs (loop0): mount failed [ 75.089610][ T4140] loop2: detected capacity change from 0 to 128 [ 75.351474][ T4140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.363374][ T28] audit: type=1400 audit(1777395183.480:604): avc: denied { read write } for pid=4139 comm="syz.2.155" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.123743][ T4140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.336816][ T28] audit: type=1400 audit(1777395183.480:605): avc: denied { open } for pid=4139 comm="syz.2.155" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.362783][ T28] audit: type=1400 audit(1777395183.480:606): avc: denied { ioctl } for pid=4139 comm="syz.2.155" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.108573][ T28] audit: type=1400 audit(1777395185.070:607): avc: denied { connect } for pid=4139 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.149540][ T28] audit: type=1400 audit(1777395185.110:608): avc: denied { map } for pid=4139 comm="syz.2.155" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=6821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.190624][ T28] audit: type=1400 audit(1777395185.120:609): avc: denied { read write } for pid=4139 comm="syz.2.155" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=6821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.253330][ T28] audit: type=1326 audit(1777395185.310:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 77.303249][ T28] audit: type=1326 audit(1777395185.310:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 77.349344][ T28] audit: type=1326 audit(1777395185.310:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 77.382504][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 77.459597][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 77.903801][ T4152] loop0: detected capacity change from 0 to 512 [ 79.064176][ T4152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.816252][ T4152] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.829326][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 79.829338][ T28] audit: type=1400 audit(1777395187.930:653): avc: denied { create } for pid=4179 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.169636][ T4178] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 80.232276][ T28] audit: type=1400 audit(1777395187.930:654): avc: denied { map_create } for pid=4181 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.251256][ T28] audit: type=1400 audit(1777395187.930:655): avc: denied { create } for pid=4179 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.271084][ T28] audit: type=1400 audit(1777395187.940:656): avc: denied { mount } for pid=4151 comm="syz.0.157" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.292559][ T28] audit: type=1400 audit(1777395187.940:657): avc: denied { write } for pid=4179 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.311716][ T28] audit: type=1400 audit(1777395187.960:658): avc: denied { create } for pid=4179 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.331846][ T4177] loop1: detected capacity change from 0 to 512 [ 80.405840][ T4177] EXT4-fs (loop1): 1 orphan inode deleted [ 80.418780][ T4177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.436736][ T4177] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.494188][ T28] audit: type=1400 audit(1777395188.260:659): avc: denied { accept } for pid=4179 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.495718][ T39] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 80.525683][ T28] audit: type=1400 audit(1777395188.270:660): avc: denied { allowed } for pid=4181 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.560265][ T39] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 80.582435][ T28] audit: type=1400 audit(1777395188.470:661): avc: denied { mounton } for pid=4171 comm="syz.1.163" path="/31/file1" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.660486][ T4180] loop2: detected capacity change from 0 to 256 [ 80.665254][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.792910][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.819482][ T4193] netlink: 36 bytes leftover after parsing attributes in process `syz.1.168'. [ 80.855183][ T4180] FAT-fs (loop2): codepage cp852 not found [ 80.861740][ T4193] loop1: detected capacity change from 0 to 1024 [ 80.863195][ T4193] EXT4-fs: Ignoring removed orlov option [ 80.865492][ T4191] ref_ctr_offset mismatch. inode: 0xd0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 80.914465][ T4193] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 80.914556][ T4193] System zones: 0-1, 3-12 [ 80.921184][ T4193] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.031970][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 81.149712][ T4191] xt_hashlimit: size too large, truncated to 1048576 [ 81.628728][ T4221] loop4: detected capacity change from 0 to 512 [ 82.379515][ T4221] EXT4-fs: Ignoring removed oldalloc option [ 82.407440][ T4221] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.627478][ T4222] loop1: detected capacity change from 0 to 1024 [ 82.803274][ T4222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.824921][ T4221] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.173: invalid indirect mapped block 83886080 (level 1) [ 82.855105][ T4221] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.855239][ T4221] EXT4-fs (loop4): Remounting filesystem read-only [ 82.864387][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 82.864407][ C1] EXT4-fs (loop4): initial error at time 1777395190: ext4_free_branches:1023: inode 16 [ 82.864440][ C1] EXT4-fs (loop4): last error at time 1777395190: ext4_free_branches:1023: inode 16 [ 82.966922][ T4221] EXT4-fs (loop4): 1 orphan inode deleted [ 82.979539][ T4221] EXT4-fs (loop4): 1 truncate cleaned up [ 82.995606][ T4221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.456332][ T4232] loop3: detected capacity change from 0 to 1024 [ 83.610792][ T4232] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 83.610792][ T4232] [ 84.146982][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.179830][ T4232] SET target dimension over the limit! [ 84.185537][ T4237] ref_ctr_offset mismatch. inode: 0xda offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 84.228607][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.341146][ T4236] xt_hashlimit: size too large, truncated to 1048576 [ 84.347267][ T4240] loop4: detected capacity change from 0 to 512 [ 84.362226][ T4232] loop3: detected capacity change from 0 to 1024 [ 84.375059][ T4232] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.448795][ T4240] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.461645][ T4240] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.176: corrupted inode contents [ 84.474014][ T4240] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.475111][ T4240] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 84.484804][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 84.485010][ C1] EXT4-fs (loop4): initial error at time 1777395192: ext4_do_update_inode:5690: inode 15 [ 84.485243][ C1] EXT4-fs (loop4): last error at time 1777395192: ext4_do_update_inode:5690: inode 15 [ 84.524192][ T4240] loop4: lost filesystem error report for type 5 error -117 [ 84.524748][ T4240] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.176: corrupted inode contents [ 84.605083][ T4232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.687376][ T4232] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.732198][ T4240] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.733272][ T4240] EXT4-fs error (device loop4): ext4_evict_inode:315: inode #15: comm syz.4.176: mark_inode_dirty error [ 84.860378][ T4240] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.864574][ T4240] EXT4-fs (loop4): 1 orphan inode deleted [ 84.899017][ T4249] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.174: lblock 0 mapped to illegal pblock 0 (length 1) [ 84.915604][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 84.915624][ T28] audit: type=1400 audit(1777395193.020:733): avc: denied { create } for pid=4231 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.980146][ T4240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 85.052276][ T28] audit: type=1400 audit(1777395193.020:734): avc: denied { ioctl } for pid=4231 comm="syz.3.174" path="socket:[7356]" dev="sockfs" ino=7356 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.283592][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.304989][ T28] audit: type=1400 audit(1777395193.020:735): avc: denied { write } for pid=4231 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.362327][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.507735][ T4253] netlink: 36 bytes leftover after parsing attributes in process `syz.4.181'. [ 85.632608][ T4259] xt_hashlimit: size too large, truncated to 1048576 [ 86.032944][ T28] audit: type=1400 audit(1777395194.120:736): avc: denied { ioctl } for pid=4261 comm="syz.2.178" path="socket:[7375]" dev="sockfs" ino=7375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.071703][ T4269] loop3: detected capacity change from 0 to 512 [ 86.146766][ T4269] EXT4-fs (loop3): 1 orphan inode deleted [ 86.153147][ T4269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.166029][ T4269] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.206477][ T4274] loop2: detected capacity change from 0 to 512 [ 86.282974][ T4253] loop4: detected capacity change from 0 to 1024 [ 86.332958][ T4274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.513103][ T4253] EXT4-fs: Ignoring removed orlov option [ 86.546445][ T28] audit: type=1400 audit(1777395194.420:737): avc: denied { sys_module } for pid=4261 comm="syz.2.178" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 86.583690][ T4274] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.604612][ T229] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 86.623755][ T4267] loop1: detected capacity change from 0 to 256 [ 86.632662][ T4253] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 86.648930][ T229] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 86.659944][ T4253] System zones: 0-1, 3-12 [ 86.687193][ T4253] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.746696][ T4267] FAT-fs (loop1): codepage cp852 not found [ 86.792990][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 86.878348][ T28] audit: type=1326 audit(1777395195.000:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 86.939402][ T28] audit: type=1326 audit(1777395195.030:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 87.010263][ T28] audit: type=1326 audit(1777395195.030:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 87.082419][ T28] audit: type=1326 audit(1777395195.030:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 87.444538][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.461090][ T4291] netlink: 32 bytes leftover after parsing attributes in process `syz.4.184'. [ 87.473331][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.533684][ T4291] netlink: 92 bytes leftover after parsing attributes in process `syz.4.184'. [ 87.542651][ T4291] netlink: 92 bytes leftover after parsing attributes in process `syz.4.184'. [ 87.685890][ T4299] loop0: detected capacity change from 0 to 512 [ 87.730010][ T4300] siw: device registration error -23 [ 87.744553][ T4299] EXT4-fs: Ignoring removed oldalloc option [ 87.771279][ T4299] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.812805][ T4301] lo speed is unknown, defaulting to 1000 [ 87.877840][ T4301] lo speed is unknown, defaulting to 1000 [ 88.084514][ T4299] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.187: invalid indirect mapped block 83886080 (level 1) [ 88.103141][ T4299] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 88.103341][ T4299] EXT4-fs (loop0): Remounting filesystem read-only [ 88.112485][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 88.112502][ C0] EXT4-fs (loop0): initial error at time 1777395196: ext4_free_branches:1023: inode 16 [ 88.112530][ C0] EXT4-fs (loop0): last error at time 1777395196: ext4_free_branches:1023: inode 16 [ 88.199045][ T4299] EXT4-fs (loop0): 1 orphan inode deleted [ 88.211591][ T4299] EXT4-fs (loop0): 1 truncate cleaned up [ 88.225655][ T4299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.247018][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.258551][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.377343][ T4306] bridge0: entered allmulticast mode [ 88.414033][ T4309] bridge_slave_1: left allmulticast mode [ 88.422149][ T4309] bridge_slave_1: left promiscuous mode [ 88.450430][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.459151][ T4309] bridge_slave_0: left allmulticast mode [ 88.465328][ T4309] bridge_slave_0: left promiscuous mode [ 88.471573][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.206529][ T4316] loop1: detected capacity change from 0 to 8192 [ 89.218207][ T4317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.247673][ T4317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.258373][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.267563][ T4317] loop2: detected capacity change from 0 to 1024 [ 89.274593][ T4317] EXT4-fs: Ignoring removed bh option [ 89.325051][ T4317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.345510][ T4323] loop4: detected capacity change from 0 to 512 [ 89.353313][ T4323] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 89.384434][ T4323] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 89.393831][ T4319] loop0: detected capacity change from 0 to 512 [ 89.467476][ T4319] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.467792][ T4323] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -6 [ 89.491163][ T4319] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.192: corrupted inode contents [ 89.503522][ T4319] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.504274][ T4319] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 89.514245][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 89.514336][ C0] EXT4-fs (loop0): initial error at time 1777395197: ext4_do_update_inode:5690: inode 15 [ 89.514782][ C0] EXT4-fs (loop0): last error at time 1777395197: ext4_do_update_inode:5690: inode 15 [ 89.553609][ T4319] loop0: lost filesystem error report for type 5 error -117 [ 89.554797][ T4319] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.192: corrupted inode contents [ 89.578230][ T4319] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.596668][ T4319] EXT4-fs error (device loop0): ext4_evict_inode:315: inode #15: comm syz.0.192: mark_inode_dirty error [ 89.621420][ T4319] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.626061][ T4319] EXT4-fs (loop0): 1 orphan inode deleted [ 89.657243][ T4319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 89.849000][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.119744][ T28] kauditd_printk_skb: 196 callbacks suppressed [ 90.119758][ T28] audit: type=1400 audit(1777395198.250:938): avc: denied { tracepoint } for pid=4333 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 90.160355][ T28] audit: type=1400 audit(1777395198.270:939): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 90.197098][ T4334] ref_ctr_offset mismatch. inode: 0xed offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 90.266306][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.288927][ T28] audit: type=1400 audit(1777395198.410:940): avc: denied { allowed } for pid=4333 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 90.311697][ T28] audit: type=1400 audit(1777395198.420:941): avc: denied { create } for pid=4333 comm="syz.0.195" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.348569][ T4334] xt_hashlimit: size too large, truncated to 1048576 [ 90.477755][ T28] audit: type=1400 audit(1777395198.600:942): avc: denied { module_request } for pid=4333 comm="syz.0.195" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 91.030710][ T4347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.196'. [ 91.039864][ T28] audit: type=1400 audit(1777395199.160:943): avc: denied { write } for pid=4338 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.064765][ T4343] loop3: detected capacity change from 0 to 512 [ 91.089063][ T28] audit: type=1400 audit(1777395199.210:944): avc: denied { mounton } for pid=4342 comm="syz.3.210" path="/39/file0" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.103955][ T4347] loop0: detected capacity change from 0 to 1024 [ 91.111884][ T4344] loop1: detected capacity change from 0 to 512 [ 91.117964][ T4343] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.210: iget: bogus i_mode (0) [ 91.118046][ T4343] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 91.118886][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 91.127745][ T4344] EXT4-fs: inline encryption not supported [ 91.135933][ C1] EXT4-fs (loop3): initial error at time 1777395199: ext4_orphan_get:1397: inode 17 [ 91.135978][ C1] EXT4-fs (loop3): last error at time 1777395199: ext4_orphan_get:1397: inode 17 [ 91.144037][ T4343] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.210: couldn't read orphan inode 17 (err -117) [ 91.210810][ T4352] netlink: 48 bytes leftover after parsing attributes in process `syz.4.209'. [ 91.306607][ T28] audit: type=1400 audit(1777395199.320:945): avc: denied { prog_run } for pid=4345 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.338360][ T4344] EXT4-fs: Invalid want_extra_isize -2147483648 [ 91.363127][ T4347] EXT4-fs: Ignoring removed orlov option [ 91.415960][ T4343] loop3: lost filesystem error report for type 5 error -117 [ 91.417310][ T4343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.440463][ T28] audit: type=1400 audit(1777395199.330:946): avc: denied { create } for pid=4345 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.471185][ T4348] xt_hashlimit: size too large, truncated to 1048576 [ 91.497665][ T4347] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 91.516141][ T4347] System zones: 0-1, 3-12 [ 91.524691][ T28] audit: type=1400 audit(1777395199.350:947): avc: denied { setopt } for pid=4345 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.562076][ T4347] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.678610][ T4341] ref_ctr_offset mismatch. inode: 0xf2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 91.705576][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 91.765804][ T4343] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.210: bg 0: block 7: invalid block bitmap [ 91.928039][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.064613][ T4363] loop0: detected capacity change from 0 to 512 [ 92.112186][ T4363] EXT4-fs (loop0): 1 orphan inode deleted [ 92.124025][ T4363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.138922][ T4363] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.582393][ T4344] loop1: detected capacity change from 0 to 8192 [ 92.756211][ T4344] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.779920][ T4344] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 92.788310][ T4344] FAT-fs (loop1): Filesystem has been set read-only [ 92.795848][ T4344] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 92.804958][ T4344] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 92.892828][ T50] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 92.928763][ T4369] netlink: 32 bytes leftover after parsing attributes in process `syz.3.200'. [ 93.033028][ T4369] netlink: 92 bytes leftover after parsing attributes in process `syz.3.200'. [ 93.075667][ T4369] netlink: 92 bytes leftover after parsing attributes in process `syz.3.200'. [ 93.124150][ T4377] loop4: detected capacity change from 0 to 512 [ 93.290139][ T4381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.319105][ T4381] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.404896][ T4379] FAT-fs (loop4): codepage cp852 not found [ 93.520785][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.601839][ T4396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.636000][ T4394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.205'. [ 94.993471][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.150673][ T4404] set_capacity_and_notify: 4 callbacks suppressed [ 95.150686][ T4404] loop2: detected capacity change from 0 to 512 [ 95.189747][ T4404] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 95.207907][ T4380] Set syz1 is full, maxelem 65536 reached [ 95.215110][ T4404] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 95.228974][ T4404] System zones: 0-1, 15-15, 18-18, 34-34 [ 95.240067][ T4404] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.247635][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.256972][ T4404] __quota_error: 52 callbacks suppressed [ 95.256983][ T4404] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 95.273056][ T4404] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 95.287957][ T4404] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 95.294967][ T4404] EXT4-fs (loop2): 1 truncate cleaned up [ 95.301111][ T4404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.321448][ T28] audit: type=1400 audit(1777395203.450:999): avc: denied { append } for pid=4403 comm="syz.2.214" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.361421][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.771129][ T4415] netlink: 48 bytes leftover after parsing attributes in process `syz.1.215'. [ 96.056548][ T4419] loop3: detected capacity change from 0 to 512 [ 96.137868][ T4419] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 96.155203][ T4419] EXT4-fs (loop3): mount failed [ 96.192525][ T28] audit: type=1400 audit(1777395204.000:1000): avc: denied { read } for pid=4416 comm="syz.0.217" name="vsock" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.291527][ T4422] ref_ctr_offset mismatch. inode: 0x10d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 96.340555][ T4418] loop0: detected capacity change from 0 to 512 [ 97.268785][ T4418] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #17: comm syz.0.217: iget: bogus i_mode (0) [ 97.297993][ T28] audit: type=1400 audit(1777395204.320:1001): avc: denied { open } for pid=4416 comm="syz.0.217" path="/dev/vsock" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.320884][ T28] audit: type=1400 audit(1777395204.360:1002): avc: denied { read } for pid=4416 comm="syz.0.217" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.544008][ T4418] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 97.552668][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 97.569019][ C1] EXT4-fs (loop0): initial error at time 1777395205: ext4_orphan_get:1397: inode 17 [ 97.578912][ C1] EXT4-fs (loop0): last error at time 1777395205: ext4_orphan_get:1397: inode 17 [ 97.594276][ T28] audit: type=1400 audit(1777395204.360:1003): avc: denied { open } for pid=4416 comm="syz.0.217" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.630266][ T4418] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.217: couldn't read orphan inode 17 (err -117) [ 97.643912][ T4418] loop0: lost filesystem error report for type 5 error -117 [ 97.644607][ T4418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.841576][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.952622][ T28] audit: type=1400 audit(1777395206.070:1004): avc: denied { mount } for pid=4425 comm="syz.1.219" name="/" dev="rpc_pipefs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 98.071486][ T4435] loop4: detected capacity change from 0 to 512 [ 98.146278][ T4435] EXT4-fs (loop4): 1 orphan inode deleted [ 98.161124][ T4435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.185904][ T4435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.260143][ T28] audit: type=1400 audit(1777395206.140:1005): avc: denied { create } for pid=4427 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.854381][ T28] audit: type=1400 audit(1777395206.150:1006): avc: denied { shutdown } for pid=4427 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.874081][ T28] audit: type=1400 audit(1777395206.210:1007): avc: denied { mounton } for pid=4427 comm="syz.4.218" path="/42/file0" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.899920][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 100.122103][ T4446] loop2: detected capacity change from 0 to 1024 [ 100.134528][ T4448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.222'. [ 100.291857][ T4446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.458618][ T4454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.224'. [ 100.500403][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.619304][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 100.619315][ T28] audit: type=1400 audit(1777395208.730:1013): avc: denied { mount } for pid=4452 comm="syz.1.225" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 100.806736][ T28] audit: type=1400 audit(1777395208.740:1014): avc: denied { create } for pid=4452 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.867003][ T4464] xt_hashlimit: size too large, truncated to 1048576 [ 100.914872][ T28] audit: type=1400 audit(1777395208.800:1015): avc: denied { write } for pid=4452 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.017049][ T4463] ref_ctr_offset mismatch. inode: 0x119 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 101.408954][ T28] audit: type=1400 audit(1777395209.520:1016): avc: denied { write } for pid=4473 comm="syz.0.230" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.457980][ T4479] hub 8-0:1.0: USB hub found [ 101.462886][ T4479] hub 8-0:1.0: 8 ports detected [ 101.488301][ T4479] netlink: 'syz.0.230': attribute type 36 has an invalid length. [ 101.592679][ T4480] loop1: detected capacity change from 0 to 512 [ 101.619921][ T4479] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 101.629848][ T4479] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 101.656523][ T4479] netlink: 'syz.0.230': attribute type 10 has an invalid length. [ 101.664611][ T4479] ipvlan0: entered allmulticast mode [ 101.669943][ T4479] veth0_vlan: entered allmulticast mode [ 101.675787][ T4479] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 101.737070][ T4480] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 101.753964][ T4480] EXT4-fs (loop1): mount failed [ 101.995600][ T4472] loop3: detected capacity change from 0 to 256 [ 102.586854][ T4484] ref_ctr_offset mismatch. inode: 0x102 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 102.984132][ T4472] FAT-fs (loop3): codepage cp852 not found [ 102.992638][ T4487] loop2: detected capacity change from 0 to 512 [ 103.018464][ T4487] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 103.088120][ T4487] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 103.110348][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 103.158212][ T4487] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 103.393165][ T28] audit: type=1400 audit(1777395211.520:1017): avc: denied { create } for pid=4495 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.412953][ T28] audit: type=1400 audit(1777395211.520:1018): avc: denied { setopt } for pid=4495 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.837884][ T4500] loop0: detected capacity change from 0 to 512 [ 103.866030][ T28] audit: type=1400 audit(1777395211.980:1019): avc: denied { bind } for pid=4504 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.895704][ T4500] EXT4-fs: Ignoring removed oldalloc option [ 103.903552][ T4500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.930944][ T4499] loop1: detected capacity change from 0 to 1024 [ 103.935914][ T28] audit: type=1400 audit(1777395212.020:1020): avc: denied { setopt } for pid=4504 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.949493][ T4500] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 103.975891][ T4505] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 103.980977][ T4499] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 103.981457][ T4499] System zones: 0-1, 3-36 [ 103.984989][ T28] audit: type=1400 audit(1777395212.050:1021): avc: denied { ioctl } for pid=4504 comm="syz.3.237" path="socket:[7778]" dev="sockfs" ino=7778 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.991773][ T4508] netlink: 14 bytes leftover after parsing attributes in process `syz.3.237'. [ 103.998697][ T4500] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 104.035267][ T4499] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.235: bad orphan inode 134217728 [ 104.045383][ T4500] EXT4-fs (loop0): orphan cleanup on readonly fs [ 104.059298][ T4499] loop1: lost filesystem error report for type 5 error -117 [ 104.069404][ T4509] loop3: detected capacity change from 0 to 512 [ 104.069706][ T4509] EXT4-fs: quotafile must be on filesystem root [ 104.080001][ T4500] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 104.105510][ T4499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.121584][ T4500] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.136567][ T4508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.160907][ T4508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.176777][ T4511] loop4: detected capacity change from 0 to 256 [ 104.183452][ T4500] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 104.198693][ T4511] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.225109][ T4511] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.236589][ T4508] bond0 (unregistering): Released all slaves [ 104.245410][ T4500] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.236: bg 0: block 40: padding at end of block bitmap is not set [ 104.261526][ T3373] syz1: Port: 1 Link DOWN [ 104.286541][ T4500] loop0: lost filesystem error report for type 5 error -117 [ 104.287297][ T4500] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 104.295017][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 104.295136][ C0] EXT4-fs (loop0): initial error at time 1777395212: ext4_validate_block_bitmap:441 [ 104.295187][ C0] EXT4-fs (loop0): last error at time 1777395212: ext4_validate_block_bitmap:441 [ 104.330982][ T4500] loop0: lost filesystem error report for type 5 error -117 [ 104.332155][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.333271][ T4500] EXT4-fs (loop0): 1 truncate cleaned up [ 104.372439][ T4500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.493199][ T4497] EXT4-fs (loop0): shut down requested (2) [ 104.527079][ T4516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.240'. [ 104.627535][ T4518] loop2: detected capacity change from 0 to 512 [ 104.687193][ T4518] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.776582][ T4518] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 104.818558][ T4518] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.241: bg 0: block 248: padding at end of block bitmap is not set [ 104.850927][ T4518] loop2: lost filesystem error report for type 5 error -117 [ 104.855360][ T4518] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.241: Failed to acquire dquot type 1 [ 104.864113][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 104.864233][ C1] EXT4-fs (loop2): last error at time 1777395212: ext4_validate_block_bitmap:441 [ 104.920338][ T4518] loop2: lost filesystem error report for type 5 error -28 [ 104.925778][ T4518] EXT4-fs (loop2): 1 truncate cleaned up [ 104.953013][ T4518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 105.002178][ T4518] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.241: Failed to acquire dquot type 1 [ 105.022422][ T4518] tmpfs: Unknown parameter 'siz˙' [ 105.071512][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.087866][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 105.137185][ T4532] loop4: detected capacity change from 0 to 512 [ 105.149621][ T4532] EXT4-fs: inline encryption not supported [ 105.173166][ T4536] ref_ctr_offset mismatch. inode: 0x131 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 105.204118][ T4532] EXT4-fs: Invalid want_extra_isize -2147483648 [ 105.260902][ T4536] xt_hashlimit: size too large, truncated to 1048576 [ 105.309236][ T4538] loop0: detected capacity change from 0 to 512 [ 105.464694][ T4538] EXT4-fs (loop0): 1 orphan inode deleted [ 105.479594][ T4538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.503632][ T4538] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.661941][ T4541] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.730505][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 105.764578][ T4532] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 105.775255][ T4532] FAT-fs (loop4): Filesystem has been set read-only [ 105.790661][ T4532] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 105.800834][ T4532] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 105.915734][ T4554] ref_ctr_offset mismatch. inode: 0x11a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 106.028147][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 106.028159][ T28] audit: type=1400 audit(1777395214.150:1036): avc: denied { write } for pid=4552 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.072357][ T4558] EXT4-fs: Ignoring removed oldalloc option [ 106.094944][ T4548] EXT4-fs (loop3): orphan cleanup on readonly fs [ 106.110392][ T4558] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.125356][ T4548] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.247: corrupted inode contents [ 106.140011][ T4558] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.252: invalid indirect mapped block 83886080 (level 1) [ 106.154364][ T4558] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 106.158877][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 106.174408][ C0] EXT4-fs (loop0): initial error at time 1777395214: ext4_free_branches:1023: inode 16 [ 106.184070][ C0] EXT4-fs (loop0): last error at time 1777395214: ext4_free_branches:1023: inode 16 [ 106.215958][ T4558] EXT4-fs (loop0): Remounting filesystem read-only [ 106.225737][ T4558] EXT4-fs (loop0): 1 orphan inode deleted [ 106.231811][ T4558] EXT4-fs (loop0): 1 truncate cleaned up [ 106.252848][ T4558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.279652][ T4548] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.280910][ T4548] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 106.290745][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 106.290865][ C0] EXT4-fs (loop3): initial error at time 1777395214: ext4_do_update_inode:5690: inode 15 [ 106.291322][ C0] EXT4-fs (loop3): last error at time 1777395214: ext4_do_update_inode:5690: inode 15 [ 107.055358][ T4548] loop3: lost filesystem error report for type 5 error -117 [ 108.003992][ T4548] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.247: corrupted inode contents [ 108.100109][ T28] audit: type=1400 audit(1777395216.220:1037): avc: denied { read write } for pid=4571 comm="syz.1.254" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 108.109320][ T4548] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.124714][ T28] audit: type=1400 audit(1777395216.220:1038): avc: denied { open } for pid=4571 comm="syz.1.254" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 108.136185][ T4554] xt_hashlimit: size too large, truncated to 1048576 [ 108.162698][ T4548] EXT4-fs error (device loop3): ext4_evict_inode:315: inode #15: comm syz.3.247: mark_inode_dirty error [ 108.180067][ T4548] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.181242][ T4548] EXT4-fs (loop3): 1 orphan inode deleted [ 108.202348][ T4548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 108.260077][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.279044][ T28] audit: type=1400 audit(1777395216.400:1039): avc: denied { ioctl } for pid=4571 comm="syz.1.254" path="socket:[8428]" dev="sockfs" ino=8428 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.337953][ T4576] set_capacity_and_notify: 3 callbacks suppressed [ 108.337966][ T4576] loop1: detected capacity change from 0 to 512 [ 108.382950][ T4576] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #17: comm syz.1.255: iget: bogus i_mode (0) [ 108.383408][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.409325][ T4576] loop1: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 108.409405][ T4576] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.255: couldn't read orphan inode 17 (err -117) [ 108.430370][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 108.430389][ C0] EXT4-fs (loop1): initial error at time 1777395216: ext4_orphan_get:1397: inode 17 [ 108.430425][ C0] EXT4-fs (loop1): last error at time 1777395216: ext4_orphan_get:1397: inode 17 [ 108.498513][ T28] audit: type=1400 audit(1777395216.620:1040): avc: denied { read } for pid=4580 comm="syz.0.257" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 108.498913][ T4576] loop1: lost filesystem error report for type 5 error -117 [ 108.522830][ T4576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.542537][ T28] audit: type=1400 audit(1777395216.620:1041): avc: denied { open } for pid=4580 comm="syz.0.257" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 108.595395][ T4587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.256'. [ 108.721682][ T4576] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.255: bg 0: block 7: invalid block bitmap [ 108.779024][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.319438][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 109.349062][ T28] audit: type=1400 audit(1777395217.470:1042): avc: denied { ioctl } for pid=4593 comm="syz.4.268" path="socket:[7900]" dev="sockfs" ino=7900 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.374047][ T4596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.261'. [ 109.393531][ T28] audit: type=1400 audit(1777395217.520:1043): avc: denied { write } for pid=4590 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.434080][ T28] audit: type=1400 audit(1777395217.520:1044): avc: denied { nlmsg_write } for pid=4590 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.563728][ T4594] loop4: detected capacity change from 0 to 128 [ 109.604347][ T4599] loop0: detected capacity change from 0 to 512 [ 109.628698][ T4591] loop2: detected capacity change from 0 to 164 [ 109.643735][ T4591] iso9660: Bad value for 'check' [ 109.705771][ T4599] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.727320][ T28] audit: type=1400 audit(1777395217.850:1045): avc: denied { read } for pid=4593 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.796090][ T4599] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 109.840427][ T4599] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.258: bg 0: block 248: padding at end of block bitmap is not set [ 109.876981][ T4599] loop0: lost filesystem error report for type 5 error -117 [ 109.878895][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 109.892863][ C0] EXT4-fs (loop0): last error at time 1777395218: ext4_validate_block_bitmap:441 [ 109.902971][ T4599] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.258: Failed to acquire dquot type 1 [ 109.914304][ T4599] loop0: lost filesystem error report for type 5 error -28 [ 109.915640][ T4599] EXT4-fs (loop0): 1 truncate cleaned up [ 109.931462][ T4599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 109.952042][ T4599] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.258: Failed to acquire dquot type 1 [ 109.965653][ T4599] tmpfs: Unknown parameter 'siz˙' [ 109.981811][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 110.000473][ T4615] loop1: detected capacity change from 0 to 1024 [ 110.024419][ T4615] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 110.024419][ T4615] [ 110.056888][ T4615] SET target dimension over the limit! [ 110.115566][ T4615] loop1: detected capacity change from 0 to 1024 [ 110.126676][ T4615] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.291998][ T4619] loop0: detected capacity change from 0 to 256 [ 110.313557][ T4615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 110.359769][ T4615] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.384269][ T4619] FAT-fs (loop0): codepage cp852 not found [ 110.511680][ T4635] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.263: lblock 0 mapped to illegal pblock 0 (length 1) [ 110.845744][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 111.380321][ T3372] IPVS: starting estimator thread 0... [ 111.472332][ T4647] loop1: detected capacity change from 0 to 8192 [ 111.488933][ T4648] IPVS: using max 2400 ests per chain, 120000 per kthread [ 111.681169][ T4650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.273'. [ 111.694265][ T4652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 112.030773][ T4659] netlink: 48 bytes leftover after parsing attributes in process `syz.0.272'. [ 112.183947][ T4661] loop2: detected capacity change from 0 to 512 [ 112.251637][ T4661] EXT4-fs: Ignoring removed oldalloc option [ 112.335655][ T4661] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.351434][ T4656] loop4: detected capacity change from 0 to 164 [ 112.416835][ T4656] iso9660: Bad value for 'check' [ 112.443143][ T4661] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.277: invalid indirect mapped block 83886080 (level 1) [ 112.459161][ T4661] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 112.459299][ T4661] EXT4-fs (loop2): Remounting filesystem read-only [ 112.475046][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 112.475065][ C0] EXT4-fs (loop2): initial error at time 1777395220: ext4_free_branches:1023: inode 16 [ 112.475091][ C0] EXT4-fs (loop2): last error at time 1777395220: ext4_free_branches:1023: inode 16 [ 112.580353][ T4661] EXT4-fs (loop2): 1 orphan inode deleted [ 112.595001][ T4661] EXT4-fs (loop2): 1 truncate cleaned up [ 112.610684][ T4661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.644058][ T4665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.278'. [ 112.665847][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 112.665862][ T28] audit: type=1400 audit(1777395220.790:1059): avc: denied { create } for pid=4669 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.724761][ T28] audit: type=1400 audit(1777395220.820:1060): avc: denied { connect } for pid=4669 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.808103][ T4663] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.473325][ T28] audit: type=1400 audit(1777395221.600:1061): avc: denied { create } for pid=4669 comm="syz.0.279" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 113.546570][ T4673] set_capacity_and_notify: 1 callbacks suppressed [ 113.546689][ T4673] loop0: detected capacity change from 0 to 512 [ 113.572136][ T4663] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 113.621259][ T4663] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.276: bg 0: block 248: padding at end of block bitmap is not set [ 113.672030][ T4663] loop1: lost filesystem error report for type 5 error -117 [ 113.676760][ T4663] Quota error (device loop1): write_blk: dquota write failed [ 113.684612][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 113.684761][ C0] EXT4-fs (loop1): last error at time 1777395221: ext4_validate_block_bitmap:441 [ 113.736893][ T4663] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 113.758793][ T4663] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.276: Failed to acquire dquot type 1 [ 113.806026][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.817914][ T28] audit: type=1400 audit(1777395221.940:1062): avc: denied { execute } for pid=4683 comm="syz.3.280" name="file0" dev="tmpfs" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.854369][ T4663] loop1: lost filesystem error report for type 5 error -28 [ 113.874425][ T4673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.895309][ T3372] IPVS: starting estimator thread 0... [ 113.917542][ T4663] EXT4-fs (loop1): 1 truncate cleaned up [ 114.008124][ T4691] loop2: detected capacity change from 0 to 8192 [ 114.014531][ T4692] IPVS: using max 2352 ests per chain, 117600 per kthread [ 114.023472][ T4663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 114.061638][ T4673] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.131722][ T4663] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 114.155373][ T4663] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 114.176808][ T4663] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.276: Failed to acquire dquot type 1 [ 114.177226][ T4698] tmpfs: Unknown parameter 'siz˙' [ 114.486407][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.516292][ T28] audit: type=1400 audit(1777395222.640:1063): avc: denied { unlink } for pid=3298 comm="syz-executor" name="file0" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.546545][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 114.574986][ T4702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.287'. [ 114.637484][ T4710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 114.988179][ T4717] loop3: detected capacity change from 0 to 764 [ 115.005352][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 115.044701][ T28] audit: type=1400 audit(1777395223.170:1064): avc: denied { mount } for pid=4716 comm="syz.3.290" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 115.220148][ T4722] loop3: detected capacity change from 0 to 512 [ 115.256734][ T4722] EXT4-fs: Ignoring removed oldalloc option [ 115.290340][ T4722] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.304291][ T4722] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.292: invalid indirect mapped block 83886080 (level 1) [ 115.350405][ T4722] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 115.350602][ T4722] EXT4-fs (loop3): Remounting filesystem read-only [ 115.359750][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 115.359785][ C0] EXT4-fs (loop3): initial error at time 1777395223: ext4_free_branches:1023: inode 16 [ 115.359841][ C0] EXT4-fs (loop3): last error at time 1777395223: ext4_free_branches:1023: inode 16 [ 115.408220][ T4724] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 115.450066][ T4729] netlink: 14 bytes leftover after parsing attributes in process `syz.2.291'. [ 115.474141][ T4733] loop1: detected capacity change from 0 to 512 [ 115.474216][ T4722] EXT4-fs (loop3): 1 orphan inode deleted [ 115.512261][ T4722] EXT4-fs (loop3): 1 truncate cleaned up [ 115.513277][ T4733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.528444][ T4722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.546854][ T4729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.558275][ T4734] loop2: detected capacity change from 0 to 512 [ 115.605899][ T4734] EXT4-fs: quotafile must be on filesystem root [ 115.629572][ T4733] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.649978][ T4729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.698741][ T4729] bond0 (unregistering): Released all slaves [ 116.544506][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.608161][ T3372] IPVS: starting estimator thread 0... [ 116.624460][ T4731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.293'. [ 116.659889][ T4731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.293'. [ 116.708944][ T4749] IPVS: using max 2880 ests per chain, 144000 per kthread [ 116.722411][ T4748] loop3: detected capacity change from 0 to 8192 [ 116.860093][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.111259][ T4751] loop3: detected capacity change from 0 to 512 [ 117.243191][ T4765] hub 8-0:1.0: USB hub found [ 117.248010][ T4765] hub 8-0:1.0: 8 ports detected [ 117.272152][ T4751] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.488200][ T4751] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 117.645073][ T4751] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.297: bg 0: block 248: padding at end of block bitmap is not set [ 117.671480][ T4751] loop3: lost filesystem error report for type 5 error -117 [ 117.678914][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 117.692669][ C0] EXT4-fs (loop3): last error at time 1777395225: ext4_validate_block_bitmap:441 [ 117.704224][ T4751] __quota_error: 2 callbacks suppressed [ 117.704281][ T4751] Quota error (device loop3): write_blk: dquota write failed [ 117.758087][ T4751] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 117.799770][ T4751] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.297: Failed to acquire dquot type 1 [ 117.813455][ T4751] loop3: lost filesystem error report for type 5 error -28 [ 117.841717][ T4751] EXT4-fs (loop3): 1 truncate cleaned up [ 117.882972][ T4751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 117.933858][ T4751] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 117.945164][ T4751] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 117.957257][ T4751] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.297: Failed to acquire dquot type 1 [ 118.010473][ T4777] tmpfs: Unknown parameter 'siz˙' [ 118.049790][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 118.175340][ T28] audit: type=1400 audit(1777395226.240:1067): avc: denied { create } for pid=4772 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.216634][ T4778] netlink: 212 bytes leftover after parsing attributes in process `syz.4.302'. [ 118.233924][ T28] audit: type=1400 audit(1777395226.250:1068): avc: denied { ioctl } for pid=4772 comm="syz.2.301" path="socket:[8746]" dev="sockfs" ino=8746 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.574950][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 118.915193][ T28] audit: type=1400 audit(1777395227.040:1069): avc: denied { mount } for pid=4795 comm="syz.2.306" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 119.152361][ T28] audit: type=1400 audit(1777395227.270:1070): avc: denied { create } for pid=4799 comm="syz.4.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.219483][ T28] audit: type=1400 audit(1777395227.340:1071): avc: denied { associate } for pid=4799 comm="syz.4.307" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 119.268209][ T3373] IPVS: starting estimator thread 0... [ 119.317860][ T4802] loop4: detected capacity change from 0 to 8192 [ 119.399003][ T4804] IPVS: using max 2304 ests per chain, 115200 per kthread [ 119.500211][ T4813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.310'. [ 119.696020][ T4814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.310'. [ 120.067908][ T28] audit: type=1400 audit(1777395228.190:1072): avc: denied { mount } for pid=4816 comm="syz.1.311" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 120.174850][ T4826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 120.230642][ T4828] loop0: detected capacity change from 0 to 164 [ 120.311976][ T4828] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 120.342163][ T4830] hub 8-0:1.0: USB hub found [ 120.346832][ T4830] hub 8-0:1.0: 8 ports detected [ 120.816289][ T4835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 120.995111][ T4839] hub 8-0:1.0: USB hub found [ 121.000074][ T4839] hub 8-0:1.0: 8 ports detected [ 121.046751][ T4839] netlink: 'syz.2.318': attribute type 10 has an invalid length. [ 121.054649][ T4839] ipvlan0: entered allmulticast mode [ 121.059997][ T4839] veth0_vlan: entered allmulticast mode [ 121.066604][ T4839] team0: Device ipvlan0 failed to register rx_handler [ 121.082415][ T4840] loop1: detected capacity change from 0 to 164 [ 121.158689][ T4840] iso9660: Bad value for 'check' [ 121.475021][ T4854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 121.500908][ T4854] netlink: 'syz.0.325': attribute type 13 has an invalid length. [ 121.518086][ T4854] netlink: 'syz.0.325': attribute type 17 has an invalid length. [ 121.784641][ T4854] ipvlan0: left allmulticast mode [ 121.798230][ T4854] veth0_vlan: left allmulticast mode [ 121.843221][ T4856] loop3: detected capacity change from 0 to 128 [ 121.898522][ T23] lo speed is unknown, defaulting to 1000 [ 121.913419][ T23] syz0: Port: 1 Link ACTIVE [ 121.915278][ T4866] bridge_slave_1: left allmulticast mode [ 121.932746][ T4866] bridge_slave_1: left promiscuous mode [ 121.947138][ T4866] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.024893][ T4872] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x1 [ 122.082139][ T4874] loop7: detected capacity change from 0 to 7 [ 122.104757][ C1] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 122.465539][ T4878] loop4: detected capacity change from 0 to 764 [ 122.493269][ T4878] Symlink component flag not implemented [ 122.499846][ T4878] Symlink component flag not implemented [ 122.834833][ T4881] lo speed is unknown, defaulting to 1000 [ 122.854495][ T4887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 122.863525][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 122.863545][ T28] audit: type=1326 audit(1777395230.920:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 123.082450][ T28] audit: type=1326 audit(1777395230.920:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 123.144906][ T4881] lo speed is unknown, defaulting to 1000 [ 123.176527][ T28] audit: type=1326 audit(1777395230.930:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 123.268397][ T28] audit: type=1326 audit(1777395230.930:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 123.360536][ T28] audit: type=1326 audit(1777395230.930:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 123.434529][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 123.445045][ T28] audit: type=1326 audit(1777395230.930:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 123.470669][ T4896] loop0: detected capacity change from 0 to 512 [ 123.504442][ T4896] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #17: comm syz.0.334: iget: bogus i_mode (0) [ 123.515623][ T4896] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 123.515760][ T4896] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.334: couldn't read orphan inode 17 (err -117) [ 123.524944][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 123.524962][ C0] EXT4-fs (loop0): initial error at time 1777395231: ext4_orphan_get:1397: inode 17 [ 123.525004][ C0] EXT4-fs (loop0): last error at time 1777395231: ext4_orphan_get:1397: inode 17 [ 123.526485][ T28] audit: type=1326 audit(1777395230.930:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 123.585088][ T28] audit: type=1326 audit(1777395230.940:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 123.608587][ T28] audit: type=1326 audit(1777395230.940:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 123.632108][ T28] audit: type=1326 audit(1777395230.940:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 123.659134][ T4896] loop0: lost filesystem error report for type 5 error -117 [ 123.669529][ T4896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.820523][ T4896] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.334: bg 0: block 7: invalid block bitmap [ 123.862844][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.954173][ T4908] loop4: detected capacity change from 0 to 256 [ 125.065698][ T4916] loop1: detected capacity change from 0 to 512 [ 125.087733][ T4916] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.145531][ T4909] loop3: detected capacity change from 0 to 164 [ 126.158254][ T4916] EXT4-fs (loop1): 1 truncate cleaned up [ 126.176734][ T4916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.380795][ T4909] iso9660: Bad value for 'check' [ 127.142267][ T4925] hub 8-0:1.0: USB hub found [ 127.142442][ T4925] hub 8-0:1.0: 8 ports detected [ 127.149191][ T4925] netlink: 'syz.0.339': attribute type 36 has an invalid length. [ 127.154734][ T4925] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 127.154806][ T4925] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 127.226300][ T4916] mmap: syz.1.338 (4916) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.537192][ T4928] loop3: detected capacity change from 0 to 512 [ 127.556120][ T4928] EXT4-fs: Ignoring removed nobh option [ 127.567042][ T4930] loop4: detected capacity change from 0 to 1024 [ 127.579691][ T4930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.579984][ T4930] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 127.593676][ T4928] EXT4-fs (loop3): orphan cleanup on readonly fs [ 127.616575][ T4928] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.340: EA inode hash validation failed [ 127.618536][ T4928] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 127.692341][ T4928] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.340: corrupted inode contents [ 127.692404][ T4928] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.694156][ T4930] loop4: detected capacity change from 0 to 512 [ 127.698973][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 127.699053][ C0] EXT4-fs (loop3): initial error at time 1777395235: ext4_do_update_inode:5690: inode 15 [ 127.699454][ C0] EXT4-fs (loop3): last error at time 1777395235: ext4_do_update_inode:5690: inode 15 [ 127.708651][ T4930] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.775858][ T4928] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #15: comm syz.3.340: mark_inode_dirty error [ 127.793387][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.797420][ T4928] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.807172][ T4928] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.340: corrupted inode contents [ 127.807288][ T4928] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.808953][ T4928] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.340: mark_inode_dirty error [ 127.809073][ T4928] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.811980][ T4930] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.341: bad orphan inode 131083 [ 127.819782][ T4928] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.340: mark inode dirty (error -117) [ 127.819961][ T4928] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.907642][ T4928] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 127.908047][ T4928] EXT4-fs (loop3): 1 orphan inode deleted [ 127.911246][ T4930] loop4: lost filesystem error report for type 5 error -117 [ 127.926688][ T4930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.930081][ T28] kauditd_printk_skb: 225 callbacks suppressed [ 127.930093][ T28] audit: type=1400 audit(1777395236.060:1314): avc: denied { bind } for pid=4932 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.980539][ T4933] loop0: detected capacity change from 0 to 512 [ 127.986849][ T4933] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 127.995473][ T4928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 128.005000][ T4937] loop1: detected capacity change from 0 to 512 [ 128.061135][ T28] audit: type=1400 audit(1777395236.190:1315): avc: denied { bind } for pid=4927 comm="syz.3.340" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.102527][ T4933] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.343: Invalid inode bitmap blk 4 in block_group 0 [ 128.144698][ T4933] loop0: lost filesystem error report for type 5 error -117 [ 128.146166][ T4933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.169582][ T4937] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.215900][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.274253][ T4937] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 128.292001][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.301391][ T4937] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.344: bg 0: block 248: padding at end of block bitmap is not set [ 128.303726][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.321084][ T4937] loop1: lost filesystem error report for type 5 error -117 [ 128.332306][ T4937] Quota error (device loop1): write_blk: dquota write failed [ 128.340046][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 128.340309][ C1] EXT4-fs (loop1): last error at time 1777395236: ext4_validate_block_bitmap:441 [ 128.577692][ T4937] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 128.578583][ T4953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 128.604664][ T4937] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.344: Failed to acquire dquot type 1 [ 128.608644][ T4957] loop4: detected capacity change from 0 to 512 [ 128.618587][ T4937] loop1: lost filesystem error report for type 5 error -28 [ 128.668342][ T4957] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #17: comm syz.4.348: iget: bogus i_mode (0) [ 128.692206][ T4937] EXT4-fs (loop1): 1 truncate cleaned up [ 128.708654][ T4957] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 128.708753][ T4957] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.348: couldn't read orphan inode 17 (err -117) [ 128.717911][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 128.717930][ C1] EXT4-fs (loop4): initial error at time 1777395236: ext4_orphan_get:1397: inode 17 [ 128.717957][ C1] EXT4-fs (loop4): last error at time 1777395236: ext4_orphan_get:1397: inode 17 [ 128.729625][ T4937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 128.764412][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 128.777948][ T4957] loop4: lost filesystem error report for type 5 error -117 [ 128.795080][ T4957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.814600][ T4960] netlink: 'syz.3.353': attribute type 13 has an invalid length. [ 128.823730][ T4960] netlink: 'syz.3.353': attribute type 17 has an invalid length. [ 128.834840][ T4962] loop0: detected capacity change from 0 to 512 [ 128.853010][ T4962] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 128.862719][ T4962] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 128.873180][ T4960] ipvlan0: left allmulticast mode [ 128.878278][ T4960] veth0_vlan: left allmulticast mode [ 128.881301][ T4937] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 128.885363][ T4964] tmpfs: Unknown parameter 'siz˙' [ 128.908598][ T4962] EXT4-fs (loop0): failed to open journal device unknown-block(0,3) -6 [ 128.917350][ T4937] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 128.934407][ T23] lo speed is unknown, defaulting to 1000 [ 128.964671][ T4937] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.344: Failed to acquire dquot type 1 [ 129.070107][ T4957] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 129.092531][ T4957] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.348: bg 0: block 7: invalid block bitmap [ 129.112742][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 129.491436][ T4977] ref_ctr_offset mismatch. inode: 0x19c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 129.554295][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.111153][ T28] audit: type=1400 audit(1777395238.230:1316): avc: denied { connect } for pid=4979 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.162420][ T28] audit: type=1400 audit(1777395238.290:1317): avc: denied { setopt } for pid=4979 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.187932][ T4977] xt_hashlimit: size too large, truncated to 1048576 [ 130.201239][ T4984] loop2: detected capacity change from 0 to 512 [ 130.220034][ T4987] netlink: 132 bytes leftover after parsing attributes in process `syz.3.360'. [ 130.256126][ T4984] EXT4-fs: Ignoring removed nobh option [ 130.286239][ T4989] hub 8-0:1.0: USB hub found [ 130.291035][ T4989] hub 8-0:1.0: 8 ports detected [ 130.303693][ T4989] netlink: 'syz.4.357': attribute type 36 has an invalid length. [ 130.346691][ T4989] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 130.356565][ T4989] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 130.414724][ T4984] EXT4-fs (loop2): orphan cleanup on readonly fs [ 130.485004][ T4984] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.359: EA inode hash validation failed [ 130.540481][ T4984] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 130.596762][ T4984] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.359: corrupted inode contents [ 130.643692][ T4984] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.646268][ T4984] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #15: comm syz.2.359: mark_inode_dirty error [ 130.656413][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 130.656571][ C1] EXT4-fs (loop2): initial error at time 1777395238: ext4_do_update_inode:5690: inode 15 [ 130.656805][ C1] EXT4-fs (loop2): last error at time 1777395238: ext4_do_update_inode:5690: inode 15 [ 130.658635][ T28] audit: type=1400 audit(1777395238.290:1318): avc: denied { write } for pid=4979 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.698929][ T4984] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.719881][ T28] audit: type=1400 audit(1777395238.290:1319): avc: denied { write } for pid=4979 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.727706][ T4984] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.359: corrupted inode contents [ 130.764758][ T4984] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.766942][ T4984] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.359: mark_inode_dirty error [ 130.794203][ T4984] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.795160][ T4984] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.359: mark inode dirty (error -117) [ 130.818750][ T4984] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.819791][ T4984] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 130.841568][ T4984] EXT4-fs (loop2): 1 orphan inode deleted [ 130.852226][ T4984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 130.911057][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.930836][ T4993] loop2: detected capacity change from 0 to 1024 [ 130.937870][ T4993] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 130.937870][ T4993] [ 130.958645][ T4993] SET target dimension over the limit! [ 131.019425][ T4993] loop2: detected capacity change from 0 to 1024 [ 131.028556][ T4993] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.055924][ T4993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.069102][ T4993] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.128799][ T4993] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.361: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.166260][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.179284][ T5000] macvtap0: entered promiscuous mode [ 131.195804][ T5004] loop1: detected capacity change from 0 to 512 [ 131.206138][ T5004] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 131.215222][ T5004] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 132.147662][ T5012] netlink: 48 bytes leftover after parsing attributes in process `syz.2.362'. [ 132.172168][ T5007] hub 8-0:1.0: USB hub found [ 132.177024][ T5007] hub 8-0:1.0: 8 ports detected [ 132.225699][ T5004] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 132.235325][ T5007] netlink: 'syz.0.372': attribute type 36 has an invalid length. [ 132.246239][ T5007] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 132.256067][ T5007] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 133.282933][ T28] audit: type=1400 audit(1777395241.370:1320): avc: denied { execute } for pid=5019 comm="syz.4.367" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 133.313521][ T5026] sctp: [Deprecated]: syz.4.367 (pid 5026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.313521][ T5026] Use struct sctp_sack_info instead [ 133.341824][ T5024] ref_ctr_offset mismatch. inode: 0x1bb offset: 0x0 ref_ctr_offset(old): 0x1000000 ref_ctr_offset(new): 0x0 [ 133.481055][ T5034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 133.513461][ T5033] lo speed is unknown, defaulting to 1000 [ 133.527316][ T5022] xt_hashlimit: size too large, truncated to 1048576 [ 133.690558][ T5035] loop1: detected capacity change from 0 to 8192 [ 133.751790][ T5035] loop1: p1 < > p2 p4 < p5 > [ 133.777006][ T5035] loop1: partition table partially beyond EOD, truncated [ 133.891233][ T5041] loop4: detected capacity change from 0 to 512 [ 133.931041][ T5041] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 133.946947][ T5041] EXT4-fs (loop4): mount failed [ 134.042401][ T5033] lo speed is unknown, defaulting to 1000 [ 134.105289][ T28] audit: type=1400 audit(1777395242.230:1321): avc: denied { bind } for pid=5032 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.131992][ T5035] loop1: p1 start 134217728 is beyond EOD, truncated [ 134.271799][ T5035] loop1: p2 size 591360 extends beyond EOD, truncated [ 135.109647][ T28] audit: type=1400 audit(1777395242.260:1322): avc: denied { setopt } for pid=5032 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.129316][ T28] audit: type=1400 audit(1777395242.260:1323): avc: denied { listen } for pid=5032 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.441886][ T28] audit: type=1400 audit(1777395242.260:1324): avc: denied { connect } for pid=5032 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.462086][ T28] audit: type=1400 audit(1777395242.400:1325): avc: denied { accept } for pid=5032 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.482048][ T28] audit: type=1400 audit(1777395242.400:1326): avc: denied { write } for pid=5032 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.531326][ T5035] loop1: p5 size 591360 extends beyond EOD, truncated [ 135.701832][ T28] audit: type=1400 audit(1777395243.410:1327): avc: denied { read } for pid=5032 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.989369][ T5056] loop4: detected capacity change from 0 to 512 [ 136.017766][ T5056] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.059142][ T5056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.177346][ T5058] loop0: detected capacity change from 0 to 512 [ 136.199206][ T5056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.213158][ T5058] EXT4-fs: Ignoring removed nobh option [ 136.291212][ T5056] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.688415][ T5066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.376'. [ 136.706382][ T28] audit: type=1400 audit(1777395244.810:1328): avc: denied { create } for pid=5060 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 136.764683][ T5058] EXT4-fs (loop0): orphan cleanup on readonly fs [ 136.811191][ T5058] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.374: EA inode hash validation failed [ 136.848091][ T28] audit: type=1400 audit(1777395244.970:1329): avc: denied { read } for pid=5055 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.875996][ T5058] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.374: corrupted inode contents [ 136.924638][ T5068] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.375: iget: bad i_size value: 2533274857506816 [ 136.937385][ T5058] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.938160][ T5058] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.374: mark_inode_dirty error [ 136.947770][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 136.947840][ C0] EXT4-fs (loop0): initial error at time 1777395245: ext4_do_update_inode:5690: inode 15 [ 136.948011][ C0] EXT4-fs (loop0): last error at time 1777395245: ext4_do_update_inode:5690: inode 15 [ 136.996682][ T5058] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.017813][ T5058] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.374: corrupted inode contents [ 137.041671][ T5058] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.043370][ T5058] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.374: mark_inode_dirty error [ 137.068814][ T5058] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.095146][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.105570][ T5058] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.374: mark inode dirty (error -117) [ 137.134435][ T5058] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.136429][ T5058] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 137.152328][ T5076] loop4: detected capacity change from 0 to 764 [ 137.161091][ T5058] EXT4-fs (loop0): 1 orphan inode deleted [ 137.246794][ T5058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 137.419479][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.444907][ T5070] loop2: detected capacity change from 0 to 512 [ 137.454627][ T5070] EXT4-fs: Ignoring removed oldalloc option [ 137.455893][ T5070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.527344][ T5070] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 137.527374][ T5070] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 137.544520][ T5070] EXT4-fs (loop2): orphan cleanup on readonly fs [ 137.557608][ T5070] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 137.557699][ T5070] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 137.574295][ T5070] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.378: bg 0: block 40: padding at end of block bitmap is not set [ 137.574405][ T5070] loop2: lost filesystem error report for type 5 error -117 [ 137.576197][ T5070] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 137.576297][ T5070] loop2: lost filesystem error report for type 5 error -117 [ 137.578883][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 137.578900][ C0] EXT4-fs (loop2): initial error at time 1777395245: ext4_validate_block_bitmap:441 [ 137.578921][ C0] EXT4-fs (loop2): last error at time 1777395245: ext4_mb_clear_bb:6679 [ 137.579985][ T5070] EXT4-fs (loop2): 1 truncate cleaned up [ 137.637681][ T5087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.637875][ T5087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.665285][ T5070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.671661][ T5087] loop4: detected capacity change from 0 to 1024 [ 137.686369][ T5087] EXT4-fs: Ignoring removed bh option [ 137.702824][ T5087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.710661][ T5070] EXT4-fs (loop2): shut down requested (2) [ 137.720515][ T5081] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 137.930307][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.972693][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 138.001282][ T5102] ref_ctr_offset mismatch. inode: 0x1d7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 138.017478][ T5102] xt_hashlimit: size too large, truncated to 1048576 [ 138.057489][ T5105] loop0: detected capacity change from 0 to 512 [ 138.068624][ T5105] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #17: comm syz.0.386: iget: bogus i_mode (0) [ 138.109386][ T5107] netlink: 48 bytes leftover after parsing attributes in process `syz.1.385'. [ 138.209565][ T5105] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 138.209775][ T5105] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.386: couldn't read orphan inode 17 (err -117) [ 138.218933][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 138.218954][ C1] EXT4-fs (loop0): initial error at time 1777395246: ext4_orphan_get:1397: inode 17 [ 138.218981][ C1] EXT4-fs (loop0): last error at time 1777395246: ext4_orphan_get:1397: inode 17 [ 138.461697][ T5105] loop0: lost filesystem error report for type 5 error -117 [ 138.463610][ T5105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.564646][ T5105] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.386: bg 0: block 7: invalid block bitmap [ 138.604651][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.616766][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.630665][ T5113] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.388'. [ 138.647843][ T5115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.387'. [ 138.662986][ T28] kauditd_printk_skb: 158 callbacks suppressed [ 138.663075][ T28] audit: type=1400 audit(1777395246.790:1487): avc: denied { setopt } for pid=5114 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.709998][ T5117] ref_ctr_offset mismatch. inode: 0x1d8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 138.724871][ T5119] loop4: detected capacity change from 0 to 1024 [ 138.730757][ T5121] loop3: detected capacity change from 0 to 764 [ 138.738686][ T5119] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 138.759312][ T5119] System zones: 0-1, 3-36 [ 138.774843][ T5119] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.390: bad orphan inode 134217728 [ 138.785607][ T5119] loop4: lost filesystem error report for type 5 error -117 [ 138.786103][ T5119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.824898][ T5119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.390'. [ 139.003182][ T5128] loop2: detected capacity change from 0 to 512 [ 139.057833][ T5128] EXT4-fs (loop2): orphan cleanup on readonly fs [ 139.066944][ T5117] xt_hashlimit: size too large, truncated to 1048576 [ 139.134138][ T5128] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.393: corrupted inode contents [ 139.226747][ T5139] hub 8-0:1.0: USB hub found [ 139.231671][ T5139] hub 8-0:1.0: 8 ports detected [ 139.243955][ T5139] netlink: 'syz.3.394': attribute type 36 has an invalid length. [ 139.258611][ T5139] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 139.268452][ T5139] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 139.337527][ T5128] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.341808][ T5128] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 139.352588][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 139.352628][ C1] EXT4-fs (loop2): initial error at time 1777395247: ext4_do_update_inode:5690: inode 15 [ 139.352940][ C1] EXT4-fs (loop2): last error at time 1777395247: ext4_do_update_inode:5690: inode 15 [ 139.648173][ T5128] loop2: lost filesystem error report for type 5 error -117 [ 139.680061][ T5128] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.393: corrupted inode contents [ 139.736300][ T5128] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.738840][ T5128] EXT4-fs error (device loop2): ext4_evict_inode:315: inode #15: comm syz.2.393: mark_inode_dirty error [ 139.769108][ T5128] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.770972][ T5128] EXT4-fs (loop2): 1 orphan inode deleted [ 139.771193][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.820233][ T5128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 139.838656][ T5141] loop4: detected capacity change from 0 to 512 [ 139.872321][ T5141] EXT4-fs: Ignoring removed oldalloc option [ 139.893155][ T5141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.932626][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.956141][ T5141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.976814][ T5141] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 139.987274][ T5141] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 139.995758][ T5141] EXT4-fs (loop4): orphan cleanup on readonly fs [ 140.000371][ T5147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.397'. [ 140.002251][ T5141] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 140.020605][ T5141] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 140.035049][ T28] audit: type=1326 audit(1777395248.160:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 140.058475][ T5141] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 140.071426][ T5141] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.395: bg 0: block 40: padding at end of block bitmap is not set [ 140.085655][ T5141] loop4: lost filesystem error report for type 5 error -117 [ 140.086004][ T5141] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 140.086030][ T28] audit: type=1326 audit(1777395248.160:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 140.093377][ T28] audit: type=1326 audit(1777395248.160:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 140.093537][ T28] audit: type=1326 audit(1777395248.160:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 140.102107][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 140.102125][ C1] EXT4-fs (loop4): initial error at time 1777395248: ext4_validate_block_bitmap:441 [ 140.102149][ C1] EXT4-fs (loop4): last error at time 1777395248: ext4_validate_block_bitmap:441 [ 140.197718][ T5141] loop4: lost filesystem error report for type 5 error -117 [ 140.197857][ T28] audit: type=1326 audit(1777395248.210:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 140.197977][ T5141] EXT4-fs (loop4): 1 truncate cleaned up [ 140.198348][ T5141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.205647][ T28] audit: type=1326 audit(1777395248.210:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 140.271563][ T28] audit: type=1326 audit(1777395248.210:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 140.295986][ T28] audit: type=1326 audit(1777395248.210:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167562cdd9 code=0x7ffc0000 [ 140.365390][ T5154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 140.420666][ T5141] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.395: bad symlink. [ 140.447711][ T5141] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.395: bad symlink. [ 140.532711][ T5154] EXT4-fs: Ignoring removed bh option [ 140.551331][ T5157] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #17: comm syz.0.400: iget: bogus i_mode (0) [ 140.551587][ T5154] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 140.577310][ T5157] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 140.578901][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 140.578917][ C1] EXT4-fs (loop0): initial error at time 1777395248: ext4_orphan_get:1397: inode 17 [ 140.578948][ C1] EXT4-fs (loop0): last error at time 1777395248: ext4_orphan_get:1397: inode 17 [ 140.579036][ T5157] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.400: couldn't read orphan inode 17 (err -117) [ 140.579060][ T5157] loop0: lost filesystem error report for type 5 error -117 [ 140.579523][ T5157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.620707][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.655593][ T5154] EXT4-fs (loop2): 1 truncate cleaned up [ 140.689905][ T5154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.724507][ T5157] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.400: bg 0: block 7: invalid block bitmap [ 140.756295][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.827164][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.898273][ T5165] EXT4-fs: test_dummy_encryption option not supported [ 141.218431][ T5173] sctp: [Deprecated]: syz.0.403 (pid 5173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.218431][ T5173] Use struct sctp_sack_info instead [ 141.240630][ T5172] ref_ctr_offset mismatch. inode: 0x1d7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 141.390471][ T5168] xt_hashlimit: size too large, truncated to 1048576 [ 141.616172][ T5185] hub 8-0:1.0: USB hub found [ 141.621034][ T5185] hub 8-0:1.0: 8 ports detected [ 141.631691][ T5185] netlink: 'syz.3.407': attribute type 36 has an invalid length. [ 141.646490][ T5185] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 141.656319][ T5185] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 142.179246][ T5191] ref_ctr_offset mismatch. inode: 0x1ef offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 142.291282][ T5197] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 142.325394][ T5192] xt_hashlimit: size too large, truncated to 1048576 [ 142.334513][ T5199] netlink: 14 bytes leftover after parsing attributes in process `syz.1.410'. [ 142.392153][ T5203] set_capacity_and_notify: 4 callbacks suppressed [ 142.392165][ T5203] loop1: detected capacity change from 0 to 512 [ 142.415045][ T5203] EXT4-fs: quotafile must be on filesystem root [ 142.422578][ T5199] bond0 (unregistering): Released all slaves [ 142.459062][ T5208] loop4: detected capacity change from 0 to 512 [ 142.484004][ T5208] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #17: comm syz.4.414: iget: bogus i_mode (0) [ 142.510163][ T5208] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 142.510698][ T5208] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.414: couldn't read orphan inode 17 (err -117) [ 142.519887][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 142.519917][ C1] EXT4-fs (loop4): initial error at time 1777395250: ext4_orphan_get:1397: inode 17 [ 142.519947][ C1] EXT4-fs (loop4): last error at time 1777395250: ext4_orphan_get:1397: inode 17 [ 142.602030][ T5208] loop4: lost filesystem error report for type 5 error -117 [ 142.657772][ T5208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.774791][ T5208] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.414: bg 0: block 7: invalid block bitmap [ 142.842247][ T5216] loop2: detected capacity change from 0 to 512 [ 142.872162][ T5216] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 142.903688][ T5216] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 142.927078][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.036361][ T5221] hub 8-0:1.0: USB hub found [ 143.041144][ T5221] hub 8-0:1.0: 8 ports detected [ 143.052564][ T5221] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 143.060764][ T5221] ipvlan0: entered allmulticast mode [ 143.066068][ T5221] veth0_vlan: entered allmulticast mode [ 143.074186][ T5221] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 143.628019][ T5216] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 143.754707][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 143.754823][ T28] audit: type=1326 audit(1777395251.880:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8b84cdd9 code=0x7ffc0000 [ 143.891701][ T5232] ref_ctr_offset mismatch. inode: 0x1fb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 143.925331][ T28] audit: type=1326 audit(1777395251.910:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f8b84cb42 code=0x7ffc0000 [ 144.076414][ T28] audit: type=1326 audit(1777395251.910:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3f8b84cbd7 code=0x7ffc0000 [ 144.242898][ T5234] xt_hashlimit: size too large, truncated to 1048576 [ 144.305582][ T28] audit: type=1326 audit(1777395251.920:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3f8b809ad1 code=0x7ffc0000 [ 144.390648][ T28] audit: type=1326 audit(1777395251.920:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3f8b84dbc9 code=0x7ffc0000 [ 144.610413][ T28] audit: type=1326 audit(1777395251.920:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3f8b80922c code=0x7ffc0000 [ 145.168075][ T28] audit: type=1326 audit(1777395251.920:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3f8b809b3b code=0x7ffc0000 [ 145.398826][ T28] audit: type=1326 audit(1777395251.920:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3f8b80928e code=0x7ffc0000 [ 145.422162][ T28] audit: type=1326 audit(1777395251.920:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8b84cdd9 code=0x7ffc0000 [ 145.445622][ T28] audit: type=1326 audit(1777395251.920:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8b84cdd9 code=0x7ffc0000 [ 145.560781][ T5240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.419'. [ 145.716724][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 146.092508][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 146.284948][ T5259] loop4: detected capacity change from 0 to 512 [ 146.331803][ T5259] EXT4-fs: Ignoring removed nobh option [ 146.347638][ T5267] hub 8-0:1.0: USB hub found [ 146.352463][ T5267] hub 8-0:1.0: 8 ports detected [ 146.363954][ T5267] netlink: 'syz.3.423': attribute type 10 has an invalid length. [ 146.372082][ T5267] ipvlan0: entered allmulticast mode [ 146.377413][ T5267] veth0_vlan: entered allmulticast mode [ 146.385458][ T5267] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 146.478737][ T5259] EXT4-fs (loop4): orphan cleanup on readonly fs [ 146.589683][ T5259] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.426: EA inode hash validation failed [ 146.766328][ T5259] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 146.827273][ T5259] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.426: corrupted inode contents [ 147.198452][ T5259] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 147.202750][ T5259] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #15: comm syz.4.426: mark_inode_dirty error [ 147.212177][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 147.212277][ C0] EXT4-fs (loop4): initial error at time 1777395255: ext4_do_update_inode:5690: inode 15 [ 147.212507][ C0] EXT4-fs (loop4): last error at time 1777395255: ext4_do_update_inode:5690: inode 15 [ 147.362911][ T5277] hub 8-0:1.0: USB hub found [ 147.367984][ T5277] hub 8-0:1.0: 8 ports detected [ 147.386937][ T5277] netlink: 'syz.3.429': attribute type 10 has an invalid length. [ 147.394865][ T5277] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 147.451183][ T5259] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 147.762226][ T5259] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.426: corrupted inode contents [ 148.264653][ T5259] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.532313][ T5259] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.426: mark_inode_dirty error [ 148.583517][ T5280] loop3: detected capacity change from 0 to 256 [ 148.603209][ T5259] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.610448][ T5259] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.426: mark inode dirty (error -117) [ 148.639665][ T5259] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.640977][ T5259] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 148.661437][ T5259] EXT4-fs (loop4): 1 orphan inode deleted [ 148.695896][ T5259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 148.785136][ T5289] loop1: detected capacity change from 0 to 512 [ 149.238085][ T5289] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 149.769918][ T5289] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.432: Invalid inode bitmap blk 4 in block_group 0 [ 149.782952][ T5289] loop1: lost filesystem error report for type 5 error -117 [ 149.784543][ T5289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.785279][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.443283][ T5292] loop0: detected capacity change from 0 to 128 [ 150.467260][ T5292] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.618048][ T5296] loop3: detected capacity change from 0 to 1024 [ 150.624952][ T5296] EXT4-fs: Ignoring removed bh option [ 150.643663][ T5296] EXT4-fs (loop3): stripe (14) is not aligned with cluster size (16), stripe is disabled [ 150.660011][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.688253][ T5298] loop4: detected capacity change from 0 to 512 [ 150.697061][ T5296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.732053][ T5298] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 150.769248][ T5298] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 150.825093][ T5298] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -6 [ 150.864481][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 150.864494][ T28] audit: type=1326 audit(1777395258.990:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 150.903864][ T5296] xt_hashlimit: overflow, try lower: 6/0 [ 150.960109][ T28] audit: type=1326 audit(1777395258.990:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 150.993179][ T28] audit: type=1326 audit(1777395258.990:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 151.018156][ T28] audit: type=1326 audit(1777395258.990:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 151.063995][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 151.077725][ T28] audit: type=1326 audit(1777395258.990:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 151.079325][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.154295][ T28] audit: type=1326 audit(1777395258.990:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 152.104593][ T28] audit: type=1326 audit(1777395258.990:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 152.423748][ T5324] loop4: detected capacity change from 0 to 512 [ 152.436241][ T5319] lo speed is unknown, defaulting to 1000 [ 152.446203][ T28] audit: type=1326 audit(1777395258.990:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 152.510954][ T5324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.574303][ T28] audit: type=1326 audit(1777395259.000:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f5639a5cdd9 code=0x7ffc0000 [ 152.601554][ T5324] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.669743][ T28] audit: type=1400 audit(1777395259.060:1709): avc: denied { setattr } for pid=5295 comm="syz.3.434" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.720801][ T5319] lo speed is unknown, defaulting to 1000 [ 153.603163][ T5336] loop0: detected capacity change from 0 to 764 [ 153.662366][ T5336] Symlink component flag not implemented [ 153.668337][ T5336] Symlink component flag not implemented [ 153.970287][ T5339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'. [ 153.988940][ T5338] SET target dimension over the limit! [ 154.031224][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 154.053534][ T5341] netlink: 'syz.2.445': attribute type 13 has an invalid length. [ 154.065719][ T5341] netlink: 'syz.2.445': attribute type 17 has an invalid length. [ 154.496382][ T5341] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.629962][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.679794][ T5341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.716893][ T5341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.759377][ T5341] veth1_vlan: left promiscuous mode [ 154.775395][ T5341] veth0_vlan: left promiscuous mode [ 154.796863][ T5341] veth0_vlan: entered promiscuous mode [ 154.815615][ T5341] veth1_vlan: entered promiscuous mode [ 154.831660][ T5341] ipvlan0: left allmulticast mode [ 154.838977][ T5341] veth0_vlan: left allmulticast mode [ 154.852570][ T5341] veth1_macvtap: left promiscuous mode [ 154.872582][ T5341] veth0_macvtap: left promiscuous mode [ 154.894915][ T5341] veth0_macvtap: entered promiscuous mode [ 154.923652][ T5341] veth1_macvtap: entered promiscuous mode [ 154.958211][ T5341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.007138][ T5341] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 155.029916][ T5341] 8021q: adding VLAN 0 to HW filter on device eth0 [ 155.049607][ T5341] 8021q: adding VLAN 0 to HW filter on device eth1 [ 155.062833][ T5341] 8021q: adding VLAN 0 to HW filter on device eth2 [ 155.072779][ T5341] 8021q: adding VLAN 0 to HW filter on device eth3 [ 155.084956][ T5347] netlink: 'syz.3.446': attribute type 49 has an invalid length. [ 155.232489][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.239668][ T50] bridge0: port 1(bridge_slave_0) entered listening state [ 155.273729][ T5358] netlink: 20 bytes leftover after parsing attributes in process `syz.4.449'. [ 156.288957][ T4277] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.264670][ T4277] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.273160][ T4277] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.291430][ T5366] loop4: detected capacity change from 0 to 512 [ 157.942388][ T5365] loop2: detected capacity change from 0 to 512 [ 158.109690][ T4277] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.298377][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 159.269190][ T5365] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 159.269223][ T5365] EXT4-fs: failed to create workqueue [ 159.284891][ T5365] EXT4-fs (loop2): mount failed [ 159.377988][ T5374] lo speed is unknown, defaulting to 1000 [ 159.576346][ T5364] loop1: detected capacity change from 0 to 764 [ 161.023616][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 161.023631][ T28] audit: type=1400 audit(1777395269.150:1808): avc: denied { mount } for pid=5380 comm="syz.2.454" name="/" dev="ramfs" ino=10662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 161.151397][ T5387] ref_ctr_offset mismatch. inode: 0x21d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 161.165379][ T5374] lo speed is unknown, defaulting to 1000 [ 161.302732][ T5387] xt_hashlimit: size too large, truncated to 1048576 [ 161.323840][ T5394] loop3: detected capacity change from 0 to 1024 [ 161.360924][ T5394] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 161.410600][ T5394] System zones: 0-1, 3-36 [ 161.440863][ T5394] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.456: bad orphan inode 134217728 [ 161.488923][ T5394] loop3: lost filesystem error report for type 5 error -117 [ 161.489444][ T5394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.599117][ T5392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.456'. [ 161.771964][ T5394] ================================================================== [ 161.780088][ T5394] BUG: KCSAN: data-race in filemap_read / filemap_read [ 161.786957][ T5394] [ 161.789299][ T5394] write to 0xffff8881041b1b20 of 8 bytes by task 5392 on cpu 1: [ 161.796931][ T5394] filemap_read+0x98d/0xa10 [ 161.801455][ T5394] generic_file_read_iter+0x79/0x330 [ 161.806754][ T5394] ext4_file_read_iter+0x1cc/0x290 [ 161.811878][ T5394] copy_splice_read+0x471/0x6c0 [ 161.816741][ T5394] splice_direct_to_actor+0x28f/0x670 [ 161.822125][ T5394] do_splice_direct+0x119/0x1a0 [ 161.826988][ T5394] do_sendfile+0x382/0x650 [ 161.831410][ T5394] __x64_sys_sendfile64+0x105/0x150 [ 161.836625][ T5394] x64_sys_call+0x2dc4/0x3020 [ 161.841310][ T5394] do_syscall_64+0x12c/0x3b0 [ 161.845904][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.851797][ T5394] [ 161.854116][ T5394] read to 0xffff8881041b1b20 of 8 bytes by task 5394 on cpu 0: [ 161.861648][ T5394] filemap_read+0x6f/0xa10 [ 161.866078][ T5394] generic_file_read_iter+0x79/0x330 [ 161.871372][ T5394] ext4_file_read_iter+0x1cc/0x290 [ 161.876497][ T5394] copy_splice_read+0x471/0x6c0 [ 161.881358][ T5394] splice_direct_to_actor+0x28f/0x670 [ 161.886743][ T5394] do_splice_direct+0x119/0x1a0 [ 161.891602][ T5394] do_sendfile+0x382/0x650 [ 161.896019][ T5394] __x64_sys_sendfile64+0x105/0x150 [ 161.901232][ T5394] x64_sys_call+0x2dc4/0x3020 [ 161.905906][ T5394] do_syscall_64+0x12c/0x3b0 [ 161.910500][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.916400][ T5394] [ 161.918718][ T5394] value changed: 0x000000000000011b -> 0x000000000000011c [ 161.925845][ T5394] [ 161.928165][ T5394] Reported by Kernel Concurrency Sanitizer on: [ 161.934314][ T5394] CPU: 0 UID: 0 PID: 5394 Comm: syz.3.456 Tainted: G W syzkaller #0 PREEMPT(full) [ 161.945072][ T5394] Tainted: [W]=WARN [ 161.948867][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.958916][ T5394] ================================================================== [ 162.162041][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.519194][ C0] bridge0: port 1(bridge_slave_0) entered learning state