last executing test programs: 9m15.666979629s ago: executing program 32 (id=301): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x7, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 8m57.94297078s ago: executing program 33 (id=1039): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 8m5.079213024s ago: executing program 34 (id=2586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x500, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 7m36.952968045s ago: executing program 35 (id=3339): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) 6m58.525713196s ago: executing program 36 (id=4214): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000002850000001b"], 0x0, 0x0, 0x5c, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m56.948045234s ago: executing program 37 (id=4240): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6m48.760932151s ago: executing program 38 (id=4325): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) io_uring_setup(0x263a, 0x0) close(0x3) 6m43.39424465s ago: executing program 39 (id=4393): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xa) openat(r2, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m23.127827522s ago: executing program 40 (id=5661): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[], 0x0) 5m16.8680914s ago: executing program 41 (id=5811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x100, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000feffffffff91f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f00000000c0)=0x83ab412, 0x4) 4m42.828669377s ago: executing program 42 (id=6615): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 3m21.304188289s ago: executing program 43 (id=8466): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c65) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="a5", 0x1}], 0x1, 0x2000, 0x0, 0x3) open(&(0x7f0000000080)='./file1\x00', 0x103203, 0x8) 3m8.508167768s ago: executing program 44 (id=8744): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008c40)=@newtfilter={0x30c, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x2e0, 0x2, [@TCA_FW_ACT={0x22c, 0x4, [@m_tunnel_key={0xe4, 0xc, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xa1, 0x6, "65d99b23d8268a92d95df38a5c95888f1d0b40c4b3f31084c9666ebce01334b002e128df77afdc486c40145752e95a956dd32d3b9e254b6bd44ba8dacb4864758f260db5fa1912b141f40211be0987033c543a22a7b652e8212665472befdaeac892dc3a47d91416364fd417f6dee09acf71e4ea8accf23f36e63d1d1cf764a909ed2dd02ef348f4b142919340a76f550bd73a0d28a904cc1f271d5f08"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x144, 0x16, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x23}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "2ff161440093adb40306cb3a3b55a549"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}]}, {0xe5, 0x6, "18c606275f2ebbd47c1488a31f37bd44c94133160cf348f2920753a36eafa644f2ec7c0c31a32a49e8797890824b6f64b968379609eff73cd211777e1183aea649793f0589215430b00f364ac22d4aa7628f2af3dbaec52706ed3caff26ae62988b0dc56fa7fe031fed2297f1f21efefc56dc23ff867b2c61819c8f54711c1f667283625fade4991209dbcaa900bc31afb5535fdf8e541222f269971a97d4eb4268de600f2aa2f9157f03503b6c058a2c092c4607d281c2ebe35cad7678a0b19d463acf57ebde2b36930c831837e343eb877bb59b0f93b09687ee9ae5a9bf12d60"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_ACT={0xb0, 0x4, [@m_simple={0x7c, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x4d, 0x6, "220a8dc9acf754e14702215c479f5ba62d828777906ee8f093b97071c06886806ed53bc6cc7e6fdfa9ac250a1364d2865b77e6158f92602b7f9817258ed0f46b254694073b748f7c23"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x30, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0xf50c9628ecde09ed}}}}]}]}}]}, 0x30c}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2m33.372402632s ago: executing program 45 (id=9485): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x33}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001800)=ANY=[@ANYBLOB="020200030f0000002cbd7040fedbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e20ac1414bb00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x8000) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x7ffff000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x25, 0x29, 0x32}}, @ip_tos_u8={{0x11, 0x4410, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x64}, 0x0) 2m16.341438072s ago: executing program 46 (id=9805): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000180), 0x1, 0x2be, &(0x7f0000000600)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=[@cred={{0x1c}}], 0x20, 0x7a006db19243b37}}], 0x1, 0x0) sendfile(r1, r1, 0x0, 0x252c000000000000) 2m9.019695603s ago: executing program 3 (id=9936): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0x10401, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) 2m8.992782135s ago: executing program 3 (id=9938): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 2m8.702671271s ago: executing program 3 (id=9944): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000"], 0x10}}, 0x0) 2m7.239323518s ago: executing program 3 (id=9952): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xaa101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x219d80f, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 2m7.166835535s ago: executing program 3 (id=9955): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x0, 0x0, 0x20, 0xff, 0x0, 0x2}, 0xe) shutdown(r1, 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 2m6.750077041s ago: executing program 3 (id=9964): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 2m6.691925566s ago: executing program 47 (id=9964): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 2m4.796834632s ago: executing program 9 (id=9980): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) 2m3.760771582s ago: executing program 9 (id=9994): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141495bd"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}, @IFLA_MTU={0x8, 0x4, 0x6cc}]}, 0x48}}, 0x4040000) 2m3.298022213s ago: executing program 9 (id=10000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4], 0x80}}, 0x8000) 2m3.229664889s ago: executing program 9 (id=10001): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xaa101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x219d80f, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 2m3.196053592s ago: executing program 9 (id=10003): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) 2m2.553133248s ago: executing program 9 (id=10006): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m2.53420218s ago: executing program 48 (id=10006): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m50.461465636s ago: executing program 0 (id=10211): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200"/31], 0x0, 0x4a}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m50.393207052s ago: executing program 0 (id=10212): socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x4f4c82, 0x5c, 0x8}, 0x18) 1m50.377569144s ago: executing program 0 (id=10214): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a2d, 0x0, 0x7fc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f00000003c0)='numa_maps\x00') 1m50.293509291s ago: executing program 0 (id=10217): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r0, &(0x7f0000000080)="cc", 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x20, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 1m49.896272126s ago: executing program 0 (id=10224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) 1m49.602475121s ago: executing program 0 (id=10232): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f00000004c0)=""/4062, 0xfde}], 0x2}, 0x6}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) 1m49.576475674s ago: executing program 49 (id=10232): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f00000004c0)=""/4062, 0xfde}], 0x2}, 0x6}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) 1m43.000730639s ago: executing program 2 (id=10374): bpf$PROG_LOAD(0x5, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz82JwkAABeA3+5MNe0oJu6Vkr+vVk01YQsBaImhjViEjxiDoXUT4vsvjMW8GJjxVmWOYomb7fXP4fje/9v/jukmGn99s+rekTUqbpO8y/k01q/NsUbLrm5Tu82u+eBhrrZe3PrLcP/Z3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAaTgEAAP//LuQOEw==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m41.519220948s ago: executing program 2 (id=10407): r0 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1m41.38490116s ago: executing program 2 (id=10411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7fff, 0x80, 0x240}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) 1m41.137764682s ago: executing program 2 (id=10416): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m41.016787302s ago: executing program 2 (id=10418): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 1m40.247790829s ago: executing program 2 (id=10433): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) 1m40.204741293s ago: executing program 50 (id=10433): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) 52.705180139s ago: executing program 1 (id=11366): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x318, 0x158, 0x0, 0x148, 0x158, 0x148, 0x280, 0x240, 0x240, 0x280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x75}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1a, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r1, &(0x7f0000000840)={@void, @val={0x0, 0x0, 0x8, 0x100, 0x19, 0xc}, @ipv4=@icmp={{0x8, 0x4, 0x2, 0x5, 0x8008, 0x66, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_addr={0x44, 0xc, 0xdb, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8004}]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0x4}}}, 0xfec9) 52.257381468s ago: executing program 1 (id=11382): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x94}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x800) 52.180691175s ago: executing program 1 (id=11383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = dup(r0) sendto$packet(r1, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x2, 0x8, 0x35, 0xc5, 0x7ff, 0xfffffffffffffff7, 0xfffffffffffffff7, 0xc7}, &(0x7f0000000640)={0x8, 0xe, 0x6, 0x8000000000000001, 0x8, 0x3, 0x5, 0xffffffffffff48e5}, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 52.011675479s ago: executing program 1 (id=11384): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x7, 0x4, 0x7) r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) 50.8553566s ago: executing program 1 (id=11410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "266960b0f8eda83a", "faf9095addbd8b77d97adc9ed0480821", "6363b535", "f1586ba408e105b6"}, 0x28) 50.720344912s ago: executing program 1 (id=11415): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000180)={[{@discard}, {@nombcache}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000cc0)="$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") accept4$unix(r0, 0x0, 0x0, 0x80800) 50.691417885s ago: executing program 51 (id=11415): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000180)={[{@discard}, {@nombcache}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000cc0)="$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") accept4$unix(r0, 0x0, 0x0, 0x80800) 5.039487669s ago: executing program 4 (id=12107): r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) 4.866297244s ago: executing program 4 (id=12113): r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x7437, 0x80}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000005080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 4.826694517s ago: executing program 4 (id=12114): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) shutdown(r0, 0x1) 4.758030933s ago: executing program 4 (id=12116): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) unshare(0xa000200) r2 = semget$private(0x0, 0x4000, 0x0) semtimedop(r2, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) 4.483757087s ago: executing program 4 (id=12122): ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) unshare(0x62040200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x141241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000680)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x4, 0x28, 0x64, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x5c2e6bf19cacf817, 0x81, 0x0, 0x6}}}}}}}, 0x3a) 4.379116276s ago: executing program 4 (id=12123): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x9}, 0x1a296, 0xc, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008050) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/68}, {&(0x7f0000000280)=""/177}, {&(0x7f0000000340)=""/54}, {&(0x7f0000000380)=""/22}, {&(0x7f00000003c0)=""/121}, {&(0x7f0000000440)=""/19}, {&(0x7f0000000480)=""/151}], 0x0, &(0x7f00000005c0)=""/101}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b40)=""/59}, {&(0x7f0000000680)=""/143}, {&(0x7f0000000740)=""/4096}, {&(0x7f0000001740)=""/15}, {&(0x7f0000001780)=""/215}, {&(0x7f0000001880)=""/4}, {&(0x7f00000018c0)=""/237}, {&(0x7f00000019c0)=""/76}, {&(0x7f0000001a40)=""/211}, {&(0x7f0000001e80)=""/16}], 0x0, &(0x7f0000001c40)=""/122}, 0x3ca}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001cc0)=""/212}, {&(0x7f0000001dc0)=""/188}, {&(0x7f0000002500)=""/118}, {&(0x7f0000001f00)=""/234}, {&(0x7f0000002000)=""/94}, {&(0x7f0000002080)=""/132}, {&(0x7f0000002140)=""/185}, {&(0x7f0000002200)=""/223}, {&(0x7f0000002300)=""/119}]}, 0x4}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 4.016089138s ago: executing program 8 (id=12129): r0 = socket$inet_sctp(0x2, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0xa000000c, 0x0) unshare(0x22020400) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) 3.857491782s ago: executing program 7 (id=12130): r0 = socket$rxrpc(0x21, 0x2, 0xa) set_mempolicy(0x1, 0x0, 0x7582) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.855442202s ago: executing program 8 (id=12140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x80, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) shutdown(r0, 0x0) 3.726921503s ago: executing program 8 (id=12132): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r1 = gettid() tkill(r1, 0x7) 3.64523731s ago: executing program 8 (id=12134): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = syz_io_uring_setup(0x10d3, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 3.600580334s ago: executing program 7 (id=12135): connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.151615414s ago: executing program 8 (id=12136): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) open$dir(&(0x7f0000000000)='./file4\x00', 0x2601, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) 2.62211161s ago: executing program 6 (id=12137): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) 2.270085171s ago: executing program 7 (id=12142): r0 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ftruncate(r0, 0x400000) finit_module(r0, 0x0, 0x0) 2.056906229s ago: executing program 7 (id=12147): r0 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x10800, 0x12345}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.810301261s ago: executing program 6 (id=12148): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 1.808503441s ago: executing program 5 (id=12158): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$eJzs3cFrI1UcB/DfxrXdXe2mBxEUxIde9DK09R8wyC6IBaVuZfUgzNqphswmJRNWsoi7N/Hm37F49CaI4LkX79689eJxD4uRJm23ienBhTSWfD4Q3i/z8mXeJEz4XZJ3cPuHu63dKtvNe1F7N8XViKg9jliNWhy7dDTWhvVSnPYw3q7f/uO1jz/97IPG5uaNrZRuNm69s5FSuv76L19/8+Mbv/Ze+OSn6z8vx/7q5wd/bfy5//L+Kwd/3/qqWaVmldqdXsrTnU6nl98pi7TTrFpZSh+VRV4Vqdmuiu7Y/G7Z2dvrp7y9s3Jtr1tUVcrb/dQq+qnXSb1uP+Vf5s12yrIsrVyLxfIs17v9aGsrb8xgMZyj7ycPXB1/2u028sN7ePlfye1HM10YAPC/NNn/1+LK8Pic+v/jFuW/9/+XFr3/fxb6/0Vw2P8vHd2/4/T/AAAAAAAAAAAAAABwETweDOqDwaB+PE4+5r0+Zsvnv9hO/XDvSkT53b3te9ujcTTf2I1mlFHEWtTjScTgxKi++f7mjbU0tBordx+M8ofjc+P59ajH6vT8ekpp8CCl8fzzw3+0OMlvRD1emp7fGJ1/Ir8Ub715Kp9FPX7/IjpRxk4cZp/mv11P6b0PNyfyy8PXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAYsnRi6v79WXbW/Ch/sr/+WtTjyfT9+dem7s9/OV69PN9rBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjVf9+Ky/Lonv+xcM4Y2pwZF4LO/8iYman+O3FOOt9VijOLub9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn7+mm3/NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNU9e+38rIsujMs5n2NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8k/AQAA//8A7ioD") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.631280566s ago: executing program 6 (id=12149): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x4) 1.459976401s ago: executing program 6 (id=12150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xa, 0x7}, {0x0, 0xfff1}, {0x0, 0x1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) 1.421427555s ago: executing program 5 (id=12151): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) listen(0xffffffffffffffff, 0x3) 1.071167116s ago: executing program 6 (id=12152): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 963.081405ms ago: executing program 7 (id=12153): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101a42, 0xa3) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 962.544995ms ago: executing program 6 (id=12164): r0 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x10800, 0x12345}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 818.452128ms ago: executing program 5 (id=12154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) shmdt(0x0) 787.290541ms ago: executing program 5 (id=12155): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f00000001c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x01\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xa7mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x14\xe1\xc6M\x98?\x81\xadm\x1e\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87H\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xf7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xc7X\x83\x960\"p\xca\xcf\xf3\"vd@J?\xf5FYL\x82\"jg\x8b\xce\x16N\xff\x1dm\xd6e\xaci}\x87\x1a\x12\xb3\xb27XF\xfd\xb5+j^Iji$\xa2\x8e*^{f\xb1\xf6\xd2\t4\xa3\xc6\x98SX\x9eA\\Vi\xb8\x10\x9b\xc3N\x15#\xa2\xc9\x89|BP\xbbG\x1fR\xf8sY\x04\xe6\x81\xf6\tX\xf6\r\x1f\x05\xa2.W\"\xe6\xdc4\xb7\xb2}\xbb\x96\xdd\x89\xf2\xf6\x98\x12;\x01*n\x83\x98\x13\x9d#\xb1\x7f\x86\xf8\xb0', 0xe) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x2a8, 0x2a8, 0x0, 0xf0, 0x3b8, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@ip={@remote, @multicast1, 0xff, 0xffffff00, 'syzkaller0\x00', 'batadv_slave_1\x00', {}, {}, 0x32, 0x1, 0x20}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xc7}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x81, @local, 0x4e20}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffff00, 0xffffff00, 'veth0_macvtap\x00', 'wlan0\x00', {}, {}, 0x4, 0x0, 0x40}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @remote, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {0xff}, {}, 0x33, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x2, @broadcast, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 108.53662ms ago: executing program 8 (id=12156): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 108.39997ms ago: executing program 5 (id=12157): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) unshare(0x2060280) unshare(0x28020480) 107.70836ms ago: executing program 7 (id=12169): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) 0s ago: executing program 5 (id=12159): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x6, 0xab9}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 491.753614][T32314] ext4 filesystem being mounted at /746/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 491.789689][ T28] audit: type=1400 audit(1771575574.952:3170): avc: denied { setattr } for pid=32313 comm="syz.7.9982" path="/746/mnt/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 491.820920][T19345] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 492.159970][T32357] loop7: detected capacity change from 0 to 1024 [ 492.198623][T32357] EXT4-fs: Ignoring removed orlov option [ 492.249010][T32357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.326461][T32212] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 492.383702][T32212] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 492.391945][T19345] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.433782][T32212] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 492.500990][T32212] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 492.679051][T32410] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9994'. [ 492.815674][T32212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.861945][T32212] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.882036][T29498] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.889142][T29498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.942391][T29498] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.949485][T29498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.001570][T32430] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10000'. [ 493.102873][T32439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10002'. [ 493.217742][T32212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.549167][T32212] veth0_vlan: entered promiscuous mode [ 493.584277][T32212] veth1_vlan: entered promiscuous mode [ 493.626286][T32212] veth0_macvtap: entered promiscuous mode [ 493.647055][T32212] veth1_macvtap: entered promiscuous mode [ 493.681103][T32212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.710512][T32212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.746133][T29498] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.773639][T29498] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.816283][T29498] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.838898][T29498] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.274408][T32491] chnl_net:caif_netlink_parms(): no params data found [ 494.404479][T32491] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.422338][T32491] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.435334][T32491] bridge_slave_0: entered allmulticast mode [ 494.449586][T32491] bridge_slave_0: entered promiscuous mode [ 494.478632][T32491] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.532330][T32491] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.552475][T32491] bridge_slave_1: entered allmulticast mode [ 494.570136][T32491] bridge_slave_1: entered promiscuous mode [ 494.618298][T32491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.649942][T32491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.690288][T32491] team0: Port device team_slave_0 added [ 494.700851][T32491] team0: Port device team_slave_1 added [ 494.772536][T32491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.779542][T32491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.847083][T32491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.906530][T32491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.914402][T32491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.983514][T32491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.050605][T32491] hsr_slave_0: entered promiscuous mode [ 495.067631][T32491] hsr_slave_1: entered promiscuous mode [ 495.097085][T32491] debugfs: 'hsr0' already exists in 'hsr' [ 495.103033][T32491] Cannot create hsr debugfs directory [ 495.413145][ T28] audit: type=1326 audit(1771575578.582:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32623 comm="syz.4.10022" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe12f10c629 code=0x0 [ 495.516751][T32491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 495.538983][T32491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 495.583109][T32491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 495.607604][T32491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 495.736091][T32491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.768714][T32491] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.780851][T29500] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.787959][T29500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.853081][T29498] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.860265][T29498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.025533][T32491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.258437][T32721] netlink: 'syz.7.10037': attribute type 1 has an invalid length. [ 496.262779][T32491] veth0_vlan: entered promiscuous mode [ 496.302993][T32491] veth1_vlan: entered promiscuous mode [ 496.339501][T32721] bond7: (slave geneve2): making interface the new active one [ 496.354245][T32721] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 496.379694][T29502] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 496.402170][T29502] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 496.438735][T32491] veth0_macvtap: entered promiscuous mode [ 496.462764][T32735] loop7: detected capacity change from 0 to 512 [ 496.473781][T29502] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 496.485468][T32735] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 496.508531][T32735] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.10041: bg 0: block 4: invalid block bitmap [ 496.513553][T29502] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 496.522007][T32735] loop7: lost filesystem error report for type 5 error -117 [ 496.529705][T32735] EXT4-fs (loop7): 1 truncate cleaned up [ 496.537138][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 496.537171][ C0] EXT4-fs (loop7): initial error at time 1771575579: ext4_validate_block_bitmap:432 [ 496.537197][ C0] EXT4-fs (loop7): last error at time 1771575579: ext4_validate_block_bitmap:432 [ 496.572730][T32735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.579125][T32491] veth1_macvtap: entered promiscuous mode [ 496.600859][T32737] tipc: Started in network mode [ 496.612886][T32737] tipc: Node identity , cluster identity 4711 [ 496.629164][T32737] tipc: Failed to obtain node identity [ 496.635638][T32737] tipc: Enabling of bearer rejected, failed to enable media [ 496.650239][T32751] batadv_slave_0: entered promiscuous mode [ 496.650634][T32750] batadv_slave_0: left promiscuous mode [ 496.651431][T32491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.661810][T32491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.686491][ T5617] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.686545][ T5617] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.686606][ T5617] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.686676][ T5617] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.821632][T19345] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.998680][ T303] syzkaller0: entered promiscuous mode [ 497.012607][ T303] syzkaller0: entered allmulticast mode [ 499.047634][ T560] netlink: 'syz.8.10085': attribute type 2 has an invalid length. [ 499.063369][ T563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10086'. [ 499.072499][ T560] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10085'. [ 499.082390][ T563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10086'. [ 499.192379][ T563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10086'. [ 499.202479][ T563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10086'. [ 499.292788][ T587] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10093'. [ 499.316467][ T587] gtp0: entered promiscuous mode [ 499.509191][ T613] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.516597][ T613] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.621520][ T613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.630759][ T608] loop0: detected capacity change from 0 to 32768 [ 499.641678][ T613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.704106][T29502] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.714527][T29502] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.723940][T29502] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.736784][T29502] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.846142][ T624] xt_hashlimit: size too large, truncated to 1048576 [ 500.242311][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.647192][ T729] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10138'. [ 501.684903][ T729] netlink: 'syz.7.10138': attribute type 5 has an invalid length. [ 501.694177][ T729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10138'. [ 501.710501][ T729] geneve3: entered promiscuous mode [ 501.716517][ T729] geneve3: entered allmulticast mode [ 501.730486][ T30] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 59912 - 0 [ 501.739565][T29502] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 59912 - 0 [ 501.766238][T29502] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 59912 - 0 [ 501.782278][T29502] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 59912 - 0 [ 501.957774][ T766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10153'. [ 502.919496][ T886] loop8: detected capacity change from 0 to 2048 [ 502.935394][ T886] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.074435][ T905] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 503.089793][ T905] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 448 with error 28 [ 503.182301][ T905] EXT4-fs (loop8): This should not happen!! Data will be lost [ 503.182301][ T905] [ 503.225978][ T905] EXT4-fs (loop8): Total free blocks count 0 [ 503.232111][ T905] EXT4-fs (loop8): Free/Dirty block details [ 503.271584][ T905] EXT4-fs (loop8): free_blocks=2415919504 [ 503.304083][ T905] EXT4-fs (loop8): dirty_blocks=2352 [ 503.321600][ T905] EXT4-fs (loop8): Block reservation details [ 503.367379][ T905] EXT4-fs (loop8): i_reserved_data_blocks=191 [ 503.422015][ T939] netlink: 'syz.4.10176': attribute type 1 has an invalid length. [ 503.881952][ T886] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 448 with max blocks 2048 with error 28 [ 505.651441][ T1046] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10202'. [ 505.687577][ T1047] loop0: detected capacity change from 0 to 128 [ 505.732556][ T1047] msdos: Unknown parameter 'dos1xfl%›4?Ö…y' [ 505.761884][ T1053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10208'. [ 506.008607][ T1075] loop0: detected capacity change from 0 to 512 [ 506.058831][ T1075] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 506.072326][ T1078] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10216'. [ 506.118540][ T1078] ip6gre2: entered promiscuous mode [ 506.131661][ T1078] ip6gre2: entered allmulticast mode [ 506.166833][ T28] audit: type=1326 audit(1771575589.332:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.5.10218" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a810fc629 code=0x0 [ 506.190780][ T1075] EXT4-fs (loop0): 1 truncate cleaned up [ 506.197730][ T1075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.378686][T32491] EXT4-fs error (device loop0): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 506.415527][T32491] EXT4-fs (loop0): Remounting filesystem read-only [ 506.567271][ T1106] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10229'. [ 506.581006][ T1106] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10229'. [ 506.581030][T29498] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.600007][T29498] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.610756][T29498] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.619592][T29498] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.657375][ T1090] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.894472][ T1115] chnl_net:caif_netlink_parms(): no params data found [ 506.911046][ T1130] netlink: 'syz.5.10236': attribute type 1 has an invalid length. [ 506.954929][ T1130] gretap2: entered allmulticast mode [ 506.964501][ T1130] bond9: (slave gretap2): making interface the new active one [ 506.977057][ T1130] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 507.007572][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.015381][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.024792][ T1115] bridge_slave_0: entered allmulticast mode [ 507.039860][ T1115] bridge_slave_0: entered promiscuous mode [ 507.055959][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.070807][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.086917][ T1115] bridge_slave_1: entered allmulticast mode [ 507.097504][ T1115] bridge_slave_1: entered promiscuous mode [ 507.145213][ T1115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.156028][ T1115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.204522][ T1115] team0: Port device team_slave_0 added [ 507.220341][ T1115] team0: Port device team_slave_1 added [ 507.241554][ T1115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.257944][ T1115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.304406][ T1115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.317097][ T1115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.335693][ T1115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.364887][ T1115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.402936][ T1170] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10249'. [ 507.429407][ T1115] hsr_slave_0: entered promiscuous mode [ 507.443136][ T1115] hsr_slave_1: entered promiscuous mode [ 507.459314][ T1115] debugfs: 'hsr0' already exists in 'hsr' [ 507.475736][ T1115] Cannot create hsr debugfs directory [ 507.664064][ T1181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10253'. [ 507.702620][ T1181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10253'. [ 508.063371][ T1115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 508.102153][ T1115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 508.114917][ T1224] veth1_to_bond: entered allmulticast mode [ 508.122451][ T1115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 508.133197][ T1224] veth1_to_bond: left allmulticast mode [ 508.138920][ T1115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 508.220680][ T1115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.245162][ T1115] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.256351][T29500] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.263519][T29500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.273802][T29500] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.280904][T29500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.459606][ T1115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.637627][ T1115] veth0_vlan: entered promiscuous mode [ 508.654104][ T1115] veth1_vlan: entered promiscuous mode [ 508.691240][ T1115] veth0_macvtap: entered promiscuous mode [ 508.702917][ T1115] veth1_macvtap: entered promiscuous mode [ 508.715263][ T1115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.734060][ T1115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.752704][T29502] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.764148][T29502] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.790898][T29502] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.809062][T29502] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.940495][ T28] audit: type=1326 audit(1771575592.102:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1327 comm="syz.2.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7164b0c629 code=0x7ffc0000 [ 509.018167][ T28] audit: type=1326 audit(1771575592.102:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1327 comm="syz.2.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7164b0c629 code=0x7ffc0000 [ 509.092107][ T1342] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 509.096592][ T28] audit: type=1326 audit(1771575592.102:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1327 comm="syz.2.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7164b0c629 code=0x7ffc0000 [ 509.176356][ T28] audit: type=1326 audit(1771575592.102:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1327 comm="syz.2.10233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7164b0c629 code=0x0 [ 509.764063][ T1410] xt_limit: Overflow, try lower: 65536/2147483648 [ 509.808113][ T1319] Process accounting paused [ 509.815969][ T1406] loop8: detected capacity change from 0 to 512 [ 509.848506][ T1406] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 509.887136][ T1406] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.933262][ T1430] macvtap1: entered promiscuous mode [ 509.938713][ T1430] macvtap1: entered allmulticast mode [ 509.944262][ T1430] syz_tun: entered promiscuous mode [ 509.949618][ T1430] syz_tun: entered allmulticast mode [ 509.955996][ T1430] team0: Device macvtap1 failed to register rx_handler [ 509.973335][ T1430] syz_tun: left allmulticast mode [ 509.978646][ T1430] syz_tun: left promiscuous mode [ 510.054932][ T1441] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.10295'. [ 510.070241][T32212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.176354][ T1453] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10299'. [ 511.046889][ T1551] loop8: detected capacity change from 0 to 128 [ 511.079329][ T1558] __nla_validate_parse: 1 callbacks suppressed [ 511.079385][ T1558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10321'. [ 511.088419][ T1551] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 511.113218][ T1551] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 511.141066][ T1558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10321'. [ 511.173142][T32212] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 512.165141][ T1646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10339'. [ 512.184742][ T1646] veth0_to_bridge: entered promiscuous mode [ 512.212308][ T1646] veth0_to_bridge: entered allmulticast mode [ 512.252894][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.348286][ T1655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10343'. [ 512.370596][ T1655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10343'. [ 512.397437][ T5628] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.397502][ T1655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10343'. [ 512.397529][ T1655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10343'. [ 512.434912][ T5628] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.447120][ T5628] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.456220][ T5628] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.566704][ T1670] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10350'. [ 512.654316][ T1670] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10350'. [ 512.736053][ T1678] loop8: detected capacity change from 0 to 512 [ 512.763211][ T1678] ext4: Unknown parameter 'dont_appraise' [ 512.773192][ T1678] Set syz1 is full, maxelem 2 reached [ 512.790127][ T1680] vlan0: entered promiscuous mode [ 512.811074][ T1680] gretap0: entered promiscuous mode [ 512.894273][ T1679] vlan0: left promiscuous mode [ 512.899231][ T1679] gretap0: left promiscuous mode [ 512.923880][ T1688] loop8: detected capacity change from 0 to 512 [ 512.993768][ T1688] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.050442][ T1700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10364'. [ 513.056693][ T1688] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.606467][T32212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.979452][ T28] audit: type=1400 audit(1771575597.142:3177): avc: denied { name_bind } for pid=1758 comm="syz.8.10386" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 514.124648][ T1769] loop8: detected capacity change from 0 to 2048 [ 514.152676][ T1769] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.721911][T32212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.962923][ T1828] netlink: 'syz.8.10412': attribute type 1 has an invalid length. [ 514.992260][ T1828] netlink: 'syz.8.10412': attribute type 4 has an invalid length. [ 515.535857][T29502] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.562261][T29502] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.685367][T29502] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.722352][T29502] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.781670][ T1849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 515.834860][T29502] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.872338][T29502] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.009248][T29502] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.025800][T29502] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.134556][ T1883] VFS: Mount too revealing [ 516.139385][ T28] audit: type=1400 audit(1771575599.302:3178): avc: denied { mounton } for pid=1882 comm="syz.5.10435" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 516.214112][T29502] bridge_slave_1: left allmulticast mode [ 516.234929][T29502] bridge_slave_1: left promiscuous mode [ 516.240693][T29502] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.291013][T29502] bridge_slave_0: left allmulticast mode [ 516.297638][ T1900] Set syz1 is full, maxelem 2 reached [ 516.322473][T29502] bridge_slave_0: left promiscuous mode [ 516.328244][T29502] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.591621][T29502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.603130][T29502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.624024][T29502] bond0 (unregistering): Released all slaves [ 516.681796][T29502] hsr_slave_0: left promiscuous mode [ 516.707999][T29502] hsr_slave_1: left promiscuous mode [ 516.724343][T29502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.731851][T29502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.753451][T29502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.771003][T29502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.801374][T29502] veth1_macvtap: left promiscuous mode [ 516.817051][T29502] veth0_macvtap: left promiscuous mode [ 516.831936][T29502] veth1_vlan: left promiscuous mode [ 516.844082][T29502] veth0_vlan: left promiscuous mode [ 517.009155][T29502] team0 (unregistering): Port device team_slave_1 removed [ 517.020479][T29502] team0 (unregistering): Port device team_slave_0 removed [ 517.237044][ T1970] loop8: detected capacity change from 0 to 1024 [ 517.285965][ T1970] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 517.359802][ T1970] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.469982][ T1890] chnl_net:caif_netlink_parms(): no params data found [ 517.497732][ T1970] EXT4-fs error (device loop8): ext4_free_blocks:6726: comm syz.8.10456: Freeing blocks not in datazone - block = 0, count = 16 [ 517.539999][ T3545] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 517.580414][ T3545] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 517.626403][ T3545] EXT4-fs (loop8): This should not happen!! Data will be lost [ 517.626403][ T3545] [ 517.644376][ T1890] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.662054][ T3545] EXT4-fs (loop8): Total free blocks count 0 [ 517.668220][ T1890] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.675430][ T3545] EXT4-fs (loop8): Free/Dirty block details [ 517.681396][ T3545] EXT4-fs (loop8): free_blocks=16 [ 517.687902][ T1890] bridge_slave_0: entered allmulticast mode [ 517.698014][ T3545] EXT4-fs (loop8): dirty_blocks=16 [ 517.704241][ T1890] bridge_slave_0: entered promiscuous mode [ 517.712245][ T3545] EXT4-fs (loop8): Block reservation details [ 517.728121][ T1890] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.743258][ T3545] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 517.758004][ T1890] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.782579][ T1890] bridge_slave_1: entered allmulticast mode [ 517.789203][ T1890] bridge_slave_1: entered promiscuous mode [ 517.809056][T32212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 517.935627][ T1890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.963813][ T1890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.994237][ T2024] __nla_validate_parse: 5 callbacks suppressed [ 517.994257][ T2024] netlink: 104 bytes leftover after parsing attributes in process `syz.7.10466'. [ 518.009822][ T1890] team0: Port device team_slave_0 added [ 518.047551][ T1890] team0: Port device team_slave_1 added [ 518.104573][ T1890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.121702][ T1890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.164697][ T2043] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10470'. [ 518.183950][ T1890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.232953][ T2043] 8021q: adding VLAN 0 to HW filter on device bond8 [ 518.241036][ T1890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.261572][ T1890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.293447][ T1890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.304542][ T2043] bond0: left promiscuous mode [ 518.312377][ T2043] macvlan0: left promiscuous mode [ 518.325376][ T2043] bond8: (slave macvlan0): Enslaving as an active interface with an up link [ 518.357023][ T1890] hsr_slave_0: entered promiscuous mode [ 518.363161][ T1890] hsr_slave_1: entered promiscuous mode [ 518.369425][ T1890] debugfs: 'hsr0' already exists in 'hsr' [ 518.375345][ T1890] Cannot create hsr debugfs directory [ 518.453771][ T2066] netlink: 76 bytes leftover after parsing attributes in process `syz.8.10476'. [ 518.567163][ T1890] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 39054 - 0 [ 518.578949][ T1890] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 518.816747][ T1890] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 39054 - 0 [ 518.827763][ T1890] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 518.883985][ T1890] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 39054 - 0 [ 518.906231][ T1890] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 518.955142][ T1890] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 39054 - 0 [ 518.965504][ T1890] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 519.035385][ T1890] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 519.044829][ T1890] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 519.055291][ T1890] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 519.066268][ T1890] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 519.138543][ T1890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.151340][ T1890] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.178889][ T1890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 519.194602][ T1890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.208842][ T2089] hugetlbfs: syz.8.10482 (2089): Using mlock ulimits for SHM_HUGETLB is obsolete [ 519.223704][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.230904][ T5617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.267985][ T2098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10485'. [ 519.279569][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.286687][ T5617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.315262][ T2103] netlink: 'syz.7.10486': attribute type 1 has an invalid length. [ 519.330071][ T2098] 8021q: adding VLAN 0 to HW filter on device bond10 [ 519.389028][ T2103] 8021q: adding VLAN 0 to HW filter on device bond9 [ 519.406326][ T2106] bond9: (slave syz_tun): making interface the new active one [ 519.448578][ T2106] bond9: (slave syz_tun): Enslaving as an active interface with an up link [ 519.505902][ T1890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.540051][ T2124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10493'. [ 519.559076][ T2124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10493'. [ 519.681516][ T1890] veth0_vlan: entered promiscuous mode [ 519.714492][ T1890] veth1_vlan: entered promiscuous mode [ 519.728913][ T28] audit: type=1326 audit(1771575602.892:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2149 comm="syz.4.10500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 519.760697][ T1890] veth0_macvtap: entered promiscuous mode [ 519.787579][ T1890] veth1_macvtap: entered promiscuous mode [ 519.792280][ T28] audit: type=1326 audit(1771575602.892:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2149 comm="syz.4.10500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 519.825635][ T1890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.835874][ T1890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.886805][ T28] audit: type=1326 audit(1771575602.892:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2149 comm="syz.4.10500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 519.896147][T29502] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.934203][T29502] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.943813][ T28] audit: type=1326 audit(1771575602.982:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2149 comm="syz.4.10500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 519.974517][T29502] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.985687][T29502] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.997115][ T28] audit: type=1326 audit(1771575602.982:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2149 comm="syz.4.10500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 520.026601][ T28] audit: type=1326 audit(1771575602.992:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2149 comm="syz.4.10500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 520.062177][ T28] audit: type=1326 audit(1771575602.992:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2149 comm="syz.4.10500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 520.093460][ T28] audit: type=1326 audit(1771575602.992:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2149 comm="syz.4.10500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 520.150038][ T28] audit: type=1326 audit(1771575602.992:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2149 comm="syz.4.10500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 520.176372][ T28] audit: type=1326 audit(1771575602.992:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2149 comm="syz.4.10500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 520.213792][ T2168] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.10506'. [ 520.457122][ T2177] loop1: detected capacity change from 0 to 1024 [ 520.468663][ T2177] EXT4-fs: inline encryption not supported [ 520.525886][ T2177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.595994][ T2177] EXT4-fs warning (device loop1): ext4_rename_delete:3729: inode #18: comm syz.1.10510: Deleting old file: nlink 2, error=-2 [ 520.699463][ T1890] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.958711][ T2205] loop1: detected capacity change from 0 to 512 [ 521.006780][ T2205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.021873][ T2211] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10523'. [ 521.032218][ T2205] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 521.084871][ T2216] 9p: Bad value for 'rfdno' [ 521.160976][ T2218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10525'. [ 521.176638][ T2218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10525'. [ 521.187485][ T1890] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.501138][ T2238] loop1: detected capacity change from 0 to 2048 [ 521.521824][ T2238] EXT4-fs: Ignoring removed nobh option [ 521.556797][ T2238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.573867][ T2238] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.613516][ T1890] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.670458][ T2254] geneve2: entered promiscuous mode [ 521.691824][ T2254] geneve2: entered allmulticast mode [ 521.709407][T29502] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 521.739162][T29502] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 521.767737][T29502] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 521.780514][T29502] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 522.558864][ T2292] vlan1: entered allmulticast mode [ 522.564441][ T2292] macsec0: entered allmulticast mode [ 522.591609][ T2296] loop8: detected capacity change from 0 to 512 [ 522.613607][ T2296] EXT4-fs: Ignoring removed i_version option [ 522.637430][ T2296] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 522.650904][ T2296] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.10557: bad orphan inode 16 [ 522.682286][ T2296] loop8: lost filesystem error report for type 5 error -117 [ 522.682522][ T2296] EXT4-fs (loop8): Remounting filesystem read-only [ 522.696379][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 522.696399][ C0] EXT4-fs (loop8): initial error at time 1771575605: ext4_orphan_get:1417 [ 522.696420][ C0] EXT4-fs (loop8): last error at time 1771575605: ext4_orphan_get:1417 [ 522.749270][ T2296] ext4_test_bit(bit=15, block=4) = 0 [ 522.755290][ T2296] EXT4-fs (loop8): 1 orphan inode deleted [ 522.761838][ T2296] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.818304][ T2296] EXT4-fs (loop8): shut down requested (0) [ 522.841559][T32212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.050952][ T2332] netlink: 'syz.5.10566': attribute type 10 has an invalid length. [ 523.071047][ T2332] dummy0: left allmulticast mode [ 523.109606][ T2332] dummy0: entered allmulticast mode [ 523.126852][ T2332] team0: Failed to send options change via netlink (err -105) [ 523.139188][ T2332] team0: Port device dummy0 added [ 523.831887][ T2397] __nla_validate_parse: 3 callbacks suppressed [ 523.831906][ T2397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10586'. [ 523.862138][ T2397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10586'. [ 523.922741][ T2401] geneve4: entered promiscuous mode [ 523.942340][ T2401] geneve4: entered allmulticast mode [ 523.953878][ T5617] netdevsim netdevsim7 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 523.966608][ T5617] netdevsim netdevsim7 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 523.975741][ T5617] netdevsim netdevsim7 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 523.985047][ T5617] netdevsim netdevsim7 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 524.069688][ T2414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10594'. [ 524.213198][ T2427] bridge_slave_0: left allmulticast mode [ 524.222105][ T2427] bridge_slave_0: left promiscuous mode [ 524.228129][ T2427] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.250298][ T2427] bridge_slave_1: left allmulticast mode [ 524.260040][ T2427] bridge_slave_1: left promiscuous mode [ 524.270312][ T2427] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.624697][ T2427] bond0: (slave bond_slave_0): Releasing backup interface [ 524.634040][ T2427] bond0: (slave bond_slave_1): Releasing backup interface [ 524.664492][ T2427] team0: Port device team_slave_0 removed [ 524.671562][ T2427] team0: Port device team_slave_1 removed [ 524.682605][ T2427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.752061][ T2427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.793241][ T2427] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 524.809819][ T2436] netlink: 'syz.1.10604': attribute type 5 has an invalid length. [ 524.988553][ T2449] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10616'. [ 525.880087][ T2475] tipc: New replicast peer: 10.1.1.2 [ 525.888582][ T2475] tipc: Enabled bearer , priority 10 [ 526.057414][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 526.057434][ T28] audit: type=1326 audit(1771575609.222:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2483 comm="syz.4.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 526.131221][ T28] audit: type=1326 audit(1771575609.222:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2483 comm="syz.4.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 526.191711][ T28] audit: type=1326 audit(1771575609.222:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2483 comm="syz.4.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 526.222461][ T28] audit: type=1326 audit(1771575609.222:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2483 comm="syz.4.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 526.271213][ T28] audit: type=1326 audit(1771575609.222:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2483 comm="syz.4.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 526.312312][ T28] audit: type=1326 audit(1771575609.222:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2483 comm="syz.4.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 526.348586][ T28] audit: type=1326 audit(1771575609.222:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2483 comm="syz.4.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 526.474102][ T28] audit: type=1326 audit(1771575609.222:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2483 comm="syz.4.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 526.585430][ T28] audit: type=1326 audit(1771575609.222:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2483 comm="syz.4.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 526.613309][ T28] audit: type=1326 audit(1771575609.232:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2483 comm="syz.4.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 526.656611][ T2521] netlink: 'syz.4.10634': attribute type 1 has an invalid length. [ 526.664656][ T2521] netlink: 'syz.4.10634': attribute type 4 has an invalid length. [ 526.688063][ T2521] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.10634'. [ 527.047417][ T2539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10644'. [ 527.082935][ T30] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.082993][ T2539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10644'. [ 527.100988][ T30] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.101111][ T30] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.101193][ T30] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.164281][ T2547] netlink: 5272 bytes leftover after parsing attributes in process `syz.8.10646'. [ 527.183935][ T2547] netlink: 680 bytes leftover after parsing attributes in process `syz.8.10646'. [ 527.277516][ T2552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10648'. [ 527.520531][T29498] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.615121][ T2585] netlink: 'syz.1.10663': attribute type 4 has an invalid length. [ 527.900117][ T2592] loop1: detected capacity change from 0 to 128 [ 527.945888][ T2592] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 527.958795][ T2592] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 528.165520][ T1890] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 528.226037][ T2603] netlink: 'syz.1.10667': attribute type 11 has an invalid length. [ 528.260731][ T2603] netlink: 'syz.1.10667': attribute type 11 has an invalid length. [ 528.996510][ T2643] netlink: 'syz.5.10687': attribute type 1 has an invalid length. [ 529.024085][ T2643] bond11: (slave geneve5): making interface the new active one [ 529.032749][ T2643] bond11: (slave geneve5): Enslaving as an active interface with an up link [ 529.041658][ T3545] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 529.067260][ T3545] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 529.076182][ T3545] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 529.084923][ T3545] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 529.522845][ T2675] xt_hashlimit: size too large, truncated to 1048576 [ 529.554789][ T2679] ipip0: entered promiscuous mode [ 529.586917][ T2682] netlink: 'syz.8.10701': attribute type 1 has an invalid length. [ 529.606867][ T2682] bond1: entered promiscuous mode [ 529.611970][ T2682] bond1: entered allmulticast mode [ 529.631197][ T2682] bond1: (slave ip6gretap1): making interface the new active one [ 529.639310][ T2682] ip6gretap1: entered promiscuous mode [ 529.650167][ T2682] ip6gretap1: entered allmulticast mode [ 529.657206][ T2686] __nla_validate_parse: 4 callbacks suppressed [ 529.657224][ T2686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10702'. [ 529.662872][ T2682] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 529.682497][ T2686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10702'. [ 529.763281][ T2696] tipc: Enabling of bearer rejected, failed to enable media [ 529.999694][ T2692] loop8: detected capacity change from 0 to 32768 [ 530.133194][T25150] loop8: p1 p3 < > [ 530.140610][ T2692] loop8: p1 p3 < > [ 530.317704][T19480] udevd[19480]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 530.335119][T25150] udevd[25150]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 530.377690][T19480] udevd[19480]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 530.392910][T25150] udevd[25150]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 530.427947][ C1] vcan0: j1939_tp_rxtimer: 0xffff88813446e600: rx timeout, send abort [ 530.436330][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88813446e600: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 530.665578][ T2753] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10721'. [ 531.178960][ T2785] loop8: detected capacity change from 0 to 8192 [ 531.253940][T32212] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 531.278530][T32212] FAT-fs (loop8): Filesystem has been set read-only [ 531.316532][ T2808] netlink: 'syz.7.10723': attribute type 10 has an invalid length. [ 531.327133][ T2808] team0: Failed to send options change via netlink (err -105) [ 531.337152][ T2808] team0: Port device dummy0 added [ 531.345300][ T2808] netlink: 'syz.7.10723': attribute type 10 has an invalid length. [ 531.364027][ T2808] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 531.393052][ T2808] team0: Failed to send options change via netlink (err -105) [ 531.411729][ T2808] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 531.444799][ T2808] team0: Port device dummy0 removed [ 531.462895][ T2808] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 531.577362][ T2828] bond9: (slave syz_tun): Releasing active interface [ 531.587895][ T2828] bond0: (slave dummy0): Releasing backup interface [ 531.596861][ T2828] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 531.614382][ T2832] team0: Mode changed to "broadcast" [ 531.682385][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.766744][ T2850] loop8: detected capacity change from 0 to 256 [ 531.788601][ T2850] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 531.800327][ T2850] FAT-fs (loop8): Filesystem has been set read-only [ 531.807296][ T2850] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 531.816411][ T2850] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 531.832014][ T2850] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 531.842218][ T2850] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 531.851316][ T2850] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 531.860928][ T2850] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 531.869939][ T2850] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 531.879046][ T2850] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 531.888223][ T2850] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 531.980882][ T2856] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 532.885391][ T2884] ipip0: entered promiscuous mode [ 532.937502][ T2887] netlink: 'syz.4.10770': attribute type 10 has an invalid length. [ 532.961520][ T2887] team0: Port device bridge0 added [ 533.034574][ T2890] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 533.043140][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 533.043158][ T28] audit: type=1400 audit(1771575872.211:3238): avc: denied { read } for pid=2894 comm="syz.4.10763" lport=55076 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 533.180265][ T8137] Process accounting resumed [ 533.286249][ T28] audit: type=1400 audit(1771575872.451:3239): avc: denied { ioctl } for pid=2918 comm="syz.5.10772" path="socket:[115249]" dev="sockfs" ino=115249 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 533.562828][ T2939] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 533.608301][ T2946] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10781'. [ 533.625643][ T2946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10781'. [ 533.653087][ T28] audit: type=1326 audit(1771575872.821:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2940 comm="syz.5.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a810fc629 code=0x7fc00000 [ 533.684558][ T28] audit: type=1326 audit(1771575872.821:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2940 comm="syz.5.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4a810fc629 code=0x7fc00000 [ 533.710456][ T28] audit: type=1326 audit(1771575872.841:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2940 comm="syz.5.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a810fc629 code=0x7fc00000 [ 533.812603][ T2964] netlink: 'syz.8.10786': attribute type 10 has an invalid length. [ 533.829008][ T2964] team0: Failed to send options change via netlink (err -105) [ 533.847059][ T2964] team0: Port device dummy0 added [ 533.860724][ T2964] netlink: 'syz.8.10786': attribute type 10 has an invalid length. [ 533.870127][ T2964] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 533.883224][ T2964] team0: Failed to send options change via netlink (err -105) [ 533.890862][ T2964] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 533.908160][ T2964] team0: Port device dummy0 removed [ 533.915753][ T2964] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 533.979713][ T2990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10791'. [ 534.275891][ T28] audit: type=1400 audit(1771575873.441:3243): avc: denied { connect } for pid=3002 comm="syz.1.10796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 534.337933][ T3007] syzkaller1: entered promiscuous mode [ 534.343508][ T3007] syzkaller1: entered allmulticast mode [ 534.914302][ T3041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10811'. [ 534.923702][ T3041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10811'. [ 535.505661][ T3084] loop8: detected capacity change from 0 to 512 [ 535.513424][ T3084] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 535.525161][ T3084] EXT4-fs (loop8): 1 truncate cleaned up [ 535.531457][ T3084] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.651893][T32212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.776013][ T3107] loop1: detected capacity change from 0 to 256 [ 535.814607][ T3107] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 535.837303][ T3107] FAT-fs (loop1): Filesystem has been set read-only [ 535.846014][ T3107] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 535.862474][ T3107] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 535.882791][ T3107] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 535.895153][ T3107] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 535.916888][ T3107] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 535.926556][ T3107] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 535.935653][ T3114] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 535.944751][ T3114] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 535.954353][ T3107] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 536.082447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.449200][ T3130] loop8: detected capacity change from 0 to 128 [ 536.472379][ T3130] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8) [ 536.484539][ T3130] FAT-fs (loop8): Filesystem has been set read-only [ 536.491555][ T3130] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522) [ 536.567271][ T3135] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 536.586212][ T3135] team0: No ports can be present during mode change [ 536.627714][ T3139] netlink: 'syz.4.10845': attribute type 10 has an invalid length. [ 536.640125][ T3139] netlink: 'syz.4.10845': attribute type 10 has an invalid length. [ 536.750479][ T3152] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10851'. [ 536.777379][ T3152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10851'. [ 537.511540][ T28] audit: type=1326 audit(1771575876.671:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3185 comm="syz.4.10863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 537.553368][ T28] audit: type=1326 audit(1771575876.671:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3185 comm="syz.4.10863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 537.591414][ T28] audit: type=1326 audit(1771575876.711:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3185 comm="syz.4.10863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 537.634983][ T28] audit: type=1326 audit(1771575876.711:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3185 comm="syz.4.10863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12f10c629 code=0x7ffc0000 [ 537.699966][ T3197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10867'. [ 537.924613][ T8140] Process accounting resumed [ 538.066454][ T3236] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10893'. [ 538.363121][ T8140] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 538.371510][ T3253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.381306][ T8140] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 538.410353][ T3253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.665934][T31508] Process accounting resumed [ 539.124066][ T3317] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.10912'. [ 539.153189][ T3317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10912'. [ 539.542817][ T3333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.551501][ T3333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.922273][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 539.952584][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 539.952604][ T28] audit: type=1400 audit(1771575879.041:3260): avc: denied { shutdown } for pid=3344 comm="syz.7.10925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 540.780360][T29502] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.789059][T29502] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 540.798041][T29502] netdevsim netdevsim7 eth0: unset [1, 1] type 2 family 0 port 59912 - 0 [ 540.808140][T29502] netdevsim netdevsim7 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 540.818334][T29502] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.827826][T29502] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 540.837032][T29502] netdevsim netdevsim7 eth1: unset [1, 1] type 2 family 0 port 59912 - 0 [ 540.845920][T29502] netdevsim netdevsim7 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 540.854767][T29502] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.863619][T29502] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 540.872053][T29502] netdevsim netdevsim7 eth2: unset [1, 1] type 2 family 0 port 59912 - 0 [ 540.880596][T29502] netdevsim netdevsim7 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 540.889327][T29502] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.898370][T29502] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 540.906959][T29502] netdevsim netdevsim7 eth3: unset [1, 1] type 2 family 0 port 59912 - 0 [ 540.915604][T29502] netdevsim netdevsim7 eth3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 541.628889][ T3405] loop8: detected capacity change from 0 to 512 [ 541.645456][ T3405] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 541.698499][ T3405] EXT4-fs (loop8): 1 truncate cleaned up [ 541.708622][ T3405] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.738464][ T3419] loop1: detected capacity change from 0 to 1024 [ 541.778391][ T3419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 541.801097][ T3419] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.846963][ T1890] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 541.887138][ T3428] netlink: 41 bytes leftover after parsing attributes in process `syz.5.10957'. [ 541.900672][ T3428] netlink: 116 bytes leftover after parsing attributes in process `syz.5.10957'. [ 541.910976][ T3428] netlink: 41 bytes leftover after parsing attributes in process `syz.5.10957'. [ 541.968613][T32212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.987523][ T28] audit: type=1400 audit(1771575881.151:3261): avc: denied { watch watch_reads } for pid=3438 comm="syz.7.10959" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 542.464214][ T3474] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10974'. [ 542.711368][ T3499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10984'. [ 542.740746][ T3502] loop1: detected capacity change from 0 to 512 [ 542.750195][ T3502] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 542.762620][ T3502] EXT4-fs (loop1): 1 truncate cleaned up [ 542.768701][ T3502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.826652][ T3507] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10987'. [ 542.990250][ T1890] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.622997][ T3549] netlink: 'syz.7.11011': attribute type 13 has an invalid length. [ 546.008472][T29498] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.022511][T29498] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.060666][T29498] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.069990][T29498] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.078609][T29498] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.087687][T29498] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.096355][T29498] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.105625][T29498] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.128407][T29498] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.325370][ T3631] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 546.359793][T29498] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.374501][ T3641] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11037'. [ 546.376493][T29498] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.402061][T29498] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.628218][ T28] audit: type=1326 audit(1771575885.791:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.1.11040" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d8fb9c629 code=0x0 [ 546.689428][ T28] audit: type=1400 audit(1771575885.841:3263): avc: denied { mounton } for pid=3657 comm="syz.7.11042" path="/file0" dev="ramfs" ino=117890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 546.721259][ T3656] loop8: detected capacity change from 0 to 1024 [ 546.900118][ T3656] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.956597][T32212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.219361][ T5628] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.239354][ T5628] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.270818][ T5628] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.280153][ T5628] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.527480][ T3726] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.534675][ T3726] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.584784][ T3726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.595489][ T3726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.696023][ T5628] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.712666][ T5628] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.792368][ T5628] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 547.801826][ T3740] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.11072'. [ 547.811257][ T5628] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.820303][ T5628] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.829324][ T5628] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 547.838600][ T5628] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.856017][ T5628] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.865058][ T5628] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 547.874193][ T5628] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.883279][ T5628] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.892163][ T5628] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 548.758126][ T28] audit: type=1400 audit(1771575887.921:3264): avc: denied { write } for pid=3762 comm="syz.5.11083" path="socket:[118036]" dev="sockfs" ino=118036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 548.921312][ T3767] netlink: 'syz.5.11085': attribute type 1 has an invalid length. [ 548.954309][ T3767] netlink: 'syz.5.11085': attribute type 2 has an invalid length. [ 549.002258][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11085'. [ 549.036844][ T28] audit: type=1400 audit(1771575888.201:3265): avc: denied { setopt } for pid=3776 comm="syz.8.11089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 549.132940][ T3784] syz_tun: entered promiscuous mode [ 549.139019][ T3784] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 549.293179][ T3799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11097'. [ 550.400483][ T28] audit: type=1400 audit(1771575889.561:3266): avc: denied { ioctl } for pid=3821 comm="syz.8.11106" path="socket:[117532]" dev="sockfs" ino=117532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 551.155225][ T3855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11119'. [ 551.182736][ T3856] netlink: 'syz.7.11120': attribute type 1 has an invalid length. [ 551.213730][ T3856] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 551.229210][ T3856] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 551.235378][ T3859] netlink: 'syz.4.11121': attribute type 83 has an invalid length. [ 551.245296][ T3856] bond10: (slave ip6gre2): making interface the new active one [ 551.255066][ T3856] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 551.265396][ T3861] bond10: option fail_over_mac: unable to set because the bond device has slaves [ 551.299642][ T3863] netlink: 277 bytes leftover after parsing attributes in process `syz.4.11122'. [ 551.488128][ T3873] netlink: 'syz.4.11127': attribute type 4 has an invalid length. [ 551.498674][ T3873] netlink: 'syz.4.11127': attribute type 4 has an invalid length. [ 551.557814][ T3879] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11129'. [ 551.577507][ T3885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11133'. [ 551.586595][ T3885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11133'. [ 551.605742][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11129'. [ 551.652915][ T3892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11136'. [ 551.909920][ T28] audit: type=1326 audit(1771575891.071:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3851 comm="syz.5.11118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a810fc629 code=0x7fc00000 [ 552.600924][ T28] audit: type=1326 audit(1771575891.761:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.7.11153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 552.665188][ T28] audit: type=1326 audit(1771575891.801:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.7.11153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 552.716852][ T28] audit: type=1326 audit(1771575891.801:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.7.11153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 552.761568][ T28] audit: type=1326 audit(1771575891.801:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.7.11153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 552.837216][ T28] audit: type=1326 audit(1771575891.801:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.7.11153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 552.971998][ T28] audit: type=1326 audit(1771575891.801:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.7.11153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 553.022027][ T28] audit: type=1326 audit(1771575891.811:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.7.11153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee428ccece code=0x7ffc0000 [ 553.097774][ T28] audit: type=1326 audit(1771575891.811:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.7.11153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 553.125358][ T3957] loop1: detected capacity change from 0 to 512 [ 553.132085][ T3957] EXT4-fs: test_dummy_encryption option not supported [ 553.164650][ T28] audit: type=1326 audit(1771575891.811:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.7.11153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 553.278767][ T3967] __nla_validate_parse: 1 callbacks suppressed [ 553.278788][ T3967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11168'. [ 553.328487][ T3967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11168'. [ 553.460458][ T3967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11168'. [ 553.511655][ T3980] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11171'. [ 553.566517][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11174'. [ 553.823388][ T4007] netlink: 'syz.7.11183': attribute type 4 has an invalid length. [ 553.836297][ T4007] netlink: 'syz.7.11183': attribute type 4 has an invalid length. [ 553.916356][ T4013] veth1_to_bond: Caught tx_queue_len zero misconfig [ 554.421824][ T4050] loop1: detected capacity change from 0 to 128 [ 554.491052][ T4050] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 554.506004][ T4050] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 554.549428][ T1890] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 554.597278][ T4054] loop5: detected capacity change from 0 to 7 [ 554.604574][ T4054] loop5: [ 554.985418][ T4072] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11209'. [ 555.569519][ T4132] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.634302][ T4137] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11234'. [ 555.665618][ T4137] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11234'. [ 555.677097][ T4132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.306911][ T4170] loop8: detected capacity change from 0 to 512 [ 556.313902][ T4170] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 556.341512][ T4170] EXT4-fs (loop8): 1 truncate cleaned up [ 556.352672][ T4170] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.773852][T32212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.806733][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11253'. [ 556.832902][ T4194] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11253'. [ 556.910709][ T4201] loop8: detected capacity change from 0 to 1024 [ 556.920284][ T4201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 556.928009][ T4202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.937214][ T4202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.950564][ T4201] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 556.959043][ T4201] System zones: 0-1, 3-36 [ 556.966341][ T4201] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.991875][ T4201] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.11256: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 557.019864][ T4201] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.11256: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 557.043345][ T4201] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.11256: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 557.090657][T32212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.492937][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 557.492970][ T28] audit: type=1326 audit(1771575896.651:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.7.11270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee4290c629 code=0x0 [ 558.165008][ T28] audit: type=1400 audit(1771575897.331:3287): avc: denied { connect } for pid=4275 comm="syz.8.11284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 558.340177][ T4289] team_slave_1: Caught tx_queue_len zero misconfig [ 558.581191][ T28] audit: type=1400 audit(1771575897.741:3288): avc: denied { listen } for pid=4304 comm="syz.1.11296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 559.717082][ T4320] netlink: 'syz.8.11313': attribute type 39 has an invalid length. [ 559.785158][ T4336] netlink: 'syz.1.11310': attribute type 29 has an invalid length. [ 559.803085][ T4336] netlink: 'syz.1.11310': attribute type 29 has an invalid length. [ 559.832457][ T4336] netlink: 'syz.1.11310': attribute type 29 has an invalid length. [ 561.054164][ T4373] netlink: 'syz.5.11325': attribute type 39 has an invalid length. [ 562.521650][ T4417] bridge0: port 1(syz_tun) entered blocking state [ 562.528173][ T4417] bridge0: port 1(syz_tun) entered listening state [ 562.563566][ T4417] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.631354][ T4417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.662127][ T4486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.704151][ T4486] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.719044][ T4486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 564.038254][ T4517] __nla_validate_parse: 4 callbacks suppressed [ 564.038274][ T4517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11382'. [ 564.055411][ T4517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11382'. [ 564.083012][ T4514] loop8: detected capacity change from 0 to 128 [ 564.190758][ T4514] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 564.251207][ T4514] ext4 filesystem being mounted at /251/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 564.275705][ T28] audit: type=1326 audit(1771575903.401:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4511 comm="syz.5.11380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a810fc629 code=0x7fc00000 [ 564.424756][T32212] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 564.828445][ T28] audit: type=1326 audit(1771575903.991:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4511 comm="syz.5.11380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4a810f6417 code=0x7fc00000 [ 564.876079][ T4528] loop1: detected capacity change from 0 to 512 [ 564.892319][ T28] audit: type=1326 audit(1771575903.991:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4511 comm="syz.5.11380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a8109da19 code=0x7fc00000 [ 564.916217][ T28] audit: type=1326 audit(1771575903.991:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4511 comm="syz.5.11380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4a8109dadd code=0x7fc00000 [ 564.940109][ T28] audit: type=1326 audit(1771575903.991:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4511 comm="syz.5.11380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4a810fc629 code=0x7fc00000 [ 565.096417][ T4528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.135122][ T4584] loop8: detected capacity change from 0 to 512 [ 565.141164][ T4528] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 565.151621][ T4584] EXT4-fs: Ignoring removed bh option [ 565.185863][ T4584] EXT4-fs: inline encryption not supported [ 565.199870][ T4584] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 565.244911][ T4584] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 565.287554][ T4584] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.11404: bg 0: block 248: padding at end of block bitmap is not set [ 565.304488][ T4584] loop8: lost filesystem error report for type 5 error -117 [ 565.304696][ T4584] Quota error (device loop8): write_blk: dquota write failed [ 565.312201][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 565.312221][ C0] EXT4-fs (loop8): last error at time 1771575904: ext4_validate_block_bitmap:441 [ 565.335982][ T4584] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 565.352300][ T4584] EXT4-fs error (device loop8): ext4_acquire_dquot:7003: comm syz.8.11404: Failed to acquire dquot type 1 [ 565.372770][ T4584] loop8: lost filesystem error report for type 5 error -117 [ 565.373376][ T4584] EXT4-fs (loop8): 1 truncate cleaned up [ 565.393285][ T4584] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 565.419548][ T1890] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 565.438883][ T1890] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 565.460094][ T4615] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 565.513951][ T4606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.628152][ T4632] netlink: 1323 bytes leftover after parsing attributes in process `syz.4.11414'. [ 565.747586][T29498] bridge_slave_1: left allmulticast mode [ 565.753984][T29498] bridge_slave_1: left promiscuous mode [ 565.759880][T29498] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.767903][T29498] bridge_slave_0: left allmulticast mode [ 565.774086][T29498] bridge_slave_0: left promiscuous mode [ 565.786539][T29498] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.842439][T31507] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 565.991728][T32212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 566.043770][T29498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.102461][T29498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.139712][T29498] bond0 (unregistering): Released all slaves [ 566.141644][ T4709] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11425'. [ 566.266673][T29498] hsr_slave_0: left promiscuous mode [ 566.277311][T29498] hsr_slave_1: left promiscuous mode [ 566.302649][T29498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.313178][ T4724] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11427'. [ 566.326189][ T4724] IPv6: Can't replace route, no match found [ 566.332765][T29498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.392615][T29498] team0 (unregistering): Port device team_slave_1 removed [ 566.403889][T29498] team0 (unregistering): Port device team_slave_0 removed [ 566.743303][ T4640] chnl_net:caif_netlink_parms(): no params data found [ 566.822126][ T4812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11444'. [ 566.901608][ T4640] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.923111][ T4640] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.931756][ T4640] bridge_slave_0: entered allmulticast mode [ 566.938779][ T4640] bridge_slave_0: entered promiscuous mode [ 566.952505][ T4640] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.969777][ T4640] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.983032][ T4640] bridge_slave_1: entered allmulticast mode [ 566.990257][ T4640] bridge_slave_1: entered promiscuous mode [ 567.223534][ T4640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.240361][ T4640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.276539][ T4640] team0: Port device team_slave_0 added [ 567.287667][ T4640] team0: Port device team_slave_1 added [ 567.333425][ T4640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.341163][ T4640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.379526][ T4640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.415653][ T4868] netlink: 'syz.8.11458': attribute type 4 has an invalid length. [ 567.415996][ T4640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.431508][ T4640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.461517][ T4640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.466588][ T4873] netlink: 'syz.8.11458': attribute type 4 has an invalid length. [ 567.556137][ T4640] hsr_slave_0: entered promiscuous mode [ 567.588099][ T4640] hsr_slave_1: entered promiscuous mode [ 567.612779][ T4640] debugfs: 'hsr0' already exists in 'hsr' [ 567.624243][ T4640] Cannot create hsr debugfs directory [ 568.339118][ T4640] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 568.412054][ T4640] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 568.470229][ T4640] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 568.511994][ T4640] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 568.520123][ T4950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11466'. [ 568.761399][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812ff6a400: rx timeout, send abort [ 568.895101][ T4640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.920469][ T4640] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.935641][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.942853][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.973494][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.980592][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.015903][ T4640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 569.108148][ T4640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.411952][ T4640] veth0_vlan: entered promiscuous mode [ 569.461146][ T4640] veth1_vlan: entered promiscuous mode [ 569.479622][ T4640] veth0_macvtap: entered promiscuous mode [ 569.496921][ T4640] veth1_macvtap: entered promiscuous mode [ 569.518530][ T4640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.534813][ T4640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.559947][ T5628] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.570731][ T5628] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.600444][ T5628] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.616568][ T5628] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.483930][ T5121] loop6: detected capacity change from 0 to 1024 [ 570.500181][ T5121] EXT4-fs: Ignoring removed oldalloc option [ 570.548474][ T5121] EXT4-fs: Ignoring removed bh option [ 570.594298][ T5121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.396822][ T5136] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4224: comm syz.6.11486: Allocating blocks 1-17 which overlap fs metadata [ 571.444002][ T5121] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4224: comm syz.6.11486: Allocating blocks 1-17 which overlap fs metadata [ 571.642990][ T4640] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.021252][ T5171] pim6reg: entered allmulticast mode [ 572.036593][ T5171] pim6reg: left allmulticast mode [ 573.095059][ T28] audit: type=1326 audit(1771575912.261:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.7.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 573.182369][ T28] audit: type=1326 audit(1771575912.261:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.7.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 573.236101][ T28] audit: type=1326 audit(1771575912.281:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.7.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 573.322347][ T28] audit: type=1326 audit(1771575912.281:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.7.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 573.414587][ T28] audit: type=1326 audit(1771575912.281:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.7.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 573.446478][ T28] audit: type=1326 audit(1771575912.301:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.7.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 573.480452][ T28] audit: type=1326 audit(1771575912.301:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.7.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 573.592246][ T28] audit: type=1326 audit(1771575912.301:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.7.11515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 573.657658][ T28] audit: type=1400 audit(1771575912.491:3302): avc: denied { bind } for pid=5265 comm="syz.7.11520" lport=47354 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 573.737871][ T28] audit: type=1400 audit(1771575912.491:3303): avc: denied { name_bind } for pid=5265 comm="syz.7.11520" src=20002 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 574.709787][ T5290] loop6: detected capacity change from 0 to 128 [ 574.841308][ T5290] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 574.859354][ T5290] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 574.907478][ T5292] bridge0: port 1(syz_tun) entered disabled state [ 574.917285][ T4640] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 574.943789][ T5309] loop6: detected capacity change from 0 to 128 [ 574.955801][ T5309] vfat: Unknown parameter 'ÿÿÿÿ01777777777777777777777' [ 574.970421][ T5292] geneve2: left promiscuous mode [ 574.989929][ T5292] geneve2: left allmulticast mode [ 574.995644][ T5292] ip6gre1: left allmulticast mode [ 575.001010][ T5292] bridge2: left allmulticast mode [ 575.006956][ T5292] hsr1: left promiscuous mode [ 575.013386][ T5292] bond8: left promiscuous mode [ 575.021635][ T5292] ip6gre2: left promiscuous mode [ 575.030572][ T5292] ip6gre2: left allmulticast mode [ 575.046362][ T5304] pimreg: entered allmulticast mode [ 575.103852][ T5317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11536'. [ 575.439706][ T5336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11544'. [ 575.461068][ T5336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11544'. [ 575.503242][ T5343] netlink: 'syz.5.11548': attribute type 1 has an invalid length. [ 575.512302][ T5343] netlink: 'syz.5.11548': attribute type 4 has an invalid length. [ 575.530468][ T5343] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.11548'. [ 575.558204][ T5343] netlink: 'syz.5.11548': attribute type 1 has an invalid length. [ 575.574061][ T5343] netlink: 'syz.5.11548': attribute type 4 has an invalid length. [ 575.582610][ T5343] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.11548'. [ 576.005914][ T5365] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 576.178477][ T5377] netlink: 'syz.5.11560': attribute type 1 has an invalid length. [ 576.231868][ T5377] 8021q: adding VLAN 0 to HW filter on device bond12 [ 576.305822][ T5381] bond12: (slave veth7): Enslaving as an active interface with a down link [ 576.399195][ T5377] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 576.423984][ T5377] bond12: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 576.599874][ T50] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.669287][ T50] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.747215][ T50] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.798273][ T50] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.828164][ T5384] chnl_net:caif_netlink_parms(): no params data found [ 576.916329][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.923557][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.930991][ T5384] bridge_slave_0: entered allmulticast mode [ 576.947674][ T5384] bridge_slave_0: entered promiscuous mode [ 576.955021][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.962081][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.969763][ T5384] bridge_slave_1: entered allmulticast mode [ 576.977187][ T5384] bridge_slave_1: entered promiscuous mode [ 577.002975][ T50] bridge_slave_1: left allmulticast mode [ 577.022215][ T50] bridge_slave_1: left promiscuous mode [ 577.028099][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.047053][ T50] bridge_slave_0: left allmulticast mode [ 577.052799][ T50] bridge_slave_0: left promiscuous mode [ 577.058556][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.189178][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.199745][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.210000][ T50] bond0 (unregistering): Released all slaves [ 577.268582][ T5384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.291036][ T5384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.335279][ T5384] team0: Port device team_slave_0 added [ 577.352525][ T5384] team0: Port device team_slave_1 added [ 577.380535][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.402214][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.452876][ T5384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.483671][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.490639][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.522310][ T5384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.589036][ T5384] hsr_slave_0: entered promiscuous mode [ 577.604389][ T5384] hsr_slave_1: entered promiscuous mode [ 577.622736][ T5384] debugfs: 'hsr0' already exists in 'hsr' [ 577.641600][ T5384] Cannot create hsr debugfs directory [ 577.883049][ T50] hsr_slave_0: left promiscuous mode [ 577.894237][ T5447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11578'. [ 578.238808][ T50] hsr_slave_1: left promiscuous mode [ 578.258527][ T5453] netlink: 96 bytes leftover after parsing attributes in process `syz.7.11579'. [ 578.259105][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.302257][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.435687][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.440332][ T5455] loop8: detected capacity change from 0 to 128 [ 578.443375][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.469001][ T50] veth1_macvtap: left promiscuous mode [ 578.475368][ T50] veth0_macvtap: left promiscuous mode [ 578.481023][ T50] veth1_vlan: left promiscuous mode [ 578.493096][ T5455] syz.8.11580: attempt to access beyond end of device [ 578.493096][ T5455] loop8: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 578.509275][ T50] veth0_vlan: left promiscuous mode [ 578.515067][ T5455] Buffer I/O error on dev loop8, logical block 129, lost async page write [ 578.523729][ T5455] syz.8.11580: attempt to access beyond end of device [ 578.523729][ T5455] loop8: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 578.537982][ T5455] Buffer I/O error on dev loop8, logical block 130, lost async page write [ 578.546687][ T5455] syz.8.11580: attempt to access beyond end of device [ 578.546687][ T5455] loop8: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 578.587474][ T5455] Buffer I/O error on dev loop8, logical block 131, lost async page write [ 578.596754][ T5455] syz.8.11580: attempt to access beyond end of device [ 578.596754][ T5455] loop8: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 578.610782][ T5455] Buffer I/O error on dev loop8, logical block 132, lost async page write [ 578.623013][ T5455] syz.8.11580: attempt to access beyond end of device [ 578.623013][ T5455] loop8: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 578.637084][ T5455] Buffer I/O error on dev loop8, logical block 133, lost async page write [ 578.646673][ T5455] syz.8.11580: attempt to access beyond end of device [ 578.646673][ T5455] loop8: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 578.661031][ T5455] Buffer I/O error on dev loop8, logical block 129, lost async page write [ 578.669667][ T5455] syz.8.11580: attempt to access beyond end of device [ 578.669667][ T5455] loop8: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 578.684252][ T5455] Buffer I/O error on dev loop8, logical block 130, lost async page write [ 578.694344][ T5455] syz.8.11580: attempt to access beyond end of device [ 578.694344][ T5455] loop8: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 578.708377][ T5455] Buffer I/O error on dev loop8, logical block 131, lost async page write [ 578.708913][ T50] team0 (unregistering): Port device team_slave_1 removed [ 578.725707][ T5455] syz.8.11580: attempt to access beyond end of device [ 578.725707][ T5455] loop8: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 578.739772][ T5455] Buffer I/O error on dev loop8, logical block 132, lost async page write [ 578.740081][ T50] team0 (unregistering): Port device team_slave_0 removed [ 578.749974][ T5455] syz.8.11580: attempt to access beyond end of device [ 578.749974][ T5455] loop8: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 578.779094][ T5455] Buffer I/O error on dev loop8, logical block 133, lost async page write [ 578.845438][ T5473] netlink: 204 bytes leftover after parsing attributes in process `syz.4.11587'. [ 579.312111][ T5384] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 579.355149][ T5533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11599'. [ 579.356171][ T5384] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 579.395721][ T5384] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 579.417533][ T5384] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 579.490754][ T5384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.525699][ T5384] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.548047][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.555240][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.582497][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.589631][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.610259][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 579.610276][ T28] audit: type=1326 audit(1771575918.771:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5560 comm="syz.7.11603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x0 [ 579.654493][ T5384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.663360][ T28] audit: type=1326 audit(1771575918.811:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.5.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a810fc629 code=0x7fc00000 [ 579.729014][ T5574] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11605'. [ 579.764155][ T5384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.063643][ T5384] veth0_vlan: entered promiscuous mode [ 580.080985][ T5384] veth1_vlan: entered promiscuous mode [ 580.116534][ T5384] veth0_macvtap: entered promiscuous mode [ 580.131903][ T5384] veth1_macvtap: entered promiscuous mode [ 580.164048][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.179223][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.208226][ T5628] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.227392][ T5628] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.257679][ T5628] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.274489][ T5628] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.377350][ T5634] netlink: 131740 bytes leftover after parsing attributes in process `syz.8.11616'. [ 580.399947][ T5634] netlink: zone id is out of range [ 580.418271][ T5634] netlink: zone id is out of range [ 580.430154][ T5634] netlink: zone id is out of range [ 580.439926][ T5645] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.11621'. [ 580.459493][ T5634] netlink: del zone limit has 8 unknown bytes [ 580.483428][ T5645] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11621'. [ 580.516046][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11626'. [ 580.525683][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11626'. [ 580.604227][ T5670] loop8: detected capacity change from 0 to 512 [ 580.620238][ T5670] tipc: Started in network mode [ 580.628853][ T5670] tipc: Node identity ac14140f, cluster identity 4711 [ 580.639522][ T5670] tipc: New replicast peer: 255.255.255.255 [ 580.646160][ T5670] tipc: Enabled bearer , priority 10 [ 580.681671][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11634'. [ 580.703398][ T5674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11634'. [ 581.171130][ T5711] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11643'. [ 581.362773][ T28] audit: type=1326 audit(1771575920.511:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.5.11622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a810fc629 code=0x7fc00000 [ 581.386900][ T28] audit: type=1400 audit(1771575920.521:3310): avc: denied { write } for pid=5717 comm="syz.5.11646" name="/" dev="configfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 581.774045][ T8140] tipc: Node number set to 2886997007 [ 583.350598][ T5789] ref_ctr increment failed for inode: 0x32c3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888103f6c380 [ 583.382788][ T5788] uprobe: syz.4.11672:5788 failed to unregister, leaking uprobe [ 583.403756][ T5791] netlink: 'syz.6.11673': attribute type 30 has an invalid length. [ 583.484402][ T28] audit: type=1400 audit(1771575922.651:3311): avc: denied { map } for pid=5797 comm="syz.6.11678" path="socket:[124419]" dev="sockfs" ino=124419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 583.524385][ T28] audit: type=1400 audit(1771575922.651:3312): avc: denied { accept } for pid=5797 comm="syz.6.11678" path="socket:[124419]" dev="sockfs" ino=124419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 583.610278][ T5809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11681'. [ 583.698395][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11683'. [ 583.730284][ T5820] netlink: 'syz.4.11686': attribute type 4 has an invalid length. [ 583.747417][ T5820] netlink: 'syz.4.11686': attribute type 4 has an invalid length. [ 584.020420][ T28] audit: type=1400 audit(1771575923.171:3313): avc: denied { execute_no_trans } for pid=5840 comm="syz.5.11692" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=124476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 584.154064][ T5858] netlink: 'syz.5.11697': attribute type 13 has an invalid length. [ 585.701360][ T5933] __nla_validate_parse: 1 callbacks suppressed [ 585.701381][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11713'. [ 585.721142][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11713'. [ 586.069125][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11725'. [ 586.098481][ T5958] team1: entered promiscuous mode [ 586.106235][ T5958] team1: entered allmulticast mode [ 586.726281][ T28] audit: type=1400 audit(1771575925.891:3314): avc: denied { append } for pid=5982 comm="syz.4.11734" name="rt_cache" dev="proc" ino=4026532844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 587.059082][ T5994] 8021q: VLANs not supported on bond1 [ 587.176044][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11741'. [ 587.528414][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11754'. [ 588.164970][ T6054] loop6: detected capacity change from 0 to 128 [ 588.204103][ T6054] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54) [ 588.212491][ T6054] FAT-fs (loop6): Filesystem has been set read-only [ 588.234299][ T6054] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54) [ 588.361779][ T6067] netlink: 'syz.7.11763': attribute type 27 has an invalid length. [ 588.401919][ T6067] syz_tun: left promiscuous mode [ 588.423236][ T6067] bond2: left promiscuous mode [ 588.438667][ T6067] bridge1: left promiscuous mode [ 588.461354][ T6067] bridge2: left allmulticast mode [ 588.477903][ T6067] gtp0: left promiscuous mode [ 588.493109][ T6067] geneve3: left promiscuous mode [ 588.526057][ T6067] geneve3: left allmulticast mode [ 588.541886][ T6067] geneve4: left promiscuous mode [ 588.557713][ T6067] geneve4: left allmulticast mode [ 588.633524][ T6068] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.677511][ T6068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 588.785029][ T6078] netem: incorrect ge model size [ 588.790207][ T6078] netem: change failed [ 588.980385][ T6098] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11775'. [ 589.041336][ T28] audit: type=1400 audit(1771575928.201:3315): avc: denied { getopt } for pid=6103 comm="syz.5.11777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 589.143339][ T28] audit: type=1326 audit(1771575928.311:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.7.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 589.205563][ T6123] loop8: detected capacity change from 0 to 128 [ 589.205875][ T28] audit: type=1326 audit(1771575928.311:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.7.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 589.243809][ T28] audit: type=1326 audit(1771575928.311:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.7.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 589.268812][ T28] audit: type=1326 audit(1771575928.311:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.7.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 589.299279][ T28] audit: type=1326 audit(1771575928.311:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.7.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 589.342273][ T28] audit: type=1326 audit(1771575928.311:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.7.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 589.366951][ T6135] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=6135 comm=syz.6.11785 [ 589.382837][ T28] audit: type=1326 audit(1771575928.311:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.7.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 589.407813][ T28] audit: type=1326 audit(1771575928.311:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.7.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4290c629 code=0x7ffc0000 [ 590.207858][ T6170] netlink: 'syz.8.11801': attribute type 1 has an invalid length. [ 590.229404][ T6170] netlink: 'syz.8.11801': attribute type 4 has an invalid length. [ 590.251842][ T6170] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.11801'. [ 590.347170][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11802'. [ 590.372668][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11802'. [ 591.305721][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11817'. [ 591.491317][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11822'. [ 591.502075][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11822'. [ 591.580798][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11823'. [ 591.591159][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11823'. [ 592.508588][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11853'. [ 592.511742][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.524842][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11853'. [ 592.538727][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.380442][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11873'. [ 593.584254][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11875'. [ 593.675547][ T6349] 8021q: adding VLAN 0 to HW filter on device bond12 [ 593.693682][ T6349] bond11: (slave bond12): Enslaving as an active interface with an up link [ 593.704901][ T6349] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11875'. [ 593.715077][ T6349] 8021q: adding VLAN 0 to HW filter on device bond11 [ 594.727266][ T6391] pim6reg: entered allmulticast mode [ 594.734829][ T6391] pim6reg: left allmulticast mode [ 597.444889][T24708] Bluetooth: hci0: command 0x1003 tx timeout [ 597.450946][ T4891] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 597.979580][ T6452] io-wq is not configured for unbound workers [ 598.462907][ T8130] IPVS: starting estimator thread 0... [ 598.592402][ T6467] IPVS: using max 2592 ests per chain, 129600 per kthread [ 598.907399][ T6512] __nla_validate_parse: 1 callbacks suppressed [ 598.907419][ T6512] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11935'. [ 598.928271][ T6516] netlink: 'syz.6.11936': attribute type 1 has an invalid length. [ 598.964989][ T6516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 599.046389][ T6516] bond1: (slave veth3): Enslaving as an active interface with a down link [ 599.142805][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 599.202581][ T6516] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 599.718296][ T6571] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11958'. [ 599.829626][ T6575] netlink: 204 bytes leftover after parsing attributes in process `syz.5.11960'. [ 599.919502][ T6582] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11963'. [ 600.006152][ T6586] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11964'. [ 600.065242][ T6586] netlink: 100 bytes leftover after parsing attributes in process `syz.5.11964'. [ 600.282797][ T6601] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11969'. [ 600.626130][ T6622] loop8: detected capacity change from 0 to 1024 [ 600.657095][ T6622] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.11979: bad orphan inode 134217728 [ 600.668426][ T6622] loop8: lost filesystem error report for type 5 error -117 [ 600.672212][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 600.686043][ C0] EXT4-fs (loop8): initial error at time 1771575939: ext4_orphan_get:1417 [ 600.694592][ C0] EXT4-fs (loop8): last error at time 1771575939: ext4_orphan_get:1417 [ 600.705591][ T6622] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.985530][T32212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.383022][ T6655] loop8: detected capacity change from 0 to 8192 [ 601.558124][T25150] loop8: p1 p2 p3 p4 [ 601.584059][T25150] loop8: p3 start 117772289 is beyond EOD, truncated [ 601.591146][T25150] loop8: p4 size 262144 extends beyond EOD, truncated [ 601.621142][ T6655] loop8: p1 p2 p3 p4 [ 601.627801][ T6655] loop8: p3 start 117772289 is beyond EOD, truncated [ 601.642310][ T6655] loop8: p4 size 262144 extends beyond EOD, truncated [ 601.881979][ T6668] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12002'. [ 603.265854][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 603.265897][ T28] audit: type=1326 audit(1771575942.431:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.8.12018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a6efc629 code=0x7ffc0000 [ 603.329554][ T28] audit: type=1326 audit(1771575942.431:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.8.12018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a6efc629 code=0x7ffc0000 [ 603.394587][ T28] audit: type=1326 audit(1771575942.461:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.8.12018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f89a6efc629 code=0x7ffc0000 [ 603.450731][ T28] audit: type=1326 audit(1771575942.461:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.8.12018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a6efc629 code=0x7ffc0000 [ 603.635425][ T28] audit: type=1326 audit(1771575942.461:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.8.12018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a6efc629 code=0x7ffc0000 [ 603.734278][ T28] audit: type=1326 audit(1771575942.461:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.8.12018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f89a6efc629 code=0x7ffc0000 [ 603.789249][ T28] audit: type=1326 audit(1771575942.461:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.8.12018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a6efc629 code=0x7ffc0000 [ 603.854233][ T6727] Invalid ELF header magic: != ELF [ 603.882624][ T28] audit: type=1326 audit(1771575942.461:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.8.12018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f89a6efc629 code=0x7ffc0000 [ 603.935420][ T28] audit: type=1326 audit(1771575942.461:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.8.12018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a6efc629 code=0x7ffc0000 [ 603.982284][ T28] audit: type=1326 audit(1771575942.461:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.8.12018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89a6efc629 code=0x7ffc0000 [ 604.454921][ T6744] netlink: 'syz.8.12022': attribute type 29 has an invalid length. [ 604.465706][ T6744] netlink: 'syz.8.12022': attribute type 29 has an invalid length. [ 604.497938][ T6744] netlink: 'syz.8.12022': attribute type 29 has an invalid length. [ 604.618292][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12036'. [ 604.630108][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12036'. [ 604.678674][ T6757] tipc: Enabling of bearer rejected, already enabled [ 605.228364][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12035'. [ 605.238457][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12035'. [ 606.867096][ T6840] loop8: detected capacity change from 0 to 256 [ 606.986789][ T6842] Invalid ELF header magic: != ELF [ 607.296840][ T6867] ref_ctr increment failed for inode: 0x1874 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888140f94a40 [ 607.333065][ T6866] uprobe: syz.7.12068:6866 failed to unregister, leaking uprobe [ 607.372704][ T6871] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.12069'. [ 607.385051][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12069'. [ 608.166077][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12080'. [ 608.176001][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12080'. [ 608.229729][ T6902] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.12081'. [ 608.251229][ T6902] netlink: zone id is out of range [ 608.261412][ T6902] netlink: zone id is out of range [ 608.269262][ T6902] netlink: zone id is out of range [ 608.291861][ T6902] netlink: del zone limit has 8 unknown bytes [ 609.222893][ T6921] ipip0: left promiscuous mode [ 609.227784][ T6921] bond1: left promiscuous mode [ 609.242796][ T6921] ip6gretap1: left promiscuous mode [ 609.272420][ T6921] bond1: left allmulticast mode [ 609.292241][ T6921] ip6gretap1: left allmulticast mode [ 609.298362][ T6921] team1: left promiscuous mode [ 609.313055][ T6921] team1: left allmulticast mode [ 609.626990][ T6935] netlink: 131740 bytes leftover after parsing attributes in process `syz.7.12093'. [ 609.649028][ T6935] netlink: zone id is out of range [ 609.655893][ T6935] netlink: zone id is out of range [ 609.663524][ T6935] netlink: zone id is out of range [ 609.671300][ T6935] netlink: del zone limit has 8 unknown bytes [ 613.767119][T29500] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.987035][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.994417][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.148516][ T7087] Invalid ELF header magic: != ELF [ 614.166762][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.186128][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.339357][T29500] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.353813][ T5628] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.372557][ T5628] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.394365][ T5628] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.419030][T29500] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.438841][ T5628] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.464381][T29500] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.618076][T29500] bridge_slave_1: left allmulticast mode [ 614.642651][T29500] bridge_slave_1: left promiscuous mode [ 614.654795][T29500] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.677941][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12149'. [ 614.706048][T29500] bridge_slave_0: left allmulticast mode [ 614.717641][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12149'. [ 614.729548][T29500] bridge_slave_0: left promiscuous mode [ 614.747289][T29500] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.057188][T29500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.108712][T29500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.151513][T29500] bond0 (unregistering): Released all slaves [ 615.303984][T29500] hsr_slave_0: left promiscuous mode [ 615.319173][T29500] hsr_slave_1: left promiscuous mode [ 615.333624][T29500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.371329][T29500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.392117][T29500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.419933][T29500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.449132][T29500] veth1_macvtap: left promiscuous mode [ 615.464988][T29500] veth0_macvtap: left promiscuous mode [ 615.492516][T29500] veth1_vlan: left promiscuous mode [ 615.497885][T29500] veth0_vlan: left promiscuous mode [ 615.770126][T29500] team0 (unregistering): Port device team_slave_1 removed [ 615.795276][T29500] team0 (unregistering): Port device team_slave_0 removed [ 616.203496][ T7152] loop8: detected capacity change from 0 to 1024 [ 616.215821][ T7152] EXT4-fs: Ignoring removed oldalloc option [ 616.221809][ T7152] EXT4-fs: Ignoring removed bh option [ 616.284355][ T7152] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.936451][ T3545] ================================================================== [ 616.944697][ T3545] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 616.954187][ T3545] [ 616.956548][ T3545] write to 0xffff8881814fc4ba of 20 bytes by task 7152 on cpu 0: [ 616.964288][ T3545] copy_folio_from_iter_atomic+0x75f/0x1170 [ 616.970215][ T3545] generic_perform_write+0x2c1/0x490 [ 616.975629][ T3545] ext4_buffered_write_iter+0x1ee/0x3c0 [ 616.981218][ T3545] ext4_file_write_iter+0x380/0xfa0 [ 616.986477][ T3545] iter_file_splice_write+0x6bc/0xa80 [ 616.991876][ T3545] direct_splice_actor+0x156/0x2a0 [ 616.996996][ T3545] splice_direct_to_actor+0x311/0x670 [ 617.002377][ T3545] do_splice_direct+0x119/0x1a0 [ 617.007236][ T3545] do_sendfile+0x382/0x650 [ 617.011680][ T3545] __x64_sys_sendfile64+0x105/0x150 [ 617.016898][ T3545] x64_sys_call+0x2dc4/0x3020 [ 617.021672][ T3545] do_syscall_64+0x12c/0x370 [ 617.026273][ T3545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.032345][ T3545] [ 617.034668][ T3545] read to 0xffff8881814fc400 of 1024 bytes by task 3545 on cpu 1: [ 617.042549][ T3545] copy_folio_from_iter_atomic+0x75f/0x1170 [ 617.048468][ T3545] generic_perform_write+0x2c1/0x490 [ 617.053974][ T3545] shmem_file_write_iter+0xc5/0xf0 [ 617.059096][ T3545] lo_rw_aio+0x67d/0x730 [ 617.063354][ T3545] loop_process_work+0x56c/0xac0 [ 617.068422][ T3545] loop_workfn+0x31/0x40 [ 617.072668][ T3545] process_scheduled_works+0x4de/0x9e0 [ 617.078184][ T3545] worker_thread+0x581/0x770 [ 617.082887][ T3545] kthread+0x22a/0x280 [ 617.086969][ T3545] ret_from_fork+0x150/0x360 [ 617.091576][ T3545] ret_from_fork_asm+0x1a/0x30 [ 617.096351][ T3545] [ 617.098674][ T3545] Reported by Kernel Concurrency Sanitizer on: [ 617.104915][ T3545] CPU: 1 UID: 0 PID: 3545 Comm: kworker/u8:7 Tainted: G W syzkaller #0 PREEMPT(full) [ 617.115952][ T3545] Tainted: [W]=WARN [ 617.119762][ T3545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 617.130094][ T3545] Workqueue: loop8 loop_workfn [ 617.134885][ T3545] ================================================================== [ 617.290385][T32212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.