last executing test programs: 14.124187216s ago: executing program 2 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000000)=""/48, 0x30) 13.115658408s ago: executing program 2 (id=168): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) syz_emit_ethernet(0xbe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x454, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12, 0x5, 0x0, 0xe08ca72be36d9991, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x3fffc, 0x400, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x9, 0x8000, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.283249451s ago: executing program 3 (id=171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x6, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x100000000000000) splice(r1, 0x0, r4, 0x0, 0x100035ab, 0x4) listen(0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000080)=@file={0x1}, 0x6e) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000010c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) accept$unix(r3, 0x0, &(0x7f00000003c0)) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fedbdf250400000005000a000100000008000100", @ANYRES32=0x0], 0x2c}}, 0x0) 10.065080987s ago: executing program 3 (id=174): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet6(0xa, 0x3, 0x8c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x2001, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x14, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 10.01123495s ago: executing program 2 (id=175): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x21, 0x6, 0x800, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x104) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 10.01034223s ago: executing program 4 (id=176): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1218, &(0x7f00000005c0)="$eJzs3M9rHGUYB/AnsbZNan6otdqC+KIXvQxJDl70EiQF6YLSNkIrCFMz0SXjbsgsgRWxevLqX+FBBBG8CeJNL7n4HwjecvFYQXylu2lrululom4Jn89l3+V9v7PPwy4D7zIz+y9/+t7WZlNslr2YnpqK6e2IdCNFium45aN44aXvf3j60pWrF1ZbrbWLKZ1fvbz8Ykpp/plv3/zgi2e/65164+v5b07E3uJb+7+s/Lx3Zu/s/u+X3203qd2kTreXynSt2+2V1+oqbbSbrSKl1+uqbKrU7jTVzqH5zbq7vd1PZWdjbnZ7p2qaVHb6aavqp1439Xb6qXynbHdSURRpbja4f8duj9Y/v5Fzjsj54TgeOec8HxGn4pGYi/lYiMV4NB6Lx+N0PBFn4sl4Kr766cv+zQQAAAAAAAAAAAAAAAAAAADw77n7/v+ZmP3L+//PDlZNumoAAAAAAAAAAAAAAAAAAAA4Wi5duXphtdVau5jSyYj6k9313fXh63B+dTPaUUcVS7EQv0Xkz/KBGDwJ4PyrrbWlNLAYH9fXD/LXd9cfOpxfHjxOIHIezS8P8+lwfuZWicP8SizE6cH7kfzK2PzJeP65P31+EQvx49vRjTo2Bge5k/9wOaVXXmvdlT83WAcAAABHQZFuG7t/L4p7zQ/zI/8PjNnfL43Zn9/Mnjs20daJiKb//lZZ19WOwQM/OD7ZMn7NOf/Nmpkj+4u6d18nIuIfH3kqIh6MBkcGByeI6QmfoPhP3fnSJ10JAAAAAAAAAAAA9+P/uJxw0j0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAf7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCrAAAA//+EwM1v") r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000480), &(0x7f0000000280)=@udp=r6, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f00000007c0)="57691c5ce5cce8", &(0x7f00000000c0)=@udp=r6, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r5, &(0x7f0000000380), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r7 = creat(&(0x7f00000003c0)='./bus\x00', 0x50) fallocate(r7, 0x0, 0xbf5, 0x2000402) 9.542128524s ago: executing program 0 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xdb, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x8000000bc}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x200) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000700)=""/236) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) 9.04204263s ago: executing program 3 (id=179): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) unlink(0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80143, 0x1ff) close(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000180)=0x2000, 0x4) 9.027247971s ago: executing program 4 (id=180): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x0, r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x0, 0x8, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x7ffffffe}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2, 0xa, 0x7, 0x6, 0x2, 0x0, 0x70bd26, 0x25dfdbff}, 0x10}}, 0x8000) 8.85083788s ago: executing program 1 (id=181): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@noload}, {@block_validity}]}, 0xfa, 0x481, &(0x7f0000003380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 8.416996193s ago: executing program 0 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) accept(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) 7.612660444s ago: executing program 4 (id=183): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc0, 0x8}, 0x880, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x23, 0x5, 0x0) listen(r0, 0x0) r1 = gettid() r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) gettid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x1058e, &(0x7f00000007c0), 0x0, 0x478, &(0x7f0000001000)="$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") r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x1, 0x0) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f0000000080)=[0x10001, 0x9, 0x2, 0xb3, 0x7, 0x4, 0x761a, 0xfffffc94]) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x891b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 5.19412074s ago: executing program 1 (id=184): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x47a, &(0x7f0000000180)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a82, 0x0) sendfile(r1, r1, 0x0, 0x7) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = timerfd_create(0x0, 0x80000) timerfd_gettime(r2, &(0x7f0000000000)) timer_create(0x2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x40000) getdents(r0, &(0x7f0000000ac0)=""/182, 0xb1) 5.183385691s ago: executing program 0 (id=185): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a0000001100030068"], 0x60}}, 0x0) sync() sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$eJzs3U1sHFcdAPD/rO18OAl2AxWlSGBRBJGi+iNGZINAJD0hFaM2BS5FDUuysd2svZZ3LdUuh0SotDdUxKXqCVk58CWlUhEtFKkSoohD4cAJgcK9qqlUviQQWjSzs6kbb+yETTyV/ftJTzPzZnfff/Y/M5k3b+INYNcaiYiTEdEXEUcjYiivL+UlLrZL+rrVySszaUmi1XrkrSSSiHh28spM57OSfHog/4B9EXF6NaL01MZ2G8srFyq1WnUxXx5rzi2MNZZX7p+dq0xXp6vz5XJ5vFw+fmLi9m3ro4f3H37u11/4z89f++6Hv/K93zyZxnswX7d+O26XkRjJv5OB2Luuvj+JOH+7GytIut/0RzvXN+Pu6nd+eYdD4iZ9/geXSkXHAABsv/QC4HBEfCy7/h+KvuxqLuLkoa+9PRT/fLzo+AAAAIDetYaG4nPpFAAAANixStkzsElpNH8W4GCUSqOj7Wd4PxCDpVq90Tx6vr40f679rOxwDJTOz9aq4/mzwsMxkKTLE9n8O8vHrluejIi7IuKZof3Z8ujZeu1c0Tc/AAAAYIc7GHH10W+9/MEDN+j/p/48VHSUAAAAQC/S/v+hq4PZn+r6u34+AAAA7Ehp///tb//1t6H/DwAAADtWp///0NRUPDQ11VrNf/9qvj49e2Fm4cSx8dG5pbOjZ+uLC6PT9fp09j/257b+3Fq9vjBxLJaeGGtWG82xxvLKmbn60nzzTPa7XmeqA9uwbcDWHj55tlp0DAAAwPa566Ov/jGJiIuf2Z+V1J58nb467Gx+ABx2r76iAwAK0190AEBh9PGBZIv1+2604uLtjwUAALgzPvkh4/+wWxn/h93L+D/sXsb/YffSxweM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNZarSRaAAAAwI7WWF65UKnVqotmzJgxc22m6DuTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXPTt5ZaZTtqvNV36xXS1xI2unImK4nf/VvLTX9Me+bLovBiJi8G9J9K97XxIRfT22/e97IkbisSdfbF1+KS2R74c9fiy34OKliLin2/GfpLtFDOd7wfX5L2V7Rm9+8sM0/6u/W18n/9url/wP9tj2yx9J8//g3evr5H/3uPfhoiOgSL9/pugIKNIf1oqOgCKdfqToCCjSlz5ddAQU6fm3io6AV09FxHi3/l8p7RZe6+Vf3//ry+4Q9ebISNr/e/ro+rqN/b/SGz02wybWTkV8NiJWN9z/K3VeMtyXLx3K7gcMJOdna9XxiHhfmsMY2JsuT2zSxuUzS491q3/wdJr/Kz9d+NMLP+uUtP10+s6rSm/07333+85VmpVet5u2tUsR9/Z3y39y7f5vcoP7v++/yTZmXv/G493qJ3+V5v+V5zfPP3dS6/sRn+h6/CfXXpPOjTXnFsYayyv3z85VpqvT1flyuTxeLh8/MTGWnQ7GOieFLobWDny1W/3XH0jz/98p+S9OevwPbp7/7PzfWF65UKnVqouNW2/jX2++vtqt/vBTaf4f+Ob/c/7fk3w5C3BPXvdEpdlcnIjYk3xxY/2xW495p+p8H53vK83/kfu6//vfuf5rn/9LG+7/D+fTdP3IJm0OHH/h6W71H78vG/+7+mLr8kuO/2Kk+T+3xfGfvOv4v/WZ5/7yjx91a/vHe9P8v/ZmZ/w3LWn7nbHgtvT4/1QWzJG8xvXf1m42QUXHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/0vAAD//wqlOeU=") getpgrp(0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x33, 0x0, &(0x7f0000000240)="e300c0678bb63701fd85b69fb68a0000ec67838717bd86ddece156d0f9421c617dd2455138a253e98cf382a75b4e359485bd74", 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) 5.148984623s ago: executing program 3 (id=186): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="54010000100001000000000800000000ac1414bb00000000000000000000000000000000000000000000000000000001000200004e2000500000200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aafffffffc33000000ac1414aa00000000000000000000f0000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000001000000000001040000090000000000000000000000000000000a00010090000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x154}}, 0x24000058) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r4, 0x0, 0x0, 0x80000) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000006c0)="f4db", 0x0, 0x7}, 0x38) writev(r5, &(0x7f0000000040), 0x2) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) 5.089073026s ago: executing program 2 (id=187): setitimer(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @local, 0x4e6, 0x5, 0x2, 0x100, 0x800, 0x100000}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x80) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000700)=0x14) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x57e, &(0x7f00000011c0)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x242, 0x10) socket$tipc(0x1e, 0x5, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.074662186s ago: executing program 1 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27a99fdd470f5961}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000001, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0x2, 0x0, 0x0, 0x82) 4.80922767s ago: executing program 3 (id=189): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket(0x1e, 0x2, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x14b041, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 4.43328382s ago: executing program 4 (id=190): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r7 = socket(0x1, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.149859315s ago: executing program 1 (id=191): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 3.981631893s ago: executing program 0 (id=192): openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.948557905s ago: executing program 4 (id=193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xb, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x4a6, 0x3, 0xd, 0x7, 0x5, 0x13f5, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x3, 0x99e00000, 0xb, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x15, 0x3fe, 0xa955, 0x5000, 0x1, 0xe6, 0x6, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x7fe, 0xa3, 0x10000, 0xff, 0x0, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x40, 0x6, 0xe2f3, 0x4, 0x7f, 0x79c5, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x40000003, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0xc28, 0x2, 0xf, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7fb, 0x100, 0x4, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x5, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0xdc, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x7a94, 0x7fffffff, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2.935736898s ago: executing program 2 (id=194): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@nobarrier}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open$cgroup(&(0x7f0000000a00)={0x1, 0x80, 0x9, 0x5, 0x9, 0x3, 0x0, 0x7fff, 0x8cda, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000280), 0x8}, 0x10040, 0x6, 0x0, 0x9, 0x1, 0x5, 0x101, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xa, r0, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r3, &(0x7f0000000380)="fad33075218151db00316f3a27", 0xd, 0x6008092, &(0x7f0000000080)={0x11, 0x1c, r2, 0x1, 0xda, 0x6, @remote}, 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1a, 0x0, &(0x7f0000000300)) 750.103931ms ago: executing program 1 (id=195): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) lseek(r0, 0x7, 0x5) listen(r1, 0x800000b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x803) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) listen(r3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100070c10000000000000000000", 0x58}], 0x1) 583.35005ms ago: executing program 4 (id=196): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, 0x0, 0xff2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, 0x0, 0x10, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) remap_file_pages(&(0x7f00007b4000/0x1000)=nil, 0x1000, 0x4, 0x3e0400000000, 0x1) 582.17925ms ago: executing program 0 (id=197): socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x3, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty}}}}, 0x0) 515.857233ms ago: executing program 0 (id=198): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000203, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x80, 0x80, 0x8, 0x4, {{0x16, 0x4, 0x0, 0x6, 0x58, 0x66, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @remote, {[@timestamp={0x44, 0x28, 0xd2, 0x0, 0x1, [0x3ff, 0x0, 0x5, 0x9, 0x1, 0x5, 0x400, 0x21, 0x2]}, @timestamp_prespec={0x44, 0x1c, 0xa5, 0x3, 0x9, [{@broadcast, 0x3103}, {@loopback, 0x4}, {@remote, 0x3}]}]}}}}}) socket(0x23, 0x1, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00679a3601ff050000000000000066f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x0, '\x00', r2, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = socket(0x22, 0x2, 0x3) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000000)) bind$inet(r5, 0x0, 0x0) 430.837458ms ago: executing program 1 (id=199): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x6}, 0x2732, 0x0, 0x0, 0x3, 0xfff, 0x7fff, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3fc03, 0x25f14}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x54}}, 0x0) ftruncate(r1, 0x4) 30.181319ms ago: executing program 3 (id=200): r0 = socket(0x22, 0x802, 0x0) dup(r0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$eJzs3MtvG8UfAPCv7Th9/+JfKY+WFkILouKRNOmDHrgUgcQBJCQ4FHEKSVqVug1qgkSrCloO5YgqcUcckfgLuFAuCDghcUICiSNCqlAvLZyM1t5NXcdO7MSxA/58JCcznlnNfHd37PGs1wEMrNHkTy5ie0T8EhEjtey9FUZr/+7cujz9163L07moVF7/M1etd/vW5emsarbdtlqmUlmm3WtvRUyVy7MX0vz4wrl3x+cvXnr2zLmp07OnZ89PHj9+5PC+4WOTR7sSZxLX7T0fzO3d/fKb11+dPnn97e+/TPq7PS2vj6NbRmt7t6knut1Yn+2oS+eG+tgROlKIiORwFavjfyQKsWWxbCRe+qivnQPWVaWSr2xqXXylAvyHJRN1YBBlb/TJ59/s0aOpx4Zw80QsrmPcSR+1kqHIp3WK6Wek9TAaESev/P1Z8oh1WocAAKh340REPNNs/pePB+rq/S+9hlKKiP9HxM6IuC8idkXE/RHVug9GxEMdtt94hWTp/KcysqrA2pTM/55Pr23dO//LZn9RKqS5HdX4i7lTZ8qzh9J9cjCKm5L8xDJtfPPiT5+0Kquf/yWPpP1sLpj244+hhgW6mamFqbXEXO/m1Yg9Q83izy3OeZP58e6I2LPKNs489cXeVmWlFeNfRhcm5ZXPI56sHf8r0RB/Jtfy+uTEc8cmj45vjvLsofHsrFjqhx+vvdaq/ZWP//q6eaMSWxvO/4bdWsptjpi/eOls9XrtfIcN/Bxx7dePW36mWe35P5x7o5oeTp97f2ph4cJExHDulaXPT97dNstn9ZPz/+CB5uN/Z7pNcvwfjojkJN4XEY9ExKNp3x+LiP0RcWCZXfDdC4+/03n8y6zKd1ES/0zT17/F87+UpO4e/84ThbPfftV5/Imt6fE/Us0dTLdp5/Wv3Q6udf8BAADAv0G++h34XH5sMZ3Pj43VvsO/K7bmy3PzC0+fmnvv/Eztu/KlKOazla6RuvXQiXQtL8tPNuQPp+vGnxa2VPNj03PlmX4HDwNuW4vxn/i9UPv/W197CKwr92vB4DL+YXAZ/zC4jH8YXMY/DK5m4//DPvQD6L0V3v+39KofQO+Z/8PgMv5hcK00/vf35l5koLda3hufX9Mt/xJ9Snw9vLbfamg/EfkNEvIGTRTaqHM1HYW1Z4rRtPJQ2z9mcU8ie1NfufKmpkV9fFECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoon8CAAD///T43is=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmsg(r4, &(0x7f0000000a80)={&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000640)}, {0x0}, {&(0x7f0000000840)}], 0x4}, 0x20000012) 0s ago: executing program 2 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x2, 0x80805, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x6a040000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. [ 28.790000][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 28.790017][ T28] audit: type=1400 audit(1776749541.173:70): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.819499][ T28] audit: type=1400 audit(1776749541.193:71): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.820246][ T3307] cgroup: Unknown subsys name 'net' [ 28.847234][ T28] audit: type=1400 audit(1776749541.223:72): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.940481][ T3307] cgroup: Unknown subsys name 'cpuset' [ 28.946759][ T3307] cgroup: Unknown subsys name 'rlimit' [ 29.066095][ T28] audit: type=1400 audit(1776749541.443:73): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.089483][ T28] audit: type=1400 audit(1776749541.443:74): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.119749][ T28] audit: type=1400 audit(1776749541.443:75): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.140577][ T28] audit: type=1400 audit(1776749541.443:76): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.161123][ T28] audit: type=1400 audit(1776749541.443:77): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.182183][ T28] audit: type=1400 audit(1776749541.473:78): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.190062][ T3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.207066][ T28] audit: type=1400 audit(1776749541.473:79): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.255798][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.973891][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 31.024242][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 31.046568][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 31.102645][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 31.119005][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.126206][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.133404][ T3319] bridge_slave_0: entered allmulticast mode [ 31.139909][ T3319] bridge_slave_0: entered promiscuous mode [ 31.156824][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.163974][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.171333][ T3319] bridge_slave_1: entered allmulticast mode [ 31.177789][ T3319] bridge_slave_1: entered promiscuous mode [ 31.184683][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 31.224709][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.231932][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.239077][ T3320] bridge_slave_0: entered allmulticast mode [ 31.245794][ T3320] bridge_slave_0: entered promiscuous mode [ 31.261872][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.269031][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.276176][ T3324] bridge_slave_0: entered allmulticast mode [ 31.282620][ T3324] bridge_slave_0: entered promiscuous mode [ 31.289325][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.296594][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.303744][ T3320] bridge_slave_1: entered allmulticast mode [ 31.310231][ T3320] bridge_slave_1: entered promiscuous mode [ 31.317829][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.332869][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.340106][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.347229][ T3324] bridge_slave_1: entered allmulticast mode [ 31.353760][ T3324] bridge_slave_1: entered promiscuous mode [ 31.364932][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.403552][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.419150][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.426450][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.433686][ T3328] bridge_slave_0: entered allmulticast mode [ 31.440091][ T3328] bridge_slave_0: entered promiscuous mode [ 31.447770][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.458102][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.467942][ T3319] team0: Port device team_slave_0 added [ 31.477822][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.484967][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.492226][ T3328] bridge_slave_1: entered allmulticast mode [ 31.498683][ T3328] bridge_slave_1: entered promiscuous mode [ 31.506121][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.519900][ T3319] team0: Port device team_slave_1 added [ 31.546653][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.553962][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.561348][ T3327] bridge_slave_0: entered allmulticast mode [ 31.567844][ T3327] bridge_slave_0: entered promiscuous mode [ 31.583831][ T3320] team0: Port device team_slave_0 added [ 31.594113][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.601391][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.608467][ T3327] bridge_slave_1: entered allmulticast mode [ 31.614832][ T3327] bridge_slave_1: entered promiscuous mode [ 31.622422][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.632267][ T3324] team0: Port device team_slave_0 added [ 31.638647][ T3320] team0: Port device team_slave_1 added [ 31.649062][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.656157][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.682356][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.697498][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.704536][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.730477][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.742229][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.752064][ T3324] team0: Port device team_slave_1 added [ 31.777205][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.784443][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.810573][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.822457][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.841611][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.848769][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.875160][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.887078][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.905096][ T3328] team0: Port device team_slave_0 added [ 31.911048][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.918065][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.944076][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.965852][ T3328] team0: Port device team_slave_1 added [ 31.972132][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.979269][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.005253][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.020138][ T3327] team0: Port device team_slave_0 added [ 32.028041][ T3319] hsr_slave_0: entered promiscuous mode [ 32.034132][ T3319] hsr_slave_1: entered promiscuous mode [ 32.050183][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.057212][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.083310][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.095237][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.102406][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.128409][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.140031][ T3327] team0: Port device team_slave_1 added [ 32.178223][ T3320] hsr_slave_0: entered promiscuous mode [ 32.184198][ T3320] hsr_slave_1: entered promiscuous mode [ 32.190080][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 32.195835][ T3320] Cannot create hsr debugfs directory [ 32.211106][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.218104][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.244110][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.273944][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.281181][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.307266][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.320311][ T3324] hsr_slave_0: entered promiscuous mode [ 32.326310][ T3324] hsr_slave_1: entered promiscuous mode [ 32.332134][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 32.337942][ T3324] Cannot create hsr debugfs directory [ 32.345578][ T3328] hsr_slave_0: entered promiscuous mode [ 32.351629][ T3328] hsr_slave_1: entered promiscuous mode [ 32.357494][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 32.363331][ T3328] Cannot create hsr debugfs directory [ 32.443971][ T3327] hsr_slave_0: entered promiscuous mode [ 32.449960][ T3327] hsr_slave_1: entered promiscuous mode [ 32.455755][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 32.461661][ T3327] Cannot create hsr debugfs directory [ 32.578347][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.586849][ T3319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.594430][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.603007][ T3319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.617313][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.625685][ T3319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.638445][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.647319][ T3319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.673746][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.683848][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.691402][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.700389][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.707973][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.716513][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.724123][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.732781][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.772983][ T3328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.782197][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.795214][ T3328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.803896][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.811637][ T3328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.820357][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.828671][ T3328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.837173][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.869726][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.879876][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.888681][ T3324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.896431][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.905404][ T3324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.913038][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.921740][ T3324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.929249][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.937476][ T3324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.972956][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.984021][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.997395][ T3327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.006845][ T3327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.014657][ T3327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.022953][ T3327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.031363][ T3327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.040096][ T3327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.047846][ T3327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.056559][ T3327] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.066560][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.073677][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.085639][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.100290][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.107415][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.127778][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.134866][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.164648][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.171781][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.198443][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.222768][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.236532][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.243639][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.259286][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.266426][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.276145][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.300309][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.312252][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.333898][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.344817][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.352047][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.362672][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.374292][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.381426][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.397383][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.404938][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.413743][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.420901][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.458473][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.534176][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.565407][ T3320] veth0_vlan: entered promiscuous mode [ 33.585193][ T3320] veth1_vlan: entered promiscuous mode [ 33.617439][ T3320] veth0_macvtap: entered promiscuous mode [ 33.637255][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.647496][ T3320] veth1_macvtap: entered promiscuous mode [ 33.657641][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.677227][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.692209][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.702328][ T3319] veth0_vlan: entered promiscuous mode [ 33.712287][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.721403][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.730855][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.745128][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.758683][ T3319] veth1_vlan: entered promiscuous mode [ 33.802957][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 33.802979][ T28] audit: type=1400 audit(1776749546.183:96): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.842305][ T3319] veth0_macvtap: entered promiscuous mode [ 33.845898][ T28] audit: type=1400 audit(1776749546.223:97): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.865145][ T3319] veth1_macvtap: entered promiscuous mode [ 33.883503][ T28] audit: type=1400 audit(1776749546.223:98): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="gadgetfs" ino=4093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.908432][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.925793][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.935181][ T3324] veth0_vlan: entered promiscuous mode [ 33.947579][ T28] audit: type=1400 audit(1776749546.323:99): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.957729][ T3327] veth0_vlan: entered promiscuous mode [ 33.980471][ T28] audit: type=1400 audit(1776749546.323:100): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.993711][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.011971][ T28] audit: type=1400 audit(1776749546.323:101): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.043644][ T3328] veth0_vlan: entered promiscuous mode [ 34.052186][ T3328] veth1_vlan: entered promiscuous mode [ 34.066941][ T3328] veth0_macvtap: entered promiscuous mode [ 34.075011][ T3328] veth1_macvtap: entered promiscuous mode [ 34.086414][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.095296][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.140042][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.149030][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.159185][ T3324] veth1_vlan: entered promiscuous mode [ 34.166586][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.175579][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.190215][ T3327] veth1_vlan: entered promiscuous mode [ 34.198423][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.233495][ T3327] veth0_macvtap: entered promiscuous mode [ 34.242939][ T3327] veth1_macvtap: entered promiscuous mode [ 34.258010][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.274099][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.281585][ T28] audit: type=1400 audit(1776749546.643:102): avc: denied { open } for pid=3488 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.312123][ T28] audit: type=1400 audit(1776749546.643:103): avc: denied { perfmon } for pid=3488 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.338540][ T28] audit: type=1400 audit(1776749546.643:104): avc: denied { kernel } for pid=3488 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.370825][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.465749][ T3324] veth0_macvtap: entered promiscuous mode [ 34.513259][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.568113][ T3324] veth1_macvtap: entered promiscuous mode [ 34.653530][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.696288][ T3499] loop4: detected capacity change from 0 to 1024 [ 34.703017][ T3499] ======================================================= [ 34.703017][ T3499] WARNING: The mand mount option has been deprecated and [ 34.703017][ T3499] and is ignored by this kernel. Remove the mand [ 34.703017][ T3499] option from the mount to silence this warning. [ 34.703017][ T3499] ======================================================= [ 34.726403][ T28] audit: type=1400 audit(1776749547.063:105): avc: denied { create } for pid=3496 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.757738][ T3499] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 34.757738][ T3499] [ 34.770397][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.782004][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.836662][ T3499] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 34.861711][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.988784][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.146346][ T3504] xt_CT: No such helper "snmp_trap" [ 35.163857][ T3503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 35.198367][ T3507] loop1: detected capacity change from 0 to 512 [ 35.228819][ T3507] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.260894][ T3507] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 35.276630][ T3507] EXT4-fs (loop1): mount failed [ 35.435170][ T3499] loop4: detected capacity change from 0 to 1024 [ 35.480647][ T3499] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.505741][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.639547][ T3499] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5: Invalid block bitmap block 0 in block_group 0 [ 35.649081][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.655563][ T3499] loop4: lost filesystem error report for type 5 error -117 [ 35.673139][ T3499] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.5: Failed to acquire dquot type 0 [ 35.681483][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 35.681598][ C0] EXT4-fs (loop4): initial error at time 1776749548: ext4_read_block_bitmap_nowait:483 [ 35.682128][ C0] EXT4-fs (loop4): last error at time 1776749548: ext4_read_block_bitmap_nowait:483 [ 35.728838][ T3499] loop4: lost filesystem error report for type 5 error -117 [ 35.741179][ T3499] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.5: Freeing blocks not in datazone - block = 0, count = 4096 [ 35.770348][ T3499] loop4: lost filesystem error report for type 5 error -117 [ 35.779196][ T3499] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.5: Invalid inode bitmap blk 0 in block_group 0 [ 35.786681][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.793931][ T3499] loop4: lost filesystem error report for type 5 error -117 [ 35.822469][ T3499] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 35.841294][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.846419][ T3499] loop4: lost filesystem error report for type 5 error -117 [ 35.858618][ T3499] EXT4-fs (loop4): 1 orphan inode deleted [ 35.919565][ T3499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.942708][ T30] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 0 [ 35.991591][ T3514] SELinux: Context œÐQ' is not valid (left unmapped). [ 35.997926][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.047141][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.085438][ T3499] syz.4.5 (3499) used greatest stack depth: 9088 bytes left [ 36.115968][ T3518] loop0: detected capacity change from 0 to 512 [ 36.131147][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.174789][ T3518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.911144][ T3531] syz.4.11 uses obsolete (PF_INET,SOCK_PACKET) [ 36.988669][ T3531] netlink: 'syz.4.11': attribute type 3 has an invalid length. [ 36.990026][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.021402][ T3531] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11'. [ 37.207214][ T3537] loop0: detected capacity change from 0 to 8192 [ 37.562936][ T3537] netlink: 'syz.0.13': attribute type 20 has an invalid length. [ 37.717681][ T3534] loop1: detected capacity change from 0 to 1024 [ 37.774748][ T3544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15'. [ 38.043034][ T3534] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 38.086808][ T3534] System zones: 0-1, 3-36 [ 38.246712][ T3553] loop0: detected capacity change from 0 to 128 [ 38.466866][ T3556] loop0: detected capacity change from 0 to 4096 [ 38.486380][ T3534] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.12: bad orphan inode 134217728 [ 38.562436][ T3534] loop1: lost filesystem error report for type 5 error -117 [ 38.565562][ T3556] EXT4-fs: Ignoring removed bh option [ 38.612762][ T3556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.622250][ T3534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.056213][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 39.056301][ T28] audit: type=1400 audit(1776749551.213:157): avc: denied { ioctl } for pid=3559 comm="syz.3.20" path="socket:[8053]" dev="sockfs" ino=8053 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.265332][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.375395][ T28] audit: type=1400 audit(1776749551.753:158): avc: denied { ioctl } for pid=3585 comm="syz.0.21" path="socket:[7087]" dev="sockfs" ino=7087 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.375542][ T3586] syzkaller0: entered promiscuous mode [ 39.450607][ T3590] Zero length message leads to an empty skb [ 39.466173][ T28] audit: type=1400 audit(1776749551.843:159): avc: denied { create } for pid=3589 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.489922][ T3586] syzkaller0: entered allmulticast mode [ 39.533666][ T3540] loop4: detected capacity change from 0 to 512 [ 39.691803][ T28] audit: type=1400 audit(1776749552.063:160): avc: denied { write } for pid=3585 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.748771][ T3661] syz.2.25 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.786580][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.904829][ T3661] loop2: detected capacity change from 0 to 512 [ 39.934776][ T28] audit: type=1326 audit(1776749552.313:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65047cc819 code=0x7ffc0000 [ 40.038234][ T3661] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.25: inode has both inline data and extents flags [ 40.142470][ T3540] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.146043][ T28] audit: type=1326 audit(1776749552.313:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65047cc819 code=0x7ffc0000 [ 40.146100][ T28] audit: type=1326 audit(1776749552.313:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65047cc819 code=0x7ffc0000 [ 40.146127][ T28] audit: type=1326 audit(1776749552.313:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65047cc819 code=0x7ffc0000 [ 40.146154][ T28] audit: type=1326 audit(1776749552.343:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f65047cc819 code=0x7ffc0000 [ 40.146227][ T28] audit: type=1326 audit(1776749552.343:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65047cc819 code=0x7ffc0000 [ 40.379573][ T3661] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.379948][ T3661] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.25: couldn't read orphan inode 15 (err -117) [ 40.379980][ T3661] loop2: lost filesystem error report for type 5 error -117 [ 40.380742][ T3661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.956978][ T3540] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 41.990125][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.051578][ T3725] loop2: detected capacity change from 0 to 512 [ 42.106598][ T3725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.145198][ T3730] loop4: detected capacity change from 0 to 512 [ 42.161984][ T3725] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.176126][ T3730] EXT4-fs: Ignoring removed bh option [ 42.181898][ T3730] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.215532][ T3730] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.32: corrupted in-inode xattr: e_value size too large [ 42.226017][ T3725] tmpfs: Unknown parameter 'inode31' [ 42.239664][ T3730] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.241339][ T3730] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.32: couldn't read orphan inode 15 (err -117) [ 42.247306][ T3735] netlink: 'syz.3.34': attribute type 1 has an invalid length. [ 42.250543][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 42.276298][ C1] EXT4-fs (loop4): initial error at time 1776749554: ext4_iget_extra_inode:5128: inode 15 [ 42.286279][ C1] EXT4-fs (loop4): last error at time 1776749554: ext4_iget_extra_inode:5128: inode 15 [ 42.363772][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.371232][ T3735] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.406593][ T3730] loop4: lost filesystem error report for type 5 error -117 [ 42.407284][ T3730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.520646][ T3745] netlink: 14 bytes leftover after parsing attributes in process `syz.3.34'. [ 42.615977][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.661676][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.779621][ T3752] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 43.314728][ T3750] loop0: detected capacity change from 0 to 1024 [ 43.423775][ T3750] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 43.435254][ T3750] System zones: 0-1, 3-36 [ 43.454421][ T3750] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.37: bad orphan inode 134217728 [ 43.468649][ T3750] loop0: lost filesystem error report for type 5 error -117 [ 43.483015][ T3750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.583444][ T3741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36'. [ 43.593904][ T3741] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.648801][ T3645] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.679170][ T3725] syz.2.31 (3725) used greatest stack depth: 8496 bytes left [ 43.703885][ T3645] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.741085][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.774920][ T3645] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.831998][ T3645] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.083216][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.165013][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 44.165030][ T28] audit: type=1400 audit(1776749556.543:235): avc: denied { create } for pid=3760 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.308811][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.342310][ T3772] capability: warning: `syz.0.41' uses deprecated v2 capabilities in a way that may be insecure [ 44.422189][ T28] audit: type=1400 audit(1776749556.803:236): avc: denied { create } for pid=3771 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 44.536852][ T28] audit: type=1400 audit(1776749556.913:237): avc: denied { bind } for pid=3771 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.627937][ T28] audit: type=1400 audit(1776749556.993:238): avc: denied { connect } for pid=3773 comm="syz.4.42" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.816108][ T28] audit: type=1400 audit(1776749557.193:239): avc: denied { setopt } for pid=3779 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.931791][ T3782] netlink: 277 bytes leftover after parsing attributes in process `syz.1.44'. [ 44.949452][ T28] audit: type=1400 audit(1776749557.313:240): avc: denied { write } for pid=3781 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.995814][ T28] audit: type=1400 audit(1776749557.313:241): avc: denied { nlmsg_write } for pid=3781 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.048639][ T28] audit: type=1400 audit(1776749557.423:242): avc: denied { create } for pid=3781 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.081823][ T28] audit: type=1400 audit(1776749557.423:243): avc: denied { ioctl } for pid=3781 comm="syz.1.44" path="socket:[8469]" dev="sockfs" ino=8469 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.120976][ T28] audit: type=1400 audit(1776749557.503:244): avc: denied { create } for pid=3785 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.232215][ T3786] loop0: detected capacity change from 0 to 512 [ 45.265714][ T3786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.466865][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.648398][ T3804] loop3: detected capacity change from 0 to 256 [ 47.797957][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 47.853432][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 51.458473][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 51.458490][ T28] audit: type=1400 audit(1776749563.833:252): avc: denied { create } for pid=3842 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 51.462954][ T3843] loop2: detected capacity change from 0 to 128 [ 51.490531][ T3845] loop1: detected capacity change from 0 to 128 [ 51.497252][ T3845] vfat: Unknown parameter '' [ 51.511853][ T3844] loop0: detected capacity change from 0 to 512 [ 51.513575][ T28] audit: type=1400 audit(1776749563.893:253): avc: denied { wake_alarm } for pid=3840 comm="syz.1.61" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.541992][ T3843] msdos: Bad value for 'gid' [ 51.546952][ T3843] msdos: Bad value for 'gid' [ 51.549904][ T3844] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 51.562897][ T28] audit: type=1400 audit(1776749563.943:254): avc: denied { read write } for pid=3840 comm="syz.1.61" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 51.625658][ T3844] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 51.627417][ T3843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 51.648618][ T3844] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.60: bad orphan inode 4 [ 51.648647][ T3844] loop0: lost filesystem error report for type 5 error -117 [ 51.648920][ T3844] EXT4-fs (loop0): 1 orphan inode deleted [ 51.649383][ T3844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.649645][ T28] audit: type=1400 audit(1776749563.943:255): avc: denied { open } for pid=3840 comm="syz.1.61" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 51.806015][ T28] audit: type=1400 audit(1776749564.183:256): avc: denied { unmount } for pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.953875][ T28] audit: type=1400 audit(1776749565.323:257): avc: denied { create } for pid=3858 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.041526][ T3864] netlink: 260 bytes leftover after parsing attributes in process `syz.1.64'. [ 53.050574][ T3864] netlink: 84 bytes leftover after parsing attributes in process `syz.1.64'. [ 53.105999][ T28] audit: type=1400 audit(1776749565.383:258): avc: denied { listen } for pid=3860 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.129985][ T28] audit: type=1400 audit(1776749565.383:259): avc: denied { connect } for pid=3860 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.285230][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.299863][ T28] audit: type=1400 audit(1776749565.423:260): avc: denied { setopt } for pid=3858 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.302656][ T3868] loop4: detected capacity change from 0 to 1024 [ 53.331410][ T3868] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.488865][ T3868] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 53.506679][ T3868] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.550536][ T3868] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 54.732154][ T3883] loop3: detected capacity change from 0 to 32768 [ 55.042761][ T28] audit: type=1400 audit(1776749567.123:261): avc: denied { mounton } for pid=3879 comm="syz.3.70" path="/proc/60/task" dev="proc" ino=9516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 55.080269][ T3887] netlink: 'syz.4.71': attribute type 1 has an invalid length. [ 55.202060][ T3890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.71'. [ 55.237426][ T3887] bond1 (unregistering): Released all slaves [ 55.244757][ T3883] loop3: p1 p3 < > [ 55.360681][ T3891] vlan2: entered promiscuous mode [ 55.402533][ T3891] bond_slave_0: entered promiscuous mode [ 55.449980][ T3898] loop1: detected capacity change from 0 to 512 [ 55.495424][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 55.506437][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 55.575551][ T3898] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 55.624724][ T3895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.649190][ T3898] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 55.678912][ T3895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.718883][ T3898] EXT4-fs (loop1): 1 truncate cleaned up [ 55.743510][ T3898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.827997][ T3896] loop3: detected capacity change from 0 to 512 [ 55.915096][ T3896] EXT4-fs: Ignoring removed bh option [ 55.934487][ T3906] loop2: detected capacity change from 0 to 1024 [ 55.950993][ T3896] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.972027][ T3906] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.995630][ T3908] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=3908 comm=syz.1.74 [ 56.023471][ T3906] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 56.070176][ T3896] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 56.075841][ T3906] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.75: inode #1: comm syz.2.75: iget: illegal inode # [ 56.103917][ T3896] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 56.139008][ T3896] EXT4-fs (loop3): orphan cleanup on readonly fs [ 56.151956][ T3906] loop2: lost filesystem error report for type 5 error -117 [ 56.152189][ T3906] EXT4-fs (loop2): no journal found [ 56.159556][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 56.159594][ C0] EXT4-fs (loop2): initial error at time 1776749568: ext4_get_journal_inode:5896 [ 56.159619][ C0] EXT4-fs (loop2): last error at time 1776749568: ext4_get_journal_inode:5896 [ 56.209588][ T3898] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 56.214222][ T3896] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.73: Failed to acquire dquot type 1 [ 56.290028][ T3906] EXT4-fs (loop2): can't get journal size [ 56.338108][ T3896] loop3: lost filesystem error report for type 5 error -5 [ 56.339593][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 56.346673][ T3906] EXT4-fs (loop2): failed to initialize system zone (-22) [ 56.347238][ C1] EXT4-fs (loop3): last error at time 1776749568: ext4_acquire_dquot:7034 [ 56.365488][ T3906] EXT4-fs (loop2): mount failed [ 56.411317][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.445314][ T3896] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.73: Invalid block bitmap block 0 in block_group 0 [ 56.490539][ T3896] loop3: lost filesystem error report for type 5 error -117 [ 56.498256][ T3896] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.73: Invalid block bitmap block 0 in block_group 0 [ 56.559725][ T3896] loop3: lost filesystem error report for type 5 error -117 [ 56.567156][ T3896] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.73: Invalid block bitmap block 0 in block_group 0 [ 56.606465][ T3896] loop3: lost filesystem error report for type 5 error -117 [ 56.626822][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 56.626839][ T28] audit: type=1400 audit(1776749569.003:269): avc: denied { getopt } for pid=3911 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.661811][ T3896] Quota error (device loop3): write_blk: dquota write failed [ 56.670887][ T3896] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 56.750064][ T3896] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.73: Failed to acquire dquot type 1 [ 56.761146][ T3920] loop4: detected capacity change from 0 to 512 [ 56.768940][ T3896] loop3: lost filesystem error report for type 5 error -28 [ 56.785398][ T3896] Quota error (device loop3): write_blk: dquota write failed [ 56.840583][ T3920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 56.849250][ T3896] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 56.859155][ T3920] System zones: 1-12 [ 56.872716][ T3920] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.79: corrupted in-inode xattr: e_value size too large [ 56.877634][ T3896] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.73: Failed to acquire dquot type 1 [ 56.908224][ T3924] syzkaller0: entered promiscuous mode [ 56.908246][ T3924] syzkaller0: entered allmulticast mode [ 56.913670][ T3920] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.913879][ T3920] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.79: couldn't read orphan inode 15 (err -117) [ 56.913919][ T3920] loop4: lost filesystem error report for type 5 error -117 [ 56.914551][ T3920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.021237][ T3896] loop3: lost filesystem error report for type 5 error -28 [ 57.025778][ T3896] EXT4-fs (loop3): 1 orphan inode deleted [ 57.140463][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.179240][ T28] audit: type=1400 audit(1776749569.553:270): avc: denied { bind } for pid=3929 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.199408][ T28] audit: type=1400 audit(1776749569.553:271): avc: denied { listen } for pid=3929 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.211539][ T3896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.232691][ T3937] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 57.242438][ T28] audit: type=1400 audit(1776749569.553:272): avc: denied { connect } for pid=3929 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.285488][ T3939] netlink: 104 bytes leftover after parsing attributes in process `syz.1.83'. [ 57.293430][ T28] audit: type=1400 audit(1776749569.553:273): avc: denied { setopt } for pid=3929 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.355750][ T28] audit: type=1400 audit(1776749569.553:274): avc: denied { write } for pid=3929 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.386007][ T3896] syz.3.73 (3896) used greatest stack depth: 7936 bytes left [ 57.478797][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.545306][ T3947] syzkaller0: entered promiscuous mode [ 57.545933][ T3938] loop2: detected capacity change from 0 to 1024 [ 57.562300][ T3947] syzkaller0: entered allmulticast mode [ 57.629161][ T3938] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 57.638406][ T3938] System zones: 0-1, 3-36 [ 57.648311][ T3938] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.84: bad orphan inode 134217728 [ 57.661970][ T3938] loop2: lost filesystem error report for type 5 error -117 [ 57.664447][ T3938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.749185][ T3954] syz.0.89: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 57.764026][ T3954] CPU: 0 UID: 0 PID: 3954 Comm: syz.0.89 Not tainted syzkaller #0 PREEMPT(full) [ 57.764059][ T3954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 57.764072][ T3954] Call Trace: [ 57.764079][ T3954] [ 57.764087][ T3954] __dump_stack+0x1d/0x30 [ 57.764163][ T3954] dump_stack_lvl+0x95/0xd0 [ 57.764193][ T3954] dump_stack+0x15/0x1b [ 57.764222][ T3954] warn_alloc+0x145/0x1c0 [ 57.764282][ T3954] ? futex_unqueue+0xc5/0xf0 [ 57.764301][ T3954] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 57.764402][ T3954] ? __pfx_futex_wake_mark+0x10/0x10 [ 57.764490][ T3954] ? __rcu_read_unlock+0x4e/0x70 [ 57.764512][ T3954] ? avc_has_perm_noaudit+0xab/0x130 [ 57.764550][ T3954] ? should_fail_ex+0x30/0x280 [ 57.764621][ T3954] vmalloc_user_noprof+0x7d/0xb0 [ 57.764650][ T3954] ? xskq_create+0x80/0xe0 [ 57.764747][ T3954] xskq_create+0x80/0xe0 [ 57.764777][ T3954] xsk_init_queue+0x70/0xb0 [ 57.764805][ T3954] xsk_setsockopt+0x3f5/0x640 [ 57.764866][ T3954] ? __pfx_xsk_setsockopt+0x10/0x10 [ 57.764969][ T3954] __sys_setsockopt+0x184/0x200 [ 57.765074][ T3954] __x64_sys_setsockopt+0x64/0x80 [ 57.765097][ T3954] x64_sys_call+0x2327/0x3020 [ 57.765124][ T3954] do_syscall_64+0x12c/0x3b0 [ 57.765191][ T3954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.765289][ T3954] RIP: 0033:0x7f65047cc819 [ 57.765309][ T3954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.765331][ T3954] RSP: 002b:00007f6503227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 57.765357][ T3954] RAX: ffffffffffffffda RBX: 00007f6504a45fa0 RCX: 00007f65047cc819 [ 57.765447][ T3954] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 57.765460][ T3954] RBP: 00007f6504862c91 R08: 0000000000000004 R09: 0000000000000000 [ 57.765474][ T3954] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.765490][ T3954] R13: 00007f6504a46038 R14: 00007f6504a45fa0 R15: 00007ffdb29ab128 [ 57.765514][ T3954] [ 57.765595][ T3954] Mem-Info: [ 58.017181][ T3954] active_anon:8881 inactive_anon:0 isolated_anon:0 [ 58.017181][ T3954] active_file:20539 inactive_file:2295 isolated_file:0 [ 58.017181][ T3954] unevictable:0 dirty:298 writeback:0 [ 58.017181][ T3954] slab_reclaimable:3189 slab_unreclaimable:15839 [ 58.017181][ T3954] mapped:32094 shmem:3147 pagetables:3085 [ 58.017181][ T3954] sec_pagetables:0 bounce:0 [ 58.017181][ T3954] kernel_misc_reclaimable:0 [ 58.017181][ T3954] free:1872630 free_pcp:17918 free_cma:0 [ 58.101460][ T3954] Node 0 active_anon:27056kB inactive_anon:0kB active_file:82156kB inactive_file:9180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116892kB dirty:1192kB writeback:0kB shmem:4468kB kernel_stack:3648kB pagetables:12340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 58.132872][ T3954] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 58.163588][ T3954] lowmem_reserve[]: 0 2878 7857 7857 [ 58.169041][ T3954] Node 0 DMA32 free:2946988kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947352kB mlocked:0kB bounce:0kB free_pcp:364kB local_pcp:260kB free_cma:0kB [ 58.169573][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.203469][ T3954] lowmem_reserve[]: 0 0 4978 4978 [ 58.214757][ T3954] Node 0 Normal free:4559040kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23692kB inactive_anon:0kB active_file:82156kB inactive_file:9180kB unevictable:0kB writepending:1192kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:55220kB local_pcp:880kB free_cma:0kB [ 58.250006][ T3954] lowmem_reserve[]: 0 0 0 0 [ 58.254615][ T3954] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 58.268508][ T3954] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 2*16kB (M) 5*32kB (M) 5*64kB (M) 5*128kB (M) 3*256kB (M) 4*512kB (M) 4*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2946988kB [ 58.285799][ T3954] Node 0 Normal: 789*4kB (UME) 771*8kB (UME) 541*16kB (UME) 378*32kB (UME) 253*64kB (UME) 137*128kB (ME) 79*256kB (UM) 31*512kB (UM) 29*1024kB (UME) 13*2048kB (UME) 1075*4096kB (UM) = 4559420kB [ 58.307133][ T3954] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 58.336032][ T3954] 23049 total pagecache pages [ 58.341318][ T3954] 0 pages in swap cache [ 58.345554][ T3954] Free swap = 124996kB [ 58.349951][ T3954] Total swap = 124996kB [ 58.356529][ T3954] 2097051 pages RAM [ 58.362446][ T3954] 0 pages HighMem/MovableOnly [ 58.377999][ T3954] 81814 pages reserved [ 58.537110][ T3960] delete_channel: no stack [ 58.882791][ T3984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 58.900426][ T3984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.98'. [ 59.340568][ T3991] deleting an unspecified loop device is not supported. [ 59.445915][ T3996] loop3: detected capacity change from 0 to 512 [ 59.516545][ T3996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.559931][ T3996] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.755186][ T4002] netlink: 44 bytes leftover after parsing attributes in process `syz.0.102'. [ 59.816466][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.506667][ T4010] loop1: detected capacity change from 0 to 512 [ 60.740473][ T4011] loop0: detected capacity change from 0 to 128 [ 61.989018][ T4010] EXT4-fs (loop1): 1 orphan inode deleted [ 62.079670][ T4010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.111902][ T4010] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.210641][ T3641] __quota_error: 24 callbacks suppressed [ 62.210658][ T3641] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 62.228166][ T28] audit: type=1400 audit(1776749574.603:299): avc: denied { ioctl } for pid=4017 comm="syz.2.106" path="socket:[8743]" dev="sockfs" ino=8743 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.260017][ T4018] syzkaller0: entered promiscuous mode [ 62.520093][ T4018] syzkaller0: entered allmulticast mode [ 62.535641][ T3641] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:22: Failed to release dquot type 1 [ 62.569919][ T4019] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 62.671529][ T28] audit: type=1400 audit(1776749575.053:300): avc: denied { bind } for pid=4020 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.695424][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.735061][ T28] audit: type=1400 audit(1776749575.073:301): avc: denied { getopt } for pid=4020 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.859156][ T28] audit: type=1400 audit(1776749575.233:302): avc: denied { read } for pid=4023 comm="syz.1.108" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.886511][ T28] audit: type=1400 audit(1776749575.263:303): avc: denied { open } for pid=4023 comm="syz.1.108" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.919668][ T28] audit: type=1400 audit(1776749575.293:304): avc: denied { kexec_image_load } for pid=4026 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 63.006220][ T4028] loop4: detected capacity change from 0 to 1024 [ 63.166780][ T4028] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.180778][ T4028] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 63.194617][ T4028] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.109: lblock 2 mapped to illegal pblock 2 (length 1) [ 63.209549][ T4028] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 63.209714][ T4028] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 63.227053][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 63.227071][ C0] EXT4-fs (loop4): initial error at time 1776749575: ext4_map_blocks:791: inode 3: block 2 [ 63.227117][ C0] EXT4-fs (loop4): last error at time 1776749575: ext4_map_blocks:791: inode 3: block 2 [ 63.256043][ T4028] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.109: lblock 0 mapped to illegal pblock 48 (length 1) [ 63.270516][ T4028] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 63.270721][ T4028] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 63.288850][ T4028] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.109: Failed to acquire dquot type 0 [ 63.300420][ T4028] loop4: lost filesystem error report for type 5 error -117 [ 63.300562][ T4028] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 63.331767][ T4028] loop4: lost filesystem error report for type 5 error -117 [ 63.331875][ T4028] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.109: mark_inode_dirty error [ 63.351061][ T4028] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.351242][ T4028] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 63.372481][ T4028] EXT4-fs (loop4): 1 orphan inode deleted [ 63.378630][ T4028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.390892][ T3617] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.405532][ T3617] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 63.405650][ T3617] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 63.423953][ T3617] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 0 [ 63.482548][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.491905][ T3328] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 63.517591][ T3328] loop4: lost filesystem error report for type 5 error -117 [ 63.517696][ T3328] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 63.564329][ T3328] loop4: lost filesystem error report for type 5 error -117 [ 63.564432][ T3328] EXT4-fs error (device loop4): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 63.599601][ T3328] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 63.732069][ T4036] loop0: detected capacity change from 0 to 4096 [ 63.735334][ T4025] loop3: detected capacity change from 0 to 512 [ 63.758599][ T4036] EXT4-fs: Ignoring removed bh option [ 63.794891][ T4036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.856003][ T4036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.965197][ T4036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.012714][ T4025] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.033646][ T4050] bridge_slave_0: left allmulticast mode [ 64.046319][ T4050] bridge_slave_0: left promiscuous mode [ 64.058514][ T4050] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.065539][ T4025] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 64.116714][ T4050] bridge_slave_1: left allmulticast mode [ 64.122649][ T4050] bridge_slave_1: left promiscuous mode [ 64.129260][ T4050] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.154496][ T4050] bond0: (slave bond_slave_0): Releasing backup interface [ 64.165486][ T4055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 64.195265][ T4050] bond0: (slave bond_slave_1): Releasing backup interface [ 64.299991][ T4050] team0: Port device team_slave_0 removed [ 64.331966][ T4050] team0: Port device team_slave_1 removed [ 64.352151][ T4050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.378147][ T4050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.457383][ T4050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.465257][ T4050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.482257][ T4050] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.496866][ T4060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4060 comm=syz.4.117 [ 64.615188][ T4036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.651706][ T4053] team0: Mode changed to "loadbalance" [ 64.662510][ T4063] loop3: detected capacity change from 0 to 1024 [ 64.683060][ T4063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.710176][ T4036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.802041][ T4071] loop2: detected capacity change from 0 to 512 [ 64.833217][ T4071] EXT4-fs (loop2): 1 truncate cleaned up [ 64.835367][ T4067] loop4: detected capacity change from 0 to 164 [ 64.850334][ T3635] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.865466][ T4071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.872737][ T3635] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.886465][ T3635] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.888702][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.905378][ T3635] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.916874][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.943745][ T4067] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 65.014936][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.114489][ T4080] netlink: 'syz.2.125': attribute type 1 has an invalid length. [ 65.171394][ T4080] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 65.205589][ T4080] veth3: entered promiscuous mode [ 65.220976][ T4080] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 65.250304][ T4080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.125'. [ 65.263984][ T3632] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 65.264286][ T4080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.399581][ T3632] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 65.415457][ T4085] loop4: detected capacity change from 0 to 512 [ 65.501343][ T4085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.549644][ T4085] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.256274][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.265555][ T4106] x_tables: duplicate entry at hook 3 [ 66.642513][ T4106] loop2: detected capacity change from 0 to 512 [ 66.698446][ T4106] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.764702][ T4121] loop1: detected capacity change from 0 to 128 [ 66.802832][ T4121] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.816012][ T4121] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.845042][ T4106] EXT4-fs (loop2): 1 truncate cleaned up [ 66.889033][ T4106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.588937][ T3327] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.733383][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 67.733398][ T28] audit: type=1400 audit(1776749580.113:319): avc: denied { create } for pid=4146 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 67.775362][ T28] audit: type=1400 audit(1776749580.143:320): avc: denied { sys_admin } for pid=4146 comm="syz.1.135" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 67.860691][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.993527][ T4160] syzkaller0: entered promiscuous mode [ 68.023840][ T4160] syzkaller0: entered allmulticast mode [ 68.211198][ T4160] TC_ACT_REPEAT abuse ? [ 68.553886][ T4175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 68.564466][ T4175] xt_TCPMSS: Only works on TCP SYN packets [ 69.418847][ T28] audit: type=1400 audit(69.387:321): avc: denied { ioctl } for pid=4192 comm="syz.4.143" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.817799][ T4235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.827057][ T4235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.259292][ T28] audit: type=1400 audit(70.227:322): avc: denied { setopt } for pid=4240 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.583008][ T28] audit: type=1400 audit(70.557:323): avc: denied { connect } for pid=4240 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.560774][ T28] audit: type=1400 audit(70.577:324): avc: denied { name_connect } for pid=4240 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 71.601602][ T28] audit: type=1400 audit(71.537:325): avc: denied { listen } for pid=4240 comm="syz.0.147" lport=33258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.578151][ T28] audit: type=1400 audit(71.557:326): avc: denied { accept } for pid=4240 comm="syz.0.147" lport=33258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.696678][ T4259] loop2: detected capacity change from 0 to 512 [ 72.772078][ T4262] loop4: detected capacity change from 0 to 1024 [ 72.778950][ T4262] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 72.778950][ T4262] [ 72.876556][ T4262] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 73.618317][ T4262] loop4: detected capacity change from 0 to 1024 [ 73.773656][ T4259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.988089][ T4262] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.872891][ T4259] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.151: corrupted xattr block 33: invalid ea_ino [ 74.886546][ T4259] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 74.895603][ T4259] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.151: corrupted xattr block 33: invalid ea_ino [ 75.502713][ T4272] loop0: detected capacity change from 0 to 512 [ 75.800423][ T4267] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 75.855630][ T4262] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.154: Invalid block bitmap block 0 in block_group 0 [ 75.898207][ T4262] loop4: lost filesystem error report for type 5 error -117 [ 75.900319][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 75.916430][ C1] EXT4-fs (loop4): initial error at time 75: ext4_read_block_bitmap_nowait:483 [ 75.927275][ C1] EXT4-fs (loop4): last error at time 75: ext4_read_block_bitmap_nowait:483 [ 76.051950][ T4277] loop3: detected capacity change from 0 to 1024 [ 76.063104][ T4262] Quota error (device loop4): write_blk: dquota write failed [ 76.072675][ T4262] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 76.077079][ T4259] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 76.094575][ T4272] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.109105][ T4262] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.154: Failed to acquire dquot type 0 [ 76.158079][ T4262] loop4: lost filesystem error report for type 5 error -117 [ 76.770402][ T28] audit: type=1400 audit(76.047:327): avc: denied { getopt } for pid=4254 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.774620][ T4262] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.154: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.814723][ T4262] loop4: lost filesystem error report for type 5 error -117 [ 77.071539][ T4259] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.151: corrupted xattr block 33: invalid ea_ino [ 77.095663][ T4277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.111064][ T28] audit: type=1400 audit(77.047:328): avc: denied { setattr } for pid=4254 comm="syz.2.151" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.143991][ T4262] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.154: Invalid inode bitmap blk 0 in block_group 0 [ 77.159299][ T4262] loop4: lost filesystem error report for type 5 error -117 [ 77.241736][ T4272] EXT4-fs warning (device loop0): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop0. [ 77.283985][ T4262] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 77.295744][ T4262] loop4: lost filesystem error report for type 5 error -117 [ 77.300252][ T4262] EXT4-fs (loop4): 1 orphan inode deleted [ 77.352210][ T4262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.388325][ T3641] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 77.413940][ T3641] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:22: Failed to release dquot type 0 [ 77.442933][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.466099][ T28] audit: type=1400 audit(77.427:329): avc: denied { map } for pid=4276 comm="syz.3.156" path="/30/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.539070][ T28] audit: type=1400 audit(77.427:330): avc: denied { execute } for pid=4276 comm="syz.3.156" path="/30/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.743169][ T4289] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 77.789729][ T4289] File: /30/file1/file1 PID: 4289 Comm: syz.3.156 [ 77.819915][ T28] audit: type=1400 audit(77.787:331): avc: denied { connect } for pid=4288 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.893870][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 78.120046][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.378602][ T4302] loop4: detected capacity change from 0 to 512 [ 78.610334][ T4302] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.663303][ T4302] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 78.715062][ T4302] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 78.744821][ T4302] System zones: 0-2, 18-18, 34-35 [ 78.766475][ T4302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.829453][ T4302] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 78.868537][ T4304] loop0: detected capacity change from 0 to 512 [ 78.923805][ T4310] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 78.935223][ T4304] EXT4-fs: Ignoring removed i_version option [ 78.951122][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.962030][ T4304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.984938][ T4304] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.163: bad orphan inode 1 [ 79.035683][ T4304] loop0: lost filesystem error report for type 5 error -117 [ 79.036511][ T4304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.176437][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.613304][ T4315] loop4: detected capacity change from 0 to 512 [ 79.761405][ T28] audit: type=1400 audit(79.727:332): avc: denied { map } for pid=4303 comm="syz.0.163" path="/34/file0/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.789662][ T4315] FAT-fs (loop4): Directory bread(block 199916) failed [ 79.808966][ T4315] FAT-fs (loop4): Directory bread(block 199917) failed [ 79.819584][ T4315] FAT-fs (loop4): Directory bread(block 199918) failed [ 79.838257][ T4315] FAT-fs (loop4): Directory bread(block 199919) failed [ 79.853308][ T4315] FAT-fs (loop4): Directory bread(block 199920) failed [ 79.866192][ T4315] FAT-fs (loop4): Directory bread(block 199921) failed [ 79.897708][ T4315] FAT-fs (loop4): Directory bread(block 199922) failed [ 79.913262][ T4315] FAT-fs (loop4): Directory bread(block 199923) failed [ 80.206216][ T4333] Invalid option length (1047737) for dns_resolver key [ 80.871745][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 80.904395][ T28] audit: type=1400 audit(80.877:333): avc: denied { name_connect } for pid=4342 comm="syz.4.170" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 82.975921][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.136010][ T4356] loop4: detected capacity change from 0 to 8192 [ 83.152586][ T28] audit: type=1400 audit(83.127:334): avc: denied { write } for pid=4353 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.448531][ T28] audit: type=1400 audit(83.417:335): avc: denied { read } for pid=4354 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 84.115672][ T28] audit: type=1400 audit(84.087:336): avc: denied { bind } for pid=4372 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.455567][ T4383] loop0: detected capacity change from 0 to 1764 [ 86.492653][ T4386] loop4: detected capacity change from 0 to 512 [ 86.919574][ T28] audit: type=1400 audit(86.567:337): avc: denied { mount } for pid=4380 comm="syz.0.182" name="/" dev="loop0" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 86.958541][ T4386] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #17: comm syz.4.183: corrupted in-inode xattr: overlapping e_value [ 87.473963][ T4386] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 87.479549][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 87.495273][ C1] EXT4-fs (loop4): initial error at time 87: ext4_iget_extra_inode:5128: inode 17 [ 87.504688][ C1] EXT4-fs (loop4): last error at time 87: ext4_iget_extra_inode:5128: inode 17 [ 87.834529][ T4386] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.183: couldn't read orphan inode 17 (err -117) [ 87.864006][ T4386] loop4: lost filesystem error report for type 5 error -117 [ 87.864614][ T4386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.894537][ T28] audit: type=1400 audit(87.867:338): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 87.938309][ T28] audit: type=1400 audit(87.907:339): avc: denied { accept } for pid=4391 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 87.959622][ T4393] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.186'. [ 87.990144][ T4393] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.186'. [ 88.011985][ T28] audit: type=1400 audit(87.927:340): avc: denied { ioctl } for pid=4391 comm="syz.3.186" path="socket:[10445]" dev="sockfs" ino=10445 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 88.051166][ T28] audit: type=1400 audit(87.947:341): avc: denied { read } for pid=4384 comm="syz.4.183" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.075031][ T28] audit: type=1400 audit(87.947:342): avc: denied { open } for pid=4384 comm="syz.4.183" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.098717][ T28] audit: type=1400 audit(87.957:343): avc: denied { ioctl } for pid=4384 comm="syz.4.183" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.284848][ T4403] GUP no longer grows the stack in syz.1.188 (4403): 200000006000-200000009000 (200000004000) [ 88.295399][ T4403] CPU: 0 UID: 0 PID: 4403 Comm: syz.1.188 Not tainted syzkaller #0 PREEMPT(full) [ 88.295501][ T4403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 88.295516][ T4403] Call Trace: [ 88.295524][ T4403] [ 88.295535][ T4403] __dump_stack+0x1d/0x30 [ 88.295569][ T4403] dump_stack_lvl+0x95/0xd0 [ 88.295596][ T4403] dump_stack+0x15/0x1b [ 88.295693][ T4403] fixup_user_fault+0x4fb/0x550 [ 88.295755][ T4403] fault_in_user_writeable+0x5c/0xc0 [ 88.295793][ T4403] futex_lock_pi+0x621/0x800 [ 88.295819][ T4403] ? __pfx_futex_wake_mark+0x10/0x10 [ 88.295853][ T4403] do_futex+0x21f/0x380 [ 88.295897][ T4403] __se_sys_futex+0x2f6/0x370 [ 88.295921][ T4403] ? xfd_validate_state+0x45/0xf0 [ 88.296039][ T4403] __x64_sys_futex+0x78/0x90 [ 88.296061][ T4403] x64_sys_call+0x24ab/0x3020 [ 88.296134][ T4403] do_syscall_64+0x12c/0x3b0 [ 88.296173][ T4403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.296197][ T4403] RIP: 0033:0x7f813021c819 [ 88.296273][ T4403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.296294][ T4403] RSP: 002b:00007f812ec35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 88.296320][ T4403] RAX: ffffffffffffffda RBX: 00007f8130496180 RCX: 00007f813021c819 [ 88.296336][ T4403] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 88.296409][ T4403] RBP: 00007f81302b2c91 R08: 0000000000000000 R09: 0000000000000082 [ 88.296425][ T4403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.296441][ T4403] R13: 00007f8130496218 R14: 00007f8130496180 R15: 00007fff131282a8 [ 88.296462][ T4403] [ 88.483117][ T4402] loop0: detected capacity change from 0 to 512 [ 88.591267][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 88.591296][ T28] audit: type=1400 audit(88.537:345): avc: denied { create } for pid=4404 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.621640][ T4402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.641886][ T4406] loop2: detected capacity change from 0 to 512 [ 88.678347][ T28] audit: type=1400 audit(88.647:346): avc: denied { connect } for pid=4404 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.702174][ T4406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.715532][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.765708][ T4413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.190'. [ 88.815621][ T4413] bridge1: port 1(veth3) entered blocking state [ 88.828139][ T4413] bridge1: port 1(veth3) entered disabled state [ 88.863239][ T4413] veth3: entered allmulticast mode [ 88.887725][ T4413] veth3: entered promiscuous mode [ 88.967820][ T4416] vlan2: entered allmulticast mode [ 88.979565][ T4416] team0: entered allmulticast mode [ 89.002658][ T4416] team_slave_0: entered allmulticast mode [ 89.037148][ T4416] team_slave_1: entered allmulticast mode [ 89.044229][ T4416] bridge1: port 2(vlan2) entered blocking state [ 89.050633][ T4416] bridge1: port 2(vlan2) entered disabled state [ 89.057867][ T4416] vlan2: entered promiscuous mode [ 89.063170][ T4416] team0: entered promiscuous mode [ 89.068279][ T4416] team_slave_0: entered promiscuous mode [ 89.074055][ T4416] team_slave_1: entered promiscuous mode [ 89.097189][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.213076][ T9] IPVS: starting estimator thread 0... [ 90.123735][ T4422] IPVS: using max 2832 ests per chain, 141600 per kthread [ 90.146274][ T4425] syzkaller0: entered promiscuous mode [ 90.389622][ T4425] syzkaller0: entered allmulticast mode [ 90.906549][ T4427] syzkaller0: entered promiscuous mode [ 90.913174][ T4427] syzkaller0: entered allmulticast mode [ 91.113174][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.122157][ T4432] loop2: detected capacity change from 0 to 512 [ 92.139402][ T4432] EXT4-fs: Ignoring removed oldalloc option [ 92.310319][ T4432] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 92.346432][ T4432] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.364915][ T4432] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 92.379857][ T4432] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 92.387496][ T4432] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.194: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 92.405610][ T4432] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 92.405767][ T4432] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.194: couldn't read orphan inode 13 (err -117) [ 92.414969][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 92.414992][ C0] EXT4-fs (loop2): last error at time 92: ext4_ext_check_inode:521: inode 13 [ 92.442620][ T4432] loop2: lost filesystem error report for type 5 error -117 [ 92.443083][ T4432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.629285][ T4443] bridge_slave_0: left allmulticast mode [ 92.644472][ T4443] bridge_slave_0: left promiscuous mode [ 92.651331][ T4440] loop4: detected capacity change from 0 to 8192 [ 92.658291][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.723234][ T28] audit: type=1400 audit(92.697:347): avc: denied { bind } for pid=4442 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 92.744711][ T4443] bridge_slave_1: left allmulticast mode [ 92.753406][ T4440] loop4: p1 < > p2 p4 < p5 > [ 92.766739][ T4440] loop4: partition table partially beyond EOD, truncated [ 92.774374][ T4443] bridge_slave_1: left promiscuous mode [ 92.780788][ T4440] loop4: p1 start 134217728 is beyond EOD, truncated [ 92.787812][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.795646][ T4440] loop4: p2 size 591360 extends beyond EOD, truncated [ 92.806539][ T4440] loop4: p5 size 591360 extends beyond EOD, truncated [ 92.816544][ T4443] bond0: (slave bond_slave_0): Releasing backup interface [ 92.835240][ T4443] bond0: (slave bond_slave_1): Releasing backup interface [ 92.871471][ T4443] team0: Port device team_slave_0 removed [ 92.898165][ T4443] team0: Port device team_slave_1 removed [ 92.920820][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.938616][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.949155][ T28] audit: type=1400 audit(92.907:348): avc: denied { block_suspend } for pid=4448 comm="syz.1.199" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.972316][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.999716][ T4405] Set syz1 is full, maxelem 65536 reached [ 93.001737][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.028735][ T4443] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.066517][ T4454] loop3: detected capacity change from 0 to 512 [ 93.081628][ T4454] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 93.082765][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.102612][ T4454] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 93.119094][ T4454] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.200: bad orphan inode 4 [ 93.129310][ T4454] loop3: lost filesystem error report for type 5 error -117 [ 93.129509][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 93.143390][ C1] EXT4-fs (loop3): initial error at time 93: ext4_orphan_get:1423 [ 93.149869][ T4454] EXT4-fs (loop3): 1 orphan inode deleted [ 93.151276][ C1] EXT4-fs (loop3): last error at time 93: ext4_orphan_get:1423 [ 93.172520][ T3008] ================================================================== [ 93.173574][ T4459] mmap: syz.4.196 (4459) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.180674][ T3008] BUG: KCSAN: data-race in d_delete / lookup_fast [ 93.198903][ T3008] [ 93.201257][ T3008] read-write to 0xffff8881075e8900 of 4 bytes by task 3311 on cpu 0: [ 93.209341][ T3008] d_delete+0xbe/0xe0 [ 93.213368][ T3008] d_delete_notify+0x32/0x100 [ 93.218159][ T3008] vfs_unlink+0x289/0x490 [ 93.218643][ T4454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.222506][ T3008] filename_unlinkat+0x1e2/0x410 [ 93.222533][ T3008] __se_sys_unlink+0x2b/0xe0 [ 93.222555][ T3008] __x64_sys_unlink+0x1f/0x30 [ 93.222577][ T3008] x64_sys_call+0x2eb6/0x3020 [ 93.222606][ T3008] do_syscall_64+0x12c/0x3b0 [ 93.222630][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.222654][ T3008] [ 93.222662][ T3008] read to 0xffff8881075e8900 of 4 bytes by task 3008 on cpu 1: [ 93.222681][ T3008] lookup_fast+0xf0/0x320 [ 93.222710][ T3008] path_lookupat+0x15c/0x500 [ 93.222734][ T3008] filename_lookup+0x190/0x390 [ 93.222760][ T3008] do_readlinkat+0x74/0x2f0 [ 93.222788][ T3008] __x64_sys_readlink+0x47/0x60 [ 93.222813][ T3008] x64_sys_call+0x2b51/0x3020 [ 93.222843][ T3008] do_syscall_64+0x12c/0x3b0 [ 93.307639][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.313575][ T3008] [ 93.315924][ T3008] value changed: 0x00300180 -> 0x00004080 [ 93.321658][ T3008] [ 93.323998][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 93.330176][ T3008] CPU: 1 UID: 0 PID: 3008 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 93.339046][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 93.349125][ T3008] ================================================================== [ 94.360505][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.